PAPI Archivos

The PAPI authentication and authorization framework

PAPI@LISTSERV.REDIRIS.ES

Opciones: Vista Forum

Use Monospaced Font
Por defecto enseñar Text Part
Esconda cabeceras de correo

Mensaje: [<< Primero] [< Prev] [Siguiente >] [Último >>]
Tema: [<< Primero] [< Prev] [Siguiente >] [Último >>]
Autor: [<< Primero] [< Prev] [Siguiente >] [Último >>]

Print Responder
Received:
by LISTSERV.REDIRIS.ES (LISTSERV-TCP/IP release 14.5) with spool id 500050 for [log in para visualizar]; Mon, 5 Feb 2007 16:15:32 -2300 from localhost (relay.rediris.es [130.206.1.100]) by listserv.rediris.es (Postfix) with ESMTP id 607175C4C5 for <[log in para visualizar]>; Mon, 5 Feb 2007 16:15:32 +0100 (CET) from relay.rediris.es ([127.0.0.1]) by localhost (relay.rediris.es [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Ij1hIF86CkyS for <[log in para visualizar]>; Mon, 5 Feb 2007 16:15:20 +0100 (CET) from po-pub-1.jet.uk (mail2.jet.efda.org [194.81.223.68]) by relay.rediris.es (RedIRIS) with SMTP id 364E91C07B for <[log in para visualizar]>; Mon, 5 Feb 2007 16:14:52 +0100 (CET) from [145.239.30.144] by po-pub-1.jet.uk (Post.Office MTA v3.5.3 release 223 ID# 0-72244U3100L400S0V35) with ESMTP id uk; Mon, 5 Feb 2007 15:14:51 +0000
Content-Type:
multipart/mixed; boundary="------------050108080002060700090504"
Message-ID:
References:
Date:
Mon, 5 Feb 2007 15:14:50 +0000
Comments:
To: "Diego R. Lopez" <[log in para visualizar]>, krishan purahoo <[log in para visualizar]>
Subject:
Reply-To:
The PAPI authentication and authorization framework <[log in para visualizar]>
Emisor:
Sender:
The PAPI authentication and authorization framework <[log in para visualizar]>
Delivered-To:
MIME-Version:
1.0
User-Agent:
Thunderbird 2.0pre (X11/20070130)
In-Reply-To:
X-Original-To:
X-Virus-Scanned:
by amavisd-new at relay.rediris.es
Parts/Attachments:
text/plain (4 kB) , BasicAuth.src (4 kB) , AuthServer.cf (6 kB) , http_papi_as.conf (32 kB) , http_papi.poa.conf (32 kB)
Hi Diego,
          Sorry I was not too clear, I did mention it in my first query,
I do not get any URL displayed in the 'successfully authenticated page'
when I authenticate using IMAP.

Should it have shown my default POA URL here?

This is the HTML code of the page


   <html>
<head><title>PAPI Authentication Server: Accepted</title></head>
<body>
<h3>The server has accepted your authentication data</h3>
<p>You can now access the resources included in the following list, simply
clicking on the corresponding link.</p>
<p>The symbol to the left of the links indicates whether the resource is
available or not.</p>
<table></table>
<hr 3>
<form method="post" 
action="http://jactest-3.jet.uk:8085/cgi-papi/AuthServer">
<input type="hidden" name="username" value="kpur">
<p>You can check the status of your credentials using the <b>Test</b> 
button,
or erase the credentials currently stored by your browser
using the <b>Logout</b> button.</p>

<p>It is also possible to change the status of your credentials accessing
again the <a 
href="http://jactest-3.jet.uk:8085/cgi-papi/AuthServer">Authentication 
Server</a>.</p>
<center>
<table width="50%">
<tr>
<td align="left"><input type="submit" name="TEST" value="Test"></td>
<td align="right"><input type="submit" name="LOGOUT" value="Logout"></td>
</table>
</center>
</form>
</body>
</html>


Now Using BasicAuth, I get the following 'successfully authenticated 
page'. I get a URL which I can go to. But the 'image' to the left of
it does not appear (I get a 'broken link' image). However I can
access the image directly as http://jactest-3.jet.uk:8088/icons/redball.gif

Also, in the source HTML below, it shows the rejectURL image (redball)??


<html>
<head><title>PAPI Authentication Server: Accepted</title></head>
<body>
<h3>The server has accepted your authentication data</h3>
<p>You can now access the resources included in the following list, simply
clicking on the corresponding link.</p>
<p>The symbol to the left of the links indicates whether the resource is
available or not.</p>
<table><tr><td><img 
src="http://jactest-3.jet.uk:8088///token_request?AS=foo%2Das&ACTION=LOGIN&DATA=iD4ssCyNH8OOyaZ5W6rnRPmwtzFYpg0RWEKI0Plv7fE1HRNJx8u2n1FR4MISvhgG9ooJEEGWduiJplmrXyUygYE2FAJpucv6uq9ChI8%2B%2BgNSG%2FS2CpQnC3JJHozKmV4pOTJNcUFrkY52wC08o6JFfBk0F1J6z0T%2FtdHlUN46Wzo%3D&AURL=http%3A%2F%2Fjactest%2D3%2Ejet%2Euk%3A8088%2Ficons%2Fgreenball%2Egif&RURL=http%3A%2F%2Fjactest%2D3%2Ejet%2Euk%3A8088%2Ficons%2Fredball%2Egif"></td><td><a 
href="http://jactest-3.jet.uk:8088//index.html" 
target="jactest-poa">JACTEST web pages</a></td></tr></table>
<hr 3>
<form method="post" 
action="http://jactest-3.jet.uk:8085/cgi-papi/AuthServer">
<input type="hidden" name="username" value="user1">
<p>You can check the status of your credentials using the <b>Test</b> 
button,
or erase the credentials currently stored by your browser
using the <b>Logout</b> button.</p>

<p>It is also possible to change the status of your credentials accessing
again the <a 
href="http://jactest-3.jet.uk:8085/cgi-papi/AuthServer">Authentication 
Server</a>.</p>
<center>
<table width="50%">
<tr>
<td align="left"><input type="submit" name="TEST" value="Test"></td>
<td align="right"><input type="submit" name="LOGOUT" value="Logout"></td>
</table>
</center>
</form>
</body>
</html>


I am attaching the various config files below

BasicAuth.src  - Basic Auth database source file
AuthServer.cf  - AS configuration file

http_papi_as.conf - AS apache server config file (apache server run on 
port 8085)

http_papi.poa.conf - POA apache server config file (apache server run on 
port 8085)


Many Thanks


krishan


Diego R. Lopez wrote:
> Hi Krishan,
> 
> On 5 Feb 2007, at 13:58, Krishan Purahoo wrote:
>>>> Can you send me the exact URL that your
>>>> AS is including in the page that sends to you upon successful
>>>> authentication?
>>
>> Well, the URL to my AS is 
>> http://jactest-3.jet.uk:8085/cgi-papi/AuthServer
>> as defined in my AuthServer.cf file. I type this directly in my browser
>> to access it for testing.
>>
>> After authenticating I get the 'successfully authenticated page' and its
>> URL is exactly same as the AS URL above
>> (http://jactest-3.jet.uk:8085/cgi-papi/AuthServer). I suspect this is
>> wrong!!
> 
> No. That's correct. The AuthServer invokes itself with different operation
> codes. I was referring to the URLs that should appear inside the 
> "successfully
> authenticated page" and that are supposed to bring the images holding the
> cookies. Or easier, just send me the source of the whole page you get when
> authenticated. And the whole set of config files (including the BasicAuth
> source database) would help as well.
> 
> Best regards,
> 
> -- 
> "Esta vez no fallaremos, Doctor Infierno"
> 
> Dr Diego R. Lopez
> 
> Red.es - RedIRIS
> The Spanish NREN
> 
> e-mail: [log in para visualizar]
> jid:    [log in para visualizar]
> Tel:    +34 955 056 621
> Mobile: +34 669 898 094
> -----------------------------------------
> 
> 



# PAPI Authentication Server. Sample configuration file # (c) 2001-2005 RedIRIS # # This is the PAPI AS configuration file, a Perl source # file that essentially contains asignments to a hash named # PAPI::AuthServer::cfgVar. # This sample configuration tries to illustrate the different authentication # methods available in the distribution. use LWP::UserAgent; # Include here the modules referenced by the elements inside the configuration # use PAPI::BasicAuth; use PAPI::BasicLog; use PAPI::POPAuth; use PAPI::IMAPAuth; use PAPI::LDAPAuth; use PAPI::CertAuth; # Just convenience # $cfg = \%PAPI::AuthServer::cfgVar; # The definition of the working directory should be the first configuration # assignment # $$cfg{workingDirectory} = '/usr/local/depot/PAPI/AS/etc'; # This variable will allow the selection of the authentication methods # # Uncomment for using basic PAPI authentication my $authType = "basic"; # Uncomment for using POP-based authentication #my $authType = "pop"; # Uncomment for using IMAP-based authentication #my $authType = "imap"; # Uncomment for using LDAP-based authentication #my $authType = "ldap"; # Uncomment for using X509 certificate authentication #my $authType = "cert"; # Admin data (included in the HTML templates) # $$cfg{adminContact} = '<b>[log in para visualizar]</b>';   # HTML templates # $$cfg{loginTemplate} = fromFile("login.html"); $$cfg{acceptTemplate} = fromFile("accept.html"); $$cfg{testTemplate} = fromFile("test.html"); $$cfg{logoutTemplate} = fromFile("logout.html"); $$cfg{rejectTemplate} = fromFile("reject.html"); $$cfg{siteInfoTemplate} = '<tr><td><img src="<papi var="poaURL"/>"></td><td><a href="<papi var="poa"/><papi var="location"/><papi var="accessURI"/>" target="<papi var="service"/>"><papi var="desc"/></a></td></tr>'; # Properties of this AS, to be sent to the PoA(s) # #$$cfg{asLocation} = 'https://as.papi.dom.ain/'; $$cfg{asLocation} = 'http://jactest-3.jet.uk:8085/cgi-papi/AuthServer'; $$cfg{serverID} = 'foo-as'; $$cfg{privateKey} = 'privateKey.pem'; # # Comment these if you do not require split (thus SSL-capable) mode # #$$cfg{splitModeURL} = 'http://as.papi.dom.ain/'; #$$cfg{splitModeParamList} = 'username,host'; # # These parameters make PoAs redirect accept/reject responses to # locally controlled URLs # #$$cfg{acceptURL} = 'http://jactest-3.jet.uk:8088/manual/LICENSE'; #$$cfg{rejectURL} = 'http://jactest-3.jet.uk:8088/manual/'; $$cfg{acceptURL} = 'http://jactest-3.jet.uk:8088/icons/greenball.gif'; $$cfg{rejectURL} = 'http://jactest-3.jet.uk:8088/icons/redball.gif'; # # Values for the authentication cookie # Comment them if you do not require its use # $$cfg{authCookie} = 'PAPIuid,username'; $$cfg{authCookieDB} = '/usr/local/depot/PAPI/AS/etc/PAPIAuthenCookies'; $$cfg{authCookieTimeToLive} = 3600; # # Value of the AS symmetric key # Used in split mode and for en-/de-crypting the authentication cookie # It is highly advisable that you change this value # #$$cfg{symKey} = 'ca1813914a25b12a14ca121516e26180'; $$cfg{symKey} = 'c9e7006705fb95ff2fa79fe4308201c0'; # # The connection variable holding user id (for TEST and LOGOUT) $$cfg{uidVar} = 'username'; # Default values for the PoA(s) # $$cfg{defTimeToLive} = 1800; $$cfg{defLocation} = '/manual'; $$cfg{defService}= 'bar-poa'; $$cfg{defPoA} = 'http://jactest-3.jet.uk:8088/'; $$cfg{defDescription} = 'Sample PAPI PoA'; $$cfg{defAuthURI} = 'PAPI/cookie_handler.cgi'; $$cfg{defAccessURI} = 'index.html'; # # Default assertion about users to be sent to PoA(s) $$cfg{defAssertion} = '<papi var="PAPIuid"/>'; # Hooks and hook config. By default, "basic" authentication is used # if ($authType eq "pop") {    $$cfg{authenticationHook} = \&PAPI::POPAuth::POP3User;    $$cfg{pop3Server} = "pop.dom.ain"; # Uncomment this to use a TLS connextion to the POP3 server # $$cfg{pop3SSL} = 1; # Uncomment any of these to use a specific POP3 validation method. # By default, the "PASS" method is used # Use plain POP3 login (send USER and PASS commands in clear) # $$cfg{pop3Method} = 'PASS'; # Use the APOP procedure # $$cfg{pop3Method} = 'APOP'; # Use CRAM-MD5 when sending the password # $$cfg{pop3Method} = 'CRAM-MD5'; # Query server capabilities (preference order is APOP, CRAM-MD5, and PASS) # $$cfg{pop3Method} = 'BEST';    $$cfg{credentialHook} = \&PAPI::BasicAuth::DefCredentials;    $$cfg{attrRequestHook} = \&PAPI::BasicAuth::DefAttributes;    $$cfg{basicAuthDB} = "Basic.pdb"; } elsif ($authType eq "imap") {    $$cfg{authenticationHook} = \&PAPI::IMAPAuth::IMAPUser;    $$cfg{credentialHook} = \&PAPI::BasicAuth::DefCredentials;    $$cfg{attrRequestHook} = \&PAPI::BasicAuth::DefAttributes;    $$cfg{IMAPServer} = "ntsrv-exch01.jet.uk";    $$cfg{basicAuthDB} = "Basic.pdb"; } elsif ($authType eq "ldap") {    $$cfg{authenticationHook} = \&PAPI::LDAPAuth::VerifyUser;    $$cfg{credentialHook} = \&PAPI::LDAPAuth::UserCredentials;    $$cfg{attrRequestHook} = \&PAPI::LDAPAuth::UserAttributes;    $$cfg{LDAPserver} = "ldap.dom.ain";    $$cfg{LDAPport} = 389;    $$cfg{LDAPUSERtemplate} = 'uid=<papi var="username"/>';    $$cfg{LDAPAuthSearchBase} = 'ou=people,dc=dom,dc=ain';    $$cfg{LDAPAuthScope} = 'sub';    $$cfg{LDAPsearchBase} = 'dc=papi,dc=dom,dc=ain'; # Uncomment these to use simple authentication when binding to the LDAP server # $$cfg{LDAPbindDN} = 'uid=papias,dc=papi,dc=dom,dc=ain'; # $$cfg{LDAPbindPassword} = 'papipassword'; # Uncomment these to use a TLS connection and verify server identity # $$cfg{LDAPS} = 1; # $$cfg{LDAPSverify} = 'require'; # $$cfg{LDAPScafile} = '/etc/PAPI/CAs/MyRoot.pem'; } elsif ($authType eq "cert") {    $$cfg{authenticationHook} = \&PAPI::CertAuth::ValidateCert; # Read user data from LDAP using the certificate subject DN    $$cfg{credentialHook} = \&PAPI::LDAPAuth::UserCredentials;    $$cfg{CertValidateMethod} = "client_DN";    $$cfg{client_DNPattern}="(dc=dom,dc=ain).*(uniqueIdentifier=.*)"; # Config variables for using the certificate subject DN within # PAPI::LDAPAuth::UserCredentials    $$cfg{LDAPserver} = "ldap.dom.ain";    $$cfg{LDAPport} = "389";    $$cfg{LDAPUSERtemplate} = 'uid=<papi var="PAPIuid"/>';    $$cfg{LDAPAuthSearchBase} = 'ou=people,dc=dom,dc=ain';    $$cfg{LDAPsearchBase} = 'dc=papi,dc=dom,dc=ain'; } else {    $$cfg{authenticationHook} = \&PAPI::BasicAuth::VerifyUser;    $$cfg{credentialHook} = \&PAPI::BasicAuth::UserCredentials;    $$cfg{attrRequestHook} = \&PAPI::BasicAuth::UserAttributes;    $$cfg{basicAuthDB} = "Basic.pdb"; } #$$cfg{logHook} = undef; $$cfg{logHook} = \&PAPI::BasicLog::FileLog; $$cfg{logFile} = "queries_log"; ## # # These small routines are used to read data from a file or an URL # (used mainly for templates) # ## sub fromFile {    my $fn = shift;    if ($fn !~ /^\//) { $fn = join("/",$$cfg{'workingDirectory'},$fn); }    open (INH, "<" . $fn)       or return "PAPI AuthServer config error: Unable to open file $fn";    my @rta = <INH>;    close INH;    return join "",@rta; } sub fromURL {    my $url = shift;    my $ua = new LWP::UserAgent;    my $res = $ua->get($url);    if (!$res->is_success) {       return "PAPI AuthServer config error: Unable to get data from $url";    }    return $res->content; } 1;
## ## http_papi_as.conf -- Apache HTTP server configuration file ## # # Based upon the NCSA server configuration files originally by Rob McCool. # # This is the main Apache server configuration file. It contains the # configuration directives that give the server its instructions. # See <URL:http://httpd.apache.org/docs/> for detailed information about # the directives. # # Do NOT simply read the instructions in here without understanding # what they do. They're here only as hints or reminders. If you are unsure # consult the online docs. You have been warned. # # After this file is processed, the server will look for and process # /usr/local/depot/PAPI/apache_1.3.37/conf/srm.conf and then /usr/local/depot/PAPI/apache_1.3.37/conf/access.conf # unless you have overridden these with ResourceConfig and/or # AccessConfig directives here. # # The configuration directives are grouped into three basic sections: # 1. Directives that control the operation of the Apache server process as a # whole (the 'global environment'). # 2. Directives that define the parameters of the 'main' or 'default' server, # which responds to requests that aren't handled by a virtual host. # These directives also provide default values for the settings # of all virtual hosts. # 3. Settings for virtual hosts, which allow Web requests to be sent to # different IP addresses or hostnames and have them handled by the # same Apache server process. # # Configuration and logfile names: If the filenames you specify for many # of the server's control files begin with "/" (or "drive:/" for Win32), the # server will use that explicit path. If the filenames do *not* begin # with "/", the value of ServerRoot is prepended -- so "logs/foo.log" # with ServerRoot set to "/usr/local/apache" will be interpreted by the # server as "/usr/local/apache/logs/foo.log". # ### Section 1: Global Environment # # The directives in this section affect the overall operation of Apache, # such as the number of concurrent requests it can handle or where it # can find its configuration files. # # # ServerType is either inetd, or standalone. Inetd mode is only supported on # Unix platforms. # ServerType standalone # # ServerRoot: The top of the directory tree under which the server's # configuration, error, and log files are kept. # # NOTE! If you intend to place this on an NFS (or otherwise network) # mounted filesystem then please read the LockFile documentation # (available at <URL:http://www.apache.org/docs/mod/core.html#lockfile>); # you will save yourself a lot of trouble. # ServerRoot "/usr/local/depot/PAPI/apache_1.3.37" # # The LockFile directive sets the path to the lockfile used when Apache # is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or # USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at # its default value. The main reason for changing it is if the logs # directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL # DISK. The PID of the main server process is automatically appended to # the filename. # #LockFile /usr/local/depot/PAPI/apache_1.3.37/run/http_papi_as.lock # # PidFile: The file in which the server should record its process # identification number when it starts. # PidFile /usr/local/depot/PAPI/apache_1.3.37/run/http_papi_as.pid # # ScoreBoardFile: File used to store internal server process information. # Not all architectures require this. But if yours does (you'll know because # this file will be created when you run Apache) then you *must* ensure that # no two invocations of Apache share the same scoreboard file. # ScoreBoardFile /usr/local/depot/PAPI/apache_1.3.37/run/http_papi_as.scoreboard PassEnv PERL5LIB SetEnv PERL5LIB $PERL5LIB:/usr/local/PERL5:/usr/local/depot/PAPI # # In the standard configuration, the server will process http_papi_as.conf (this # file, specified by the -f command line option), srm.conf, and access.conf # in that order. The latter two files are now distributed empty, as it is # recommended that all directives be kept in a single file for simplicity. # The commented-out values below are the built-in defaults. You can have the # server ignore these files altogether by using "/dev/null" (for Unix) or # "nul" (for Win32) for the arguments to the directives. # #ResourceConfig /usr/local/depot/PAPI/apache_1.3.37/conf/srm.conf #AccessConfig /usr/local/depot/PAPI/apache_1.3.37/conf/access.conf # # Timeout: The number of seconds before receives and sends time out. # Timeout 300 # # KeepAlive: Whether or not to allow persistent connections (more than # one request per connection). Set to "Off" to deactivate. # KeepAlive On # # MaxKeepAliveRequests: The maximum number of requests to allow # during a persistent connection. Set to 0 to allow an unlimited amount. # We recommend you leave this number high, for maximum performance. # MaxKeepAliveRequests 100 # # KeepAliveTimeout: Number of seconds to wait for the next request from the # same client on the same connection. # KeepAliveTimeout 15 # # Server-pool size regulation. Rather than making you guess how many # server processes you need, Apache dynamically adapts to the load it # sees --- that is, it tries to maintain enough server processes to # handle the current load, plus a few spare servers to handle transient # load spikes (e.g., multiple simultaneous requests from a single # Netscape browser). # # It does this by periodically checking how many servers are waiting # for a request. If there are fewer than MinSpareServers, it creates # a new spare. If there are more than MaxSpareServers, some of the # spares die off. The default values are probably OK for most sites. # MinSpareServers 5 MaxSpareServers 10 # # Number of servers to start initially --- should be a reasonable ballpark # figure. # StartServers 5 # # Limit on total number of servers running, i.e., limit on the number # of clients who can simultaneously connect --- if this limit is ever # reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW. # It is intended mainly as a brake to keep a runaway server from taking # the system with it as it spirals down... # MaxClients 150 # # MaxRequestsPerChild: the number of requests each child process is # allowed to process before the child dies. The child will exit so # as to avoid problems after prolonged use when Apache (and maybe the # libraries it uses) leak memory or other resources. On most systems, this # isn't really needed, but a few (such as Solaris) do have notable leaks # in the libraries. For these platforms, set to something like 10000 # or so; a setting of 0 means unlimited. # # NOTE: This value does not include keepalive requests after the initial # request per connection. For example, if a child process handles # an initial request and 10 subsequent "keptalive" requests, it # would only count as 1 request towards this limit. # MaxRequestsPerChild 0 # # Listen: Allows you to bind Apache to specific IP addresses and/or # ports, instead of the default. See also the <VirtualHost> # directive. # #Listen 3000 #Listen 12.34.56.78:80 # # BindAddress: You can support virtual hosts with this option. This directive # is used to tell the server which IP address to listen to. It can either # contain "*", an IP address, or a fully qualified Internet domain name. # See also the <VirtualHost> and Listen directives. # #BindAddress * # # Dynamic Shared Object (DSO) Support # # To be able to use the functionality of a module which was built as a DSO you # have to place corresponding `LoadModule' lines at this location so the # directives contained in it are actually available _before_ they are used. # Please read the file http://httpd.apache.org/docs/dso.html for more # details about the DSO mechanism and run `httpd -l' for the list of already # built-in (statically linked and thus always available) modules in your httpd # binary. # # Note: The order in which modules are loaded is important. Don't change # the order below without expert advice. # # Example: # LoadModule foo_module libexec/mod_foo.so # # ExtendedStatus controls whether Apache will generate "full" status # information (ExtendedStatus On) or just basic information (ExtendedStatus # Off) when the "server-status" handler is called. The default is Off. # #ExtendedStatus On ### Section 2: 'Main' server configuration # # The directives in this section set up the values used by the 'main' # server, which responds to any requests that aren't handled by a # <VirtualHost> definition. These values also provide defaults for # any <VirtualHost> containers you may define later in the file. # # All of these directives may appear inside <VirtualHost> containers, # in which case these default settings will be overridden for the # virtual host being defined. # # # If your ServerType directive (set earlier in the 'Global Environment' # section) is set to "inetd", the next few directives don't have any # effect since their settings are defined by the inetd configuration. # Skip ahead to the ServerAdmin directive. # # # Port: The port to which the standalone server listens. For # ports < 1023, you will need httpd to be run as root initially. # Port 8085 # # If you wish httpd to run as a different user or group, you must run # httpd as root initially and it will switch. # # User/Group: The name (or #number) of the user/group to run httpd as. # . On SCO (ODT 3) use "User nouser" and "Group nogroup". # . On HPUX you may not be able to use shared memory as nobody, and the # suggested workaround is to create a user www and use that user. # NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET) # when the value of (unsigned)Group is above 60000; # don't use Group "#-1" on these systems! # User nobody Group nobody # # ServerAdmin: Your address, where problems with the server should be # e-mailed. This address appears on some server-generated pages, such # as error documents. # ServerAdmin [log in para visualizar] # # ServerName allows you to set a host name which is sent back to clients for # your server if it's different than the one the program would get (i.e., use # "www" instead of the host's real name). # # Note: You cannot just invent host names and hope they work. The name you # define here must be a valid DNS name for your host. If you don't understand # this, ask your network administrator. # If your host doesn't have a registered DNS name, enter its IP address here. # You will have to access it by its address (e.g., http://123.45.67.89/) # anyway, and this will make redirections work in a sensible way. # # 127.0.0.1 is the TCP/IP local loop-back address, often named localhost. Your # machine always knows itself by this address. If you use Apache strictly for # local testing and development, you may use 127.0.0.1 as the server name. # #ServerName www.example.com # # DocumentRoot: The directory out of which you will serve your # documents. By default, all requests are taken from this directory, but # symbolic links and aliases may be used to point to other locations. # DocumentRoot "/usr/local/depot/PAPI/apache_1.3.37/htdocs" # # Each directory to which Apache has access, can be configured with respect # to which services and features are allowed and/or disabled in that # directory (and its subdirectories). # # First, we configure the "default" to be a very restrictive set of # permissions. # <Directory />     Options FollowSymLinks     AllowOverride None </Directory> # # Note that from this point forward you must specifically allow # particular features to be enabled - so if something's not working as # you might expect, make sure that you have specifically enabled it # below. # # # This should be changed to whatever you set DocumentRoot to. # <Directory "/usr/local/depot/PAPI/apache_1.3.37/htdocs"> # # This may also be "None", "All", or any combination of "Indexes", # "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews". # # Note that "MultiViews" must be named *explicitly* --- "Options All" # doesn't give it to you. #     Options Indexes FollowSymLinks MultiViews # # This controls which options the .htaccess files in directories can # override. Can also be "All", or any combination of "Options", "FileInfo", # "AuthConfig", and "Limit" #     AllowOverride None # # Controls who can get stuff from this server. #     Order allow,deny     Allow from all </Directory> # # UserDir: The name of the directory which is appended onto a user's home # directory if a ~user request is received. # <IfModule mod_userdir.c>     UserDir public_html </IfModule> # # Control access to UserDir directories. The following is an example # for a site where these directories are restricted to read-only. # #<Directory /home/*/public_html> # AllowOverride FileInfo AuthConfig Limit # Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec # <Limit GET POST OPTIONS PROPFIND> # Order allow,deny # Allow from all # </Limit> # <LimitExcept GET POST OPTIONS PROPFIND> # Order deny,allow # Deny from all # </LimitExcept> #</Directory> # # DirectoryIndex: Name of the file or files to use as a pre-written HTML # directory index. Separate multiple entries with spaces. # <IfModule mod_dir.c>     DirectoryIndex index.html </IfModule> # # AccessFileName: The name of the file to look for in each directory # for access control information. # AccessFileName .htaccess # # The following lines prevent .htaccess files from being viewed by # Web clients. Since .htaccess files often contain authorization # information, access is disallowed for security reasons. Comment # these lines out if you want Web visitors to see the contents of # .htaccess files. If you change the AccessFileName directive above, # be sure to make the corresponding changes here. # # Also, folks tend to use names such as .htpasswd for password # files, so this will protect those as well. # <Files ~ "^\.ht">     Order allow,deny     Deny from all     Satisfy All </Files> # # CacheNegotiatedDocs: By default, Apache sends "Pragma: no-cache" with each # document that was negotiated on the basis of content. This asks proxy # servers not to cache the document. Uncommenting the following line disables # this behavior, and proxies will be allowed to cache the documents. # #CacheNegotiatedDocs # # UseCanonicalName: (new for 1.3) With this setting turned on, whenever # Apache needs to construct a self-referencing URL (a URL that refers back # to the server the response is coming from) it will use ServerName and # Port to form a "canonical" name. With this setting off, Apache will # use the hostname:port that the client supplied, when possible. This # also affects SERVER_NAME and SERVER_PORT in CGI scripts. # UseCanonicalName On # # TypesConfig describes where the mime.types file (or equivalent) is # to be found. # <IfModule mod_mime.c>     TypesConfig /usr/local/depot/PAPI/apache_1.3.37/conf/mime.types </IfModule> # # DefaultType is the default MIME type the server will use for a document # if it cannot otherwise determine one, such as from filename extensions. # If your server contains mostly text or HTML documents, "text/plain" is # a good value. If most of your content is binary, such as applications # or images, you may want to use "application/octet-stream" instead to # keep browsers from trying to display binary files as though they are # text. # DefaultType text/plain # # The mod_mime_magic module allows the server to use various hints from the # contents of the file itself to determine its type. The MIMEMagicFile # directive tells the module where the hint definitions are located. # mod_mime_magic is not part of the default server (you have to add # it yourself with a LoadModule [see the DSO paragraph in the 'Global # Environment' section], or recompile the server and include mod_mime_magic # as part of the configuration), so it's enclosed in an <IfModule> container. # This means that the MIMEMagicFile directive will only be processed if the # module is part of the server. # <IfModule mod_mime_magic.c>     MIMEMagicFile /usr/local/depot/PAPI/apache_1.3.37/conf/magic </IfModule> # # HostnameLookups: Log the names of clients or just their IP addresses # e.g., www.apache.org (on) or 204.62.129.132 (off). # The default is off because it'd be overall better for the net if people # had to knowingly turn this feature on, since enabling it means that # each client request will result in AT LEAST one lookup request to the # nameserver. # HostnameLookups Off # # ErrorLog: The location of the error log file. # If you do not specify an ErrorLog directive within a <VirtualHost> # container, error messages relating to that virtual host will be # logged here. If you *do* define an error logfile for a <VirtualHost> # container, that host's errors will be logged there and not here. # ErrorLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi_as_error_log # # LogLevel: Control the number of messages logged to the error_log. # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. # LogLevel warn # # The following directives define some format nicknames for use with # a CustomLog directive (see below). # LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined LogFormat "%h %l %u %t \"%r\" %>s %b" common LogFormat "%{Referer}i -> %U" referer LogFormat "%{User-agent}i" agent # # The location and format of the access logfile (Common Logfile Format). # If you do not define any access logfiles within a <VirtualHost> # container, they will be logged here. Contrariwise, if you *do* # define per-<VirtualHost> access logfiles, transactions will be # logged therein and *not* in this file. # CustomLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi_as_access_log common # # If you would like to have agent and referer logfiles, uncomment the # following directives. # #CustomLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi_as_referer_log referer #CustomLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi_as_agent_log agent # # If you prefer a single logfile with access, agent, and referer information # (Combined Logfile Format) you can use the following directive. # #CustomLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi_as_access_log combined # # Optionally add a line containing the server version and virtual host # name to server-generated pages (error documents, FTP directory listings, # mod_status and mod_info output etc., but not CGI generated documents). # Set to "EMail" to also include a mailto: link to the ServerAdmin. # Set to one of: On | Off | EMail # ServerSignature On # EBCDIC configuration: # (only for mainframes using the EBCDIC codeset, currently one of: # Fujitsu-Siemens' BS2000/OSD, IBM's OS/390 and IBM's TPF)!! # The following default configuration assumes that "text files" # are stored in EBCDIC (so that you can operate on them using the # normal POSIX tools like grep and sort) while "binary files" are # stored with identical octets as on an ASCII machine. # # The directives are evaluated in configuration file order, with # the EBCDICConvert directives applied before EBCDICConvertByType. # # If you want to have ASCII HTML documents and EBCDIC HTML documents # at the same time, you can use the file extension to force # conversion off for the ASCII documents: # > AddType text/html .ahtml # > EBCDICConvert Off=InOut .ahtml # # EBCDICConvertByType On=InOut text/* message/* multipart/* # EBCDICConvertByType On=In application/x-www-form-urlencoded # EBCDICConvertByType On=InOut application/postscript model/vrml # EBCDICConvertByType Off=InOut */* # kpur://2007-02-01 #PerlModule PAPI::Conf # #<PAPI_Main> # HKEY_File /usr/local/depot/PAPI/AS/etc/hkey # LKEY_File /usr/local/depot/PAPI/AS/etc/lkey # Hcook_DB /usr/local/depot/PAPI/AS/etc/hcookdb # Server bar-poa # PAPI_AS foo-as The PAPI AS at jet.uk # Pubkeys_Path /usr/local/depot/PAPI/AS/etc/foo-as_pubkey.pem # Lcook_Timeout 1800 # CRC_Timeout 1800 # URL_Timeout 1800 # Debug 1 # Domain jet.uk # Accept_File /icons/ball.red.png # Reject_File /icons/ball.gray.png # Auth_Location PAPI/cookie_handler.cgi #</PAPI_Main> # # Aliases: Add here as many aliases as you need (with no limit). The format is # Alias fakename realname # <IfModule mod_alias.c>     #     # Note that if you include a trailing / on fakename then the server will     # require it to be present in the URL. So "/icons" isn't aliased in this     # example, only "/icons/". If the fakename is slash-terminated, then the     # realname must also be slash terminated, and if the fakename omits the     # trailing slash, the realname must also omit it.     #     Alias /icons/ "/usr/local/depot/PAPI/apache_1.3.37/icons/"     <Directory "/usr/local/depot/PAPI/apache_1.3.37/icons">         Options Indexes MultiViews         AllowOverride None         Order allow,deny         Allow from all     </Directory>     # This Alias will project the on-line documentation tree under /manual/     # even if you change the DocumentRoot. Comment it if you don't want to     # provide access to the on-line documentation.     #     Alias /manual/ "/usr/local/depot/PAPI/apache_1.3.37/htdocs/manual/"     <Directory "/usr/local/depot/PAPI/apache_1.3.37/htdocs/manual">         Options Indexes FollowSymlinks MultiViews         AllowOverride None         Order allow,deny         Allow from all     </Directory> # alias /papi /home/cpan/httpd/share/http_papi.poa/PAPI.working # <Location /papi > # PerlSendHeader On # PerlAccessHandler PAPI::Main # </Location> # # <Location /manual > # PerlSendHeader On # PerlAccessHandler PAPI::Main # <PAPI_Local> # Server local # PAPI_Filter default # </PAPI_Local> # </Location>     #     # ScriptAlias: This controls which directories contain server scripts.     # ScriptAliases are essentially the same as Aliases, except that     # documents in the realname directory are treated as applications and     # run by the server when requested rather than as documents sent to the client.     # The same rules about trailing "/" apply to ScriptAlias directives as to     # Alias.     #     ScriptAlias /cgi-bin/ "/usr/local/depot/PAPI/apache_1.3.37/cgi-bin/"     ScriptAlias /cgi-papi/ "/usr/local/depot/PAPI/cgi-bin/"     #     # "/usr/local/depot/PAPI/apache_1.3.37/cgi-bin" should be changed to whatever your ScriptAliased     # CGI directory exists, if you have that configured.     #     <Directory "/usr/local/depot/PAPI/apache_1.3.37/cgi-bin">         AllowOverride None         Options None         Order allow,deny         Allow from all     </Directory> </IfModule> # End of aliases. # # Redirect allows you to tell clients about documents which used to exist in # your server's namespace, but do not anymore. This allows you to tell the # clients where to look for the relocated document. # Format: Redirect old-URI new-URL # # # Directives controlling the display of server-generated directory listings. # <IfModule mod_autoindex.c>     #     # FancyIndexing is whether you want fancy directory indexing or standard     #     IndexOptions FancyIndexing     #     # AddIcon* directives tell the server which icon to show for different     # files or filename extensions. These are only displayed for     # FancyIndexed directories.     #     AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip     AddIconByType (TXT,/icons/text.gif) text/*     AddIconByType (IMG,/icons/image2.gif) image/*     AddIconByType (SND,/icons/sound2.gif) audio/*     AddIconByType (VID,/icons/movie.gif) video/*     AddIcon /icons/binary.gif .bin .exe     AddIcon /icons/binhex.gif .hqx     AddIcon /icons/tar.gif .tar     AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv     AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip     AddIcon /icons/a.gif .ps .ai .eps     AddIcon /icons/layout.gif .html .shtml .htm .pdf     AddIcon /icons/text.gif .txt     AddIcon /icons/c.gif .c     AddIcon /icons/p.gif .pl .py     AddIcon /icons/f.gif .for     AddIcon /icons/dvi.gif .dvi     AddIcon /icons/uuencoded.gif .uu     AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl     AddIcon /icons/tex.gif .tex     AddIcon /icons/bomb.gif core     AddIcon /icons/back.gif ..     AddIcon /icons/hand.right.gif README     AddIcon /icons/folder.gif ^^DIRECTORY^^     AddIcon /icons/blank.gif ^^BLANKICON^^     #     # DefaultIcon is which icon to show for files which do not have an icon     # explicitly set.     #     DefaultIcon /icons/unknown.gif     #     # AddDescription allows you to place a short description after a file in     # server-generated indexes. These are only displayed for FancyIndexed     # directories.     # Format: AddDescription "description" filename     #     #AddDescription "GZIP compressed document" .gz     #AddDescription "tar archive" .tar     #AddDescription "GZIP compressed tar archive" .tgz     #     # ReadmeName is the name of the README file the server will look for by     # default, and append to directory listings.     #     # HeaderName is the name of a file which should be prepended to     # directory indexes.     #     ReadmeName README.html     HeaderName HEADER.html     #     # IndexIgnore is a set of filenames which directory indexing should ignore     # and not include in the listing. Shell-style wildcarding is permitted.     #     IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t </IfModule> # End of indexing directives. # # Document types. # <IfModule mod_mime.c>     #     # AddLanguage allows you to specify the language of a document. You can     # then use content negotiation to give a browser a file in a language     # it can understand.     #     # Note 1: The suffix does not have to be the same as the language     # keyword --- those with documents in Polish (whose net-standard     # language code is pl) may wish to use "AddLanguage pl .po" to     # avoid the ambiguity with the common suffix for perl scripts.     #     # Note 2: The example entries below illustrate that in quite     # some cases the two character 'Language' abbreviation is not     # identical to the two character 'Country' code for its country,     # E.g. 'Danmark/dk' versus 'Danish/da'.     #     # Note 3: In the case of 'ltz' we violate the RFC by using a three char     # specifier. But there is 'work in progress' to fix this and get     # the reference data for rfc1766 cleaned up.     #     # Danish (da) - Dutch (nl) - English (en) - Estonian (ee)     # French (fr) - German (de) - Greek-Modern (el)     # Italian (it) - Korean (kr) - Norwegian (no) - Norwegian Nynorsk (nn)     # Portugese (pt) - Luxembourgeois* (ltz)     # Spanish (es) - Swedish (sv) - Catalan (ca) - Czech(cs)     # Polish (pl) - Brazilian Portuguese (pt-br) - Japanese (ja)     # Russian (ru)     #     AddLanguage da .dk     AddLanguage nl .nl     AddLanguage en .en     AddLanguage et .ee     AddLanguage fr .fr     AddLanguage de .de     AddLanguage el .el     AddLanguage he .he     AddCharset ISO-8859-8 .iso8859-8     AddLanguage it .it     AddLanguage ja .ja     AddCharset ISO-2022-JP .jis     AddLanguage kr .kr     AddCharset ISO-2022-KR .iso-kr     AddLanguage nn .nn     AddLanguage no .no     AddLanguage pl .po     AddCharset ISO-8859-2 .iso-pl     AddLanguage pt .pt     AddLanguage pt-br .pt-br     AddLanguage ltz .lu     AddLanguage ca .ca     AddLanguage es .es     AddLanguage sv .sv     AddLanguage cs .cz .cs     AddLanguage ru .ru     AddLanguage zh-TW .zh-tw     AddCharset Big5 .Big5 .big5     AddCharset WINDOWS-1251 .cp-1251     AddCharset CP866 .cp866     AddCharset ISO-8859-5 .iso-ru     AddCharset KOI8-R .koi8-r     AddCharset UCS-2 .ucs2     AddCharset UCS-4 .ucs4     AddCharset UTF-8 .utf8     # LanguagePriority allows you to give precedence to some languages     # in case of a tie during content negotiation.     #     # Just list the languages in decreasing order of preference. We have     # more or less alphabetized them here. You probably want to change this.     #     <IfModule mod_negotiation.c>         LanguagePriority en da nl et fr de el it ja kr no pl pt pt-br ru ltz ca es sv tw     </IfModule>     #     # AddType allows you to tweak mime.types without actually editing it, or to     # make certain files to be certain types.     #     AddType application/x-tar .tgz     #     # AddEncoding allows you to have certain browsers uncompress     # information on the fly. Note: Not all browsers support this.     # Despite the name similarity, the following Add* directives have nothing     # to do with the FancyIndexing customization directives above.     #     AddEncoding x-compress .Z     AddEncoding x-gzip .gz .tgz     #     # If the AddEncoding directives above are commented-out, then you     # probably should define those extensions to indicate media types:     #     #AddType application/x-compress .Z     #AddType application/x-gzip .gz .tgz     #     # AddHandler allows you to map certain file extensions to "handlers",     # actions unrelated to filetype. These can be either built into the server     # or added with the Action command (see below)     #     # If you want to use server side includes, or CGI outside     # ScriptAliased directories, uncomment the following lines.     #     # To use CGI scripts:     #     #AddHandler cgi-script .cgi     #     # To use server-parsed HTML files     #     #AddType text/html .shtml     #AddHandler server-parsed .shtml     #     # Uncomment the following line to enable Apache's send-asis HTTP file     # feature     #     #AddHandler send-as-is asis     #     # If you wish to use server-parsed imagemap files, use     #     #AddHandler imap-file map     #     # To enable type maps, you might want to use     #     #AddHandler type-map var </IfModule> # End of document types. # # Action lets you define media types that will execute a script whenever # a matching file is called. This eliminates the need for repeated URL # pathnames for oft-used CGI file processors. # Format: Action media/type /cgi-script/location # Format: Action handler-name /cgi-script/location # # # MetaDir: specifies the name of the directory in which Apache can find # meta information files. These files contain additional HTTP headers # to include when sending the document # #MetaDir .web # # MetaSuffix: specifies the file name suffix for the file containing the # meta information. # #MetaSuffix .meta # # Customizable error response (Apache style) # these come in three flavors # # 1) plain text #ErrorDocument 500 "The server made a boo boo. # n.b. the single leading (") marks it as text, it does not get output # # 2) local redirects #ErrorDocument 404 /missing.html # to redirect to local URL /missing.html #ErrorDocument 404 /cgi-bin/missing_handler.pl # N.B.: You can redirect to a script or a document using server-side-includes. # # 3) external redirects #ErrorDocument 402 http://www.example.com/subscription_info.html # N.B.: Many of the environment variables associated with the original # request will *not* be available to such a script. # # Customize behaviour based on the browser # <IfModule mod_setenvif.c>     #     # The following directives modify normal HTTP response behavior.     # The first directive disables keepalive for Netscape 2.x and browsers that     # spoof it. There are known problems with these browser implementations.     # The second directive is for Microsoft Internet Explorer 4.0b2     # which has a broken HTTP/1.1 implementation and does not properly     # support keepalive when it is used on 301 or 302 (redirect) responses.     #     BrowserMatch "Mozilla/2" nokeepalive     BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0     #     # The following directive disables HTTP/1.1 responses to browsers which     # are in violation of the HTTP/1.0 spec by not being able to grok a     # basic 1.1 response.     #     BrowserMatch "RealPlayer 4\.0" force-response-1.0     BrowserMatch "Java/1\.0" force-response-1.0     BrowserMatch "JDK/1\.0" force-response-1.0 </IfModule> # End of browser customization directives # # Allow server status reports, with the URL of http://servername/server-status # Change the ".example.com" to match your domain to enable. # #<Location /server-status> # SetHandler server-status # Order deny,allow # Deny from all # Allow from .example.com #</Location> # # Allow remote server configuration reports, with the URL of # http://servername/server-info (requires that mod_info.c be loaded). # Change the ".example.com" to match your domain to enable. # #<Location /server-info> # SetHandler server-info # Order deny,allow # Deny from all # Allow from .example.com #</Location> # # There have been reports of people trying to abuse an old bug from pre-1.1 # days. This bug involved a CGI script distributed as a part of Apache. # By uncommenting these lines you can redirect these attacks to a logging # script on phf.apache.org. Or, you can record them yourself, using the script # support/phf_abuse_log.cgi. # #<Location /cgi-bin/phf*> # Deny from all # ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi #</Location> ### Section 3: Virtual Hosts # # VirtualHost: If you want to maintain multiple domains/hostnames on your # machine you can setup VirtualHost containers for them. Most configurations # use only name-based virtual hosts so the server doesn't need to worry about # IP addresses. This is indicated by the asterisks in the directives below. # # Please see the documentation at <URL:http://www.apache.org/docs/vhosts/> # for further details before you try to setup virtual hosts. # # You may use the command line option '-S' to verify your virtual host # configuration. # # Use name-based virtual hosting. # #NameVirtualHost *:80 # # VirtualHost example: # Almost any Apache directive may go into a VirtualHost container. # The first VirtualHost section is used for requests without a known # server name. # #<VirtualHost *:80> # ServerAdmin [log in para visualizar] # DocumentRoot /www/docs/dummy-host.example.com # ServerName dummy-host.example.com # ErrorLog logs/dummy-host.example.com-error_log # CustomLog logs/dummy-host.example.com-access_log common #</VirtualHost>
## ## http_papi.poa.conf -- Apache HTTP server configuration file ## # # Based upon the NCSA server configuration files originally by Rob McCool. # # This is the main Apache server configuration file. It contains the # configuration directives that give the server its instructions. # See <URL:http://httpd.apache.org/docs/> for detailed information about # the directives. # # Do NOT simply read the instructions in here without understanding # what they do. They're here only as hints or reminders. If you are unsure # consult the online docs. You have been warned. # # After this file is processed, the server will look for and process # /usr/local/depot/PAPI/apache_1.3.37/conf/srm.conf and then /usr/local/depot/PAPI/apache_1.3.37/conf/access.conf # unless you have overridden these with ResourceConfig and/or # AccessConfig directives here. # # The configuration directives are grouped into three basic sections: # 1. Directives that control the operation of the Apache server process as a # whole (the 'global environment'). # 2. Directives that define the parameters of the 'main' or 'default' server, # which responds to requests that aren't handled by a virtual host. # These directives also provide default values for the settings # of all virtual hosts. # 3. Settings for virtual hosts, which allow Web requests to be sent to # different IP addresses or hostnames and have them handled by the # same Apache server process. # # Configuration and logfile names: If the filenames you specify for many # of the server's control files begin with "/" (or "drive:/" for Win32), the # server will use that explicit path. If the filenames do *not* begin # with "/", the value of ServerRoot is prepended -- so "logs/foo.log" # with ServerRoot set to "/usr/local/apache" will be interpreted by the # server as "/usr/local/apache/logs/foo.log". # ### Section 1: Global Environment # # The directives in this section affect the overall operation of Apache, # such as the number of concurrent requests it can handle or where it # can find its configuration files. # # # ServerType is either inetd, or standalone. Inetd mode is only supported on # Unix platforms. # ServerType standalone # # ServerRoot: The top of the directory tree under which the server's # configuration, error, and log files are kept. # # NOTE! If you intend to place this on an NFS (or otherwise network) # mounted filesystem then please read the LockFile documentation # (available at <URL:http://www.apache.org/docs/mod/core.html#lockfile>); # you will save yourself a lot of trouble. # ServerRoot "/usr/local/depot/PAPI/apache_1.3.37" # # The LockFile directive sets the path to the lockfile used when Apache # is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or # USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at # its default value. The main reason for changing it is if the logs # directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL # DISK. The PID of the main server process is automatically appended to # the filename. # #LockFile /usr/local/depot/PAPI/apache_1.3.37/run/http_papi.poa.lock # # PidFile: The file in which the server should record its process # identification number when it starts. # PidFile /usr/local/depot/PAPI/apache_1.3.37/run/http_papi.poa.pid # # ScoreBoardFile: File used to store internal server process information. # Not all architectures require this. But if yours does (you'll know because # this file will be created when you run Apache) then you *must* ensure that # no two invocations of Apache share the same scoreboard file. # ScoreBoardFile /usr/local/depot/PAPI/apache_1.3.37/run/http_papi.poa.scoreboard PassEnv PERL5LIB SetEnv PERL5LIB $PERL5LIB:/usr/local/PERL5:/usr/local/depot/PAPI # # In the standard configuration, the server will process http_papi.poa.conf (this # file, specified by the -f command line option), srm.conf, and access.conf # in that order. The latter two files are now distributed empty, as it is # recommended that all directives be kept in a single file for simplicity. # The commented-out values below are the built-in defaults. You can have the # server ignore these files altogether by using "/dev/null" (for Unix) or # "nul" (for Win32) for the arguments to the directives. # #ResourceConfig /usr/local/depot/PAPI/apache_1.3.37/conf/srm.conf #AccessConfig /usr/local/depot/PAPI/apache_1.3.37/conf/access.conf # # Timeout: The number of seconds before receives and sends time out. # Timeout 300 # # KeepAlive: Whether or not to allow persistent connections (more than # one request per connection). Set to "Off" to deactivate. # KeepAlive On # # MaxKeepAliveRequests: The maximum number of requests to allow # during a persistent connection. Set to 0 to allow an unlimited amount. # We recommend you leave this number high, for maximum performance. # MaxKeepAliveRequests 100 # # KeepAliveTimeout: Number of seconds to wait for the next request from the # same client on the same connection. # KeepAliveTimeout 15 # # Server-pool size regulation. Rather than making you guess how many # server processes you need, Apache dynamically adapts to the load it # sees --- that is, it tries to maintain enough server processes to # handle the current load, plus a few spare servers to handle transient # load spikes (e.g., multiple simultaneous requests from a single # Netscape browser). # # It does this by periodically checking how many servers are waiting # for a request. If there are fewer than MinSpareServers, it creates # a new spare. If there are more than MaxSpareServers, some of the # spares die off. The default values are probably OK for most sites. # MinSpareServers 5 MaxSpareServers 10 # # Number of servers to start initially --- should be a reasonable ballpark # figure. # StartServers 5 # # Limit on total number of servers running, i.e., limit on the number # of clients who can simultaneously connect --- if this limit is ever # reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW. # It is intended mainly as a brake to keep a runaway server from taking # the system with it as it spirals down... # MaxClients 150 # # MaxRequestsPerChild: the number of requests each child process is # allowed to process before the child dies. The child will exit so # as to avoid problems after prolonged use when Apache (and maybe the # libraries it uses) leak memory or other resources. On most systems, this # isn't really needed, but a few (such as Solaris) do have notable leaks # in the libraries. For these platforms, set to something like 10000 # or so; a setting of 0 means unlimited. # # NOTE: This value does not include keepalive requests after the initial # request per connection. For example, if a child process handles # an initial request and 10 subsequent "keptalive" requests, it # would only count as 1 request towards this limit. # MaxRequestsPerChild 0 # # Listen: Allows you to bind Apache to specific IP addresses and/or # ports, instead of the default. See also the <VirtualHost> # directive. # #Listen 3000 #Listen 12.34.56.78:80 # # BindAddress: You can support virtual hosts with this option. This directive # is used to tell the server which IP address to listen to. It can either # contain "*", an IP address, or a fully qualified Internet domain name. # See also the <VirtualHost> and Listen directives. # #BindAddress * # # Dynamic Shared Object (DSO) Support # # To be able to use the functionality of a module which was built as a DSO you # have to place corresponding `LoadModule' lines at this location so the # directives contained in it are actually available _before_ they are used. # Please read the file http://httpd.apache.org/docs/dso.html for more # details about the DSO mechanism and run `httpd -l' for the list of already # built-in (statically linked and thus always available) modules in your httpd # binary. # # Note: The order in which modules are loaded is important. Don't change # the order below without expert advice. # # Example: # LoadModule foo_module libexec/mod_foo.so # # ExtendedStatus controls whether Apache will generate "full" status # information (ExtendedStatus On) or just basic information (ExtendedStatus # Off) when the "server-status" handler is called. The default is Off. # #ExtendedStatus On ### Section 2: 'Main' server configuration # # The directives in this section set up the values used by the 'main' # server, which responds to any requests that aren't handled by a # <VirtualHost> definition. These values also provide defaults for # any <VirtualHost> containers you may define later in the file. # # All of these directives may appear inside <VirtualHost> containers, # in which case these default settings will be overridden for the # virtual host being defined. # # # If your ServerType directive (set earlier in the 'Global Environment' # section) is set to "inetd", the next few directives don't have any # effect since their settings are defined by the inetd configuration. # Skip ahead to the ServerAdmin directive. # # # Port: The port to which the standalone server listens. For # ports < 1023, you will need httpd to be run as root initially. # Port 8088 # # If you wish httpd to run as a different user or group, you must run # httpd as root initially and it will switch. # # User/Group: The name (or #number) of the user/group to run httpd as. # . On SCO (ODT 3) use "User nouser" and "Group nogroup". # . On HPUX you may not be able to use shared memory as nobody, and the # suggested workaround is to create a user www and use that user. # NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET) # when the value of (unsigned)Group is above 60000; # don't use Group "#-1" on these systems! # User nobody Group nobody # # ServerAdmin: Your address, where problems with the server should be # e-mailed. This address appears on some server-generated pages, such # as error documents. # ServerAdmin [log in para visualizar] # # ServerName allows you to set a host name which is sent back to clients for # your server if it's different than the one the program would get (i.e., use # "www" instead of the host's real name). # # Note: You cannot just invent host names and hope they work. The name you # define here must be a valid DNS name for your host. If you don't understand # this, ask your network administrator. # If your host doesn't have a registered DNS name, enter its IP address here. # You will have to access it by its address (e.g., http://123.45.67.89/) # anyway, and this will make redirections work in a sensible way. # # 127.0.0.1 is the TCP/IP local loop-back address, often named localhost. Your # machine always knows itself by this address. If you use Apache strictly for # local testing and development, you may use 127.0.0.1 as the server name. # #ServerName www.example.com # # DocumentRoot: The directory out of which you will serve your # documents. By default, all requests are taken from this directory, but # symbolic links and aliases may be used to point to other locations. # DocumentRoot "/usr/local/depot/PAPI/apache_1.3.37/htdocs" # # Each directory to which Apache has access, can be configured with respect # to which services and features are allowed and/or disabled in that # directory (and its subdirectories). # # First, we configure the "default" to be a very restrictive set of # permissions. # <Directory />     Options FollowSymLinks     AllowOverride None </Directory> # # Note that from this point forward you must specifically allow # particular features to be enabled - so if something's not working as # you might expect, make sure that you have specifically enabled it # below. # # # This should be changed to whatever you set DocumentRoot to. # <Directory "/usr/local/depot/PAPI/apache_1.3.37/htdocs"> # # This may also be "None", "All", or any combination of "Indexes", # "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews". # # Note that "MultiViews" must be named *explicitly* --- "Options All" # doesn't give it to you. #     Options Indexes FollowSymLinks MultiViews # # This controls which options the .htaccess files in directories can # override. Can also be "All", or any combination of "Options", "FileInfo", # "AuthConfig", and "Limit" #     AllowOverride None # # Controls who can get stuff from this server. #     Order allow,deny     Allow from all </Directory> # # UserDir: The name of the directory which is appended onto a user's home # directory if a ~user request is received. # <IfModule mod_userdir.c>     UserDir public_html </IfModule> # # Control access to UserDir directories. The following is an example # for a site where these directories are restricted to read-only. # #<Directory /home/*/public_html> # AllowOverride FileInfo AuthConfig Limit # Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec # <Limit GET POST OPTIONS PROPFIND> # Order allow,deny # Allow from all # </Limit> # <LimitExcept GET POST OPTIONS PROPFIND> # Order deny,allow # Deny from all # </LimitExcept> #</Directory> # # DirectoryIndex: Name of the file or files to use as a pre-written HTML # directory index. Separate multiple entries with spaces. # <IfModule mod_dir.c>     DirectoryIndex index.html </IfModule> # # AccessFileName: The name of the file to look for in each directory # for access control information. # AccessFileName .htaccess # # The following lines prevent .htaccess files from being viewed by # Web clients. Since .htaccess files often contain authorization # information, access is disallowed for security reasons. Comment # these lines out if you want Web visitors to see the contents of # .htaccess files. If you change the AccessFileName directive above, # be sure to make the corresponding changes here. # # Also, folks tend to use names such as .htpasswd for password # files, so this will protect those as well. # <Files ~ "^\.ht">     Order allow,deny     Deny from all     Satisfy All </Files> # # CacheNegotiatedDocs: By default, Apache sends "Pragma: no-cache" with each # document that was negotiated on the basis of content. This asks proxy # servers not to cache the document. Uncommenting the following line disables # this behavior, and proxies will be allowed to cache the documents. # #CacheNegotiatedDocs # # UseCanonicalName: (new for 1.3) With this setting turned on, whenever # Apache needs to construct a self-referencing URL (a URL that refers back # to the server the response is coming from) it will use ServerName and # Port to form a "canonical" name. With this setting off, Apache will # use the hostname:port that the client supplied, when possible. This # also affects SERVER_NAME and SERVER_PORT in CGI scripts. # UseCanonicalName On # # TypesConfig describes where the mime.types file (or equivalent) is # to be found. # <IfModule mod_mime.c>     TypesConfig /usr/local/depot/PAPI/apache_1.3.37/conf/mime.types </IfModule> # # DefaultType is the default MIME type the server will use for a document # if it cannot otherwise determine one, such as from filename extensions. # If your server contains mostly text or HTML documents, "text/plain" is # a good value. If most of your content is binary, such as applications # or images, you may want to use "application/octet-stream" instead to # keep browsers from trying to display binary files as though they are # text. # DefaultType text/plain # # The mod_mime_magic module allows the server to use various hints from the # contents of the file itself to determine its type. The MIMEMagicFile # directive tells the module where the hint definitions are located. # mod_mime_magic is not part of the default server (you have to add # it yourself with a LoadModule [see the DSO paragraph in the 'Global # Environment' section], or recompile the server and include mod_mime_magic # as part of the configuration), so it's enclosed in an <IfModule> container. # This means that the MIMEMagicFile directive will only be processed if the # module is part of the server. # <IfModule mod_mime_magic.c>     MIMEMagicFile /usr/local/depot/PAPI/apache_1.3.37/conf/magic </IfModule> # # HostnameLookups: Log the names of clients or just their IP addresses # e.g., www.apache.org (on) or 204.62.129.132 (off). # The default is off because it'd be overall better for the net if people # had to knowingly turn this feature on, since enabling it means that # each client request will result in AT LEAST one lookup request to the # nameserver. # HostnameLookups Off # # ErrorLog: The location of the error log file. # If you do not specify an ErrorLog directive within a <VirtualHost> # container, error messages relating to that virtual host will be # logged here. If you *do* define an error logfile for a <VirtualHost> # container, that host's errors will be logged there and not here. # ErrorLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi.poa_error_log # # LogLevel: Control the number of messages logged to the error_log. # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. # LogLevel warn # # The following directives define some format nicknames for use with # a CustomLog directive (see below). # LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined LogFormat "%h %l %u %t \"%r\" %>s %b" common LogFormat "%{Referer}i -> %U" referer LogFormat "%{User-agent}i" agent # # The location and format of the access logfile (Common Logfile Format). # If you do not define any access logfiles within a <VirtualHost> # container, they will be logged here. Contrariwise, if you *do* # define per-<VirtualHost> access logfiles, transactions will be # logged therein and *not* in this file. # CustomLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi.poa_access_log common # # If you would like to have agent and referer logfiles, uncomment the # following directives. # #CustomLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi.poa_referer_log referer #CustomLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi.poa_agent_log agent # # If you prefer a single logfile with access, agent, and referer information # (Combined Logfile Format) you can use the following directive. # #CustomLog /usr/local/depot/PAPI/apache_1.3.37/log/http_papi.poa_access_log combined # # Optionally add a line containing the server version and virtual host # name to server-generated pages (error documents, FTP directory listings, # mod_status and mod_info output etc., but not CGI generated documents). # Set to "EMail" to also include a mailto: link to the ServerAdmin. # Set to one of: On | Off | EMail # ServerSignature On # EBCDIC configuration: # (only for mainframes using the EBCDIC codeset, currently one of: # Fujitsu-Siemens' BS2000/OSD, IBM's OS/390 and IBM's TPF)!! # The following default configuration assumes that "text files" # are stored in EBCDIC (so that you can operate on them using the # normal POSIX tools like grep and sort) while "binary files" are # stored with identical octets as on an ASCII machine. # # The directives are evaluated in configuration file order, with # the EBCDICConvert directives applied before EBCDICConvertByType. # # If you want to have ASCII HTML documents and EBCDIC HTML documents # at the same time, you can use the file extension to force # conversion off for the ASCII documents: # > AddType text/html .ahtml # > EBCDICConvert Off=InOut .ahtml # # EBCDICConvertByType On=InOut text/* message/* multipart/* # EBCDICConvertByType On=In application/x-www-form-urlencoded # EBCDICConvertByType On=InOut application/postscript model/vrml # EBCDICConvertByType Off=InOut */* # kpur://2007-02-01 #Pubkeys_Path /usr/local/depot/PAPI/AS/etc/foo-as_pubkey.pem PerlModule PAPI::Conf <PAPI_Main>   HKEY_File /usr/local/depot/PAPI/AS/etc/hkey   LKEY_File /usr/local/depot/PAPI/AS/etc/lkey   Hcook_DB /usr/local/depot/PAPI/AS/etc/hcookdb   Server bar-poa   PAPI_AS foo-as http://jactest-3:8085/cgi-papi/AuthServer MY_AS   Pubkeys_Path /usr/local/depot/PAPI/AS/etc   Lcook_Timeout 1800   CRC_Timeout 1800   URL_Timeout 1800   Debug 1   Accept_File /usr/local/depot/PAPI/apache_1.3.37/icons/ball.red.png   Reject_File /usr/local/depot/PAPI/apache_1.3.37/icons/ball.gray.png   Auth_Location PAPI/cookie_handler.cgi   Debug 1 </PAPI_Main> # Domain jet.uk # # Aliases: Add here as many aliases as you need (with no limit). The format is # Alias fakename realname # <IfModule mod_alias.c>     #     # Note that if you include a trailing / on fakename then the server will     # require it to be present in the URL. So "/icons" isn't aliased in this     # example, only "/icons/". If the fakename is slash-terminated, then the     # realname must also be slash terminated, and if the fakename omits the     # trailing slash, the realname must also omit it.     #     Alias /icons/ "/usr/local/depot/PAPI/apache_1.3.37/icons/"     <Directory "/usr/local/depot/PAPI/apache_1.3.37/icons">         Options Indexes MultiViews         AllowOverride None         Order allow,deny         Allow from all     </Directory>     # This Alias will project the on-line documentation tree under /manual/     # even if you change the DocumentRoot. Comment it if you don't want to     # provide access to the on-line documentation.     #     Alias /manual/ "/usr/local/depot/PAPI/apache_1.3.37/htdocs/manual/"     <Directory "/usr/local/depot/PAPI/apache_1.3.37/htdocs/manual">         Options Indexes FollowSymlinks MultiViews         AllowOverride None         Order allow,deny         Allow from all     </Directory>     alias /papi /usr/local/depot/PAPI/AS/etc/     <Location /papi >      PerlSendHeader On      PerlAccessHandler PAPI::Main     </Location>     <Location /manual > PerlSendHeader On PerlAccessHandler PAPI::Main <PAPI_Local> Server local PAPI_Filter default </PAPI_Local>     </Location>     #     # ScriptAlias: This controls which directories contain server scripts.     # ScriptAliases are essentially the same as Aliases, except that     # documents in the realname directory are treated as applications and     # run by the server when requested rather than as documents sent to the client.     # The same rules about trailing "/" apply to ScriptAlias directives as to     # Alias.     #     ScriptAlias /cgi-bin/ "/usr/local/depot/PAPI/apache_1.3.37/cgi-bin/"     ScriptAlias /cgi-papi/ "/usr/local/depot/PAPI/cgi-bin/"     #     # "/usr/local/depot/PAPI/apache_1.3.37/cgi-bin" should be changed to whatever your ScriptAliased     # CGI directory exists, if you have that configured.     #     <Directory "/usr/local/depot/PAPI/apache_1.3.37/cgi-bin">         AllowOverride None         Options None         Order allow,deny         Allow from all     </Directory> </IfModule> # End of aliases. # # Redirect allows you to tell clients about documents which used to exist in # your server's namespace, but do not anymore. This allows you to tell the # clients where to look for the relocated document. # Format: Redirect old-URI new-URL # # # Directives controlling the display of server-generated directory listings. # <IfModule mod_autoindex.c>     #     # FancyIndexing is whether you want fancy directory indexing or standard     #     IndexOptions FancyIndexing     #     # AddIcon* directives tell the server which icon to show for different     # files or filename extensions. These are only displayed for     # FancyIndexed directories.     #     AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip     AddIconByType (TXT,/icons/text.gif) text/*     AddIconByType (IMG,/icons/image2.gif) image/*     AddIconByType (SND,/icons/sound2.gif) audio/*     AddIconByType (VID,/icons/movie.gif) video/*     AddIcon /icons/binary.gif .bin .exe     AddIcon /icons/binhex.gif .hqx     AddIcon /icons/tar.gif .tar     AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv     AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip     AddIcon /icons/a.gif .ps .ai .eps     AddIcon /icons/layout.gif .html .shtml .htm .pdf     AddIcon /icons/text.gif .txt     AddIcon /icons/c.gif .c     AddIcon /icons/p.gif .pl .py     AddIcon /icons/f.gif .for     AddIcon /icons/dvi.gif .dvi     AddIcon /icons/uuencoded.gif .uu     AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl     AddIcon /icons/tex.gif .tex     AddIcon /icons/bomb.gif core     AddIcon /icons/back.gif ..     AddIcon /icons/hand.right.gif README     AddIcon /icons/folder.gif ^^DIRECTORY^^     AddIcon /icons/blank.gif ^^BLANKICON^^     #     # DefaultIcon is which icon to show for files which do not have an icon     # explicitly set.     #     DefaultIcon /icons/unknown.gif     #     # AddDescription allows you to place a short description after a file in     # server-generated indexes. These are only displayed for FancyIndexed     # directories.     # Format: AddDescription "description" filename     #     #AddDescription "GZIP compressed document" .gz     #AddDescription "tar archive" .tar     #AddDescription "GZIP compressed tar archive" .tgz     #     # ReadmeName is the name of the README file the server will look for by     # default, and append to directory listings.     #     # HeaderName is the name of a file which should be prepended to     # directory indexes.     #     ReadmeName README.html     HeaderName HEADER.html     #     # IndexIgnore is a set of filenames which directory indexing should ignore     # and not include in the listing. Shell-style wildcarding is permitted.     #     IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t </IfModule> # End of indexing directives. # # Document types. # <IfModule mod_mime.c>     #     # AddLanguage allows you to specify the language of a document. You can     # then use content negotiation to give a browser a file in a language     # it can understand.     #     # Note 1: The suffix does not have to be the same as the language     # keyword --- those with documents in Polish (whose net-standard     # language code is pl) may wish to use "AddLanguage pl .po" to     # avoid the ambiguity with the common suffix for perl scripts.     #     # Note 2: The example entries below illustrate that in quite     # some cases the two character 'Language' abbreviation is not     # identical to the two character 'Country' code for its country,     # E.g. 'Danmark/dk' versus 'Danish/da'.     #     # Note 3: In the case of 'ltz' we violate the RFC by using a three char     # specifier. But there is 'work in progress' to fix this and get     # the reference data for rfc1766 cleaned up.     #     # Danish (da) - Dutch (nl) - English (en) - Estonian (ee)     # French (fr) - German (de) - Greek-Modern (el)     # Italian (it) - Korean (kr) - Norwegian (no) - Norwegian Nynorsk (nn)     # Portugese (pt) - Luxembourgeois* (ltz)     # Spanish (es) - Swedish (sv) - Catalan (ca) - Czech(cs)     # Polish (pl) - Brazilian Portuguese (pt-br) - Japanese (ja)     # Russian (ru)     #     AddLanguage da .dk     AddLanguage nl .nl     AddLanguage en .en     AddLanguage et .ee     AddLanguage fr .fr     AddLanguage de .de     AddLanguage el .el     AddLanguage he .he     AddCharset ISO-8859-8 .iso8859-8     AddLanguage it .it     AddLanguage ja .ja     AddCharset ISO-2022-JP .jis     AddLanguage kr .kr     AddCharset ISO-2022-KR .iso-kr     AddLanguage nn .nn     AddLanguage no .no     AddLanguage pl .po     AddCharset ISO-8859-2 .iso-pl     AddLanguage pt .pt     AddLanguage pt-br .pt-br     AddLanguage ltz .lu     AddLanguage ca .ca     AddLanguage es .es     AddLanguage sv .sv     AddLanguage cs .cz .cs     AddLanguage ru .ru     AddLanguage zh-TW .zh-tw     AddCharset Big5 .Big5 .big5     AddCharset WINDOWS-1251 .cp-1251     AddCharset CP866 .cp866     AddCharset ISO-8859-5 .iso-ru     AddCharset KOI8-R .koi8-r     AddCharset UCS-2 .ucs2     AddCharset UCS-4 .ucs4     AddCharset UTF-8 .utf8     # LanguagePriority allows you to give precedence to some languages     # in case of a tie during content negotiation.     #     # Just list the languages in decreasing order of preference. We have     # more or less alphabetized them here. You probably want to change this.     #     <IfModule mod_negotiation.c>         LanguagePriority en da nl et fr de el it ja kr no pl pt pt-br ru ltz ca es sv tw     </IfModule>     #     # AddType allows you to tweak mime.types without actually editing it, or to     # make certain files to be certain types.     #     AddType application/x-tar .tgz     #     # AddEncoding allows you to have certain browsers uncompress     # information on the fly. Note: Not all browsers support this.     # Despite the name similarity, the following Add* directives have nothing     # to do with the FancyIndexing customization directives above.     #     AddEncoding x-compress .Z     AddEncoding x-gzip .gz .tgz     #     # If the AddEncoding directives above are commented-out, then you     # probably should define those extensions to indicate media types:     #     #AddType application/x-compress .Z     #AddType application/x-gzip .gz .tgz     #     # AddHandler allows you to map certain file extensions to "handlers",     # actions unrelated to filetype. These can be either built into the server     # or added with the Action command (see below)     #     # If you want to use server side includes, or CGI outside     # ScriptAliased directories, uncomment the following lines.     #     # To use CGI scripts:     #     #AddHandler cgi-script .cgi     #     # To use server-parsed HTML files     #     #AddType text/html .shtml     #AddHandler server-parsed .shtml     #     # Uncomment the following line to enable Apache's send-asis HTTP file     # feature     #     #AddHandler send-as-is asis     #     # If you wish to use server-parsed imagemap files, use     #     #AddHandler imap-file map     #     # To enable type maps, you might want to use     #     #AddHandler type-map var </IfModule> # End of document types. # # Action lets you define media types that will execute a script whenever # a matching file is called. This eliminates the need for repeated URL # pathnames for oft-used CGI file processors. # Format: Action media/type /cgi-script/location # Format: Action handler-name /cgi-script/location # # # MetaDir: specifies the name of the directory in which Apache can find # meta information files. These files contain additional HTTP headers # to include when sending the document # #MetaDir .web # # MetaSuffix: specifies the file name suffix for the file containing the # meta information. # #MetaSuffix .meta # # Customizable error response (Apache style) # these come in three flavors # # 1) plain text #ErrorDocument 500 "The server made a boo boo. # n.b. the single leading (") marks it as text, it does not get output # # 2) local redirects #ErrorDocument 404 /missing.html # to redirect to local URL /missing.html #ErrorDocument 404 /cgi-bin/missing_handler.pl # N.B.: You can redirect to a script or a document using server-side-includes. # # 3) external redirects #ErrorDocument 402 http://www.example.com/subscription_info.html # N.B.: Many of the environment variables associated with the original # request will *not* be available to such a script. # # Customize behaviour based on the browser # <IfModule mod_setenvif.c>     #     # The following directives modify normal HTTP response behavior.     # The first directive disables keepalive for Netscape 2.x and browsers that     # spoof it. There are known problems with these browser implementations.     # The second directive is for Microsoft Internet Explorer 4.0b2     # which has a broken HTTP/1.1 implementation and does not properly     # support keepalive when it is used on 301 or 302 (redirect) responses.     #     BrowserMatch "Mozilla/2" nokeepalive     BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0     #     # The following directive disables HTTP/1.1 responses to browsers which     # are in violation of the HTTP/1.0 spec by not being able to grok a     # basic 1.1 response.     #     BrowserMatch "RealPlayer 4\.0" force-response-1.0     BrowserMatch "Java/1\.0" force-response-1.0     BrowserMatch "JDK/1\.0" force-response-1.0 </IfModule> # End of browser customization directives # # Allow server status reports, with the URL of http://servername/server-status # Change the ".example.com" to match your domain to enable. # #<Location /server-status> # SetHandler server-status # Order deny,allow # Deny from all # Allow from .example.com #</Location> # # Allow remote server configuration reports, with the URL of # http://servername/server-info (requires that mod_info.c be loaded). # Change the ".example.com" to match your domain to enable. # #<Location /server-info> # SetHandler server-info # Order deny,allow # Deny from all # Allow from .example.com #</Location> # # There have been reports of people trying to abuse an old bug from pre-1.1 # days. This bug involved a CGI script distributed as a part of Apache. # By uncommenting these lines you can redirect these attacks to a logging # script on phf.apache.org. Or, you can record them yourself, using the script # support/phf_abuse_log.cgi. # #<Location /cgi-bin/phf*> # Deny from all # ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi #</Location> ### Section 3: Virtual Hosts # # VirtualHost: If you want to maintain multiple domains/hostnames on your # machine you can setup VirtualHost containers for them. Most configurations # use only name-based virtual hosts so the server doesn't need to worry about # IP addresses. This is indicated by the asterisks in the directives below. # # Please see the documentation at <URL:http://www.apache.org/docs/vhosts/> # for further details before you try to setup virtual hosts. # # You may use the command line option '-S' to verify your virtual host # configuration. # # Use name-based virtual hosting. # #NameVirtualHost *:80 # # VirtualHost example: # Almost any Apache directive may go into a VirtualHost container. # The first VirtualHost section is used for requests without a known # server name. # #<VirtualHost *:80> # ServerAdmin [log in para visualizar] # DocumentRoot /www/docs/dummy-host.example.com # ServerName dummy-host.example.com # ErrorLog logs/dummy-host.example.com-error_log # CustomLog logs/dummy-host.example.com-access_log common #</VirtualHost>

ATOM RSS1 RSS2