[WEB400] Re: Apache CGI-BIN problem

[Anton Gombkötö <gombkoetoe@xxxxxxxxxx>]

Hello Eric,

i *guess* that the main error seems to be that you refuse to write
QSYS-filesystem names in UPPERCASE and the last allow doesn't take
place.

i found some other things, too:

5: You don't need +ExecCGI here. Change it back to -ExecCGI.

>   18       RewriteEngine On

18: You don't have a single RewriteRule here, so you could turn it
off, too.

>   20       Alias /cgi-bin /qsys.lib/mylib.lib   

20: Write names of the QSYS-filesystem in uppercase.

>   21       ScriptAliasMatch ^/cgi-bin/(.*) /QSYS.LIB/MYLIB.LIB/&1.pgm

21: Where did you get &1 from? It should be $1!

But that one never gets executed, when i'm right.

>   29
>   30       <Directory /QSYS.LIB/MYLIB.LIB>      
>   31            Order Allow,Deny        
>   32            Allow From all  
>   33            Options +ExecCGI +Includes      
> 34         </Directory> 

I have a "SetHandler cgi-script " also in this context, but i'm not
sure whether it is needed or not.

You might want to forbid direct access to libraries and programs from
the browsers address bar with:

# Deny direct requests for a CGI program
<Location /QSYS.LIB>                       
  order allow,deny                         
  deny from all                            
</Location>

The configs in

/QIBM/ProdData/HTTPA/admin/conf

taught me that...

-- 
Mit freundlichen Grüssen / best regards

Anton Gombkötö
Organisation und Projektleitung

Avenum Technologie GmbH
Wien - Salzburg - Stuttgart

http://www.avenum.com