[ILUG] Apache Config

[Brian Scanlan]

On Tue, Jan 11, 2000 at 07:47:27PM +0000, Albert White wrote:
> You mean to have
> www.blah.ie/~username/cgi-bin/script.cgi ?
> Might be possible but I've never seen it.
> 
> A possible solution might be to use cgi-wrap (ftp://ftp.umr.edu/pub/cgi/cgiwrap
> /).

...Or you could learn about howto use Apache ;)

Quick lesson.

I added this to Redbrick's httpd.conf

<Directory /home/*/*/*/*/gonk>
Options Indexes
ErrorDocument 404 /index.html
</Directory>
<Directory /usr/local/www/htdocs>

My home directory on Redbrick is
/home/member/s/singer
so /home/*/*/*/*/gonk is intended to point
at anybodys gonk directory under their public_html directory.

Basically, I'm pointing anybody who goes to www.redbrick.dcu.ie/~singer/gonk
and tries to get a non-existent filename, they'll be redirected to Redbrick's
wonderful main page. This is a pointless and trivial example. Check it out
though, it works. (And indeed will work for all users on Redbrick... Nobodies
got a ~/public_html/gonk directory on the system asides from me though :) )

What you want to do is restrict users CGI to within their
~/public_html/cgi-bin directory, yes? 

This'd work on Redbrick.

Turn off CGI for users, but add this to httpd.conf

<Directory /home/*/*/*/*/cgi-bin>
Options ExecCGI Includes Indexes FollowSymLinks
</Directory>

Also, Suexec, which has been shipping with Apache for yonks now, will happily
execute CGI scripts as the user who owns them. It is stable and secure, and
follows a nicely strict ruleset.
http://www.apache.org/docs/suexec.html

Brian.
-- 
"We've uniformly rejected all letters and declined all discussion upon the
question of when the present century ends, as it is one of the most absurd that
can engage the public attention, and we are astonished to find it has been the
subject of so much dispute, since it appears plain. The present century will
not terminate till January 1, 1801, unless it can be made out that 99 are 100.
It is a silly, childish discussion, and only exposes the want of brains of
those who maintain a contrary opinion to that we have stated"
 - The Times, 26 December 1799