On Sat, May 18, 2013 at 10:52 PM, <[email protected]> wrote:
> >>
> > ... reading the page you reference, you probably want to change the lines
> >
> > Order Deny,Allow
> > Allow from 127.0.0.1
> > Allow from localhost
> >
> > to
> >
> > Require ip 127.0.0.1
> > Require host localhost
> >
> >
> > Also the install script install.sh might want to check apache versions
> >> unless I missed something.
> >>
> >>
> > It looks like you shouldn't need to find any other configuration issues,
> > if
> > I'm reading the page correctly. You'll need to enable/load the modules
> > mod_authz_host and mod_authz_core, though for the above to work.
> >
> > At first I didn't understand why the install.sh should be changed, but
> you
> > mean to detect the version and pick the right configuration file to
> > install?
> >
> >
> >> http://httpd.apache.org/docs/2.4/upgrading.html
> >>
> >>
> >
> > Thanks for your report!
> >
> Thanks yes.
> I am looking into updating the Gentoo ebuild to possible call a modified
> version of that script.
>
> Here is what I got working:
> ##
> #Ledgersmb-1.4 config for apache2 2.4 series
> ##
> <Directory /var/www/localhost/htdocs/ledgersmb-1.4/>
>
> # Rewrite rule to allow HTTP Authorization information to the scripts
> only
> # from this directory.
> RewriteEngine On
>
> # Redirect the /ledgersmb and /ledgersmb/ URL paths to
> # the true login script: /ledgersmb/login.pl
> RewriteRule ^/ledgersmb/?$ /ledgersmb/login.pl [R]
>
> # Indicate that the HTTP Authorization data should be passed
> # to the CGI scripts running from this directory
> RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
>
> AllowOverride All
> AddHandler cgi-script .pl
> Options ExecCGI Includes FollowSymlinks
> Require ip 127.0.0.1
> Require host localhost
> Require all denied
> #Require all granted #for testing
>
> # Prevent unauthorized access to configuration
> # and access control files
> <Files ~ "\.conf$">
> Require all denied
> </Files>
> </Directory>
>
>
[ ... ]
Thanks for the submission! I'll send a second configuration file to the
repository in a bit.
Bye,
Erik.
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Ledger-smb-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ledger-smb-devel
