[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] RaQ4i .htaccess Options not allowed

this is a pretty deep problem...

the add handler and lots more will only work at the root level "Home Site"

we went the go round with cobalt escillations...

they finally agreed to "modify" not fix, my server

they had said it was a tightening up of security....

also, your fp form handler will not work on ssl

here is the changes from cobalt,


<<<from cobalt>>>

The File that I modified on your system was in this location:

	/etc/httpd/conf/access.conf

attached to this email is the original(access.conf.master) and the
modified
one(access.conf)

To restore the prior configuration, ftp the access.conf.master file to
the
server as admin into admin's home directory, the directory you are in
as soon
as you log in.

Then telnet to the machine, log in as admin then at the command prompt
type

	su
and enter admin's password when asked for a passoword.

Then type
	cp access.conf.master /etc/httpd/conf/access.conf
this will restore the prior configuration.

Any further questions please call the support line or use the online
form to
submit questions through email.  Please do not respond to this address,
as it
will not produce rapid response.

Regards,
Jason Williams

--------------------------------------------------------------------------------

##
## access.conf -- Apache HTTP server configuration file
##

# access.conf: Global access configuration
# Online docs at http://www.apache.org/

# This file defines server settings which affect which types of
services
# are allowed, and in what circumstances.

# Each directory to which Apache has access, can be configured with
respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories).

# Originally by Rob McCool

# First, we configure the "default" to be a very restrictive set of
# permissions.

<Directory />
Options None
AllowOverride AuthConfig Indexes Limit
AuthFailDelay 2000000
</Directory>

# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.

# deal with symlinks in image directory
<Directory /usr/admserv/html/.cobalt/images/>
Options +SymLinksIfOwnerMatch
</Directory>

# This should be changed to whatever you set DocumentRoot to.

<Directory /home/sites/>

# This may also be "None", "All", or any combination of "Indexes",
# "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews".

# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.

Options Indexes FollowSymLinks Includes MultiViews

# This controls which options the .htaccess files in directories can
# override. Can also be "All", or any combination of "Options",
"FileInfo",
# "AuthConfig", and "Limit"

AllowOverride All

# ignore .ht*
<Files ".ht*">
deny from all
</Files>

# Controls who can get stuff from this server.

order allow,deny
allow from all

AuthFailDelay 2000000

# Frontpage subwebs use a nice mix of pam and Basic authentication
AuthPAM_FallThrough on

</Directory>

# be more restrictive within a site
<Directory /home/sites/*/>
Options -FollowSymLinks +SymLinksIfOwnerMatch
</Directory>

# @@ServerRoot@@/cgi-bin should be changed to whatever your
ScriptAliased
# CGI directory exists, if you have that configured.

#<Directory /home/httpd/cgi-bin>
#AllowOverride None
#Options ExecCGI
#</Directory>

# Allow server status reports, with the URL of
http://servername/server-status
# Change the ".your_domain.com" to match your domain to enable.

#<Location /server-status>
#SetHandler server-status

#order deny,allow
#deny from all
#allow from .your_domain.com
#</Location>

# There have been reports of people trying to abuse an old bug from
pre-1.1
# days.  This bug involved a CGI script distributed as a part of
Apache.
# By uncommenting these lines you can redirect these attacks to a
logging
# script on phf.apache.org.  Or, you can record them yourself, using
the script
# support/phf_abuse_log.cgi.

#<Location /cgi-bin/phf*>
#deny from all
#ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi
#</Location>

# You may place any other directories or locations you wish to have
# access information for after this one.


<Directory /home/sites/home>
AllowOverride All
Options All
</Directory>


--------------------------------------------------------------------------------

##
## access.conf -- Apache HTTP server configuration file
##

# access.conf: Global access configuration
# Online docs at http://www.apache.org/

# This file defines server settings which affect which types of
services
# are allowed, and in what circumstances.

# Each directory to which Apache has access, can be configured with
respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories).

# Originally by Rob McCool

# First, we configure the "default" to be a very restrictive set of
# permissions.

<Directory />
Options None
AllowOverride None
AuthFailDelay 2000000
</Directory>

# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.

# deal with symlinks in image directory
<Directory /usr/admserv/html/.cobalt/images/>
Options +SymLinksIfOwnerMatch
</Directory>

# This should be changed to whatever you set DocumentRoot to.

<Directory /home/sites/>

# This may also be "None", "All", or any combination of "Indexes",
# "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews".

# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.

Options Indexes FollowSymLinks Includes MultiViews

# This controls which options the .htaccess files in directories can
# override. Can also be "All", or any combination of "Options",
"FileInfo",
# "AuthConfig", and "Limit"

AllowOverride None

# ignore .ht*
<Files ".ht*">
deny from all
</Files>

# Controls who can get stuff from this server.

order allow,deny
allow from all

AuthFailDelay 2000000

# Frontpage subwebs use a nice mix of pam and Basic authentication
AuthPAM_FallThrough on

</Directory>

# be more restrictive within a site
<Directory /home/sites/*/>
Options -FollowSymLinks +SymLinksIfOwnerMatch
</Directory>

# @@ServerRoot@@/cgi-bin should be changed to whatever your
ScriptAliased
# CGI directory exists, if you have that configured.

#<Directory /home/httpd/cgi-bin>
#AllowOverride None
#Options ExecCGI
#</Directory>

# Allow server status reports, with the URL of
http://servername/server-status
# Change the ".your_domain.com" to match your domain to enable.

#<Location /server-status>
#SetHandler server-status

#order deny,allow
#deny from all
#allow from .your_domain.com
#</Location>

# There have been reports of people trying to abuse an old bug from
pre-1.1
# days.  This bug involved a CGI script distributed as a part of
Apache.
# By uncommenting these lines you can redirect these attacks to a
logging
# script on phf.apache.org.  Or, you can record them yourself, using
the script
# support/phf_abuse_log.cgi.

#<Location /cgi-bin/phf*>
#deny from all
#ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi
#</Location>

# You may place any other directories or locations you wish to have
# access information for after this one.






From: James Riordon <outofcontrol@xxxxxxxxxxxx>
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] RaQ4i .htaccess Options not allowed
Date: Sun, 4 Feb 2001 21:25:08 -0500

Hi All,

	I have done my homework and have been scouring the archives
for two nights now.

	I have just installed Musita's bandwidth tracker software and
have the following problem:

		1 - in the cgi folder for the mustia config.cgi
compiled program there is a .htaccess file. in this file are three
lines as follows:

		Options  ExecCGI
		AddHandler cgi-script .cgi
		AddHandler cgi-script .pl

	2- When I go to this directory I get the following error in
my browser window:

		The server encountered an internal error or
misconfiguration and was unable to complete your request.

	3 - when I go to the /var/log/httpd/error log I see the
following messages:

		Options not allowed here
		AddHandler not allowed here
		AddHandler not allowed here

	How can I fix this problem? I need to have this .htaccess
file work. What should I do to fix it?

	I have been struggling with this for 3 days now and would
just love to get it to work. Any help is appreciated greatly.

James Riordon
www.amigo-3.com
--
James Riordon
Riordon Digital Imaging
1515 Carson Ave., Dorval Quebec   H9S 1N1
Tel. 514.422.9905  -  Fax. 514.422.9906

For unbeatable prices on toner, inkjet and ribbon supplies...
Your one stop printer supply e-store at http://www.riordon.ca/

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users





From: James Riordon <outofcontrol@xxxxxxxxxxxx>
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] RaQ4i .htaccess Options not allowed
Date: Sun, 4 Feb 2001 21:25:08 -0500

Hi All,

	I have done my homework and have been scouring the archives
for two nights now.

	I have just installed Musita's bandwidth tracker software and
have the following problem:

		1 - in the cgi folder for the mustia config.cgi
compiled program there is a .htaccess file. in this file are three
lines as follows:

		Options  ExecCGI
		AddHandler cgi-script .cgi
		AddHandler cgi-script .pl

	2- When I go to this directory I get the following error in
my browser window:

		The server encountered an internal error or
misconfiguration and was unable to complete your request.

	3 - when I go to the /var/log/httpd/error log I see the
following messages:

		Options not allowed here
		AddHandler not allowed here
		AddHandler not allowed here

	How can I fix this problem? I need to have this .htaccess
file work. What should I do to fix it?

	I have been struggling with this for 3 days now and would
just love to get it to work. Any help is appreciated greatly.

James Riordon
www.amigo-3.com
--
James Riordon
Riordon Digital Imaging
1515 Carson Ave., Dorval Quebec   H9S 1N1
Tel. 514.422.9905  -  Fax. 514.422.9906

For unbeatable prices on toner, inkjet and ribbon supplies...
Your one stop printer supply e-store at http://www.riordon.ca/

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com