Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: ltwally on May 04, 2009, 04:17:15 PM

Title: sysmon contrib on Primary ibay ? Apache question...
Post by: ltwally on May 04, 2009, 04:17:15 PM

I would like to make the sysmon contrib's "panel" available on the Primary ibay's website.  I think it's handy, and would like to be able to easily view it from the outside world as well as the server-manager.

I found the CGI script here: /etc/e-smith/web/functions/sysmon
I then made a softlink to it here: /home/e-smith/files/ibays/Primary/cgi-bin/sysmon
And manually edited /etc/http/conf/httpd.conf to add Options +FollowSymLinks to the Primay CGI directory.
Finally, I ran apachectl graceful.

But I still get a 403.

So, now that I've gone this far, I suppose I should stop and ask if this is not something I should do.  If I get this working, will it create a large security risk?

If not... what am I doing wrong?

Title: Re: sysmon contrib on Primary ibay ? Apache question...
Post by: ltwally on May 05, 2009, 08:58:37 PM

So, I found a way "around" the SymLink problem.

I copied the sysmon script into the Primary ibay's CGI directory.

While it would work, it would always pop up with a warning about the server's self-signed certificate, even though the script wasn't using https.  I dug around, and found that it was because the script was designed to load the following css file:  "/server-common/css/sme_core.css" and the code below redirects that to https.

In the Primary site's VirtualHost in httpd.conf:

Code: [Select]

    RewriteRule ^/server-common(/.*|$)    https://%{HTTP_HOST}/server-common$1 [L,R]
I remedied that by changing it to read:

Code: [Select]

    RewriteRule ^/server-common(/.*|$)    http://%{HTTP_HOST}/server-common$1 [L,R]
Now, I'm fairly certain this is not necessarily insecure, as the only things that can read that directory are still local subnets.

Anyhoo... I'm posting what I've done to see if anyone out there has any feedback on good/bad/ugly.

Thanks

Title: Re: sysmon contrib on Primary ibay ? Apache question...
Post by: cactus on May 05, 2009, 10:16:20 PM

Quote from: ltwally on May 05, 2009, 08:58:37 PM

I remedied that by changing it to read:

Code: [Select]

    RewriteRule ^/server-common(/.*|$)    http://%{HTTP_HOST}/server-common$1 [L,R]

Which makes no sense as it redirects to itself again, AFAIK you can remove that line as well.

Title: Re: sysmon contrib on Primary ibay ? Apache question...
Post by: ltwally on May 05, 2009, 10:22:13 PM

Quote from: cactus on May 05, 2009, 10:16:20 PM

Which makes no sense as it redirects to itself again, AFAIK you can remove that line as well.

Just tested that, and it doesn't seem to cause any issues.  Thanks for the tip.