Server Side Includes with User Authorization (NCSA AuthUserFile)

Server Side Includes with User Authorization (NCSA AuthUserFile)

Post by Ken Sal » Sat, 03 Jun 1995 04:00:00



I've not been able to get individual authorization (AuthUserFile) to work
_in combination with_ server side includes. Separately, each work
fine, but when used together, after I respond to the authorization
dialogs, I get a File Selection Box prompting me to "Save As (type
text/x-server-parsed-html", rather than to display it in my browser.
(If I do save the file, it is the correct HTML file.)

I really would appreciate help with this.
Details follow. This server is pretty much vanilla with respect to
config files other than what I've mentioned.


Environment:
-----------
        NCSA httpd 1.4
        htpasswd from version httpd _1.3_
        SunOS 4.1.3
        Netscape 1.1b3 and Mosaic 2.4 (same results)

access.conf:
-----------

Directory /some/subdir/of/our/DOCROOT>
AllowOverride None
AuthUserFile /some/other/place/.htpasswd
AuthGroupFile /dev/null
AuthName By Password
AuthType Basic
<Limit GET>
        require user someUserName
</Limit>
</Directory>

srm.conf: (Note we use ".html" rather than ".shtml" for SSI.)
--------

# If you want to use server side includes, or CGI outside
# ScriptAliased directories, uncomment the following lines.
AddType text/x-server-parsed-html .html

access_log:
----------
myHost - someUserName [02/Jun/1995:19:35:29 -0400] "GET /some/subdir/of/our/DOCROOT/file.html HTTP/1.0" 200 4601

error_log: contains nothing related to this.


- Motif FAQ maintainer                 ftp://ftp.cen.com/pub/Motif-FAQ
- MW3: Motif on the World Wide Web     http://www.cen.com/mw3/
- Century Computing, Inc.              http://www.cen.com/

 
 
 

1. NCSA 1.4 Server side include exec for users and security

I've been looking for a way of allowing users to use server side
includes to execute CGI scripts from their personal web pages, but not
allow them to run any other commands.

For example, from ~jbloggs/index.shtml:

<!--#exec cgi="/cgi-bin/counter"-->    should work
<!--#exec cmd="/tmp/catpasswdfile"-->  shouldn't!

Except for disabling the second in the source code (which of course the
next person upgrading the server will forget to do...!) is there any
way that this can be configured?

--

Silicon Graphics Manufacturing S.A. (Switzerland)  Phone : (41-38) 433 535
Chemin des Rochettes 2, CH-2016 Cortaillod         Fax   : (41-38) 433 900

2. How do I turn off le0?

3. Scripts and server-side includes with NCSA server

4. Route command

5. server side includes NCSA problem

6. How to update glibc without breaking dependences

7. Problem with NCSA 1.4 Server Side includes

8. alternative host file?

9. Problem with server side includes NCSA 1.3

10. NCSA httpd 1.4: server-side includes in the output of CGI scripts?

11. NCSA httpd 1.4.2 -- Server Side Includes

12. Server side includes with NCSA httpd1.4

13. Help needed with NCSA 1.4.1 and Server Side Includes