[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] SSI with .htm and .html

this is an absolutly horrible raq 4 problem ---

go to


/etc/httpd/conf/access.conf

attached to this email is the original(access.conf.master) and the
modified
one(access.conf)

To restore the prior configuration, ftp the access.conf.master file to
the
server as admin into admin's home directory, the directory you are in
as soon
as you log in.

Then telnet to the machine, log in as admin then at the command prompt
type

	su
and enter admin's password when asked for a passoword.

Then type
	cp access.conf.master /etc/httpd/conf/access.conf
this will restore the prior configuration.

Any further questions please call the support line or use the online
form to
submit questions through email.  Please do not respond to this address,
as it
will not produce rapid response.

Regards,
Jason Williams

--------------------------------------------------------------------------------

##
## access.conf -- Apache HTTP server configuration file
##

# access.conf: Global access configuration
# Online docs at http://www.apache.org/

# This file defines server settings which affect which types of
services
# are allowed, and in what circumstances.

# Each directory to which Apache has access, can be configured with
respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories).

# Originally by Rob McCool

# First, we configure the "default" to be a very restrictive set of
# permissions.

<Directory />
Options None
AllowOverride AuthConfig Indexes Limit
AuthFailDelay 2000000
</Directory>

# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.

# deal with symlinks in image directory
<Directory /usr/admserv/html/.cobalt/images/>
Options +SymLinksIfOwnerMatch
</Directory>

# This should be changed to whatever you set DocumentRoot to.

<Directory /home/sites/>

# This may also be "None", "All", or any combination of "Indexes",
# "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews".

# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.

Options Indexes FollowSymLinks Includes MultiViews

# This controls which options the .htaccess files in directories can
# override. Can also be "All", or any combination of "Options",
"FileInfo",
# "AuthConfig", and "Limit"

AllowOverride All

# ignore .ht*
<Files ".ht*">
deny from all
</Files>

# Controls who can get stuff from this server.

order allow,deny
allow from all

AuthFailDelay 2000000

# Frontpage subwebs use a nice mix of pam and Basic authentication
AuthPAM_FallThrough on

</Directory>

# be more restrictive within a site
<Directory /home/sites/*/>
Options -FollowSymLinks +SymLinksIfOwnerMatch
</Directory>

# @@ServerRoot@@/cgi-bin should be changed to whatever your
ScriptAliased
# CGI directory exists, if you have that configured.

#<Directory /home/httpd/cgi-bin>
#AllowOverride None
#Options ExecCGI
#</Directory>

# Allow server status reports, with the URL of
http://servername/server-status
# Change the ".your_domain.com" to match your domain to enable.

#<Location /server-status>
#SetHandler server-status

#order deny,allow
#deny from all
#allow from .your_domain.com
#</Location>

# There have been reports of people trying to abuse an old bug from
pre-1.1
# days.  This bug involved a CGI script distributed as a part of
Apache.
# By uncommenting these lines you can redirect these attacks to a
logging
# script on phf.apache.org.  Or, you can record them yourself, using
the script
# support/phf_abuse_log.cgi.

#<Location /cgi-bin/phf*>
#deny from all
#ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi
#</Location>

# You may place any other directories or locations you wish to have
# access information for after this one.


<Directory /home/sites/home>
AllowOverride All
Options All
</Directory>


--------------------------------------------------------------------------------

##
## access.conf -- Apache HTTP server configuration file
##

# access.conf: Global access configuration
# Online docs at http://www.apache.org/

# This file defines server settings which affect which types of
services
# are allowed, and in what circumstances.

# Each directory to which Apache has access, can be configured with
respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories).

# Originally by Rob McCool

# First, we configure the "default" to be a very restrictive set of
# permissions.

<Directory />
Options None
AllowOverride None
AuthFailDelay 2000000
</Directory>

# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.

# deal with symlinks in image directory
<Directory /usr/admserv/html/.cobalt/images/>
Options +SymLinksIfOwnerMatch
</Directory>

# This should be changed to whatever you set DocumentRoot to.

<Directory /home/sites/>

# This may also be "None", "All", or any combination of "Indexes",
# "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews".

# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.

Options Indexes FollowSymLinks Includes MultiViews

# This controls which options the .htaccess files in directories can
# override. Can also be "All", or any combination of "Options",
"FileInfo",
# "AuthConfig", and "Limit"

AllowOverride None

# ignore .ht*
<Files ".ht*">
deny from all
</Files>

# Controls who can get stuff from this server.

order allow,deny
allow from all

AuthFailDelay 2000000

# Frontpage subwebs use a nice mix of pam and Basic authentication
AuthPAM_FallThrough on

</Directory>

# be more restrictive within a site
<Directory /home/sites/*/>
Options -FollowSymLinks +SymLinksIfOwnerMatch
</Directory>

# @@ServerRoot@@/cgi-bin should be changed to whatever your
ScriptAliased
# CGI directory exists, if you have that configured.

#<Directory /home/httpd/cgi-bin>
#AllowOverride None
#Options ExecCGI
#</Directory>

# Allow server status reports, with the URL of
http://servername/server-status
# Change the ".your_domain.com" to match your domain to enable.

#<Location /server-status>
#SetHandler server-status

#order deny,allow
#deny from all
#allow from .your_domain.com
#</Location>

# There have been reports of people trying to abuse an old bug from
pre-1.1
# days.  This bug involved a CGI script distributed as a part of
Apache.
# By uncommenting these lines you can redirect these attacks to a
logging
# script on phf.apache.org.  Or, you can record them yourself, using
the script
# support/phf_abuse_log.cgi.

#<Location /cgi-bin/phf*>
#deny from all
#ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi
#</Location>

# You may place any other directories or locations you wish to have
# access information for after this one.




From: "P S Graham \(Erols\)" <psgraham@xxxxxxxxx>
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
To: <cobalt-users@xxxxxxxxxxxxxxx>
Subject: RE: [cobalt-users] SSI with .htm and .html
Date: Wed, 18 Apr 2001 01:41:11 -0400

>
> I tried adding the Options directive and now I get the error:
> "Options not
> allowed here"
>
> It must be something turned off globally (perhaps in srm.conf) to prevent 
> users from overriding the global server options using .htaccess.
> (BTW it's
> a Raq4r).
>
> I'll keep digging...
>
> Brian
>
Another option (but may not be your preferred choice) is to edit the
httpd.conf file manually.
(unless of course the GUI changes things back when you add additional
sites - [anyone?])

Within the  <VirtualHost ###.###.###.###> for the site, change these 2
lines:

AddHandler server-parsed .shtml
AddType    text/html     .shtml

to read

AddHandler server-parsed .shtml .html .htm
AddType    text/html     .shtml .html .htm


Patrick

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com