Red Hat NETWORK PROXY SERVER 3.7 - Manuel d'utilisateur télécharger pdf (Page 26)

16 Conﬁguring Your Secure Web Server

tions ofall ofApache’s conﬁguration options. For yourconvenience, short

descriptions of theconﬁguration directivesused in yoursecureweb server

are provided in this manual.

When you are looking through your web server’s conﬁguration ﬁles, be

aware that your default conﬁguration includes both a non-secure web

server and a secure web server. The secure web server runs as a virtual

host, which is conﬁgured in the httpd.conf conﬁguration ﬁle. For more

information about virtual hosts, see section 2.6 on page 36.

Please Note: We do not include FrontPage extensions, which would give

the Red Hat Secure Web Server the capability of working with Microsoft

FrontPage. Including FrontPage support is a problem for two reasons.

First, the Microsoft license prohibits the inclusion of the extensions in a

third party product. Secondly, the patch which would enable Apache to

include FrontPage extensions is a very serious security risk. Much of the

workaround involves granting root access, which is something that you

want to avoid for security’s sake. This type of risk should be unaccept-

able to anyone who is even somewhat concerned with the security of their

secure web server and their website.

2.1 Apache Conﬁguration

/etc/httpd/conf/ is the default location for the Apache web server’s

conﬁgurationﬁles: httpd.conf,srm.conf andaccess.conf. Allthree

of these ﬁles are well-commented and somewhat self-explanatory. You

will probably not need to change the information they contain, but you

should be familiar with their most important conﬁguration options.

If you do need to conﬁgure your secure web server, you simply edit one

of the three ﬁles, then either reload, or stop and start your secure web

server. How to reload, stop and start your server is covered in section 2.7

on page 40.

Before you edit one of the conﬁguration ﬁles, it is a good idea to ﬁrst copy

the original ﬁle to something like httpd.confold (or to any name you

want). Then, if you make a mistakewhile you’re editing the conﬁguration

ﬁle, you’ll have a backup to start over with.

1 2 ... 21 22 23 24 25 26 27 28 29 30 31 ... 100 101

Pas de commentaire

Red Hat NETWORK PROXY SERVER 3.7 - Manuel d'utilisateur Page 26