[deployment-guide/comm-rel: 454/727] Removed the Apache HTTP Server Configuration section.
Jaromir Hradilek
jhradile at fedoraproject.org
Tue Oct 19 13:03:01 UTC 2010
commit 927dc7388da45cc5a79ad613d300176eca7ffe75
Author: Jaromir Hradilek <jhradile at redhat.com>
Date: Mon Aug 23 14:50:46 2010 +0200
Removed the Apache HTTP Server Configuration section.
The system-config-httpd utility is no longer present in Red Hat
Enterprise Linux 6.
en-US/The_Apache_HTTP_Server.xml | 540 --------------------------------------
1 files changed, 0 insertions(+), 540 deletions(-)
---
diff --git a/en-US/The_Apache_HTTP_Server.xml b/en-US/The_Apache_HTTP_Server.xml
index b6b9145..37156af 100644
--- a/en-US/The_Apache_HTTP_Server.xml
+++ b/en-US/The_Apache_HTTP_Server.xml
@@ -17,12 +17,6 @@
<para>
The default configuration file installed with the Apache HTTP Server works without alteration for most situations. This chapter outlines many of the directives found within its configuration file (<filename>/etc/httpd/conf/httpd.conf</filename>) to aid those who require a custom configuration or need to convert a configuration file from the older Apache HTTP Server 1.3 format.
</para>
- <warning>
- <title>Warning</title>
- <para>
- If using the graphical <application>HTTP Configuration Tool</application> (<emphasis>system-config-httpd </emphasis>), <emphasis>do not</emphasis> hand edit the Apache HTTP Server's configuration file as the <application>HTTP Configuration Tool</application> regenerates this file whenever it is used.
- </para>
- </warning>
<section id="s1-httpd-v2">
<title>Apache HTTP Server 2.2</title>
<para>
@@ -209,540 +203,6 @@ or:
</para>
</note>
</section>
- <section id="s1-apache-config-ui">
- <title>Apache HTTP Server Configuration</title>
- <indexterm>
- <primary><command>httpd</command></primary>
- </indexterm>
- <indexterm>
- <primary><command>system-config-httpd</command></primary>
- <see>HTTP Configuration Tool</see>
- </indexterm>
- <para>
- The <application>HTTP Configuration Tool</application> allows you to configure the <filename>/etc/httpd/conf/httpd.conf</filename> configuration file for the Apache HTTP Server. It does not use the old <filename>srm.conf</filename> or <filename>access.conf</filename> configuration files; leave them empty. Through the graphical interface, you can configure directives such as virtual hosts, logging attributes, and maximum number of connections. To start the HTTD Configuration Tool, click on <filename>System > Administration > Server Settings > HTTP</filename>.
- </para>
- <indexterm>
- <primary><application>HTTP Configuration Tool</application></primary>
- <secondary>modules</secondary>
- </indexterm>
- <para>
- Only modules provided with &MAJOROS; can be configured with the <application>HTTP Configuration Tool</application>. If additional modules are installed, they can not be configured using this tool.
- </para>
- <warning>
- <title>Caution</title>
- <indexterm>
- <primary><filename>/etc/httpd/conf/httpd.conf</filename></primary>
- </indexterm>
- <para>
- Do not edit the <filename>/etc/httpd/conf/httpd.conf</filename> configuration file by hand if you wish to use this tool. The <application>HTTP Configuration Tool</application> generates this file after you save your changes and exit the program. If you want to add additional modules or configuration options that are not available in <application>HTTP Configuration Tool</application>, you cannot use this tool.
- </para>
- </warning>
- <para>
- The general steps for configuring the Apache HTTP Server using the <application>HTTP Configuration Tool</application> are as follows:
- </para>
- <orderedlist continuation="restarts" inheritnum="ignore">
- <listitem>
- <para>
- Configure the basic settings under the <guilabel>Main</guilabel> tab.
- </para>
- </listitem>
- <listitem>
- <para>
- Click on the <guilabel>Virtual Hosts</guilabel> tab and configure the default settings.
- </para>
- </listitem>
- <listitem>
- <para>
- Under the <guilabel>Virtual Hosts</guilabel> tab, configure the Default Virtual Host.
- </para>
- </listitem>
- <listitem>
- <para>
- To serve more than one URL or virtual host, add any additional virtual hosts.
- </para>
- </listitem>
- <listitem>
- <para>
- Configure the server settings under the <guilabel>Server</guilabel> tab.
- </para>
- </listitem>
- <listitem>
- <para>
- Configure the connections settings under the <guilabel>Performance Tuning</guilabel> tab.
- </para>
- </listitem>
- <listitem>
- <para>
- Copy all necessary files to the <filename>DocumentRoot</filename> and <filename>cgi-bin</filename> directories.
- </para>
- </listitem>
- <listitem>
- <para>
- Exit the application and select to save your settings.
- </para>
- </listitem>
- </orderedlist>
- <section id="s2-httpd-basic-settings">
- <title>Basic Settings</title>
- <para>Use the <guilabel>Main</guilabel> tab to configure the basic server settings.</para>
- <figure float="0" id="httpd-main">
- <title>Basic Settings</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-main.png" format="PNG" />
- </imageobject>
- <textobject>
- <para>
- Basic Settings
- </para>
- </textobject>
- </mediaobject>
- </figure>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>ServerName</command></secondary>
- </indexterm>
- <para>
- Enter a fully qualified domain name that you have the right to use in the <guilabel>Server Name</guilabel> text area. This option corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#servername"><command>ServerName</command> </ulink> directive in <filename>httpd.conf</filename>. The <command>ServerName</command> directive sets the hostname of the Web server. It is used when creating redirection URLs. If you do not define a server name, the Web server attempts to resolve it from the IP address of the system. The server name does not have to be the domain name resolved from the IP address of the server. For example, you might set the server name to www.example.com while the server's real DNS name is foo.example.com.
- </para>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>ServerAdmin</command></secondary>
- </indexterm>
- <para>
- Enter the email address of the person who maintains the Web server in the <guilabel>Webmaster email address</guilabel> text area. This option corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#serveradmin"><command>ServerAdmin</command></ulink> directive in <filename>httpd.conf</filename>. If you configure the server's error pages to contain an email address, this email address is used so that users can report a problem to the server's administrator. The default value is root at localhost.
- </para>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>Listen</command></secondary>
- </indexterm>
- <para>
- Use the <guilabel>Available Addresses</guilabel> area to define the ports on which the server accepts incoming requests. This option corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/mpm_common.html#listen"><command>Listen</command></ulink> directive in <filename>httpd.conf</filename>. By default, Red Hat configures the Apache HTTP Server to listen to port 80 for non-secure Web communications.
- </para>
- <para>
- Click the <guibutton>Add</guibutton> button to define additional ports on which to accept requests. A window as shown in <xref linkend="httpd-listen" /> appears. Either choose the <guilabel>Listen to all addresses</guilabel> option to listen to all IP addresses on the defined port or specify a particular IP address over which the server accepts connections in the <guilabel>Address</guilabel> field. Only specify one IP address per port number. To specify more than one IP address with the same port number, create an entry for each IP address. If at all possible, use an IP address instead of a domain name to prevent a DNS lookup failure. Refer to <ulink url="http://httpd.apache.org/docs/2.2/dns-caveats.html">http://httpd.apache.org/docs/2.2/dns-caveats.html</ulink> for more information about <citetitle>Issues Regarding DNS and Apache</citetitle>.
- </para>
- <para>
- Entering an asterisk (*) in the <guilabel>Address</guilabel> field is the same as choosing <guilabel>Listen to all addresses</guilabel>. Clicking the <guibutton>Edit</guibutton> button in the <guilabel>Available Addresses</guilabel> frame shows the same window as the <guibutton>Add</guibutton> button except with the fields populated for the selected entry. To delete an entry, select it and click the <guibutton>Delete</guibutton> button.
- </para>
- <note>
- <title>Tip</title>
- <para>
- If you set the server to listen to a port under 1024, you must be root to start it. For port 1024 and above, <command>httpd</command> can be started as a regular user.
- </para>
- </note>
- <figure float="0" id="httpd-listen">
- <title>Available Addresses</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-listen.png" format="PNG" />
- </imageobject>
- <textobject>
- <para>
- Available Addresses
- </para>
- </textobject>
- </mediaobject>
- </figure>
- </section>
- <section id="s2-httpd-default-settings">
- <title>Default Settings</title>
- <para>
- After defining the <guilabel>Server Name</guilabel>, <guilabel>Webmaster email address</guilabel>, and <guilabel>Available Addresses</guilabel>, click the <guilabel>Virtual Hosts</guilabel> tab. The figure below illustrates the <guilabel>Virtual Hosts</guilabel> tab.
- </para>
- <figure float="0" id="httpd-virtual-hosts">
- <title>Virtual Hosts Tab</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-virtualhosts.png" format="PNG" />
- </imageobject>
- <textobject>
- <para>
- Virtual Hosts Tab
- </para>
- </textobject>
- </mediaobject>
- </figure>
- <para>
- Clicking on <guilabel>Edit</guilabel> will display the <guilabel>Virtual Host Properties</guilabel> window from which you can set your preferred settings. To add new settings, click on the <guilabel>Add</guilabel> button which will also display the <guilabel>Virtual Host Properties</guilabel> window. Clicking on the <guilabel>Edit Default Settings</guilabel> button, displays the <guilabel>Virtual Host Properties</guilabel> window without the <guilabel>General Options</guilabel> tab.
- </para>
- <para>
- In the <guilabel>General Options</guilabel> tab, you can change the hostname, the document root directory and also set the webmaster's email address. In the Host information, you can set the Virtual Host's IP Address and Host Name. The figure below illustrates the <guilabel>General Options</guilabel> tab.
- </para>
- <figure float="0" id="httpd-general-options">
- <title>General Options</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-general-options.png" format="PNG" scalefit="1" />
- </imageobject>
- <textobject>
- <para>
- General Options
- </para>
- </textobject>
- </mediaobject>
- </figure>
- <para>
- If you add a virtual host, the settings you configure for the virtual host take precedence for that virtual host. For a directive not defined within the virtual host settings, the default value is used.
- </para>
- <section id="s3-httpd-site-config">
- <title>Site Configuration</title>
- <para>
- The figure below illustrates the <guibutton>Page Options</guibutton>tab from which you can configure the <guilabel>Directory Page Search List</guilabel> and <guilabel>Error Pages</guilabel>. If you are unsure of these settings, do not modify them.
- </para>
- <figure float="0" id="httpd-site-config-screen">
- <title>Site Configuration</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-siteconfig.png" format="PNG" scalefit="1" />
- </imageobject>
- <textobject>
- <para>
- Site Configuration
- </para>
- </textobject>
- </mediaobject>
- </figure>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>DirectoryIndex</command></secondary>
- </indexterm>
- <para>
- The entries listed in the <guilabel>Directory Page Search List</guilabel> define the <ulink url="http://httpd.apache.org/docs/2.2/mod/mod_dir.html#directoryindex"><command>DirectoryIndex</command></ulink> directive. The <command>DirectoryIndex</command> is the default page served by the server when a user requests an index of a directory by specifying a forward slash (/) at the end of the directory name.
- </para>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>Options</command></secondary>
- </indexterm>
- <para>
- For example, when a user requests the page <command>http://www.example.com/this_directory/</command>, they are going to get either the <command>DirectoryIndex</command> page, if it exists, or a server-generated directory list. The server tries to find one of the files listed in the <command>DirectoryIndex</command> directive and returns the first one it finds. If it does not find any of these files and if <command>Options Indexes</command> is set for that directory, the server generates and returns a list, in HTML format, of the subdirectories and files in the directory.
- </para>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>ErrorDocument</command></secondary>
- </indexterm>
- <para>
- Use the <guilabel>Error Code</guilabel> section to configure Apache HTTP Server to redirect the client to a local or external URL in the event of a problem or error. This option corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#errordocument"><command>ErrorDocument</command></ulink> directive. If a problem or error occurs when a client tries to connect to the Apache HTTP Server, the default action is to display the short error message shown in the <guilabel>Error Code</guilabel> column. To override this default configuration, select the error code and click the <guilabel>Edit</guilabel> button. Choose <guimenuitem>Default</guimenuitem> to display the default short error message. Choose <guimenuitem>URL</guimenuitem> to redirect the client to an external URL and enter a complete URL, including the <command>http://</command>, in the <guilabel>Location</guilabel> field. Choose <guimenuitem>File</guimenuitem> to redirect the client to an int
ernal URL and enter a file location under the document root for the Web server. The location must begin the a slash (/) and be relative to the Document Root.
- </para>
- <para>
- For example, to redirect a 404 Not Found error code to a webpage that you created in a file called <filename>404.html</filename>, copy <filename>404.html</filename> to <filename><replaceable>DocumentRoot</replaceable>/../error/404.html</filename>. In this case, <replaceable>DocumentRoot</replaceable> is the Document Root directory that you have defined (the default is <filename>/var/www/html/</filename>). If the Document Root is left as the default location, the file should be copied to <filename>/var/www/error/404.html</filename>. Then, choose <guimenuitem>File</guimenuitem> as the Behavior for <guilabel>404 - Not Found</guilabel> error code and enter <filename>/error/404.html</filename> as the <guimenuitem>Location</guimenuitem>.
- </para>
- <para>
- From the <guilabel>Default Error Page Footer</guilabel> menu, you can choose one of the following options:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- <guilabel>Show footer with email address</guilabel> — Display the default footer at the bottom of all error pages along with the email address of the website maintainer specified by the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#serveradmin"><command>ServerAdmin</command></ulink> directive.
- </para>
- </listitem>
- <listitem>
- <para>
- <guilabel>Show footer</guilabel> — Display just the default footer at the bottom of error pages.
- </para>
- </listitem>
- <listitem>
- <para>
- <guilabel>No footer</guilabel> — Do not display a footer at the bottom of error pages.
- </para>
- </listitem>
- </itemizedlist>
- </section>
- <section id="s3-httpd-ssl-variables">
- <title>SSL Support</title>
- <para>
- The <command>mod_ssl</command> enables encryption of the HTTP protocol over SSL. SSL (Secure Sockets Layer) protocol is used for communication and encryption over TCP/IP networks. The SSL tab enables you to configure SSL for your server. To configure SSL you need to provide the path to your:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- Certificate file - equivalent to using the <command>SSLCertificateFile</command> directive which points the path to the PEM (Privacy Enhanced Mail)-encoded server certificate file.
- </para>
- </listitem>
- <listitem>
- <para>
- Key file - equivalent to using the <command>SSLCertificateKeyFile</command> directive which points the path to the PEM-encoded server private key file.
- </para>
- </listitem>
- <listitem>
- <para>
- Certificate chain file - equivalent to using the <command>SSLCertificateChainFile</command> directive which points the path to the certificate file containing all the server's chain of certificates.
- </para>
- </listitem>
- <listitem>
- <para>
- Certificate authority file - is an encrypted file used to confirm the authenticity or identity of parties communicating with the server.
- </para>
- </listitem>
- </itemizedlist>
- <para>
- You can find out more about configuration directives for SSL on <ulink url="http://httpd.apache.org/docs/2.2/mod/directives.html#S"> http://httpd.apache.org/docs/2.2/mod/directives.html#S</ulink>. You also need to determine which SSL options to enable. These are equivalent to using the <command>SSLOptions</command> with the following options:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- FakeBasicAuth - enables standard authentication methods used by Apache. This means that the Client X509 certificate's Subject Distinguished Name (DN) is translated into a basic HTTP username.
- </para>
- </listitem>
- <listitem>
- <para>
- ExportCertData - creates CGI environment variables in <command>SSL_SERVER_CERT</command>, <command>SSL_CLIENT_CERT</command> and <command>SSL_CLIENT_CERT_CHAIN_n</command> where n is a number 0,1,2,3,4... These files are used for more certificate checks by CGI scripts.
- </para>
- </listitem>
- <listitem>
- <para>
- CompatEnvVars - enables backward compatibility for Apache SSL by adding CGI environment variables.
- </para>
- </listitem>
- <listitem>
- <para>
- StrictRequire - enables strict access which forces denial of access whenever the <command>SSLRequireSSL</command> and <command>SSLRequire</command> directives indicate access is forbiden.
- </para>
- </listitem>
- <listitem>
- <para>
- OptRenegotiate - enables avoidance of unnecessary handshakes by <command>mod_ssl</command> which also performs safe parameter checks. It is recommended to enable OptRenegotiate on a per directory basis.
- </para>
- </listitem>
- </itemizedlist>
- <para>
- More information on the above SSL options can be found on <ulink url="http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#ssloptions" />. The figure below illustrates the SSL tab and the options discussed above.
- </para>
- <figure float="0" id="httpd-virtualhosts-ssl">
- <title>SSL</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-virtualhosts-ssl.png" format="PNG" scalefit="1" />
- </imageobject>
- <textobject>
- <para>
- SSL
- </para>
- </textobject>
- </mediaobject>
- </figure>
- </section>
- <section id="s3-httpd-logging">
- <title>Logging</title>
- <indexterm>
- <primary><application>HTTP Configuration Tool</application></primary>
- <secondary>transfer log</secondary>
- </indexterm>
- <indexterm>
- <primary><application>HTTP Configuration Tool</application></primary>
- <secondary>error log</secondary>
- </indexterm>
- <para>
- Use the <guilabel>Logging</guilabel> tab to configure options for specific transfer and error logs.
- </para>
- <para>
- By default, the server writes the transfer log to the <filename>/var/log/httpd/access_log</filename> file and the error log to the <filename>/var/log/httpd/error_log</filename> file.
- </para>
- <para>
- The transfer log contains a list of all attempts to access the Web server. It records the IP address of the client that is attempting to connect, the date and time of the attempt, and the file on the Web server that it is trying to retrieve. Enter the name of the path and file in which to store this information. If the path and file name do not start with a slash (/), the path is relative to the server root directory as configured. This option corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/mod_log_config.html#transferlog"><command>TransferLog</command></ulink> directive.
- </para>
- <figure float="0" id="httpd-logging-screen">
- <title>Logging</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-logging.png" format="PNG" scalefit="1" />
- </imageobject>
- <textobject>
- <para>
- Logging
- </para>
- </textobject>
- </mediaobject>
- </figure>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>TransferLog</command></secondary>
- </indexterm>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>LogFormat</command></secondary>
- </indexterm>
- <para>
- You can configure a custom log format by checking <guilabel>Use custom logging facilities</guilabel> and entering a custom log string in the <guilabel>Custom Log String</guilabel> field. This configures the <ulink url="http://httpd.apache.org/docs/2.2/mod/mod_log_config.html#logformat"><command>LogFormat</command></ulink> directive. Refer to <ulink url="http://httpd.apache.org/docs-2.0/mod/mod_log_config.html#formats" /> for details on the format of this directive.
- </para>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>ErrorLog</command></secondary>
- </indexterm>
- <para>
- The error log contains a list of any server errors that occur. Enter the name of the path and file in which to store this information. If the path and file name do not start with a slash (/), the path is relative to the server root directory as configured. This option corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#errorlog"><command>ErrorLog</command></ulink> directive.
- </para>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>LogLevel</command></secondary>
- </indexterm>
- <para>
- Use the <guilabel>Log Level</guilabel> menu to set the verbosity of the error messages in the error logs. It can be set (from least verbose to most verbose) to emerg, alert, crit, error, warn, notice, info or debug. This option corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#loglevel"><command>LogLevel</command></ulink> directive.
- </para>
- <indexterm>
- <primary>HTTP directives</primary>
- <secondary><command>HostnameLookups</command></secondary>
- </indexterm>
- <para>
- The value chosen with the <guilabel>Reverse DNS Lookup</guilabel> menu defines the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#hostnamelookups"><command>HostnameLookups</command></ulink> directive. Choosing <guilabel>No Reverse Lookup</guilabel> sets the value to off. Choosing <guilabel>Reverse Lookup</guilabel> sets the value to on. Choosing <guilabel>Double Reverse Lookup</guilabel> sets the value to double.
- </para>
- <para>
- If you choose <guilabel>Reverse Lookup</guilabel>, your server automatically resolves the IP address for each connection which requests a document from your Web server. Resolving the IP address means that your server makes one or more connections to the DNS in order to find out the hostname that corresponds to a particular IP address.
- </para>
- <para>
- If you choose <guilabel>Double Reverse Lookup</guilabel>, your server performs a double-reverse DNS. In other words, after a reverse lookup is performed, a forward lookup is performed on the result. At least one of the IP addresses in the forward lookup must match the address from the first reverse lookup.
- </para>
- <para>
- Generally, you should leave this option set to <guilabel>No Reverse Lookup</guilabel>, because the DNS requests add a load to your server and may slow it down. If your server is busy, the effects of trying to perform these reverse lookups or double reverse lookups may be quite noticeable.
- </para>
- <para>
- Reverse lookups and double reverse lookups are also an issue for the Internet as a whole. Each individual connection made to look up each hostname adds up. Therefore, for your own Web server's benefit, as well as for the Internet's benefit, you should leave this option set to <guilabel>No Reverse Lookup</guilabel>.
- </para>
- </section>
- <section id="s3-httpd-environment-variables">
- <title>Environment Variables</title>
- <para>
- Use the <guilabel>Environment</guilabel> tab to configure options for specific variables to set, pass, or unset for CGI scripts.
- </para>
- <para>
- Sometimes it is necessary to modify environment variables for CGI scripts or server-side include (SSI) pages. The Apache HTTP Server can use the <command>mod_env</command> module to configure the environment variables which are passed to CGI scripts and SSI pages. Use the <guilabel>Environment Variables</guilabel> page to configure the directives for this module.
- </para>
- <para>
- Use the <guilabel>Set for CGI Scripts</guilabel> section to set an environment variable that is passed to CGI scripts and SSI pages. For example, to set the environment variable <filename>MAXNUM</filename> to <filename>50</filename>, click the <guibutton>Add</guibutton> button inside the <guilabel>Set for CGI Script</guilabel> section, as shown in <xref linkend="httpd-environment-variables-screen" />, and type <userinput>MAXNUM</userinput> in the <guilabel>Environment Variable</guilabel> text field and <userinput>50</userinput> in the <guilabel>Value to set</guilabel> text field. Click <guibutton>OK</guibutton> to add it to the list. The <guilabel>Set for CGI Scripts</guilabel> section configures the <ulink url="http://httpd.apache.org/docs/2.2/mod/mod_env.html#setenv"><command>SetEnv</command></ulink> directive.
- </para>
- <para>
- Use the <guilabel>Pass to CGI Scripts</guilabel> section to pass the value of an environment variable when the server is first started to CGI scripts. To see this environment variable, type the command <command>env</command> at a shell prompt. Click the <guibutton>Add</guibutton> button inside the <guilabel>Pass to CGI Scripts</guilabel> section and enter the name of the environment variable in the resulting dialog box. Click <guibutton>OK</guibutton> to add it to the list. The <guilabel>Pass to CGI Scripts</guilabel> section configures the <ulink url="http://httpd.apache.org/docs/2.2/mod/mod_env.html#passenv"><command>PassEnv</command></ulink> directive.
- </para>
- <figure float="0" id="httpd-environment-variables-screen">
- <title>Environment Variables</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-environment.png" format="PNG" scalefit="1" />
- </imageobject>
- <textobject>
- <para>
- Environment Variables
- </para>
- </textobject>
- </mediaobject>
- </figure>
- <para>
- To remove an environment variable so that the value is not passed to CGI scripts and SSI pages, use the <guilabel>Unset for CGI Scripts</guilabel> section. Click <guibutton>Add</guibutton> in the <guilabel>Unset for CGI Scripts</guilabel> section, and enter the name of the environment variable to unset. Click <guibutton>OK</guibutton> to add it to the list. This corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/mod_env.html#unsetenv"><command>UnsetEnv</command></ulink> directive.
- </para>
- <para>
- To edit any of these environment values, select it from the list and click the corresponding <guibutton>Edit</guibutton> button. To delete any entry from the list, select it and click the corresponding <guibutton>Delete</guibutton> button.
- </para>
- <para>
- To learn more about environment variables in the Apache HTTP Server, refer to the following: <ulink url="http://httpd.apache.org/docs/2.2/env.html" />
- </para>
- </section>
- <section id="s3-httpd-directories">
- <title>Directories</title>
- <para>
- Use the <guilabel>Directories</guilabel> page in the <guilabel>Performance</guilabel> tab to configure options for specific directories. This corresponds to the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#directory"><command><Directory></command></ulink> directive.
- </para>
- <figure float="0" id="httpd-directories-screen">
- <title>Directories</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-directories.png" format="PNG" scalefit="1" />
- </imageobject>
- <textobject>
- <para>
- Directories
- </para>
- </textobject>
- </mediaobject>
- </figure>
- <para>
- Click the <guibutton>Edit</guibutton> button in the top right-hand corner to configure the <guilabel>Default Directory Options</guilabel> for all directories that are not specified in the <guilabel>Directory</guilabel> list below it. The options that you choose are listed as the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#options"><command>Options</command></ulink> directive within the <ulink url="http://httpd.apache.org/docs/2.2/mod/core.html#directory"><command><Directory></command></ulink> directive. You can configure the following options:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- <guilabel>ExecCGI</guilabel> — Allow execution of CGI scripts. CGI scripts are not executed if this option is not chosen.
- </para>
- </listitem>
- <listitem>
- <para>
- <guilabel>FollowSymLinks</guilabel> — Allow symbolic links to be followed.
- </para>
- </listitem>
- <listitem>
- <para>
- <guilabel>Includes</guilabel> — Allow server-side includes.
- </para>
- </listitem>
- <listitem>
- <para>
- <guilabel>IncludesNOEXEC</guilabel> — Allow server-side includes, but disable the <command>#exec</command> and <command>#include</command> commands in CGI scripts.
- </para>
- </listitem>
- <listitem>
- <para>
- <guilabel>Indexes</guilabel> — Display a formatted list of the directory's contents, if no <command>DirectoryIndex</command> (such as <filename>index.html</filename>) exists in the requested directory.
- </para>
- </listitem>
- <listitem>
- <para>
- <guilabel>Multiview</guilabel> — Support content-negotiated multiviews; this option is disabled by default.
- </para>
- </listitem>
- <listitem>
- <para>
- <guilabel>SymLinksIfOwnerMatch</guilabel> — Only follow symbolic links if the target file or directory has the same owner as the link.
- </para>
- </listitem>
- </itemizedlist>
- <para>
- To specify options for specific directories, click the <guibutton>Add</guibutton> button beside the <guilabel>Directory</guilabel> list box. A window as shown in <xref linkend="httpd-directories-add" /> appears. Enter the directory to configure in the <guilabel>Directory</guilabel> text field at the bottom of the window. Select the options in the right-hand list and configure the <ulink url="http://httpd.apache.org/docs-2.0/mod/mod_access.html#order"><command>Order</command></ulink> directive with the left-hand side options. The <command>Order</command> directive controls the order in which allow and deny directives are evaluated. In the <guilabel>Allow hosts from</guilabel> and <guilabel>Deny hosts from</guilabel> text field, you can specify one of the following:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- Allow all hosts — Type <userinput>all</userinput> to allow access to all hosts.
- </para>
- </listitem>
- <listitem>
- <para>
- Partial domain name — Allow all hosts whose names match or end with the specified string.
- </para>
- </listitem>
- <listitem>
- <para>
- Full IP address — Allow access to a specific IP address.
- </para>
- </listitem>
- <listitem>
- <para>
- A subnet — Such as <userinput>192.168.1.0/255.255.255.0</userinput>
- </para>
- </listitem>
- <listitem>
- <para>
- A network CIDR specification — such as <userinput>10.3.0.0/16</userinput>
- </para>
- </listitem>
- </itemizedlist>
- <figure float="0" id="httpd-directories-add">
- <title>Directory Settings</title>
- <mediaobject>
- <imageobject>
- <imagedata fileref="images/httpd-directories-add.png" format="PNG" scalefit="1" />
- </imageobject>
- <textobject>
- <para>
- Directory Settings
- </para>
- </textobject>
- </mediaobject>
- </figure>
- <para>
- If you check the <guilabel>Let .htaccess files override directory options</guilabel>, the configuration directives in the <filename>.htaccess</filename> file take precedence.
- </para>
- </section>
- </section>
- </section>
<section id="s1-apache-config">
<title>Configuration Directives in <filename>httpd.conf</filename></title>
<indexterm>
More information about the docs-commits
mailing list