Apache Diretory Listing Generation

[Jack Trachtman]

The following from the httpd.conf file works:

Alias /xxx/ "/SYS$SYSDEVICE/MYDIR/COM/"


Options Indexes MultiViews ExecCGI
AllowOverride None
Order allow,deny
Allow from all


ie if I use a URL of hostname/xxx/ then
Apache will display a directory list of
[MYDIR.COM].

If I change Alias to ScriptAlias, though I
can execute a script by explicitly entering
its name in the URL, when I try to get a dir
listing via the URL of "hostname/xxx/" I get the message "You don't have permission to access /xxx/ on this server."

Why do I need to change to get a dir listing?

Thanks

[Steven Schweda]

I'll assume that "Why" meant "What".

It might depend on the (undisclosed) Apache
version, and I know nothing, but what happens
if you _add_ the ScriptAlias directive
instead of replacing the original Alias with
it?

[Willem Grooters · Accepted solution]

"By design"??

"Scriptalias" tells Apache that at that location, files are to eb executed. be it .COM or .EXE. So scanning the directory is not possible.

"Alis" is just what it says. Consider it ths Apache (Unix) equivalent to VMS's logical names.

What you could try is to specify both Alais and Scriptalias. But I would suggest to keep scripts in a separate directory, for security reasons. Non-executable files can be set to Readonly, where executables (.COM, .EXE or whatever is specified) must be R+E for Apache$WWW.

Keep in mind that Apache will only show the highest vesrion, except if explicily specify a lower version. (I had teh same probem and got around that by creating a directory listing in HTML format conating hyperlinks to each file.

[Jack Trachtman]

Apache v2.1

Before throwing out my question, I tried:

- changing all files & their dir's protection to include W:RWED

- using both Alias and ScriptAlias for alias "/xxx/"

- and now, I just tried changing file & dir ownership to match the Apache process

With proper security, this would be a nice feature for me as a sys admin.

Since you think that this is an odd idea, maybe Apache just doesn't support dir listings of ScriptAlias-ed directories.

[Willem Grooters]

Attached an example of creating such a listing. I use this for scanning all my logfiles (aftre these are backed up onto a web-accessable location so I can read them wherever I am) - and it will allow access to nmultiple versions, in both SWS and WASD. It will also get rid of any empty files, if you wish.
It _might_ help you scanning SCripot directories as well.

Use at you wown risk. No warrenties.

WG