From nobody@hyperreal.org Thu Jul 31 08:24:45 1997 Received: (from nobody@localhost) by hyperreal.org (8.8.5/8.8.5) id IAA00537; Thu, 31 Jul 1997 08:24:45 -0700 (PDT) Message-Id: <199707311524.IAA00537@hyperreal.org> Date: Thu, 31 Jul 1997 08:24:45 -0700 (PDT) From: Christian Gilmore Reply-To: cgilmore@research.att.com To: apbugs@hyperreal.org Subject: Indexes option broken X-Send-Pr-Version: 3.2 >Number: 954 >Category: general >Synopsis: Indexes option broken >Confidential: no >Severity: serious >Priority: medium >Responsible: apache >State: closed >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Thu Jul 31 08:30:01 1997 >Last-Modified: Thu Jul 31 11:32:24 PDT 1997 >Originator: cgilmore@research.att.com >Organization: >Release: 1.2.0 >Environment: IRIX akpublic 5.3 11091812 IP22 mips >Description: The -Indexes option is not working for user directories. It successfully restricts files in the DOCROOT of the server, but it displays the directory contents of /~user/* directories if they do not have an index.html file. Since the CHANGES documentation for 1.2.1 does not mention this, I do not think that upgrading from 1.2.0 will make a difference. >How-To-Repeat: http://www.research.att.com/banners/ successfully restricts http://www.research.att.com/~cgilmore/foo fails to restrict >Fix: >Audit-Trail: State-Changed-From-To: open-analyzed State-Changed-By: marc State-Changed-When: Thu Jul 31 08:57:55 PDT 1997 State-Changed-Why: I doubt the Indexes option is broken in the way you describe. This is probably a configuration problem. Please post the relevant section of your config file that is setting this. Are you sure you aren't setting it in a Directory section applicable only to your document root and not user directories? From: Marc Slemko To: apbugs@apache.org Subject: Re: general/954: Indexes option broken (fwd) Date: Thu, 31 Jul 1997 11:40:19 -0600 (MDT) ---------- Forwarded message ---------- Date: Thu, 31 Jul 1997 13:13:07 -0400 From: Christian Gilmore To: Marc Slemko Subject: Re: general/954: Indexes option broken >I doubt the Indexes option is broken in the way you describe. >This is probably a configuration problem. Please post the >relevant section of your config file that is setting >this. Are you sure you aren't setting it in a Directory >section applicable only to your document root and not user >directories? Mark, I'm including my access.conf file. I'm certain this option worked for me in the past with 1.2b* and the same access.conf. I looked at the distribution access.conf for 1.2.1 and it looks similar as well. It is my understanding that configuration settings for the DocumentRoot apply to all subdirectories (including user directories) unless they are specifically overridden. /www/www/research is our DocumentRoot as defined in srm.conf. For historical reasons user accounts are under /usr. Regards, Christian # access.conf: Global access configuration # Online docs at http://www.apache.org/ Options +FollowSymLinks -Indexes -Includes -ExecCGI AllowOverride AuthConfig order allow,deny allow from all AllowOverride AuthConfig AllowOverride AuthConfig SetHandler cgi-script AllowOverride AuthConfig SetHandler cgi-script ----------------- Christian Gilmore AT&T Research, Florham Park cgilmore@research.att.com From: Marc Slemko To: Christian Gilmore Subject: Re: general/954: Indexes option broken Date: Thu, 31 Jul 1997 11:42:42 -0600 (MDT) On Thu, 31 Jul 1997, Christian Gilmore wrote: > I'm including my access.conf file. I'm certain this option worked for me in > the past with 1.2b* and the same access.conf. I looked at the distribution > access.conf for 1.2.1 and it looks similar as well. It is my understanding > that configuration settings for the DocumentRoot apply to all > subdirectories (including user directories) unless they are specifically > overridden. Erm... /usr is not a subdirectory of /www/www/research. A Directory setting for /www/www/research will not and should not impact /usr at all. The path on the web is not related to the path on the file system. The Location directive uses the web path, the Directory one uses the file system path. > > /www/www/research is our DocumentRoot as defined in srm.conf. For > historical reasons user accounts are under /usr. > > Regards, > Christian > > # access.conf: Global access configuration > # Online docs at http://www.apache.org/ > > > Options +FollowSymLinks -Indexes -Includes -ExecCGI > AllowOverride AuthConfig > > order allow,deny > allow from all > If you want the above to apply everywhere, use something like Directory /. State-Changed-From-To: analyzed-closed State-Changed-By: marc State-Changed-When: Thu Jul 31 11:32:24 PDT 1997 State-Changed-Why: User configuration error. >Unformatted: