Bug#312360: [pkg-horde] Bug#312360: horde3: Here is a proposed
configuration
Ola Lundqvist
opal at debian.org
Wed Aug 23 08:17:42 UTC 2006
Hi
I suggest to add this to the README.Debian file. We already have the
alias part there as far as I can remember.
Regards,
// Ola
On Wed, Aug 23, 2006 at 07:21:01AM +0200, Lionel Elie Mamane wrote:
> On Tue, Aug 22, 2006 at 11:42:08AM -0400, Roberto C. Sanchez wrote:
> > On Tue, Aug 22, 2006 at 03:53:28PM +0200, Jerome Warnier wrote:
>
> >> Please put the attached file as /etc/horde/horde3/apache.conf and
> >> link to it from /etc/apache/conf.d and /etc/apache2/conf.d. It will
> >> work out-of-the-box and make everybody happy.
>
> >> Alias /horde3 "/usr/share/horde3/"
> >> <Directory "/usr/share/horde3">
> >> Options Indexes MultiViews FollowSymLinks
> >> AllowOverride None
> >> Order allow,deny
> >> Allow From all
> >> </Directory>
>
> If we put something automatically, I'd rather put:
>
> Alias ...
> <Directory "/usr/share/horde3">
> Options FollowSymLinks
> AllowOverride Limit
> Order ...
> </Directory>
>
> > NO!!!!!
>
> > Are you crazy? This would make me very upset. I would not want an
> > application which relies on authentication to the system to be
> > accessible over a clear-text protocol my default. That is a
> > decision that must be made by the system administrator. I would
> > consider your suggestion a big "No, No."
>
> It is not *that* bad... By default (in non-configured state) horde
> does not rely on authentication to the system. Just anybody can access
> the configuration interface without authentication. :-) So, when the
> administrator configures reliance on authentication, he can also
> change the Apache-Horde config to require TLS/SSL.
>
> My worry is more the upgrades. People already have a working config,
> we drop the default config in addition to that, hell breaks loose. If
> we can manage to do the "link to it" part only on new installs, not
> upgrades, I'd feel better about it.
>
> --
> Lionel
>
>
> _______________________________________________
> pkg-horde-hackers mailing list
> pkg-horde-hackers at lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-horde-hackers
>
--
--------------------- Ola Lundqvist ---------------------------
/ opal at debian.org Annebergsslingan 37 \
| opal at lysator.liu.se 654 65 KARLSTAD |
| +46 (0)54-10 14 30 +46 (0)70-332 1551 |
| http://www.opal.dhs.org UIN/icq: 4912500 |
\ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 /
---------------------------------------------------------------
More information about the pkg-horde-hackers
mailing list