[PLUG] SSI includes cool, but I guess they aren't compiled in...

[Sandy Herring]

On Sat, 30 Aug 2003, Michael C. Robinson wrote: 
> On my custom apache server.  Is there an easy way to find out if I
> didn't compile in support for them?  

[bigfish at kippered bigfish]$ grep mod_include /etc/httpd/conf/httpd.conf
LoadModule includes_module    modules/mod_include.so
AddModule mod_include.c

> I got one working on Redhat 7.3's
> apache package.  I think my custom apache 1.3.27 is statically compiled
> without support for modules or at the very least I think the modules it
> will run are tightly controlled.  What's the security story for server
> side includes?  If they were disabled during compilation it is probably
> because of instructions in Securing and Optimizing Redhat Linux 
> The Ultimate Solution by Gerhard Mourani intended to tighten security.
> I didn't even add PHP support to this server having had trouble
> with Horde in the past and deciding it's probably too buggy to
> be secure.

I'm not familiar with Mourani's work. My apache installation is a standard
Red Hat 7.3 deal. I've had no security breaches (I keep on top of Errata).

> I found out my apache documentation wasn't opening on my custom server
> because the filenames were wrong, fixed that and found quite a bit on
> server side includes :-)

Also available from apache.org...

http://httpd.apache.org/docs/howto/ssi.html

> Are the following two lines placed in httpd.conf all that's needed to
> get SSI working?
> 
> AddType text/html .shtml
> AddHandler server-parsed .shtml

Yes - assuming you want to use an .shtml extension for pages to be
server-parsed. I use the Xbit hack...

<Directory "/var/www/html">
 .
 .

    XbitHack On
 .
 .
</Directory>

> If so, do you add them under a certain section or can they be 
> added anywhere in the file?  

The stock RH Apache install adds them within this section...

#
# Document types.
#
<IfModule mod_mime.c>
 .
 .
    #
    # To use server-parsed HTML files
    #
    AddType text/html .shtml
    AddHandler server-parsed .shtml
 .
 .
</IfModule>
# End of document types.

> There's something about adding
> Options +Includes, how do you add this to httpd.conf as it
> seems to need to go in a particular spot?  I couldn't find
> it looking at Redhat's apache under httpd.conf, maybe they put 
> it in a .htaccess file.

It's far more efficient to put directives in httpd.conf than an .htaccess
file. You can put an Options directive in whatever locale you want it to
control. In this case, you'd want it within the...

<Directory "/var/www/html">

...section (assumning that's where your web pages are located).

hth,
Sandy
-- 
Sandy Herring, RHCE                        o              sandy at herring.org
Peck of Pickled Pisces               __  o               http://herring.org/
UNIX or Web authoring questions?  |\/ o\  o  http://herring.org/finger.html
->http://herring.org/techie.html  |/\__/     http://herring.org/pub-key.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.pdxlinux.org/pipermail/plug/attachments/20030830/d7766920/attachment.asc>