RE: Why do CGI programs run while not enabled?

Mike,

Lower level settings override higher level ones. You can use a ScriptAlias (my 
personal preference) to allow CGI programs to run. Also, the FilesMatch 
container doesn't buy you anything on OS/400 when the program's in a library 
since you can't run anything but programs.

For example, you could change the config to this (or move Options +ExecCGI to 
the Directory container and get rid of the FilesMatch container):

Options -ExecCGI +FollowSymLinks -SymLinksIfOwnerMatch -Includes 
-IncludesNoExec -Indexes -MultiViews
.
.
.
ScriptAlias /cgibin /QSYS.LIB/CGIBIN.LIB/
<Directory /QSYS.LIB/CGIBIN.LIB/> 
 Allow From all 
</Directory>

And have the same result but will perform better under load since it doesn't 
use regular expressions.

I strongly recommend the book "Professional Apache 2.0" for getting up to speed 
on the Apache based server and the version 2 documentation at 
http://httpd.apache.org is also quite good. IBM's documentation is okay for 
reference material but doesn't do a good job in getting you started.

Matt

-----Original Message-----
From: Mike Skvarenina [mailto:mskvarenina@xxxxxxx]
Sent: Wednesday, October 27, 2004 8:44 AM
To: 'Web Enabling the AS400 / iSeries'
Subject: [WEB400] Why do CGI programs run while not enabled?


In reviewing my Apache configuration files towards the top I found: 

Options -ExecCGI +FollowSymLinks -SymLinksIfOwnerMatch -Includes
-IncludesNoExec -Indexes -MultiViews

Later in my configuration I found:

<Directory /QSYS.LIB/CGIBIN.LIB/> 
 Allow From all 
 <FilesMatch ^(.*)\.PGM$> 
 Options +ExecCGI 
 Allow From all 
 </FilesMatch> 
</Directory>


The documentation indicates that the -ExecCGI option is suppose to indicate
CGI is disabled so I'm not sure how/why having this entry in twice seems to
allow my CGI apps to run.  One thought I had is that by specifying the
-ExecCGI at the top, defaults the server to no CGI, then the +ExecCGI allows
CGI to run only from programs in CGIBIN library?









_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.