From 4bbb07e8048ef859cfc29c6b9d221840f2c6aed1 Mon Sep 17 00:00:00 2001 From: "gerv%gerv.net" <> Date: Fri, 16 Jan 2004 06:34:12 +0000 Subject: Phase 1 of a big documentation update before 2.17.6. --- docs/html/http.html | 248 +++++++++------------------------------------------- 1 file changed, 43 insertions(+), 205 deletions(-) (limited to 'docs/html/http.html') diff --git a/docs/html/http.html b/docs/html/http.html index 8f3b76d05..a950acce5 100644 --- a/docs/html/http.html +++ b/docs/html/http.html @@ -4,19 +4,21 @@ >HTTP Server ConfigurationThe Bugzilla Guide - 2.17.5 Development ReleaseThe Bugzilla Guide - 2.17.5 + Development ReleasePrevNext4.4. HTTP Server Configuration4.2. HTTP Server Configuration

The Bugzilla Team recommends Apache when using Bugzilla, however, any web server that can be configured to run Section 5.6.4Section 4.5.4.

4.4.1. Apache 4.2.1. Apache httpd

As mentioned above, the Bugzilla Team recommends Apache for use - with Bugzilla. You will have to make sure that Apache is properly +>You will have to make sure that Apache is properly configured to run the Bugzilla CGI scripts. You also need to make sure that the ./checksetup.pl (shown in Example 4-2 - for the curious) are allowed to override Apache's normal access +> are allowed to override Apache's normal access permissions or else important password information may be exposed to the Internet.

Many Apache installations are not configured to run scripts - anywhere but in the cgi-bin - directory; however, we recommend that Bugzilla not be installed in the +>You need to configure Apache to run .cgi files outside the cgi-bin, otherwise the static - files such as images and JavaScript - will not work correctly. To allow scripts to run in the normal - web space, the following changes should be made to your +> directory. + Open your httpd.conf file. -

To allow files with a .cgi extension to be run, make sure the +> file and make sure the following line exists and is uncommented:

You should modify the <DirectoryIndex> parameter for + the Apache virtual host running your Bugzilla installation to + allow index.cgi as the index page for a + directory, as well as the usual index.html, + index.htm, and so forth.

Example 4-2. .htaccess files for Apache

$BUGZILLA_HOME/.htaccess -

# don't allow people to retrieve non-cgi executable files or our private data
-<FilesMatch ^(.*\.pl|.*localconfig.*|runtests.sh)$>
-  deny from all
-</FilesMatch>
-<FilesMatch ^(localconfig.js|localconfig.rdf)$>
-  allow from all
-</FilesMatch>
-          
-

$BUGZILLA_HOME/data/.htaccess -

# nothing in this directory is retrievable unless overriden by an .htaccess
-# in a subdirectory; the only exception is duplicates.rdf, which is used by
-# duplicates.xul and must be loadable over the web
-deny from all
-<Files duplicates.rdf>
-  allow from all
-</Files>
-          
-

$BUGZILLA_HOME/data/webdot -

# Restrict access to .dot files to the public webdot server at research.att.com 
-# if research.att.com ever changed their IP, or if you use a different
-# webdot server, you'll need to edit this
-<FilesMatch ^[0-9]+\.dot$>
-  Allow from 192.20.225.10
-  Deny from all
-</FilesMatch>
-
-# Allow access by a local copy of 'dot' to .png, .gif, .jpg, and
-# .map files
-<FilesMatch ^[0-9]+\.(png|gif|jpg|map)$>
-  Allow from all
-</FilesMatch>
-
-# And no directory listings, either.
-Deny from all
-          
-

$BUGZILLA_HOME/Bugzilla/.htaccess -

# nothing in this directory is retrievable unless overriden by an .htaccess
-# in a subdirectory
-deny from all
-          
-

$BUGZILLA_HOME/template/.htaccess -

# nothing in this directory is retrievable unless overriden by an .htaccess
-# in a subdirectory
-deny from all
-          
-

4.4.2. Microsoft 4.2.2. Microsoft Internet Information Services directory are secured as described in Section 5.6.4Section 4.5.4.

4.4.3. AOL Server4.2.3. AOL Server

Ben FrantzDale reported success using AOL Server with Bugzilla. He reported his experience and what appears below is based on that. @@ -646,7 +484,7 @@ WIDTH="33%" ALIGN="left" VALIGN="top" >PrevNextOS Specific Installation NotesStep-by-step InstallTroubleshootingOptional Additional Configuration