Zope behind Apache
Hi! The answer to my question might be trivial for most of you, yet I have not found it, though I have read docs, faqs and searched even zope.org for it. So, I want only Apache users to reach Zope (port 8080) on a Linux server. Now clients can view http://192.168.161.1:8080/library/welcome.html without giving valid Apache username and password. To make matters worse, there is a separate zope.conf beside httpd.conf in my Linux. How and what to modify then? Any help is appreciated, indeed. -- Bye: FeRó //SuSE 8.0 - a foolproof OS
Hi Fejes! --On Dienstag, 24. Juni 2003 08:56 +0200 Fejes Róbert <pouch@freemail.hu> wrote:
Hi!
The answer to my question might be trivial for most of you, yet I have not found it, though I have read docs, faqs and searched even zope.org for it. So, I want only Apache users to reach Zope (port 8080) on a Linux server. Now clients can view http://192.168.161.1:8080/library/welcome.html without giving valid Apache username and password. To make matters worse, there is a separate zope.conf beside httpd.conf in my Linux. How and what to modify then?
Assuming Apache runs on the same machine as Zope: start Zope with '-a 127.0.0.1'. See z2.py for documentation. This can be set in 'zope.conf'. hth, Andreas
Hi!
Assuming Apache runs on the same machine as Zope: start Zope with '-a 127.0.0.1'. See z2.py for documentation. This can be set in 'zope.conf'. Yes, Apache and Zope runs on the same PC. I checked z2.py, yet I do not know how to modify the following /etc/httpd/zope.conf:
RewriteEngine on # Keep users' home dirs handled by Apache <IfDefine ZopeKeepHomes> RewriteRule ^/~(.*) /~$1 [l,pt] </IfDefine> # and finally Zope redirection <Directory /opt/zope/> Options +ExecCGI </Directory> RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^(.*) /opt/zope/Zope.cgi$1 [e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l] It is all Greek to me. Thank you very much in advance. -- Bye: FeRó //SuSE 8.0 - a foolproof OS
Hi Robert, Fejes Róbert wrote:
Hi!
Assuming Apache runs on the same machine as Zope: start Zope with '-a 127.0.0.1'. See z2.py for documentation. This can be set in 'zope.conf'.
Yes, Apache and Zope runs on the same PC. I checked z2.py, yet I do not know how to modify the following /etc/httpd/zope.conf:
RewriteEngine on
# Keep users' home dirs handled by Apache <IfDefine ZopeKeepHomes> RewriteRule ^/~(.*) /~$1 [l,pt] </IfDefine>
# and finally Zope redirection <Directory /opt/zope/> Options +ExecCGI </Directory> RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^(.*) /opt/zope/Zope.cgi$1 [e=HTTP_CGI_AUTHORIZATION:%1,t=application/x-httpd-cgi,l]
It is all Greek to me. Thank you very much in advance.
This may sound a bit harsh, but beside there are legions of people doing so, you should not run a public accessible server with such less knowledge. Without understanding whats going on and how to find out, you may and probably will cause trouble for yourself and for others in future. Its not so hard for web servers, but who knows what else is running on your host. What should you do? Either try to get one who is responsible for administrative tasks of your site if this is work-related. Or carefully read documentation related to the software you are running. There is decent documentation for Apache and for many other software you might be running. Nobody can do this for you, I'm sorry. You can of course get help on details of software you cant gasp. People here and in many mailing lists will be very helpful since this is all hard stuff sometimes. But the most basic stuff has to be done by you. Keep care Tino Wildenhain
-- Bye: FeRó //SuSE 8.0 - a foolproof OS There is no such thing as a free lunch.
Hi Tino!
I checked z2.py, yet I do not know how to modify the following /etc/httpd/zope.conf: It is all Greek to me.
This may sound a bit harsh, but beside there are legions of people doing so, you should not run a public accessible server with such less knowledge. Without understanding whats going on and how to find out, you may and probably will cause trouble for yourself and for others in future. Its not so hard for web servers, but who knows what else is running on your host. I myself definitely agree with you, as a wrong configuration can do more harm, than good. I may add, however, this is not a public accessible server.
What should you do? Either try to get one who is responsible for administrative tasks of your site if this is work-related. No, it is not work related at all. It is a standalone Linux pc (Apache, Zope, ...) with a Virtual XP client (VMware) on it for testing purposes only.
Or carefully read documentation related to the software you are running. There is decent documentation for Apache and for many other software you might be running. Nobody can do this for you, I'm sorry. Naturally, as in this case, I've read the fine manual first, although I have not found what I was looking for.
You can of course get help on details of software you cant gasp. People here and in many mailing lists will be very helpful since this is all hard stuff sometimes. That is why, I wrote my 1st e-mail. I have expected people would give me some advice. There are plenty of docs related with Zope and Apache, yet I have not found the one I badly need. Any suggestions, then? I do love reading ...
But the most basic stuff has to be done by you. As it has been done before.
Keep care I try.
-- Bye: FeRó //SuSE 8.0 - a foolproof OS
Hi Tino!
I checked z2.py, yet I do not know how to modify the following /etc/httpd/zope.conf: It is all Greek to me.
This may sound a bit harsh, but beside there are legions of people doing so, you should not run a public accessible server with such less knowledge. Without understanding whats going on and how to find out, you may and probably will cause trouble for yourself and for others in future. Its not so hard for web servers, but who knows what else is running on your host. I myself definitely agree with you, as a wrong configuration can do more harm, than good. I may add, however, this is not a public accessible server.
What should you do? Either try to get one who is responsible for administrative tasks of your site if this is work-related. No, it is not work related at all. It is a standalone Linux pc (Apache, Zope, ...) with a Virtual XP client (VMware) on it for testing purposes only.
Or carefully read documentation related to the software you are running. There is decent documentation for Apache and for many other software you might be running. Nobody can do this for you, I'm sorry. Naturally, as in this case, I've read the fine manual first, although I have not found what I was looking for.
You can of course get help on details of software you cant gasp. People here and in many mailing lists will be very helpful since this is all hard stuff sometimes. That is why, I wrote my 1st e-mail. I have expected people would give me some advice. There are plenty of docs related with Zope and Apache, yet I have not found the one I badly need. Any suggestions, then? I do love reading ...
But the most basic stuff has to be done by you. As it has been done before.
Keep care I try.
-- Bye: FeRó //SuSE 8.0 - a foolproof OS
in your zope start script add something like this: -a 127.0.0.1 do this before the "$@" at the end of the last line of the script I looked over your zope.conf file...I don't see the need for any more than this: Rewrite Engine On #Don't route /~<username> directories to zope RewriteCond %{REQUEST_URI} !^/~ #Route everything else through zope RewriteRule ^/(.*) http://127.0.0.1:8080/VirtualHostBase/http/192.168.161.1:80/VirtualHostRoot/... [L,P] This is assuming you are not using any FCGI/PCGI support. Also make sure you have a VHM instance in your zope root. P.S. the last line (starting with RewriteRule and ending with [L,P]) should be only one line. On Tue, 2003-06-24 at 01:56, Fejes Róbert wrote:
Hi!
The answer to my question might be trivial for most of you, yet I have not found it, though I have read docs, faqs and searched even zope.org for it. So, I want only Apache users to reach Zope (port 8080) on a Linux server. Now clients can view http://192.168.161.1:8080/library/welcome.html without giving valid Apache username and password. To make matters worse, there is a separate zope.conf beside httpd.conf in my Linux. How and what to modify then?
Any help is appreciated, indeed. -- Edward Muller
Interlix (http://www.interlix.com) Phone: 417-862-0573 - Cell: 417-844-2435 - Fax: 417-862-0572 Web Hosting - PC Service & Support - Custom Programming - Network Service & Support Specializing in Open Source Solutions
participants (4)
-
Andreas Kaiser -
Edward Muller -
Fejes Róbert -
Tino Wildenhain