FrontPage mod_alias fiddling

[Gary Wisniewski <ga...@spidereye.com.au>]

Has anybody considered putting the FrontPage ScriptAlias
extensions into mod_alias.c?

Basically, when you get the newest FP extensions, it hacks
into the Apache sources during installation to allow things
like:
	ScriptAlias */bin
But also adds
	ScriptAlias */bin webuser

Essentially, in addition to adding the wildcards for ScriptAlias,
it also checks that cgi scripts are owned by "webuser" (or
any user, specifically) and refuses to run them otherwise.

It annoys me that Microsoft advises you to hack up your
existing Apache directives, rather than simply adding a module
themselves.  So, I actually created a module called
	mod_fpalias.c
which makes this legal:
	FpScriptAlias */bin webuser

Essentially, I cleaned-up Microsoft's hacks and put together
a reasonable module which does the same thing. I don't like changing the
meaning of existing directives.

One of the *good* things about Microsoft's change is that,
assuming you have it installed, FP no longer requires
server restart (or Root privs) to have the extensions operate
properly.  

Would it be useful to create a doc page on FP extensions,
and this sort of stuff, including mod_fpalias, or perhaps
a modified mod_alias which does what Microsoft wants?

Opinions?

Gary


------------------------------
Gary Wisniewski
Spider Eye Studios Pty. Ltd., Australia, +61 3 9415 6700
[Formerly GUI Online Productions]

Re: FrontPage mod_alias fiddling

[Brian Behlendorf <br...@organic.com>]

At 12:45 PM 7/13/97 +1100, Gary Wisniewski wrote:
>It annoys me that Microsoft advises you to hack up your
>existing Apache directives, rather than simply adding a module
>themselves.  So, I actually created a module called
>	mod_fpalias.c
>which makes this legal:
>	FpScriptAlias */bin webuser
>
>Essentially, I cleaned-up Microsoft's hacks and put together
>a reasonable module which does the same thing. I don't like changing the
>meaning of existing directives.
>
>One of the *good* things about Microsoft's change is that,
>assuming you have it installed, FP no longer requires
>server restart (or Root privs) to have the extensions operate
>properly.  
>
>Would it be useful to create a doc page on FP extensions,
>and this sort of stuff, including mod_fpalias?

Definitely.  I'd be up for hosting the module in /dist/contrib, and having
a tutorial on "using FrontPage with Apache" on the apache web site; or if
hosted elsewhere, a semi-prominent link, say from related_projects.html.  

	Brian


--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
"Why not?" - TL           brian@organic.com - hyperreal.org - apache.org

Re: FrontPage mod_alias fiddling

[Dean Gaudet <dg...@arctic.org>]

On Sun, 13 Jul 1997, Gary Wisniewski wrote:
> 	ScriptAlias */bin

Isn't this the same as:

<Location ~ ".*/bin/">
    SetHandler cgi-script
    Options +ExecCGI
</Location>

?

I guess Microsoft just lets people put the cgis right into the document
hierarchy.  But should you want to move them around, Alexei's latest
AliasMatch stuff can be combined with the above.

> But also adds
> 	ScriptAlias */bin webuser

And this could be implemented by the above and adding a module that checks
the ownership of a file.  In fact, such a module could be a good place to
deal with all of the various SymLinksIfOwnerBlahBlah hacks we've had float
around. 

Dean