--- loncom/loncapa.conf 2002/02/28 18:07:19 1.3 +++ loncom/loncapa.conf 2004/06/01 09:55:04 1.11 @@ -1,600 +1,65 @@ ## ## loncapa.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa.conf,v 1.3 2002/02/28 18:07:19 harris41 Exp $ +## $Id: loncapa.conf,v 1.11 2004/06/01 09:55:04 foxr Exp $ ## -## 1/11/2002 - Scott Harrison -# -# LON-CAPA Section (extensions to httpd.conf daemon configuration) -# -# ======================================================================== User - -User www -Group www - -# ======================================================= Shared Object Modules - -LoadModule perl_module modules/libperl.so -AddModule mod_perl.c - -# =============================================================== Miscellaneous - -ServerAdmin korte@lite.msu.edu -ExtendedStatus On - -# -# LON-CAPA Section (extensions to srm.conf name space servicing) -# -# ===================================================================== Aliases - -Alias /prtspool/ /home/httpd/prtspool/ - -# ================================================================= Directories - -# ------------------------------------------------------------- Access Handlers - - -PerlAccessHandler Apache::lonacc -PerlHeaderParserHandler Apache::lonrep -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::loncacc -SetHandler perl-script -PerlHandler Apache::lonconstruct -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonracc - - - -PerlAccessHandler Apache::loncacc -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler -AllowOverride None - - -# ------------------------------------------------------------------------- RAT - - -SetHandler perl-script -PerlHandler Apache::lonratedt - - - -SetHandler perl-script -PerlHandler Apache::lonratedt - - - -SetHandler perl-script -PerlHandler Apache::lonratsrv - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonratparms -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - -# --------------------------------------------- Resource Space Content Handlers - - -SetHandler perl-script -PerlHandler Apache::lonindexer - - - -SetHandler perl-script -PerlHandler Apache::lontex - - - -SetHandler perl-script -PerlHandler Apache::lonpage - - - -SetHandler perl-script -PerlHandler Apache::lonsequence - - - -SetHandler perl-script -PerlHandler Apache::lonmeta - - - -SetHandler perl-script -PerlHandler Apache::lonxml - - - -SetHandler perl-script -PerlHandler Apache::lonhomework - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonwrapper -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - -# -------------------------------------------------------------- Admin Programs - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonstatistics -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonroles -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -SetHandler perl-script -PerlHandler Apache::lonlogin - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonlogout -ErrorDocument 403 /adm/login - - - -SetHandler perl-script -PerlHandler Apache::lonauth - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::admannotations -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::admbookmarks -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonpageflip -ErrorDocument 406 /adm/roles -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonambiguous -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonmsg -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonparmset -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::grades -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::loncreatecourse -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::loncreateuser -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonpublisher -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::loncacc -SetHandler perl-script -PerlHandler Apache::lonpubdir -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonpubdir -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonretrieve -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::loncfile -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::londiff -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonupload -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonspreadsheet -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonspreadsheet -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonspreadsheet -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonchart -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::londropadd -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonprintout -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonfeedback -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonevaluate -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonpreferences -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonassignments -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::loncommunicate -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonsearchcat -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonnavmaps -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::groupsort -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - - -SetHandler perl-script -PerlHandler Apache::lonerrorhandler - - -# ------------------------------------------------- Backdoor Adm Tests/Programs - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm -SetHandler perl-script -PerlAccessHandler Apache::lonacc -PerlHandler Apache::lontest - - -# ------------------------------------------------------- Shutting down a child - -PerlChildExitHandler Apache::lonnet::goodbye - -# -# LON-CAPA Section (extensions to access.conf permission configuration) -# -# =========================================================== Directory Options - -# Start out with "no" - - -Options None -AllowOverride None - - -# Yes to symbolic links and server-side includes - - -Options Includes FollowSymLinks -AllowOverride None -order allow,deny -allow from all - - -# If it is in cgi-bin, then it can be executed as a CGI script. - - -AllowOverride None -Options ExecCGI - - -# ============================================================= Access Handlers - -# ------------------------------------------------- Allow server-status reports - -SetHandler server-status -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - -# ------------------------ Allow LON-CAPA "low-level" connection status reports - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - -# ------------------- Allow access to local system documentation from localhost -Alias /doc /usr/doc - -order deny,allow -deny from all -allow from localhost -Options Indexes FollowSymLinks - - -# **** DISABLED TO STAY COMPATIBLE WITH LON-CAPA AND ACCESS.CONF FOR NOW ****** # ======================================= Machine Specific / Perl Configuration # # ------------------------ The variable values are also read and shared by lond # LON-internal HostID of this machine -# PerlSetVar lonHostID {[[[[lonHostID]]]]} +PerlSetVar lonHostID lonkashy # Role of this machine: library, access -# PerlSetVar lonRole {[[[[lonRole]]]]} +PerlSetVar lonRole library # Server Administration -# PerlSetVar lonAdmEMail {[[[[lonAdmEMail]]]]} +PerlSetVar lonAdmEMail fox@nscl.msu.edu # Default domain -# PerlSetVar lonDefDomain {[[[[lonDefDomain]]]]} +PerlSetVar lonDefDomain nscl # Load Limit ( 100% loadavg ) -# PerlSetVar lonLoadLim {[[[[lonLoadLim]]]]} +PerlSetVar lonLoadLim 100 + +# User Load Limit ( 100% loadavg ) + +PerlSetVar lonUserLoadLim 100 # Expiration for local copies and tokens in seconds -# PerlSetVar lonExpire {[[[[lonExpire]]]]} +PerlSetVar lonExpire 3600 # Key to issue receipts -# PerlSetVar lonReceipt {[[[[lonReceipt]]]]} +PerlSetVar lonReceipt 12345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345123451234512345 -# Key to handle SQL access - -# PerlSetVar lonSqlAccess {[[[[lonSqlAccess]]]]} +# +# The variables below control the behavior of secure lond: +# +# + +# londAllowInsecure allows lond to fall back to insecure connections +# in the event its peer is not yet updated to secure lonc. +# If you are certain all the systems you are communicating with +# are using secure lonc, uncomment the first definition and +# comment the second. -# ************ ENABLE SINCE THESE SHOULD BE STATIC ANYWAYS ******************** -# ====================================== Internal Settings / Perl Configuration +# PerlSetVar londAllowInsecure 0 +PerlSetVar londAllowInsecure 1 -PerlSetVar lonIDsDir /home/httpd/lonIDs -PerlSetVar lonTabDir /home/httpd/lonTabs -PerlSetVar lonUsersDir /home/httpd/lonUsers -PerlSetVar lonIconsURL /adm/lonIcons -PerlSetVar londPort 5663 -PerlSetVar lonSysEMail korte@lite.msu.edu -PerlSetVar lonDaemons /home/httpd/perl -PerlSetVar lonSockDir /home/httpd/sockets -PerlSetVar lonDocRoot /home/httpd/html -PerlSetVar lonIncludes /home/httpd/html/res/adm/includes -PerlSetVar lonBrowsDet netscape:mozilla:msie:mozilla\/(\d+\.\d+)\s:9999&explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999&amaya:amaya:mozilla:V(\d+\.\d+)\s:1 +# loncAllowInsecure allows lonc to fall back to negotiating an insecure +# connection with lond in the event the peer is not yet a secure lond. +# If you are certain that all systems you are communicating with +# are using secure lond, uncomment the next line and comment the +# second: -# ================================================== Initiate mod_perl starting +# PerlSetVar loncAllowInsecure 0 +PerlSetVar loncAllowInsecure 1 -PerlRequire conf/startup.pl -PerlFreshRestart On