RE: [WEB400] User Profiles

[web400@xxxxxxxxxxxxxxxx]

> The first is that ScriptAliasMatch isn't needed to enable CGI and will 
> drag down server performance on a busy site since it uses regular 
> expressions.

You're right.  I had changed it to ScriptAliasMatch to do some fooling 
around with removing the .PGM, but that caused other problems, so I 
switched it to what I have now -- which obviously isn't optimal.

However, on my box, the speed difference isn't noticable.


> The second is that doing basic authentication inside of Directory 
> containers is guaranteed to cause grief
[SNIP]
> it just doesn't work well when the physical path to a resource is 
> virtualized by it's run time (like with Net.Data or Java apps).

Thanks for pointing this out. I've never used Net.Data, and I haven't used 
Java in this manner -- so you may be right.


> It's much better to use Location containers to do basic authentication 
> since they operate off of the actual URI of the request and not the 
> physical location of the resource.

So, to fix this problem, I should configure Apache as follows, correct?

ScriptAlias /cgi-bin /QSYS.LIB/LIBCGI.LIB

<Directory /QSYS.LIB/LIBCGI.LIB>
   Order Allow,Deny
   Allow From all
</Directory>

<Location /cgi-bin>
   Require valid-user
   PasswdFile %%SYSTEM%%
   AuthType Basic
   AuthName "AS/400 Sign On"
   ProfileToken on
</Location>