CVS log for loncom/loncapa_apache.conf

Up to [LON-CAPA] / loncom

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- For 2.11.4 (modified)
  Include changes in 1.284

- For 2.11.4 (modified)
  Include changes in 1.236, 1.237, 1.238, 1.239, 1.240, 1.243, 1.252, 1.253,
  1.282, 1.283

- For 2.11.4 (modified)
  Include changes in 1.286

- contentopen, contentclose and acc parameters can apply to .tex files from
  /res/ imported into a course.

- For 2.11.4 (modified)
  Include changes in 1.285

- .tex file in Resource Space or uploaded to Main Content area:
  - texdisplay parameter can determine whether TtH of MathJax is used for
    conversion (web context)
  - values in effect for contentopen, contentclose, and acc params honored

- Authoring Space defaults defaults which domain coordinator can override.
  - Available Editors, WebDAV access, Disk Quota for Authoring Space
    can be set for specific users by DC via "Add/modify user"
- Bug 5273 Co-authors in "group authoring" accounts can manage co-authors
  - Existing co-author(s) can be assigned rights to add/revoke co-author
    roles. Can be set by DC via "Add/modify user" or by author via "People"
- Co-authors and Assistant co-authors can view a list of co-authors for
  the Authoring Space. Availability set by Author or Co-author "manager".
  Listing can be set to "opt-in".

- For 2.11.4 (modified)
  Include changes in 1.280

- Use standard LON-CAPA error documents for 406, 403 and 500 errors for
  /daxeopen/.
- Use loncacc.pm as authz handler for /daxeopen/priv/domain/username/
- Use lonacc.pm as authz handler for /daxeopen/, /daxeopen/priv/, and
  /daxeopen/priv/domain/

- Support use of pop-up browser to insert image files into HTML files
  uploaded to Main Content or Supplemental Content areas of a course.

- For 2.11.4 (modified)
  Include change in 1.281

- Bug 6754 LON-CAPA as LTI Consumer
  Support for access control using slots for both "gradable" and "non-gradable"
  external tools.

- For 2.11.4 (modified)
  Include changes in 1.258 (part), 1.259, 1.260, 1.261, 1.269 (part)

- Bug 6979
  Directive for /adm/courseuser, used to check if a user has a role
  (active, future or previous) in a course. Returns JSON data to ajax caller.

- Use ajax to dynamically update drop-down lists of directories and files
  available in course author space.

- For 2.11.4 (modified)
  Include changes in 1.277, 1.278

- Bug 6907
  "Exit Tool" button available to logout a session launched via deep link
  and escape iframe and redirect (for LTI-protected link).

- Bug 6907
  For LTI-protected deep links in which username is included in launch payload
  compare username in payload with username for any existing LON-CAPA session
  in current web browser and expire old session, if different user.

- For 2.11.4 (modified)
  Include changes in 1.242, 1.255, 1.258 (part), 1.262, 1.266, 1.267,
  1.269 (part), 1.275

- For 2.11
  Backport 1.276

- For SAML authentication (Shibboleth) no caching of /adm/sso. Specify custom
  error pages for 403 and 500 errors.

- Bug 6907 Content in a course can be set to be deep-link only.
  - deeplink parameter has 5 components:
    state, others, listing, scope, protect and menus.
  - deeplink protection for launch from non-LON-CAPA LTI-enabled systems
    uses /adm/launch/tiny/$dom/$uniqueID, and key and secret used by launcher
    can be set in a course (by CC), or for domain (by DC).

- For 2.11.2 (modified)
  Explicitly set version to 2.11.2-2017061214

- For 2.11.2 (modified)
  Include changes in 1.271, 1.272, 1.273, 1.274

- For 2.11.3 (modified)
  Include changes in 1.274

- For 2.11
  Include changes in 1.274

- Changes in 1.272 should also apply to Supplemental Content.

- For 2.11.3 (modified)
  Include changes in 1.272, 1.273.

- For 2.11
  Backport 1.272, 1.273

- Remove unnecessary options from directives.
  - Change in rev. 1.272 made part of change in rev. 1.271 superfluous.

- Remove unwanted options from directives.

- For 2.11 (modified)
  Include changes in 1.271

- For 2.11
  Backport 1.271

- Remove unwanted options from directives.

- For 2.11.3 (modified)
  - Include changes in 1.270

- For 2.11
  Backport 1.270

- Update URL for LON-CAPA's bugzilla

- For 2.11.2 (modified).
  Use 2.12 feature (LTI) pre-release, in modified 2.11.2. Domain's
  configuration must be set to prohibit hosting of sessions for
  domain's users outside own domain, and modification must be in
  place on all nodes in domain.

- For 2.11.3 (modified)
  Include changes in 1.242, 1.255, 1.262, 1.266

- For 2.11
  Backport 1.264

- For 2.11
  Backport 1.268

- For 2.11
  Backport 1.265

- Bug 6754. LON-CAPA as LTI Provider.
  Domain configuration to support session expiration in LON-CAPA,
  after user logs out of LTI Consumer which originally launched session,
  (if Consumer supports logoutServiceUrl; e.g. custom_logout_url in Canvas).

- Bug 6910
Gracefully handle display (and preview) for External Resources for which
Content-Security-Policy or X-Frame-Options prevent display in iframe in LC.

- For 2.11.2 (modified).
  Include changes in 1.262, 1.266

- Bug 6400
  - Enforce access restrictions for content which is deeplink-only (users
    with "advanced priv for current role are exempt).
  - Support "key" link type in deeplink parameter (requested link must either
    be sent with linkkey as element in POSTed data, or with linkkey in query
    string).  Corresponding value must match key set in deeplink parameter.

- Bug 6400
  - Support deep links in domains containing a hyphen.

- For servers using Apache/SSL where External Resource points at http:// URL
  or syllabus is configured to use an external http:// URL, query string for
  links contains usehttp=1, unless server has Strict-Transport-Security set
  for Apache with max-age > 0.

- Domain config for load balancer to use cookie to record offload target.
  Subsequent requests by same user/browser will send requests to same target
  if remote session still active, and remote node not overloaded.

- Add nightly update of Certificate Revocation List (from CA) to loncron.

- Bug 6400 Tiny URL for deep-linking.
  Requires Short::URL and String::CRC32 modules from CPAN. Dependency on
  perl-Short-URL needs to be added to LONCAPA-prerequisites.

- Bug 6754 LON-CAPA as LTI Consumer
  - Providers can pass scores back to LTI 1.0 Extension (Outcomes Service).

Bug 6754 LTI Integration
- ltiutils.pm contains common LTI routines (to facilitate re-use).
  - &check_nonce() moved from ltiauth.pm to ltiutils.pm.
  - &set_callback_secret() moved from lonexttool.pm to ltiutils.pm, and
    renamed &set_service_secret().
  - &sign_params(), &get_tool_lock(), and &release_tool_lock() moved from
    lonexttool.pm to ltiutils.pm
- ltiroster.pm will service requests for course membership information
  from an LTI Provider, where domain configuration for Tool permits this
  service, and launch (by Instructor( included ext_ims_lis_memberships_id.

Bug 6754 LTI Integration: LON-CAPA as LTI Provider
- auth/lonlti.pm moved to lti/ltiauth.pm

- Bug 6754 LTI Integration: LON-CAPA as LTI Provider
  - Work in progress

- For 2.11.2 (modified).
  Use 2.12 feature (LTI) pre-release, in modified 2.11.2. Domain's
  configuration must be set to prohibit hosting of sessions for
  domain's users outside own domain, and modification must be in
  place on all nodes in domain.

- For 2.11
  - Backport 1.257

- Remove unnecessary options from directives.

- For 2.11
  - Backport 1.256.

- Remove unnecessary options from directives.

- For 2.11
  - Backport 1.254

- Bug 6754. Make LON-CAPA an LTI Tool Consumer (LTI 1.1).
  - Name as ext.tool (instead of exttool), so that parameters can be specified
    in packages.tab, based on extension.

- Remove a directive which is no longer needed following the 2.11.0 migration
  of Authoring Spaces from /home/*/public_html to /home/httpd/html/priv.

improved Daxe chooser dialog navigation, adding /priv/, /priv/domain/, size and date modified for /res files

daxeopen: added support for / and /res directory listing

- For 2.11
  - Backport 1.251

- Custom error document for 406 reponse.

- For 2.11
  - Backport 1.249, 1.250.

- replace hardcoded lonVersion.

- Users with vgr priv can display first access times for students for
  course, map/folder, or resource with interval (timer) parameter set.

- For 2.11
  - Backport 1.241

- For 2.11
  - Backport 1.235

- Use Server Name Indication (SNI) and SSL when replicating content from
  /raw/.
- Domain status screen has link to show status of LON-CAPA SSL certificates.
- "SSL" domain config for (a) "internal" LON-CAPA SSL connection to servers/VMs
  in other domain, (b) Replication of domain's resources to other domains.
- Replication can use name-based virtual hosts with SSL, with verification of
  client certificate (cert: /home/httpd/lonCerts/lonhostnamecert.pem, signed
  by LON-CAPA CA, with Common Name of internal-<server hostname>, same IP address
  as server hostname).

- Course "Authoring" Space
  "Import a File" and "Image" blocks in Colorful Editor include a "Choose File"
  link which allows selection of published files from "Course Authoring" Space,
  or upload of a new file (with auto-publication).

- Display image preview in Daxe pop-up window.
  - Improved version of change in rev. 1.245

- Display image preview in Daxe pop-up window.

- Bug 6808. New course container -- "Placement" for Placement Tests.
  Work in progress.

added support for editing course coordinator web pages with Daxe

- Bug 6754. Make LON-CAPA an LTI Tool Consumer (LTI 1.1). Work in progress.

- Eliminate jsMath (use MathJax instead).

access check for opening a supplemental file in Daxe

added support for editing supplemental web pages with Daxe

Added Daxe editing for HTML documents, fixed issues with case mixing in task documents

added a preview for Daxe, updated automatically when the document is saved

integrated Daxe, opening in a separate window for now

- Apache 2.4: Display directory listing in /res/domain/user/ on an author's
  home server in the case where the author has published an index.html file
  in his/her Authoring Space.

- For 2.11
  - Backport 1.234

- Make regexp in LocationMatch for webdav consistent with formats allowed for
  LON-CAPA usernames and domains.

- For 2.11
  Backport 1.232, 1.233

- Correctly identify version number for Opera 10, 11 and 12.

- Detect Opera in User Agent.

- For 2.11
  - Backport 1.231

- Decoding user agent -- replace original field separator : with %
- Add entry in lonBrowseDet for IE11 and newer.
  - Internet Explorer 11 uses rv:11.0 to denote version
    (e.g., compare with IE10 which uses MSIE 10 to denote version).

- Backport 1.230

- Caching for 12 hours for additional static content (MathJax javascript
  libraries etc.)

- For 2.11
  - Backport 1.229

- Caching for 12 hours for additional static content (various javascript
  libraries).
- Replace personal e-mail address with group e-mail addresses, suitable for
  forwarding to multiple recipients.

- For 2.11
  - Backport 1.226, 1.227, 1.228.

- Support Apache 2.4
  - PerlAuthenHandler needs to set $r->user() for requests for <Location>
    directives which include Require valid-user
  - reverse changes in publiccheck.pm rev. 1.20 and 1.21
  - modify changes in lonacc.pm rev. 1.143 and 1.147
  - reverse changes in lonnet.pm rev. 1.1212 and 1.1213, and modify changes
    in rev. 1.1244 (no longer treating 2.4 as a special case).
- Apache access logs will now include username (or username:domain if user's
  domain is not server's default domain) for URLs requiring "valid-user",
- Apache access logs will now include 'public' as requester for image
  files from /res/adm/pages and also domain logos etc.

- Apache 2.4 -- When displaying a directory in Authoring Space, disable
  the addition of index.html to $r->filename by Apache.

- Support Apache 2.4 -- uses mod_authz_core.

- For 2.11
  - Backport 1.225

- Correctly detect browser version for IE, in cases where Chrome Frame
  plug-in is in use.
- More comprehensive checking for HTML5 support for Geogebra , based on
  decoding of user agent at log-in.
  - HTML5 used for:
    Chrome: version 14 or later
    Safari: version 536 or later (version 8536 for mobile safari).
    Firefox: version required dependent on os.
    IE: version 10 or later
- Error message displayed when Java is disabled is different if user's
  device is Ipad, Ipod or Iphone.

- For 2.11
  - Backport 1.224.

- Add entry for /adm/extresedit (edit External Resource outside Course Editor
  via "Edit" link in inline menu).

- For 2.11
  - Backport 1.223.

- Don't reload libperl.so if it is already loaded.

- For 2.11
  - Backport 1.222.

- Single # in $Id line for consistency with other files, and to align with
  expectations of version checking script.

- For 2.11
  - Backport 1.221.

- LocationMatch for LON-CAPA's css now requires file to have .css extension.

- For 2.11
  - Backport 1.218, 1.219.

- replace hardcoded lonVersion.

Provide <LocationMatch> for ajax/spellcheck to support the spellcheck helper.

Add spellcheck handler for jquery-spellcheck

- For 2.11.
  - Backport 1.216 (part).

- replace hardcoded lonVersion.

Actually detect Chrome

- For 2.11.
  - Reverse part of changes in 1.215.2.1. Stored Links ("wishlist") included
    in 2.11 in place of bookmarks.

- Changes for 2.11 branch.
  - Remote Control, Bookmarks retained
  - wishlist, index course pick resource not currently supported.

- Bug 6448. Manage dependencies for HTML files uploaded to course.

- Apache should start if mod_dav and mod_dav_fs modules are not loaded,
  no webDAV though.

- Using Shibboleth 2 authentication
  - Include /adm/sso file (displayed if no mod_shib loaded) - client redirect to /adm/roles.
  - Will suppress: 'File does not exist: /home/httpd/html/sso' warnings when mod_shib in use.
  - Apache config for case where no mod_shib loaded will set content_type to
    text/html for /adm/sso.

- Support for Single Sign On with Shibboleth 2.

- Apache should start if mod_ssl is not installed, but no webDAV access.

- Bug 6034.
  - webDAV access to Authoring Spaces.
  - requires prior migration of Authoring Spaces from /home/<user>/public_html
    to /home/httpd/html/priv/<domain>/<user>
  - Work in progress.

- Permissions checking
  - logic was backwards
  - custom handler for 406 error
  - include role switcher check for dcm priv

- Move routines for configuration of blocking communication during an exam
  from lonmsgdisplay.pm to separate handler -- lonblockingmenu.pm
- Access to corresponding URL: /adm/setblock from both Messages menu (as before)
  and also from Content and Problem Settings menu.

Changes to improve usability for Course Contents and Content Editor.
- Separate "editor" tabs (Content Editor && Supplemental Content Editor) from
  "display" tabs (Main Content, Supplemental Content, Content Search, Content Index).
- Replace "Edit Content" link on "Course Contents" page (used to jump directly
  to editing specific folder) with icon, to reduce clutter.
- "Back to Overview" link on editor pages to jump directly to corresponding
  location on "display" pages.
- CC and student roles have same tabs in "display" of Contents
- New URL: "/adm/supplemental" for supplemental contents when displaying
  (as CC or student).
- Supplemental Course Content breadcrumbs do not need link to course as first
  item.
- Functions menu in Supplemental Course Content includes "Folder Editor" link
  to jump to editor.
- Do not use style: "LC_current_location" when location is a folder.

- Web requests for /adm/pubdir mo longer occur following removal of frameset
  (lonconstruct.pm rev 1.37) due to retirement of Remote Control.
  Need for lonconstruct.pm itself eliminated in loncapa_apache.conf rev. 1.205.

Saving my work on Bug #1320.

- Backport 1.204.

- Bug 5925.
- Support for rewriting of http:// to https:// for external web requests
  if mod_ssl and mod_rewrite enabled.  Default is: Rewrite off.

- webserver.piml
  - Update description to accommodate additional distros.
  - Error message generated if Apache config file is missing tailored to
    distro.
  - Compare LON-CAPA config file to rewrite: http:// -> https:// with
    default files (rewrite Off and rewrite On); report if neither matches.

- loncapafiles.lpml
  - Only need /etc/httpd/conf directory for CentOS/Red Hat/SL/Fedora
  - Default files for rewrites Off and rewrites On in loncom/rewrites

- loncapa_apache.conf
  - Include conf/loncapa_rewrite.conf  to support rewrite.

Saving my work: separate handler to pick resources and folders

- Split lonwishlist into two modules, one for displaying (handler) and one utility-module, to avoid problems with Apache::constants when calling methods from lonwishlist (e.g. need to call lonwishlist-method in lonmenu and lonmenu is used in printout.pl -> outside of mod_perl).
- Moving entries in wishlist: corrected warning shown when no entry is selected
- Some  code optimizations
- Still some things do not work perfect -> in progress

Bug #3120: NAV through indexing

"Search Course" was only inside of searchcat because the Remote did not
have enough buttons.

Separate the two, incorporate content search under "Content"

Declutter lonsearchcat a little bit before necessary major cleanup.

- Customization for GCI_3.
  - Suport for multiple Concept Inventories.

- Backport 1.194.

- Backport 1.199.

- Customization for GCI_3.
  - Placeholder for salt used to anonymize usernames in submissions
    display.

- For servers using SSL, user's browser will not use disk cache unless
  Cache-Control includes "public". (for Firefox 3, but not Firefox 2).

Removed old bookmark-collection (replaced by wishlist).

- Backport 1.196.

- Backport 1.196.

Add new module lonwishlist:
- This module will replace the bookmark-collection. Bookmark-collection is out of use because it's partly faulty and intricate to use.
- The wishlist will offer a possibility to link resources on a hierarchal list. The list can be modified by adding new links and folder, to structure the list. Existing entries can be renamed, moved, sorted and deleted. Additional information can be attached for each entry by adding a note. Linked resources from the wishlist can be imported into courses. The wishlist is only available for roles with access to the resource-pool.

Still under progress! Function for setting a link to wishlist, when viewing a resource, and import-functionality will follow!

- Browser detection needs to set browser.unicode for IE if charset for page is UTF-8
  and there is a possibility TTH will be used.

- Backport 1.194, 1.195.

- Backport 1.191, 1.192.

- Backport 1.191, 1.192, 1.195

- Making pdfupload more like the rest of LON-CAPA.
  - Authz handler: lonacc
  - path: /adm/pdfupload
  - remove "use package" for packages which are not actually used
  - use routine in loncommon.pm to generate HTTP header.

- Reverse publiccheck.pm,v 1.18, loncapa_apache.conf,v 1.189.
  - No need to assign a public user session for coursecatalog just to
    change inline menu (lonmenu.pm v 1.319 provides a general solution).

In process of removing remote control, remote navmap and different icon modes code
Also some minor refactoring.

ckeditor can also be cached.

Introduced Apache Directive to send proper expires header for static content.
This change avoids unnessesary HTTP requests being sent by browsers.
Caching is set to 12 hours.
This might avoid the need for a lightweight webserver.

- Bug 4936.
 - Raw tex files editable in construction space.

- Bug 6105
- Added consistent header for publicly accessible pages.
- Added PerlAccessHandler publiccheck to /adm/coursecatalog to get a clean environment when accessing the page.
- removed titletable which was not displayed anymore.

fixed:
- problem occurring when user tries to view own portfolio files while communication block is active
- Public user now receive the correct status information popup when accessing portfolio files while com.block. is active

improved:
- code
- mt-arguments

added:
- german translations
- sub data_table_caption
- code comments

- Backport 1.187.

- Install handlers which generate
  (a) course request form and
  (b) directory search form in pop-up window to find users to include as
      course personnel in the course request.

Preparation to show the communication blocking table in a new popup.
Content will be added shortly.

- Bug 5826.
  - Edit button in Construction Space for files with extensions: css, js, or txt.

Add perl var for the extra PS header file.

- Backport 1.183.

- Skip authentication for icons etc. in /res/adm/pages

- Backport 1.182.

- Add a page with a list of links to available server status utilities, accessible from Main Menu for Domain Coordinators.
- lonstatusacc.pm modified to perform AccessHandler duties for this new page.
  - appropriate HTTP responses returned if access to /adm/domainstatus or /adm/test is unavailable for current user/IP address.
- Include missing identifier numbers for "Modify" and "Course" in mydesk.tab.

- PDF Forms (changes in 1.179) not included in 2.8.X.

- Retire use of Apache Basic Auth for status files in /cgi-bin, /lon-status,
  and /adm/test.
- Add lonstatusacc.pm as an access handler for /lon-status/* and /server-status

Eliminate lonhttpd on port 8080 due to increasing number of user and
institutional firewall issues

Set PerlHandler for PDF-Form Upload-Script

Bug 5777
- IP-based access control extending to encompass additional resources (i.e., HTML files, Bulletin Boards, External Resources, Simpe Pages), beyond existing support for problem/exam/survey files.
- New lonipcheck.pm added as a chained content handler, called after londatecheck.
- &check_ip_acc() moved form lonhomework.pm to loncommon.pm to be more widely available.

- Store captcha image and captcha code in lonCaptchaDir and lonCaptchaDb
   respectively.
- Entry in loncapafiles.lpml to create necessary directories during install.

 Directive for lonpickauthor.pm

Lock against logout.

Locking

- Apparently this didn't get committed with the other self-enrollment changes back in March.

- backport 1.172

Bug #5469: Access to uploaded PDF files was not controlled by content dates.

Make createaccount.pm available - used for self-service account creation.

- BUG#5469 do date checks for uploaded resources

- emove accidental changes to browser detection

- BUG#5234 give font face choices to plotting
- make capitalization of options the same

	Add location, alias, and serve access to zipspool directory.

	Add PerlSetVar for lonZipDir (output of multidownload.pl).

- adding in the dns handler
   - currently expects dns servers to be listed in hosts.tab as
    ^dns.example.com
   - lond currently doesn't support the dns mechanism

- switch lond to use new multiplex lonc communication route
- swithc to making the common socket a config option

Add directive for domainprefs

Add response code of 'B' to lonnet::allowed() to indicate access to a file is currently subject to a block, because the file owner is part of a course with active communications blocking, and file viewer does not have 'evb' privilege in the course to nullify the block.

Used to block access to portfolio files.  Response of 'B' triggers blockedaccess.pm which displays information about blocking conditions.

Password resets by e-mail possible for internally authenticated users.

- splitting the handlery bits of lonnavmaps from the functional components

- backport 1.158 1.159

Restore serving of files in cgi-bin and in prtspool

Be more explicit about the directories from which the server is permitted to serve files.

- backport 1.157

- BUG#5000 IE is not likeing the 'send a png as data for a file ending in .gif' so make plot.png a link

- give the nice screen on errors

Include course catalog at /adm/coursecatalog

- adding error handler to more urls

- swtich to /adm/damin/user/aboutme/portfolio for the portfolio lister
- setting the portfolio listing to be public

- move portfolio access restriction checking code into lonnet.pm
- some changes to take care of public users access passphrase files

- sigh typo

- getting student photos to work again

- switching from using a FORBIDDEN pass to just making the restricted
   access screen the response phase

Forgot to commit this handler for restrictedaccess (page for user entry of passphrase or server verification for passphrase protected portfolio files) as part of 7/10 commit.

- really make the .hlp files public (BUG#4914)

grppg replaces with smppg for group homepages.  Context determined from course domain and course number in URL.

AllowOverride directive if for <Directory></Directory>. In Apache 2, I get "[warn] Useless use of AllowOverride in line 252" with this AllowOverride in a <LocationMatch></LocationMatch> block.

Bug 4859. Providing group roster display.

Display of discussion boards in a group, and the ability for users with board creation privileges in the group to add new boards.  When a group is first created a group folder is created containing the group homepage, and a discussion boards folder is created if discussion is enabled for the group. A "course groups" folder is also appended to the top level map in the course, if it does not already exist. Only works with standard courses which use default.sequence as the top level map. Hidden resource parameter is also applied to course group folders with default as hidden, and unhidden set for corresponding groups. Group bulletin boards use coursedom and coursenum as identifiers (instead of user domain and username as for normal boards) to allow them to be differentiated in lonfeedback.pm.  A locking mechanism should be implemented to make group creation atomic to avoid overwriting of .sequence files if two groups are created within a second of each other in the same course. Also need to address modification to group settings, when discussion functionality is enabled/disabled, as folder may need to be created and/or hidden parameter modified.

- reenabling public access to help documentation

- AuthType needs to be LONCAPA

Enable public viewing of portfolio files belonging to users and to course groups, when appropriate access controls are set.

- switching AuthType from Basic -> LONCAPA  and chanign checkauthen to ignore Basic Auth modes, takes care of bug#4804

- access checking is done in the Autz phase now

- restroing groupchat handler definition

Entry for coursegrp_portfolio used for course group file exchange/portfolio

announce can be called with .ics

- allow unathenticated  access to the css handler

- move css into a <link>ed file

- allow public access to /public/ urls

- need to require valid-user to geth the Authz cacc handler to run

- install new msg display handler
- use new msg display handler

- moving hadnler routines out of lonnet into lonacc

- moving main menu handler into seperate file

- moving handler out of lonenc so it can be used in CGI

- mod_perl 1 wants PerlHandler, (2 wants PerlResponseHandler but work with PerlHandler for now)

- default to new authen mechanism

Course groups have chat with access restricted to group members hwo have group chat privilege for the group.

Use coursegrp_portfolio for collaborative file upload area in course groups.

HTML rendering of RSS
Saving my work: edit interface

Having fun with RSS. Option when doing Broadcasts and Calendar Announcements

Next steps:
* dynamically generated, showing due dates, etc

Long term:
* podcasts
* blogs

Use simplepage for course group page editing/display.

- adding some docs to the lonBrowsDet config
- adding a detector for netscape 7/8 even when mucked with by a squid proxy

Start on interface to manage course groups.

- 'switch server' now really does

Adding button for Domain Coordinators to use lonnotify; updating apache config to make lonnotify accessible.

internal_redirect() in lonenc needs to be called by Content Handler, not Access Handler, otherwise Apache on SuSE will not reliably serve embedded objects.

- need to use lonacc when accessing .hlp files to get session env, but need to also allow public access to help files

A handler is not a directory, and the link does not need the server name

Make action items ("What's New?") display accessible.

- make help files publically accessible

- adding slot requesting handler

Put all XML/HTML cleanup into separate handler

- need to stack the cleanup handlers since envv always needs cleaning now

- can do a very simplistic rendering of a bridge task, doesn't actually implement any of the functionality, just puls it a part, picks the first <Instance> in a <Dimension> and wraps the <Criteria> in a <table> , enough to get started on implementing the proper acces controls logic

- removeing the .portfolio extension, since it dones't really exist
- adding a /editupload/ url starter, for when we want to spcify that we want to explictly edit a /uploaded document

- stop punishing the opera users

- removing stuff that never really existed

BUG#3820 - Safari needs unicode turned on, the safari version regexp seemed wrong I only have version 1.0 here which advertises itself as version '85' so I changed the regexp to pickup anthing with numbers and dots in it.

Alternative fix to bug #3654. Re-instate use of publisher/publisher.html.  recommend substitution with lonpubmenu.pm for 1.4 to eliminate inconsistent behavior of "Publish Resource" button in top frame, and "Publish Directory" button in main frame.

Fix bug #3654.  Work on topframe in CSTR with remote. Static /publisher/publisher.html replaced with dynamic lonpubmenu.pm that includes appropriate buttons depending on whether page being displayed in lower frame is a directory listing or a resource.  Known issues: modifications required to language files to translate button names (see texthash in lonpubmenu.pm)

Fix bug 3604. Provide inline navigation for Advanced Editor in remoteless mode.

Bug #3501: actually catch overload errors and tell people to come back
later.

- student photo support

Bug #513: Netscape version set correctly
toward Bug #3449: looks like we need to start doing special stuff for Safari

- I have convinced myself that Gerd is right about this.

- backporting the disk based caching fixes (1.541 and 1.95) but set to be disabled by default

- disk based caching rises from the dead, this I think it's right thanks to mattthew
   - just remeber what items are to be saved to the disk cache and save them after done with the student
   - disable devalidatation for now, it's slo and doesn't gain us much
       (will add a cleansing pass to save_cache?)

- concord, bulletinboards can have contentopen/close dates and other content style parameters.

- backport 1.93

- changing the email address for ssl certificates

Added /adm/trackstudent and /adm/viewclasslist

Set languages - requires German (de) and Portuguese (pt) dictionaries installed

Integration of help icons in breadcrumb trail into a single icon. Click on icon to open new window with gateway to help options within frameset (or within main window if pop-ups blocked).  Help options include inline topic help, support request form, FAQ-o-matic, and bug reporting (all contextualized).  Option to collect form parameter information from page displaying help icon currently disabled.

Some work required:
lonsupportreq.pm - replace call to Mail::Send with more sophisticated CPAN module (e.g., Mail::Sender that allows specification of from: address and attachments.

Fix syntax error in PerSetVar - no inline comments allowed <sigh> sorry about that
folks.

- can't put inline comments on PerlSetVar lines

Added path to the certificate authority file and the email address of the
certificate adiminstrator.  NOTE:  The SSLEmail parameter must be  changed
prior to going to production.  fox@nscl.msu.edu is not going to be the
issuer of certificates in all likelyhood.

Add configuration variables for certificate request generation and
Certificate generation.  This is just as convenient a place to put these
as any I suppose.  I thought about putting them in the scripts themselves,
but centralizing configuration variables makes much more sense to me.

Convince me otherwise and I'll back out this change.

Fixing the permissions for source access.

	Adding portfolio handler location match entries

Here is the handler  Have fun :P

Move the secure lond/lonc configuration options around to fit into the
correct config files.

-n adding in functionality so that contentopne/close date settings are respected for html ish pages.

- add in missiong error handlers

Readjust the secure lonc/lond variables as per the standard.

- Somewhat amazed at how easy this was should with these changes
   - uploaded .html/.page (all ssi type docs) now
       - get parsed
       - can be printed
       - get default parameters
       - are no longer wrapper ed

- .problems are still somewhat issue oriented though (need real metadata support for uploaded)

- most of the work for allowing a user to pcik a new code is doen
- also addin interface fore allwoing downloads of datafiles (not acutally workign yet)
- add in the possibility to 'redo skipped' or 'ignore previous corrections', not working yet but the interface is there

- I have my reasons

Modifications to the handling of requests for files uploaded via DOCS (URI: /uploaded). lonuploadedacc replaced with lonacc as AccessHandler. lonuploadedrep added for PerlHeaderParserHandler phase. lonpage and lonsequence added as handlers for .page and .sequence files uploaded to DOCS when an IMS content package is imported.

Work on encrypted URLs

Declaration of handlers for imsimport and imsimportdocs, used to perform import of
IMS packages in Construction Space, and in DOCS within a course, respectively.

Added entry for testbankimport.pm

- backport 1.67

Even better handling of bombs.

Bugzilla and FAQ links

- imagechoice.pm now understands boxes, <rectangle> on images works with this now
- BUG#2576

* Need to load environment before getting the language handle - so why not
in the normal request cycle?
* Should actually send out the header we made

Added <Location> /adm/modifycourse </Location> to permit use of Apache::lonmodifycourse.pm - used by Domain Coordinators to modify course code and course owner for courses in the domain.

Internationalize publisher.html

Added entry for /adm/populate to allow use of Automated Enrollment Manager (Apache::lonpopulate)

- backport 1.64

- backport 1.61

- Fixes a problem

- maybe this is better, should fix 2190

Script to re-route traffic from one LON-CAPA server to another in case of
weirdness.

Use:

 /cgi-bin/takeoffline.pl

puts up screen that server is kaputt

 /cgi-bin/takeoffline.pl?foo.bar.edu

reroute to foo.bar.edu

 /cgi-bin/takeonline.pl

restore normal welcome

Uses basic auth user "offline"

- make it easier on people who have custom handlers installed

- apache/mod_perl 2 now longer does us the favor of reinitiliazing ENV every request, so we need to delete all of the items we put in.

Bug #1968: version information more easily available

Problem with lontokacc running twice on high school machines if cleanup
was registered dynamically.

Might as well route sty-files through the XML handler also in RES space

Bug #1728: style files can be editied in CSTR space

Continued work on DOCS homework.

Have very limited connectivity, need to do big commit while online.
Will call this JULYone in Bugzilla. Fixes several small bugs.

- Maybe this is why we are leaving the hash tied

- sticking with 7.3's way of doing things right now

Making uploaded problems work is worse than shooting down the Remote ...

loncapa_apache.conf is same as 1.47
lonuploadedacc.pm is same as 1.7
lonhomework.pm is same as 1.124

Aarghh ...

Aargh ... mostly rewinding. We don't want the homework to be rendered on the
course's homeserver, or do we?

Better don't mess with user-uploaded HTML files.

Toward DOCS-problems ... still a long ways to go, but hopefully this does not
damage anything.

- fixed for mod_perl 2, still not loading startup.pl

lonmeta should also be called for non-res resources (but not /raw ... sorry)

- mlonmeta should _not_ be called for /raw

Install new managekeys handler, make new permission "mky" to invoke it

- shift to using a pervar timeout
- add perlvar for scantron dir

New handler to launch and collapse the Remote Control

Add helper handler (which is still not in loncapafiles.lpml so it's not
installed) and remove the cleanup handler from navmaps.

Additional work on pick-a-course function from reverse lookup. Does not work
yet, but getting there.

Towards bugs #662 - add customized rights of use (multiple domains,
specific courses, etc).
* Adds new extension ".rights" and handler lonrights.pm for editing and
viewing (not implemented yet)
* Adds new "copyright" metadata value "custom"
* Adds new metadata-field "customdistributionfile" to ".rights" file
(active only if copyright=custom)
* Author can cover large number of resources by one ".rights" file -
if distribution changes, only that one files needs republishing (like
a ".library" file)

Call cleanup handler

Bug #1267 - list of active users via /cgi-bin/userstatus.pl
Trying to get clusterstatus.pl working again. Added ability to ignore
comments in hosts.tab, and took out Net::Ping because that library is kaputt.

- making it easy to moke the port lonhttpd is on, now a config option in loncapa_apache.conf, probably should be moved to loncapa.conf and added to the install questions
- added tag <LONCAPA_INTERNAL_LONHTTPD_PORT /> that gets replaced by a bit of javascript that sets the var lonhttpdport to the correct value
- lonhttpd reads the conf files on start up ad configures intself to the proper port, if the port is set to 80 it exits assuming that Apache is running there
- header image references reference the proper port
- finally making use of the fact that menu.html is parsed before sent out

- everything assumes a default value of 8080 if it can't find a set value

Space in variable value caused a problem, sorry for that.

Tell people what they are looking at
Add configuration item for non-graphical browsers
Should probably have another one for "not supported" browsers

Start work on server-side menu

best wishes to all.

Allow access to the parm wizard through /adm/wizard. This is
temporary; eventually that will serve as a gate to the various
wizards on the system.

Attempt to better catch and log untied hashes by usage of cleanup handlers.

- cleanup handler backport

Together with the cleanup hander on lonsearchcat.pm, we will hopefully never
see "cannot tie hash" again during group search and group import

It will be hard to catch every possibility of the module quitting prematurely
and not untieing the hash. Attempt to use cleanup handler.

Handler to "Browse" for student user IDs (email, set parameters, etc).

Added a shell of the new student grades interface. Right now,
/adm/quickgrades just prints a list of all problems in the given course,
to be extended later.

Also a small change in navmaps to add a method for the "composite title",
which is the title if it exists, or the last part of the URL if not.

- adding code for setting the browser.unicode ENV
- extended lonBrowseDet, adding a new field, which is the version of the
  browser wihch needs -u1 rather than -u0

- add the new randomlabel image handler to the conf file

- fixes BUG#300
- now log all print accesses
- now force restrictions on acces to files in prtspool

Basic auth for basic harvesting script - still needs to be installed (later)

Fixes ... aehhh ... problem.

More overload protection, and file to explain what is happening.

Ad hoc bulletin boards and simple pages

Better error message when failing to access construction space.

Continued work on syllabus and personal info

Register handlers for syllabus and "about me"

Revert to version 1.13 - special treatment not needed when LCD font in
"public" /adm/lonLCDfont space.

Attempt to prevent logging of errors on accesses to the remote.

Routines for file upload

Towards inter-server document transfer

Token security file upload

Toward new functionality:
announcements
calendar
chat
course documents

Lonchart is now part of lonstatistics.  When the CHRT button is pressed on
the remote control it will take you to the student assessment page.  In
the next commit or two, the student assessment page and lonchart will
gradually merge, or I will make chart its own report.

I added another perl module, lonhtmlcommon which will contain a series of
functions that create controls and data layouts for various different
pieces of information.  This is just a fledgling module.

The biggest feature of this commit is that the downloading of student course
data has changed slightly.  Now, the classlist will contain all students,
but will only display the appropriate ones.  Different reports require
different amounts of data, so some may only download student course data
when selected and some will download it all at once.  The downloading
will first grab the time stamp on the course.db file for the student and
compare it will the cached timestamp for that file.  It will only do a
dump if the data is not yet cached or the timestamp is newer than the one
stored.  Only when the data is processed is the timestamp update, not
when downloaded.  The Download/Process duo of function work hand in hand.
Calling both will be typical even if there was nothing actually downloaded.

The is now a new form, which is a class list with different information.
This list also contain the timestamp for each student, when their course
data was downloaded last.  Having this page is both informational, and
hopefully will mean that it is not necessary for all the other pages, at least
as defaults.

Each report now has a common header.  There is currently some white space,
but it can be filled.  The header has a refresh button, update all student
data button, a selection of forms and a selection of student status.  The
update all student data button will download all students (active and expired)
for the given course.  This allows someone to come to the entry page(
class list) update all the students while they do stuff and come back.
The two selection boxes are special in that they will update the
document when changed.  The onchange attribute was tested on mac,
linux and pc, for the different browsers.  The only noticed difference
was netscape 4.7 executes the javascript if it you select the same thing,
where all others do not.  Also, the same browser causes the first
button in the form to be pressed when the document.form.submit()
javascript is executed for the onchange of the selection box.

There was other cosmetic changes, but were minor.

fixing documentation errors, .meta handler error, and reinserting
ScriptAlias

This commit implements the .tex-based online help system in LON-CAPA. It
may be necessary to manually run loncom/build/help_graphics_converter.pl
and doc/help/rebuildLabelHash.pl after a cvs update, and
loncapa_apache.conf may need to be manually copied to /etc. (The
loncapafiles.lpml has been updated.)

After merging this, the URL http://[loncapahost]/adm/help/Foils.hlp
should display a help file.

Also, some *very* out-of-date files have been removed from the /doc
directory.

Towards bug 492
lonmeta.pm is now also called in construction space. Will need to add
editor functionality.

minor improvement to documentation

minor documentation fix

Added ScriptAlias line to deal with RedHat7.3

BUG 129; note that lonSqlAccess is now static and permanently
defined as 'localhostkey'; also loncapa_apache.conf will include
loncapa.conf

BUG 129
general (not configured by user) settings to the Apache server
to enable running of LON-CAPA