topic Re: Apache Diretory Listing Generation in Operating System - OpenVMS

Apache Diretory Listing Generation

Jack Trachtman — Wed, 09 Aug 2006 18:26:18 GMT

The following from the httpd.conf file works:

Alias /xxx/ "/SYS$SYSDEVICE/MYDIR/COM/"

Options Indexes MultiViews ExecCGI
AllowOverride None
Order allow,deny
Allow from all

ie if I use a URL of hostname/xxx/ then
Apache will display a directory list of
[MYDIR.COM].

If I change Alias to ScriptAlias, though I
can execute a script by explicitly entering
its name in the URL, when I try to get a dir
listing via the URL of "hostname/xxx/" I get the message "You don't have permission to access /xxx/ on this server."

Why do I need to change to get a dir listing?

Thanks

Re: Apache Diretory Listing Generation

Steven Schweda — Wed, 09 Aug 2006 22:37:51 GMT

I'll assume that "Why" meant "What".

It might depend on the (undisclosed) Apache
version, and I know nothing, but what happens
if you _add_ the ScriptAlias directive
instead of replacing the original Alias with
it?

Re: Apache Diretory Listing Generation

Willem Grooters — Thu, 10 Aug 2006 06:36:59 GMT

"By design"??

"Scriptalias" tells Apache that at that location, files are to eb executed. be it .COM or .EXE. So scanning the directory is not possible.

"Alis" is just what it says. Consider it ths Apache (Unix) equivalent to VMS's logical names.

What you could try is to specify both Alais and Scriptalias. But I would suggest to keep scripts in a separate directory, for security reasons. Non-executable files can be set to Readonly, where executables (.COM, .EXE or whatever is specified) must be R+E for Apache$WWW.

Keep in mind that Apache will only show the highest vesrion, except if explicily specify a lower version. (I had teh same probem and got around that by creating a directory listing in HTML format conating hyperlinks to each file.

Re: Apache Diretory Listing Generation

Jack Trachtman — Thu, 10 Aug 2006 11:14:52 GMT

Apache v2.1

Before throwing out my question, I tried:

- changing all files & their dir's protection to include W:RWED

- using both Alias and ScriptAlias for alias "/xxx/"

- and now, I just tried changing file & dir ownership to match the Apache process

With proper security, this would be a nice feature for me as a sys admin.

Since you think that this is an odd idea, maybe Apache just doesn't support dir listings of ScriptAlias-ed directories.

Re: Apache Diretory Listing Generation

Willem Grooters — Sun, 08 Oct 2006 15:39:21 GMT

Attached an example of creating such a listing. I use this for scanning all my logfiles (aftre these are backed up onto a web-accessable location so I can read them wherever I am) - and it will allow access to nmultiple versions, in both SWS and WASD. It will also get rid of any empty files, if you wish.
It _might_ help you scanning SCripot directories as well.

Use at you wown risk. No warrenties.

WG