web/html/applications/rhn-proxy/4.0/cluster.ini | 8
web/html/applications/rhn-proxy/4.0/httpd/cobbler-proxy.conf | 14
web/html/applications/rhn-proxy/4.0/httpd/httpd.conf | 1462 -----------
web/html/applications/rhn-proxy/4.0/httpd/rhn_proxy.conf | 46
web/html/applications/rhn-proxy/4.0/install-rhn-proxy.xml | 833 ------
web/html/applications/rhn-proxy/4.0/jabberd/c2s.xml | 347 --
web/html/applications/rhn-proxy/4.0/jabberd/sm.xml | 379 --
web/html/applications/rhn-proxy/4.0/rhn.conf | 29
web/html/applications/rhn-proxy/4.0/squid.conf | 30
web/html/applications/rhn-proxy/4.1/cluster.ini | 8
web/html/applications/rhn-proxy/4.1/httpd/cobbler-proxy.conf | 14
web/html/applications/rhn-proxy/4.1/httpd/httpd.conf | 1462 -----------
web/html/applications/rhn-proxy/4.1/httpd/rhn_proxy.conf | 46
web/html/applications/rhn-proxy/4.1/install-rhn-proxy.xml | 833 ------
web/html/applications/rhn-proxy/4.1/jabberd/c2s.xml | 347 --
web/html/applications/rhn-proxy/4.1/jabberd/sm.xml | 379 --
web/html/applications/rhn-proxy/4.1/rhn.conf | 29
web/html/applications/rhn-proxy/4.1/squid.conf | 30
web/html/applications/rhn-proxy/4.2/cluster.ini | 8
web/html/applications/rhn-proxy/4.2/httpd/cobbler-proxy.conf | 14
web/html/applications/rhn-proxy/4.2/httpd/httpd.conf | 1462 -----------
web/html/applications/rhn-proxy/4.2/httpd/rhn_proxy.conf | 46
web/html/applications/rhn-proxy/4.2/install-rhn-proxy.xml | 850 ------
web/html/applications/rhn-proxy/4.2/jabberd/c2s.xml | 347 --
web/html/applications/rhn-proxy/4.2/jabberd/sm.xml | 379 --
web/html/applications/rhn-proxy/4.2/rhn.conf | 29
web/html/applications/rhn-proxy/4.2/squid.conf | 34
web/html/network/software/channels/keys/BETA-RPM-GPG-KEY | 27
web/html/network/software/channels/keys/bea_jrockit_key.txt | 25
web/modules/rhn/RHN/DB/Channel.pm | 13
web/spacewalk-web.spec | 41
31 files changed, 24 insertions(+), 9547 deletions(-)
New commits:
commit c681d085e6f7a4a805042b0a5b023696ba90cf48
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 11:14:39 2011 +0200
705363 - remove obscure keys forgotten for ages
diff --git a/web/html/network/software/channels/keys/BETA-RPM-GPG-KEY
b/web/html/network/software/channels/keys/BETA-RPM-GPG-KEY
deleted file mode 100644
index 5332931..0000000
--- a/web/html/network/software/channels/keys/BETA-RPM-GPG-KEY
+++ /dev/null
@@ -1,27 +0,0 @@
------BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1.0.6 (GNU/Linux)
-Comment: For info see
http://www.gnupg.org
-
-mQGiBDySTqsRBACzc7xuCIp10oj5B2PAV4XzDeVxprv/WTMreSNSK+iC0bEz0IBp
-Vnn++qtyiXfH+bGIE9jqZgIEnpttWhUOaU5LhcLFzy+m8NWfngIFP9QfGmGAe9Gd
-LFeAdhj4RmSG/vgr7vDd83Hz22dv403Ar/sliWO4vDOrMmZBG57WGYTWtwCgkMsi
-UUQuJ6slbzKn82w+bYxOlL0EAIylWJGaTkKOTL5DqVR3ik9aT0Dt3FNVYiuhcKBe
-II4E3KOIVA9kO8in1IZjx2gs6K2UV+GsoAVANdfKL7l9O+k+J8OxhE74oycvYJxW
-QzCgXMZkNcvW5wyXwEMcr6TVd/5BGztcMw8oT3/l2MtAEG/vn1XaWToRSO1XDMDz
-+AjUA/4m0mTkN8S4wjzJG8lqN7+quW3UOaiCe8J3SFrrrhE0XbY9cTJI/9nuXHU1
-VjqOSmXQYH2Db7UOroFTBiWhlAedA4O4yuK52AJnvSsHbnJSEmn9rpo5z1Q8F+qI
-mDlzriJdrIrVLeDiUeTlpH3kpG38D7007GhXBV72k1gpMoMcpbQ3UmVkIEhhdCwg
-SW5jLiAoQmV0YSBUZXN0IFNvZnR3YXJlKSA8cmF3aGlkZUByZWRoYXQuY29tPohX
-BBMRAgAXBQI8l5p/BQsHCgMEAxUDAgMWAgECF4AACgkQ/TcmiYl9oHqdeQCfZjw4
-F9sir3XfRAjVe9kYNcQ8hnIAn0WgyT7H5RriWYTOCfauOmd+cAW4iEYEEBECAAYF
-AjyXmqQACgkQIZGAzdtCpg5nDQCfepuRUyuVJvhuQkPWySETYvRw+WoAnjAWhx6q
-0npMx4OE1JGFi8ymKXktuQENBDySTq4QBADKL/mK7S8E3synxISlu7R6fUvu07Oc
-RoX96n0Di6T+BS99hC44XzHjMDhUX2ZzVvYS88EZXoUDDkB/8g7SwZrOJ/QE1zrI
-JmSVciNhSYWwqeT40Evs88ajZUfDiNbS/cSC6oui98iS4vxd7sE7IPY+FSx9vuAR
-xOa9vBnJY/dx0wADBQQAosm+Iltt2uigC6LJzxNOoIdB5r0GqTC1o5sHCeNqXJhU
-ExAG8m74uzMlYVLOpGZi4y4NwwAWvCWC0MWWnnu+LGFy1wKiJKRjhv5F+WkFutY5
-WHV5L44vp9jSIlBCRG+84jheTh8xqhndM9wOfPwWdYYu1vxrB8Tn6kA17PcYfHSI
-RgQYEQIABgUCPJJergAKCRD9NyaJiX2geiCPAJ4nEM4NtI9Uj8lONDk6FU86PmoL
-yACfb68fBd2pWEzLKsOk9imIobHHpzE=
-=gpIn
------END PGP PUBLIC KEY BLOCK-----
diff --git a/web/html/network/software/channels/keys/bea_jrockit_key.txt
b/web/html/network/software/channels/keys/bea_jrockit_key.txt
deleted file mode 100644
index 766f267..0000000
--- a/web/html/network/software/channels/keys/bea_jrockit_key.txt
+++ /dev/null
@@ -1,25 +0,0 @@
------BEGIN PGP PUBLIC KEY BLOCK-----
-Version: GnuPG v1.0.6 (GNU/Linux)
-Comment: For info see
http://www.gnupg.org
-
-mQGiBD2jN4kRBADzUjunzVx8OtqH8RKLDX+pRq6VRq+lxDbWGo2St6Wo1scJkSI2
-CxvwG9fWMOxc8yLXRmx/G4CVijdMhpqlhr4CdW6WqzMIxpKntImgUIugJo/k1MOo
-hoWXaSwKhu+Szcip2Vr14zMjN0tyXNPJrUkOplhBj21i2Rj6SVCpia+gxwCgmLzr
-mq2APaMphwy70jI9f3xvetsEAIUtfQHoUUmUVLq3WuVKy83sFYq+l4BMHI53IlG5
-iBSK62nfGR6vg5QQgbp9K3yJHS/yBalJTpdhRtf6hFtX3A7AJ94U3z+9d6cYC7k5
-cXD5nJbznRoscA2OCbpX8foAwQ7nvncG1DoLNnDd1WCiVC708ASPdIruTk2x5Wkt
-0pFWBADDVqXx404vJlLyh5xS5pLYeax96CzFGKmnOKuevhrAqCgPyGlfcgLSnNS3
-W965cTQTsA79SIte7t2t/kuIHQDq+S1dg0w8wKqHvlnzktP+Kazz9eelximPQhO5
-2+G/cMisStZsbajF3j963XVnismPQ2gerMSBFy5vXGm6GLhy0bQdQkVBIFN5c3Rl
-bXMgPHN1cHBvcnRAYmVhLmNvbT6IVwQTEQIAFwUCPaM3iQULBwoDBAMVAwIDFgIB
-AheAAAoJEKaMHS8coo8/HcgAnivgB+Pz1u8+o8ouXOQCUm3UZ9LbAJ43uIddPW9i
-orpPI7HRgswr7ZLfkLkBDQQ9ozeKEAQAsN+k1LW+GGTxSJ0Mafm2P+eYaQ9qJUdO
-aFuRSYsm6fY50UTYyCq8s8hnk9GUyamA6iBMnn9r4b8p3AbLNSZJd4dQQrRFrJxF
-bUFEwWXQk1d61ysNXgICUSwt9mWSgqZreRd3GMcjB1ZhwJ+dS2HCs30fd7hunG7X
-N1nT+/w2BMsAAwUEAKDclgoMNPWIteK3jvt5OXcGW90WBTFMD1JkRVxde7p42xaN
-aaZqZjYS9C4beGkmP0dCGHpPpSrKxyDIw4wSTsbRPJQ3fUdbYOELsXKMeUdhfJtp
-rXQfqtPt/N5jrMhR/oWMd/Oj8oaBVQSbJIM9hWSkwqyWHmoLe4LifJdoWrYUiEYE
-GBECAAYFAj2jN4oACgkQpowdLxyijz+dkQCfYEwWJCBYK+bbwhIhqQBpRjGQK20A
-nRSxtFZ9W2Ppi5Yvf9Gj04dok5CB
-=GU7w
------END PGP PUBLIC KEY BLOCK-----
commit 54a45c7d014a243cb67b45080d5477b3ecbb8f6c
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 10:49:08 2011 +0200
705363 - Escape percentage symbol in changelog
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index 57169d9..106e882 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -296,7 +296,7 @@ rm -rf $RPM_BUILD_ROOT
- made queries PostgreSQL compatible
* Tue May 17 2011 Miroslav Suchý 1.5.11-1
-- spacewalk-pxt.noarch: W: spelling-error %description -l en_US equlivalent ->
+- spacewalk-pxt.noarch: W: spelling-error %%description -l en_US equlivalent ->
equivalent, equivalence, univalent (msuchy(a)redhat.com)
* Tue May 17 2011 Miroslav Suchý 1.5.10-1
commit fd699999b3034d17b8ae51e235b090787a94b401
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 10:46:36 2011 +0200
705363 - include LICENSE file in spacewalk-html
FIX: spacewalk-html does not content LICENSE file and does not require
spacewalk-base-minimal delivering the file. Distribute LICENSE file with
spacewalk-html.
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index e07e797..57169d9 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -258,6 +258,7 @@ rm -rf $RPM_BUILD_ROOT
%files -n spacewalk-html
%{_var}/www/html/*
+%doc LICENSE
# $Id$
%changelog
commit 9514e4ce1cdf18233acddf81878ebf218d697590
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 10:44:31 2011 +0200
705363 - defattr is not required any more if do not differ from default
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index 2a03cde..e07e797 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -150,7 +150,6 @@ install -m 755 modules/dobby/scripts/check-oracle-space-usage.sh
$RPM_BUILD_ROOT
rm -rf $RPM_BUILD_ROOT
%files -n spacewalk-base
-%defattr(644,root,root,755)
%dir %{perl_vendorlib}/RHN
%dir %{perl_vendorlib}/PXT
%{perl_vendorlib}/RHN.pm
@@ -226,7 +225,6 @@ rm -rf $RPM_BUILD_ROOT
%{_mandir}/man3/RHN::TSDB.3pm.gz
%files -n spacewalk-base-minimal
-%defattr(644,root,root,755)
%dir %{perl_vendorlib}/RHN
%dir %{perl_vendorlib}/PXT
%{perl_vendorlib}/RHN/SessionSwap.pm
@@ -237,7 +235,6 @@ rm -rf $RPM_BUILD_ROOT
%doc LICENSE
%files -n spacewalk-dobby
-%defattr(644,root,root,755)
%attr(755,root,root) %{_bindir}/db-control
%{_mandir}/man1/db-control.1.gz
%{perl_vendorlib}/Dobby.pm
@@ -246,24 +243,20 @@ rm -rf $RPM_BUILD_ROOT
%{perl_vendorlib}/Dobby/
%files -n spacewalk-grail
-%defattr(644,root,root,755)
%{perl_vendorlib}/Grail.pm
%{perl_vendorlib}/Grail/
%files -n spacewalk-pxt
-%defattr(644,root,root,755)
%{perl_vendorlib}/PXT.pm
%attr(640,root,apache) %config %{_sysconfdir}/rhn/default/rhn_web.conf
%{perl_vendorlib}/PXT/
%{_mandir}/man3/PXT::ApacheHandler.3pm.gz
%files -n spacewalk-sniglets
-%defattr(644,root,root,755)
%{perl_vendorlib}/Sniglets.pm
%{perl_vendorlib}/Sniglets/
%files -n spacewalk-html
-%defattr(644,root,root,755)
%{_var}/www/html/*
# $Id$
commit 2b03ce6c6e55a70faecb4a2f40d282f08964a451
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 10:20:15 2011 +0200
705363 - add _smp_mflags macro to make to utilize all CPUs while building
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index 1d0b797..2a03cde 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -125,11 +125,11 @@ This package contains the tag handlers for the PXT templates.
%setup -q
%build
-make -f Makefile.spacewalk-web PERLARGS="INSTALLDIRS=vendor"
+make -f Makefile.spacewalk-web PERLARGS="INSTALLDIRS=vendor" %{?_smp_mflags}
%install
rm -rf $RPM_BUILD_ROOT
-make -C modules install DESTDIR=$RPM_BUILD_ROOT PERLARGS="INSTALLDIRS=vendor"
+make -C modules install DESTDIR=$RPM_BUILD_ROOT PERLARGS="INSTALLDIRS=vendor"
%{?_smp_mflags}
make -C html install PREFIX=$RPM_BUILD_ROOT
find $RPM_BUILD_ROOT -type f -name perllocal.pod -exec rm -f {} \;
commit 9980149b47b2460f065b2e06118338a1a219604a
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 10:16:45 2011 +0200
705363 - require Perl for all subpackages with Perl modules
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index d70119a..1d0b797 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -40,6 +40,7 @@ Requires: spacewalk-pxt
Provides: spacewalk(spacewalk-base-minimal) = %{version}-%{release}
Provides: spacewalk(spacewalk-base) = %{version}-%{release}
Requires: webserver
+Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo
$version))
Obsoletes: rhn-base < 5.3.0
Provides: rhn-base = 5.3.0
@@ -59,6 +60,7 @@ Requires: tomcat5
Requires: tomcat6
%endif
Requires: httpd
+Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo
$version))
Obsoletes: rhn-base-minimal < 5.3.0
Provides: rhn-base-minimal = 5.3.0
@@ -72,6 +74,7 @@ Summary: Perl modules and scripts to administer an Oracle database
Group: Applications/Internet
Requires: spacewalk-base
Requires: httpd
+Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo
$version))
Obsoletes: rhn-dobby < 5.3.0
Provides: rhn-dobby = 5.3.0
@@ -83,6 +86,7 @@ database.
%package -n spacewalk-grail
Summary: Grail, a component framework for Red Hat Network
Requires: spacewalk-base
+Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo
$version))
Group: Applications/Internet
Obsoletes: rhn-grail < 5.3.0
Provides: rhn-grail = 5.3.0
@@ -98,6 +102,7 @@ Requires: spacewalk(spacewalk-base-minimal)
Requires: httpd
Obsoletes: rhn-pxt < 5.3.0
Provides: rhn-pxt = 5.3.0
+Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo
$version))
%description -n spacewalk-pxt
This package is the core software of the new Spacewalk site. It is responsible
@@ -110,6 +115,7 @@ Group: Applications/Internet
Summary: PXT Tag handlers
Obsoletes: rhn-sniglets < 5.3.0
Provides: rhn-sniglets = 5.3.0
+Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo
$version))
%description -n spacewalk-sniglets
This package contains the tag handlers for the PXT templates.
commit 404915fef80a0b38daa1cbd894de3bd41b7ead1a
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 09:50:31 2011 +0200
code cleanup - Proxy 4.x and older are not supported for some time, removing
diff --git a/web/html/applications/rhn-proxy/4.0/cluster.ini
b/web/html/applications/rhn-proxy/4.0/cluster.ini
deleted file mode 100644
index 5cb0ec1..0000000
--- a/web/html/applications/rhn-proxy/4.0/cluster.ini
+++ /dev/null
@@ -1,8 +0,0 @@
-RemoteConfig.0.protocol=https
-RemoteConfig.0.path=/satconfig/cgi-bin/fetch_nocpulseini.cgi
-smonaddr=${session.rhn_monitoring_parent_ip}
-smonfqdn=${session.rhn_monitoring_parent}
-smontestaddr=${session.rhn_monitoring_parent_ip}
-smontestfqdn=${session.rhn_monitoring_parent}
-scoutsharedkey=${session.scout_shared_key}
-PhysNode.1.exists=1
diff --git a/web/html/applications/rhn-proxy/4.0/httpd/cobbler-proxy.conf
b/web/html/applications/rhn-proxy/4.0/httpd/cobbler-proxy.conf
deleted file mode 100644
index e2fdce4..0000000
--- a/web/html/applications/rhn-proxy/4.0/httpd/cobbler-proxy.conf
+++ /dev/null
@@ -1,14 +0,0 @@
-
-<LocationMatch "^/(cblr|cobbler)">
- SetHandler none
-</LocationMatch>
-
-ProxyPass /cobbler_api https://${session.rhn_parent}/cobbler_api
-ProxyPassReverse /cobbler_api https://${session.rhn_parent}/cobbler_api
-
-ProxyPass /cblr https://${session.rhn_parent}/cblr
-ProxyPassReverse /cblr https://${session.rhn_parent}/cblr
-
-ProxyPass /cobbler https://${session.rhn_parent}/cobbler
-ProxyPassReverse /cobbler https://${session.rhn_parent}/cobbler
-
diff --git a/web/html/applications/rhn-proxy/4.0/httpd/httpd.conf
b/web/html/applications/rhn-proxy/4.0/httpd/httpd.conf
deleted file mode 100644
index 7cc80a1..0000000
--- a/web/html/applications/rhn-proxy/4.0/httpd/httpd.conf
+++ /dev/null
@@ -1,1462 +0,0 @@
-#
-# Based upon the NCSA server configuration files originally by Rob McCool.
-#
-# This is the main Apache server configuration file. It contains the
-# configuration directives that give the server its instructions.
-# See <
URL:http://www.apache.org/docs/> for detailed information about
-# the directives.
-#
-# Do NOT simply read the instructions in here without understanding
-# what they do. They're here only as hints or reminders. If you are unsure
-# consult the online docs. You have been warned.
-#
-# After this file is processed, the server will look for and process
-# /etc/httpd/conf/srm.conf and then /etc/httpd/conf/access.conf
-# unless you have overridden these with ResourceConfig and/or
-# AccessConfig directives here.
-#
-# The configuration directives are grouped into three basic sections:
-# 1. Directives that control the operation of the Apache server process as a
-# whole (the 'global environment').
-# 2. Directives that define the parameters of the 'main' or 'default'
server,
-# which responds to requests that aren't handled by a virtual host.
-# These directives also provide default values for the settings
-# of all virtual hosts.
-# 3. Settings for virtual hosts, which allow Web requests to be sent to
-# different IP addresses or hostnames and have them handled by the
-# same Apache server process.
-#
-# Configuration and logfile names: If the filenames you specify for many
-# of the server's control files begin with "/" (or "drive:/" for
Win32), the
-# server will use that explicit path. If the filenames do *not* begin
-# with "/", the value of ServerRoot is prepended -- so
"logs/foo.log"
-# with ServerRoot set to "/usr/local/apache" will be interpreted by the
-# server as "/usr/local/apache/logs/foo.log".
-#
-
-### Section 1: Global Environment
-#
-# The directives in this section affect the overall operation of Apache,
-# such as the number of concurrent requests it can handle or where it
-# can find its configuration files.
-#
-
-#
-# ServerType is either inetd, or standalone. Inetd mode is only supported on
-# Unix platforms.
-#
-ServerType standalone
-
-#
-# ServerRoot: The top of the directory tree under which the server's
-# configuration, error, and log files are kept.
-#
-# NOTE! If you intend to place this on an NFS (or otherwise network)
-# mounted filesystem then please read the LockFile documentation
-# (available at <
URL:http://www.apache.org/docs/mod/core.html#lockfile>);
-# you will save yourself a lot of trouble.
-#
-# Do NOT add a slash at the end of the directory path.
-#
-ServerRoot "/etc/httpd"
-
-#
-# The LockFile directive sets the path to the lockfile used when Apache
-# is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or
-# USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at
-# its default value. The main reason for changing it is if the logs
-# directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL
-# DISK. The PID of the main server process is automatically appended to
-# the filename.
-#
-LockFile /var/run/httpd.lock
-
-#
-# PidFile: The file in which the server should record its process
-# identification number when it starts.
-#
-PidFile /var/run/httpd.pid
-
-#
-# ScoreBoardFile: File used to store internal server process information.
-# Not all architectures require this. But if yours does (you'll know because
-# this file will be created when you run Apache) then you *must* ensure that
-# no two invocations of Apache share the same scoreboard file.
-#
-ScoreBoardFile logs/apache_runtime_status
-
-#
-# In the standard configuration, the server will process httpd.conf (this
-# file, specified by the -f command line option), srm.conf, and access.conf
-# in that order. The latter two files are now distributed empty, as it is
-# recommended that all directives be kept in a single file for simplicity.
-# The commented-out values below are the built-in defaults. You can have the
-# server ignore these files altogether by using "/dev/null" (for Unix) or
-# "nul" (for Win32) for the arguments to the directives.
-#
-#ResourceConfig conf/srm.conf
-#AccessConfig conf/access.conf
-
-#
-# Timeout: The number of seconds before receives and sends time out.
-#
-Timeout 300
-
-#
-# KeepAlive: Whether or not to allow persistent connections (more than
-# one request per connection). Set to "Off" to deactivate.
-#
-KeepAlive Off
-
-#
-# MaxKeepAliveRequests: The maximum number of requests to allow
-# during a persistent connection. Set to 0 to allow an unlimited amount.
-# We recommend you leave this number high, for maximum performance.
-#
-MaxKeepAliveRequests 100
-
-#
-# KeepAliveTimeout: Number of seconds to wait for the next request from the
-# same client on the same connection.
-#
-KeepAliveTimeout 15
-
-#
-# Server-pool size regulation. Rather than making you guess how many
-# server processes you need, Apache dynamically adapts to the load it
-# sees --- that is, it tries to maintain enough server processes to
-# handle the current load, plus a few spare servers to handle transient
-# load spikes (e.g., multiple simultaneous requests from a single
-# Netscape browser).
-#
-# It does this by periodically checking how many servers are waiting
-# for a request. If there are fewer than MinSpareServers, it creates
-# a new spare. If there are more than MaxSpareServers, some of the
-# spares die off. The default values are probably OK for most sites.
-#
-MinSpareServers 5
-MaxSpareServers 20
-
-#
-# Number of servers to start initially --- should be a reasonable ballpark
-# figure.
-#
-StartServers 8
-
-#
-# Limit on total number of servers running, i.e., limit on the number
-# of clients who can simultaneously connect --- if this limit is ever
-# reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW.
-# It is intended mainly as a brake to keep a runaway server from taking
-# the system with it as it spirals down...
-#
-MaxClients 150
-
-#
-# MaxRequestsPerChild: the number of requests each child process is
-# allowed to process before the child dies. The child will exit so
-# as to avoid problems after prolonged use when Apache (and maybe the
-# libraries it uses) leak memory or other resources. On most systems, this
-# isn't really needed, but a few (such as Solaris) do have notable leaks
-# in the libraries. For these platforms, set to something like 10000
-# or so; a setting of 0 means unlimited.
-#
-# NOTE: This value does not include keepalive requests after the initial
-# request per connection. For example, if a child process handles
-# an initial request and 10 subsequent "keptalive" requests, it
-# would only count as 1 request towards this limit.
-#
-MaxRequestsPerChild 1000
-
-#
-# Listen: Allows you to bind Apache to specific IP addresses and/or
-# ports, in addition to the default. See also the <VirtualHost>
-# directive.
-#
-#Listen 3000
-#Listen 12.34.56.78:80
-#Listen 80
-
-#
-# BindAddress: You can support virtual hosts with this option. This directive
-# is used to tell the server which IP address to listen to. It can either
-# contain "*", an IP address, or a fully qualified Internet domain name.
-# See also the <VirtualHost> and Listen directives.
-#
-#BindAddress *
-
-#
-# Dynamic Shared Object (DSO) Support
-#
-# To be able to use the functionality of a module which was built as a DSO you
-# have to place corresponding `LoadModule' lines at this location so the
-# directives contained in it are actually available _before_ they are used.
-# Please read the file
http://httpd.apache.org/docs/dso.html for more
-# details about the DSO mechanism and run `httpd -l' for the list of already
-# built-in (statically linked and thus always available) modules in your httpd
-# binary.
-#
-# Note: The order in which modules are loaded is important. Don't change
-# the order below without expert advice.
-#
-# Example:
-# LoadModule foo_module modules/mod_foo.so
-
-#LoadModule mmap_static_module modules/mod_mmap_static.so
-LoadModule vhost_alias_module modules/mod_vhost_alias.so
-<IfDefine HAVE_BANDWIDTH>
-LoadModule bandwidth_module modules/mod_bandwidth.so
-</IfDefine>
-<IfDefine HAVE_THROTTLE>
-LoadModule throttle_module modules/mod_throttle.so
-</IfDefine>
-LoadModule env_module modules/mod_env.so
-LoadModule config_log_module modules/mod_log_config.so
-LoadModule agent_log_module modules/mod_log_agent.so
-LoadModule referer_log_module modules/mod_log_referer.so
-#LoadModule mime_magic_module modules/mod_mime_magic.so
-LoadModule mime_module modules/mod_mime.so
-#LoadModule negotiation_module modules/mod_negotiation.so
-LoadModule status_module modules/mod_status.so
-LoadModule info_module modules/mod_info.so
-LoadModule includes_module modules/mod_include.so
-LoadModule autoindex_module modules/mod_autoindex.so
-LoadModule dir_module modules/mod_dir.so
-LoadModule cgi_module modules/mod_cgi.so
-LoadModule asis_module modules/mod_asis.so
-LoadModule imap_module modules/mod_imap.so
-LoadModule action_module modules/mod_actions.so
-#LoadModule speling_module modules/mod_speling.so
-LoadModule userdir_module modules/mod_userdir.so
-LoadModule alias_module modules/mod_alias.so
-LoadModule rewrite_module modules/mod_rewrite.so
-LoadModule access_module modules/mod_access.so
-LoadModule auth_module modules/mod_auth.so
-LoadModule anon_auth_module modules/mod_auth_anon.so
-#LoadModule db_auth_module modules/mod_auth_db.so
-#LoadModule auth_any_module modules/mod_auth_any.so
-#LoadModule dbm_auth_module modules/mod_auth_dbm.so
-#LoadModule auth_ldap_module modules/mod_auth_ldap.so
-#LoadModule mysql_auth_module modules/mod_auth_mysql.so
-#LoadModule auth_pgsql_module modules/mod_auth_pgsql.so
-#LoadModule digest_module modules/mod_digest.so
-LoadModule proxy_module modules/libproxy.so
-#LoadModule cern_meta_module modules/mod_cern_meta.so
-LoadModule expires_module modules/mod_expires.so
-LoadModule headers_module modules/mod_headers.so
-#LoadModule usertrack_module modules/mod_usertrack.so
-#LoadModule example_module modules/mod_example.so
-#LoadModule unique_id_module modules/mod_unique_id.so
-LoadModule setenvif_module modules/mod_setenvif.so
-<IfDefine HAVE_PERL>
-LoadModule perl_module modules/libperl.so
-</IfDefine>
-<IfDefine HAVE_PHP>
-LoadModule php_module modules/mod_php.so
-</IfDefine>
-<IfDefine HAVE_PHP3>
-LoadModule php3_module modules/libphp3.so
-</IfDefine>
-<IfDefine HAVE_PHP4>
-LoadModule php4_module modules/libphp4.so
-</IfDefine>
-<IfDefine HAVE_DAV>
-LoadModule dav_module modules/libdav.so
-</IfDefine>
-<IfDefine HAVE_ROAMING>
-LoadModule roaming_module modules/mod_roaming.so
-</IfDefine>
-<IfDefine HAVE_SSL>
-LoadModule ssl_module modules/libssl.so
-</IfDefine>
-<IfDefine HAVE_PUT>
-LoadModule put_module modules/mod_put.so
-</IfDefine>
-<IfDefine HAVE_PYTHON>
-LoadModule python_module modules/mod_python.so
-</IfDefine>
-
-# Reconstruction of the complete module list from all available modules
-# (static and shared ones) to achieve correct module execution order.
-# [WHENEVER YOU CHANGE THE LOADMODULE SECTION ABOVE UPDATE THIS, TOO]
-ClearModuleList
-#AddModule mod_mmap_static.c
-AddModule mod_vhost_alias.c
-<IfDefine HAVE_BANDWIDTH>
-AddModule mod_bandwidth.c
-</IfDefine>
-<IfDefine HAVE_THROTTLE>
-AddModule mod_throttle.c
-</IfDefine>
-AddModule mod_env.c
-AddModule mod_log_config.c
-AddModule mod_log_agent.c
-AddModule mod_log_referer.c
-#AddModule mod_mime_magic.c
-AddModule mod_mime.c
-#AddModule mod_negotiation.c
-AddModule mod_status.c
-AddModule mod_info.c
-AddModule mod_include.c
-AddModule mod_autoindex.c
-AddModule mod_dir.c
-AddModule mod_cgi.c
-AddModule mod_asis.c
-AddModule mod_imap.c
-AddModule mod_actions.c
-#AddModule mod_speling.c
-AddModule mod_userdir.c
-AddModule mod_alias.c
-AddModule mod_rewrite.c
-AddModule mod_access.c
-AddModule mod_auth.c
-AddModule mod_auth_anon.c
-#AddModule mod_auth_db.c
-#AddModule mod_auth_any.c
-#AddModule mod_auth_dbm.c
-#AddModule auth_ldap.c
-#AddModule mod_auth_mysql.c
-#AddModule mod_auth_pgsql.c
-#AddModule mod_digest.c
-AddModule mod_proxy.c
-#AddModule mod_cern_meta.c
-AddModule mod_expires.c
-AddModule mod_headers.c
-#AddModule mod_usertrack.c
-#AddModule mod_example.c
-#AddModule mod_unique_id.c
-AddModule mod_so.c
-AddModule mod_setenvif.c
-<IfDefine HAVE_PERL>
-AddModule mod_perl.c
-</IfDefine>
-<IfDefine HAVE_PHP>
-AddModule mod_php.c
-</IfDefine>
-<IfDefine HAVE_PHP3>
-AddModule mod_php3.c
-</IfDefine>
-<IfDefine HAVE_PHP4>
-AddModule mod_php4.c
-</IfDefine>
-<IfDefine HAVE_DAV>
-AddModule mod_dav.c
-</IfDefine>
-<IfDefine HAVE_ROAMING>
-AddModule mod_roaming.c
-</IfDefine>
-<IfDefine HAVE_SSL>
-AddModule mod_ssl.c
-</IfDefine>
-<IfDefine HAVE_PUT>
-AddModule mod_put.c
-</IfDefine>
-<IfDefine HAVE_PYTHON>
-AddModule mod_python.c
-</IfDefine>
-
-#
-# ExtendedStatus controls whether Apache will generate "full" status
-# information (ExtendedStatus On) or just basic information (ExtendedStatus
-# Off) when the "server-status" handler is called. The default is Off.
-#
-#ExtendedStatus On
-
-### Section 2: 'Main' server configuration
-#
-# The directives in this section set up the values used by the 'main'
-# server, which responds to any requests that aren't handled by a
-# <VirtualHost> definition. These values also provide defaults for
-# any <VirtualHost> containers you may define later in the file.
-#
-# All of these directives may appear inside <VirtualHost> containers,
-# in which case these default settings will be overridden for the
-# virtual host being defined.
-#
-
-#
-# If your ServerType directive (set earlier in the 'Global Environment'
-# section) is set to "inetd", the next few directives don't have any
-# effect since their settings are defined by the inetd configuration.
-# Skip ahead to the ServerAdmin directive.
-#
-
-#
-# Port: The port to which the standalone server listens. For
-# ports < 1023, you will need httpd to be run as root initially.
-#
-Port 80
-
-##
-## SSL Support
-##
-## When we also provide SSL we have to listen to the
-## standard HTTP port (see above) and to the HTTPS port
-##
-<IfDefine HAVE_SSL>
-Listen 80
-Listen 443
-</IfDefine>
-
-#
-# If you wish httpd to run as a different user or group, you must run
-# httpd as root initially and it will switch.
-#
-# User/Group: The name (or #number) of the user/group to run httpd as.
-# . On SCO (ODT 3) use "User nouser" and "Group nogroup".
-# . On HPUX you may not be able to use shared memory as nobody, and the
-# suggested workaround is to create a user www and use that user.
-# NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
-# when the value of (unsigned)Group is above 60000;
-# don't use Group "#-1" on these systems!
-#
-User apache
-Group apache
-
-#
-# ServerAdmin: Your address, where problems with the server should be
-# e-mailed. This address appears on some server-generated pages, such
-# as error documents.
-#
-ServerAdmin root@localhost
-
-#
-# ServerName allows you to set a host name which is sent back to clients for
-# your server if it's different than the one the program would get (i.e., use
-# "www" instead of the host's real name).
-#
-# Note: You cannot just invent host names and hope they work. The name you
-# define here must be a valid DNS name for your host. If you don't understand
-# this, ask your network administrator.
-# If your host doesn't have a registered DNS name, enter its IP address here.
-# You will have to access it by its address (e.g.,
http://123.45.67.89/)
-# anyway, and this will make redirections work in a sensible way.
-#
-# 127.0.0.1 is the TCP/IP local loop-back address, often named localhost. Your
-# machine always knows itself by this address. If you use Apache strictly for
-# local testing and development, you may use 127.0.0.1 as the server name.
-#
-#ServerName localhost
-
-#
-# DocumentRoot: The directory out of which you will serve your
-# documents. By default, all requests are taken from this directory, but
-# symbolic links and aliases may be used to point to other locations.
-#
-DocumentRoot "/var/www/html"
-
-#
-# Each directory to which Apache has access, can be configured with respect
-# to which services and features are allowed and/or disabled in that
-# directory (and its subdirectories).
-#
-# First, we configure the "default" to be a very restrictive set of
-# permissions.
-#
-<Directory />
- Options FollowSymLinks
- AllowOverride None
-</Directory>
-
-#
-# Note that from this point forward you must specifically allow
-# particular features to be enabled - so if something's not working as
-# you might expect, make sure that you have specifically enabled it
-# below.
-#
-
-#
-# This should be changed to whatever you set DocumentRoot to.
-#
-<Directory "/var/www/html">
-
-#
-# This may also be "None", "All", or any combination of
"Indexes",
-# "Includes", "FollowSymLinks", "ExecCGI", or
"MultiViews".
-#
-# Note that "MultiViews" must be named *explicitly* --- "Options
All"
-# doesn't give it to you.
-#
- Options Indexes FollowSymLinks
-
-#
-# This controls which options the .htaccess files in directories can
-# override. Can also be "All", or any combination of "Options",
"FileInfo",
-# "AuthConfig", and "Limit"
-#
- AllowOverride None
-
-#
-# Controls who can get stuff from this server.
-#
- Order allow,deny
- Allow from all
-</Directory>
-
-#
-# UserDir: The name of the directory which is appended onto a user's home
-# directory if a ~user request is received.
-#
-# The path to the end user account 'public_html' directory must be
-# accessible to the webserver userid. This usually means that ~userid
-# must have permissions of 711, ~userid/public_html must have permissions
-# of 755, and documents contained therein must be world-readable.
-# Otherwise, the client will only receive a "403 Forbidden" message.
-#
-# See also:
http://httpd.apache.org/docs/misc/FAQ.html#forbidden
-#
-<IfModule mod_userdir.c>
- UserDir public_html
-</IfModule>
-
-#
-# Control access to UserDir directories. The following is an example
-# for a site where these directories are restricted to read-only.
-#
-#<Directory /home/*/public_html>
-# AllowOverride FileInfo AuthConfig Limit
-# Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
-# <Limit GET POST OPTIONS PROPFIND>
-# Order allow,deny
-# Allow from all
-# </Limit>
-# <LimitExcept GET POST OPTIONS PROPFIND>
-# Order deny,allow
-# Deny from all
-# </LimitExcept>
-#</Directory>
-
-#
-# DirectoryIndex: Name of the file or files to use as a pre-written HTML
-# directory index. Separate multiple entries with spaces.
-#
-<IfModule mod_dir.c>
- DirectoryIndex _rhn_proxy/index.html index.html index.htm index.shtml index.php
index.php4 index.php3 index.phtml index.cgi
-</IfModule>
-
-#
-# AccessFileName: The name of the file to look for in each directory
-# for access control information.
-#
-AccessFileName .htaccess
-
-#
-# The following lines prevent .htaccess files from being viewed by
-# Web clients. Since .htaccess files often contain authorization
-# information, access is disallowed for security reasons. Comment
-# these lines out if you want Web visitors to see the contents of
-# .htaccess files. If you change the AccessFileName directive above,
-# be sure to make the corresponding changes here.
-#
-# Also, folks tend to use names such as .htpasswd for password
-# files, so this will protect those as well.
-#
-<Files ~ "^\.ht">
- Order allow,deny
- Deny from all
- Satisfy All
-</Files>
-
-#
-# CacheNegotiatedDocs: By default, Apache sends "Pragma: no-cache" with each
-# document that was negotiated on the basis of content. This asks proxy
-# servers not to cache the document. Uncommenting the following line disables
-# this behavior, and proxies will be allowed to cache the documents.
-#
-#CacheNegotiatedDocs
-
-#
-# UseCanonicalName: (new for 1.3) With this setting turned on, whenever
-# Apache needs to construct a self-referencing URL (a URL that refers back
-# to the server the response is coming from) it will use ServerName and
-# Port to form a "canonical" name. With this setting off, Apache will
-# use the hostname:port that the client supplied, when possible. This
-# also affects SERVER_NAME and SERVER_PORT in CGI scripts.
-#
-UseCanonicalName On
-
-#
-# TypesConfig describes where the mime.types file (or equivalent) is
-# to be found.
-#
-<IfModule mod_mime.c>
- TypesConfig /etc/mime.types
-</IfModule>
-
-#
-# DefaultType is the default MIME type the server will use for a document
-# if it cannot otherwise determine one, such as from filename extensions.
-# If your server contains mostly text or HTML documents, "text/plain" is
-# a good value. If most of your content is binary, such as applications
-# or images, you may want to use "application/octet-stream" instead to
-# keep browsers from trying to display binary files as though they are
-# text.
-#
-DefaultType text/plain
-
-#
-# The mod_mime_magic module allows the server to use various hints from the
-# contents of the file itself to determine its type. The MIMEMagicFile
-# directive tells the module where the hint definitions are located.
-# mod_mime_magic is not part of the default server (you have to add
-# it yourself with a LoadModule [see the DSO paragraph in the 'Global
-# Environment' section], or recompile the server and include mod_mime_magic
-# as part of the configuration), so it's enclosed in an <IfModule> container.
-# This means that the MIMEMagicFile directive will only be processed if the
-# module is part of the server.
-#
-<IfModule mod_mime_magic.c>
-# MIMEMagicFile /usr/share/magic.mime
- MIMEMagicFile conf/magic
-</IfModule>
-
-#
-# HostnameLookups: Log the names of clients or just their IP addresses
-# e.g.,
www.apache.org (on) or 204.62.129.132 (off).
-# The default is off because it'd be overall better for the net if people
-# had to knowingly turn this feature on, since enabling it means that
-# each client request will result in AT LEAST one lookup request to the
-# nameserver.
-#
-HostnameLookups Off
-
-#
-# ErrorLog: The location of the error log file.
-# If you do not specify an ErrorLog directive within a <VirtualHost>
-# container, error messages relating to that virtual host will be
-# logged here. If you *do* define an error logfile for a <VirtualHost>
-# container, that host's errors will be logged there and not here.
-#
-ErrorLog logs/error_log
-
-#
-# LogLevel: Control the number of messages logged to the error_log.
-# Possible values include: debug, info, notice, warn, error, crit,
-# alert, emerg.
-#
-LogLevel warn
-
-#
-# The following directives define some format nicknames for use with
-# a CustomLog directive (see below).
-#
-LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\"" combined
-LogFormat "%h %l %u %t \"%r\" %>s %b" common
-LogFormat "%{Referer}i -> %U" referer
-LogFormat "%{User-agent}i" agent
-
-#
-# The location and format of the access logfile (Common Logfile Format).
-# If you do not define any access logfiles within a <VirtualHost>
-# container, they will be logged here. Contrariwise, if you *do*
-# define per-<VirtualHost> access logfiles, transactions will be
-# logged therein and *not* in this file.
-#
-# CustomLog /var/log/httpd/access_log common
-CustomLog logs/access_log combined
-
-#
-# If you would like to have agent and referer logfiles, uncomment the
-# following directives.
-#
-#CustomLog logs/referer_log referer
-#CustomLog logs/agent_log agent
-
-#
-# If you prefer a single logfile with access, agent, and referer information
-# (Combined Logfile Format) you can use the following directive.
-#
-#CustomLog logs/access_log combined
-
-#
-# Optionally add a line containing the server version and virtual host
-# name to server-generated pages (error documents, FTP directory listings,
-# mod_status and mod_info output etc., but not CGI generated documents).
-# Set to "EMail" to also include a mailto: link to the ServerAdmin.
-# Set to one of: On | Off | EMail
-#
-ServerSignature On
-
-# EBCDIC configuration:
-# (only for mainframes using the EBCDIC codeset, currently one of:
-# Fujitsu-Siemens' BS2000/OSD, IBM's OS/390 and IBM's TPF)!!
-# The following default configuration assumes that "text files"
-# are stored in EBCDIC (so that you can operate on them using the
-# normal POSIX tools like grep and sort) while "binary files" are
-# stored with identical octets as on an ASCII machine.
-#
-# The directives are evaluated in configuration file order, with
-# the EBCDICConvert directives applied before EBCDICConvertByType.
-#
-# If you want to have ASCII HTML documents and EBCDIC HTML documents
-# at the same time, you can use the file extension to force
-# conversion off for the ASCII documents:
-# > AddType text/html .ahtml
-# > EBCDICConvert Off=InOut .ahtml
-#
-# EBCDICConvertByType On=InOut text/* message/* multipart/*
-# EBCDICConvertByType On=In application/x-www-form-urlencoded
-# EBCDICConvertByType On=InOut application/postscript model/vrml
-# EBCDICConvertByType Off=InOut */*
-
-
-#
-# Aliases: Add here as many aliases as you need (with no limit). The format is
-# Alias fakename realname
-#
-<IfModule mod_alias.c>
-
- #
- # Note that if you include a trailing / on fakename then the server will
- # require it to be present in the URL. So "/icons" isn't aliased in
this
- # example, only "/icons/". If the fakename is slash-terminated, then the
- # realname must also be slash terminated, and if the fakename omits the
- # trailing slash, the realname must also omit it.
- #
- Alias /icons/ "/var/www/icons/"
-
- <Directory "/var/www/icons">
- Options Indexes MultiViews
- AllowOverride None
- Order allow,deny
- Allow from all
- </Directory>
-
- # This Alias will project the on-line documentation tree under /manual/
- # even if you change the DocumentRoot. Comment it if you don't want to
- # provide access to the on-line documentation.
- #
- # Alias /manual/ "/etc/httpd/htdocs/manual/"
- #
- # <Directory "/etc/httpd/htdocs/manual">
- # Options Indexes FollowSymlinks MultiViews
- # AllowOverride None
- # Order allow,deny
- # Allow from all
- # </Directory>
-
- #
- # ScriptAlias: This controls which directories contain server scripts.
- # ScriptAliases are essentially the same as Aliases, except that
- # documents in the realname directory are treated as applications and
- # run by the server when requested rather than as documents sent to the client.
- # The same rules about trailing "/" apply to ScriptAlias directives as to
- # Alias.
- #
- ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
-
- #
- # "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
- # CGI directory exists, if you have that configured.
- #
- <Directory "/var/www/cgi-bin">
- AllowOverride None
- Options None
- Order allow,deny
- Allow from all
- </Directory>
-
-</IfModule>
-# End of aliases.
-
-#
-# Redirect allows you to tell clients about documents which used to exist in
-# your server's namespace, but do not anymore. This allows you to tell the
-# clients where to look for the relocated document.
-# Format: Redirect old-URI new-URL
-#
-
-#
-# Directives controlling the display of server-generated directory listings.
-#
-<IfModule mod_autoindex.c>
-
- #
- # FancyIndexing is whether you want fancy directory indexing or standard
- #
- IndexOptions FancyIndexing NameWidth=*
-
- #
- # AddIcon* directives tell the server which icon to show for different
- # files or filename extensions. These are only displayed for
- # FancyIndexed directories.
- #
- AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
-
- AddIconByType (TXT,/icons/text.gif) text/*
- AddIconByType (IMG,/icons/image2.gif) image/*
- AddIconByType (SND,/icons/sound2.gif) audio/*
- AddIconByType (VID,/icons/movie.gif) video/*
-
- AddIcon /icons/binary.gif .bin .exe
- AddIcon /icons/binhex.gif .hqx
- AddIcon /icons/tar.gif .tar
- AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
- AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
- AddIcon /icons/a.gif .ps .ai .eps
- AddIcon /icons/layout.gif .html .shtml .htm .pdf
- AddIcon /icons/text.gif .txt
- AddIcon /icons/c.gif .c
- AddIcon /icons/p.gif .pl .py
- AddIcon /icons/f.gif .for
- AddIcon /icons/dvi.gif .dvi
- AddIcon /icons/uuencoded.gif .uu
- AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
- AddIcon /icons/tex.gif .tex
- AddIcon /icons/bomb.gif core
-
- AddIcon /icons/back.gif ..
- AddIcon /icons/hand.right.gif README
- AddIcon /icons/folder.gif ^^DIRECTORY^^
- AddIcon /icons/blank.gif ^^BLANKICON^^
-
- #
- # DefaultIcon is which icon to show for files which do not have an icon
- # explicitly set.
- #
- DefaultIcon /icons/unknown.gif
-
- #
- # AddDescription allows you to place a short description after a file in
- # server-generated indexes. These are only displayed for FancyIndexed
- # directories.
- # Format: AddDescription "description" filename
- #
- #AddDescription "GZIP compressed document" .gz
- #AddDescription "tar archive" .tar
- #AddDescription "GZIP compressed tar archive" .tgz
-
- #
- # ReadmeName is the name of the README file the server will look for by
- # default, and append to directory listings.
- #
- # HeaderName is the name of a file which should be prepended to
- # directory indexes.
- #
- # If MultiViews are amongst the Options in effect, the server will
- # first look for name.html and include it if found. If name.html
- # doesn't exist, the server will then look for name.txt and include
- # it as plaintext if found.
- #
- ReadmeName README
- HeaderName HEADER
-
- #
- # IndexIgnore is a set of filenames which directory indexing should ignore
- # and not include in the listing. Shell-style wildcarding is permitted.
- #
- IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
-
-</IfModule>
-# End of indexing directives.
-
-#
-# Document types.
-#
-<IfModule mod_mime.c>
-
- #
- # AddEncoding allows you to have certain browsers (Mosaic/X 2.1+) uncompress
- # information on the fly. Note: Not all browsers support this.
- # Despite the name similarity, the following Add* directives have nothing
- # to do with the FancyIndexing customization directives above.
- #
- AddEncoding x-compress Z
- AddEncoding x-gzip gz tgz
-
- #
- # AddLanguage allows you to specify the language of a document. You can
- # then use content negotiation to give a browser a file in a language
- # it can understand.
- #
- # Note 1: The suffix does not have to be the same as the language
- # keyword --- those with documents in Polish (whose net-standard
- # language code is pl) may wish to use "AddLanguage pl .po" to
- # avoid the ambiguity with the common suffix for perl scripts.
- #
- # Note 2: The example entries below illustrate that in quite
- # some cases the two character 'Language' abbreviation is not
- # identical to the two character 'Country' code for its country,
- # E.g. 'Danmark/dk' versus 'Danish/da'.
- #
- # Note 3: In the case of 'ltz' we violate the RFC by using a three char
- # specifier. But there is 'work in progress' to fix this and get
- # the reference data for rfc1766 cleaned up.
- #
- # Danish (da) - Dutch (nl) - English (en) - Estonian (ee)
- # French (fr) - German (de) - Greek-Modern (el)
- # Italian (it) - Korean (kr) - Norwegian (no) - Norwegian Nynorsk (nn)
- # Portugese (pt) - Luxembourgeois* (ltz)
- # Spanish (es) - Swedish (sv) - Catalan (ca) - Czech(cz)
- # Polish (pl) - Brazilian Portuguese (pt-br) - Japanese (ja)
- # Russian (ru)
- #
- AddLanguage da .dk
- AddLanguage nl .nl
- AddLanguage en .en
- AddLanguage et .ee
- AddLanguage fr .fr
- AddLanguage de .de
- AddLanguage el .el
- AddLanguage he .he
- AddCharset ISO-8859-8 .iso8859-8
- AddLanguage it .it
- AddLanguage ja .ja
- AddCharset ISO-2022-JP .jis
- AddLanguage kr .kr
- AddCharset ISO-2022-KR .iso-kr
- AddLanguage nn .nn
- AddLanguage no .no
- AddLanguage pl .po
- AddCharset ISO-8859-2 .iso-pl
- AddLanguage pt .pt
- AddLanguage pt-br .pt-br
- AddLanguage ltz .lu
- AddLanguage ca .ca
- AddLanguage es .es
- AddLanguage sv .se
- AddLanguage cz .cz
- AddLanguage ru .ru
- AddLanguage zh-tw .tw
- AddLanguage tw .tw
- AddCharset Big5 .Big5 .big5
- AddCharset WINDOWS-1251 .cp-1251
- AddCharset CP866 .cp866
- AddCharset ISO-8859-5 .iso-ru
- AddCharset KOI8-R .koi8-r
- AddCharset UCS-2 .ucs2
- AddCharset UCS-4 .ucs4
- AddCharset UTF-8 .utf8
-
- # LanguagePriority allows you to give precedence to some languages
- # in case of a tie during content negotiation.
- #
- # Just list the languages in decreasing order of preference. We have
- # more or less alphabetized them here. You probably want to change this.
- #
- <IfModule mod_negotiation.c>
- LanguagePriority en da nl et fr de el it ja kr no pl pt pt-br ru ltz ca es sv tw
- </IfModule>
-
- #
- # AddType allows you to tweak mime.types without actually editing it, or to
- # make certain files to be certain types.
- #
- # For example, the PHP 3.x module (not part of the Apache distribution - see
- #
http://www.php.net) will typically use:
- #
- <IfModule mod_php3.c>
- AddType application/x-httpd-php3 .php3
- AddType application/x-httpd-php3-source .phps
- </IfModule>
- #
- # And for PHP 4.x, use:
- #
- <IfModule mod_php4.c>
- AddType application/x-httpd-php .php .php4 .php3 .phtml
- AddType application/x-httpd-php-source .phps
- </IfModule>
-
- #
- # For PHP/FI (PHP2), use:
- #
- <IfModule mod_php.c>
- AddType application/x-httpd-php .phtml
- </IfModule>
-
- AddType application/x-tar .tgz
-
- #
- # AddHandler allows you to map certain file extensions to "handlers",
- # actions unrelated to filetype. These can be either built into the server
- # or added with the Action command (see below)
- #
- # If you want to use server side includes, or CGI outside
- # ScriptAliased directories, uncomment the following lines.
- #
- # To use CGI scripts:
- #
- #AddHandler cgi-script .cgi
-
- #
- # To use server-parsed HTML files
- #
- AddType text/html .shtml
- AddHandler server-parsed .shtml
-
- #
- # Uncomment the following line to enable Apache's send-asis HTTP file
- # feature
- #
- #AddHandler send-as-is asis
-
- #
- # If you wish to use server-parsed imagemap files, use
- #
- AddHandler imap-file map
-
- #
- # To enable type maps, you might want to use
- #
- #AddHandler type-map var
-
-</IfModule>
-# End of document types.
-
-#
-# Action lets you define media types that will execute a script whenever
-# a matching file is called. This eliminates the need for repeated URL
-# pathnames for oft-used CGI file processors.
-# Format: Action media/type /cgi-script/location
-# Format: Action handler-name /cgi-script/location
-#
-
-#
-# MetaDir: specifies the name of the directory in which Apache can find
-# meta information files. These files contain additional HTTP headers
-# to include when sending the document
-#
-#MetaDir .web
-
-#
-# MetaSuffix: specifies the file name suffix for the file containing the
-# meta information.
-#
-#MetaSuffix .meta
-
-#
-# Customizable error response (Apache style)
-# these come in three flavors
-#
-# 1) plain text
-#ErrorDocument 500 "The server made a boo boo.
-# n.b. the single leading (") marks it as text, it does not get output
-#
-# 2) local redirects
-#ErrorDocument 404 /missing.html
-# to redirect to local URL /missing.html
-#ErrorDocument 404 /cgi-bin/missing_handler.pl
-# N.B.: You can redirect to a script or a document using server-side-includes.
-#
-# 3) external redirects
-#ErrorDocument 402
http://some.other_server.com/subscription_info.html
-# N.B.: Many of the environment variables associated with the original
-# request will *not* be available to such a script.
-
-#
-# Customize behaviour based on the browser
-#
-<IfModule mod_setenvif.c>
-
- #
- # The following directives modify normal HTTP response behavior.
- # The first directive disables keepalive for Netscape 2.x and browsers that
- # spoof it. There are known problems with these browser implementations.
- # The second directive is for Microsoft Internet Explorer 4.0b2
- # which has a broken HTTP/1.1 implementation and does not properly
- # support keepalive when it is used on 301 or 302 (redirect) responses.
- #
- BrowserMatch "Mozilla/2" nokeepalive
- BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
-
- #
- # The following directive disables HTTP/1.1 responses to browsers which
- # are in violation of the HTTP/1.0 spec by not being able to grok a
- # basic 1.1 response.
- #
- BrowserMatch "RealPlayer 4\.0" force-response-1.0
- BrowserMatch "Java/1\.0" force-response-1.0
- BrowserMatch "JDK/1\.0" force-response-1.0
-
-</IfModule>
-# End of browser customization directives
-
-#
-# If the perl module is installed, this will allow execution of mod_perl
-# to compile your scripts to subroutines which it will execute directly,
-# avoiding the costly compile process for most requests.
-#
-#<IfModule mod_perl.c>
-# Alias /perl /var/www/perl
-# <Directory /var/www/perl>
-# SetHandler perl-script
-# PerlHandler Apache::Registry
-# Options +ExecCGI
-# </Directory>
-#</IfModule>
-
-#
-# Allow http put (such as Netscape Gold's publish feature)
-# Use htpasswd to generate /etc/httpd/conf/passwd.
-#
-#<IfModule mod_put.c>
-# Alias /upload /tmp
-# <Directory /tmp>
-# EnablePut On
-# AuthType Basic
-# AuthName Temporary
-# AuthUserFile /etc/httpd/conf/passwd
-# EnableDelete Off
-# umask 007
-# <Limit PUT>
-# require valid-user
-# </Limit>
-# </Directory>
-#</IfModule>
-
-#
-# Allow server status reports, with the URL of
http://servername/server-status
-# Change the ".your_domain.com" to match your domain to enable.
-#
-#<Location /server-status>
-# SetHandler server-status
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-#</Location>
-
-#
-# Allow remote server configuration reports, with the URL of
-#
http://servername/server-info (requires that mod_info.c be loaded).
-# Change the ".your_domain.com" to match your domain to enable.
-#
-#<Location /server-info>
-# SetHandler server-info
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-#</Location>
-
-#
-# Allow access to local system documentation from localhost
-#
-Alias /doc/ /usr/share/doc/
-<Directory /usr/share/doc>
- order deny,allow
- deny from all
- allow from localhost .localdomain
- Options Indexes FollowSymLinks
-</Directory>
-
-#
-# There have been reports of people trying to abuse an old bug from pre-1.1
-# days. This bug involved a CGI script distributed as a part of Apache.
-# By uncommenting these lines you can redirect these attacks to a logging
-# script on
phf.apache.org. Or, you can record them yourself, using the script
-# support/phf_abuse_log.cgi.
-#
-#<Location /cgi-bin/phf*>
-# Deny from all
-# ErrorDocument 403
http://phf.apache.org/phf_abuse_log.cgi
-#</Location>
-
-#
-# Proxy Server directives. Uncomment the following lines to
-# enable the proxy server:
-#
-#<IfModule mod_proxy.c>
-# ProxyRequests On
-
-# <Directory proxy:*>
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-# </Directory>
-
- #
- # Enable/disable the handling of HTTP/1.1 "Via:" headers.
- # ("Full" adds the server version; "Block" removes all outgoing
Via: headers)
- # Set to one of: Off | On | Full | Block
- #
-# ProxyVia On
-
- #
- # To enable the cache as well, edit and uncomment the following lines:
- # (no caching without CacheRoot)
- #
-# CacheRoot "/var/cache/httpd"
-# CacheSize 5
-# CacheGcInterval 4
-# CacheMaxExpire 24
-# CacheLastModifiedFactor 0.1
-# CacheDefaultExpire 1
-# NoCache
a_domain.com another_domain.edu joes.garage_sale.com
-
-#</IfModule>
-# End of proxy directives.
-
-### Section 3: Virtual Hosts
-#
-# VirtualHost: If you want to maintain multiple domains/hostnames on your
-# machine you can setup VirtualHost containers for them. Most configurations
-# use only name-based virtual hosts so the server doesn't need to worry about
-# IP addresses. This is indicated by the asterisks in the directives below.
-#
-# Please see the documentation at <
URL:http://www.apache.org/docs/vhosts/>
-# for further details before you try to setup virtual hosts.
-#
-# You may use the command line option '-S' to verify your virtual host
-# configuration.
-
-#
-# Use name-based virtual hosting.
-#
-#NameVirtualHost *
-
-#
-# VirtualHost example:
-# Almost any Apache directive may go into a VirtualHost container.
-# The first VirtualHost section is used for requests without a known
-# server name.
-#
-#<VirtualHost *>
-# ServerAdmin webmaster(a)dummy-host.example.com
-# DocumentRoot /www/docs/dummy-host.example.com
-# ServerName
dummy-host.example.com
-# ErrorLog logs/dummy-host.example.com-error_log
-# CustomLog logs/dummy-host.example.com-access_log common
-#</VirtualHost>
-
-#<VirtualHost _default_:*>
-#</VirtualHost>
-
-##
-## SSL Global Context
-##
-## All SSL configuration in this context applies both to
-## the main server and all SSL-enabled virtual hosts.
-##
-
-#
-# Some MIME-types for downloading Certificates and CRLs
-#
-<IfDefine HAVE_SSL>
-AddType application/x-x509-ca-cert .crt
-AddType application/x-pkcs7-crl .crl
-</IfDefine>
-
-<IfModule mod_ssl.c>
-
-# Pass Phrase Dialog:
-# Configure the pass phrase gathering process.
-# The filtering dialog program (`builtin' is a internal
-# terminal dialog) has to provide the pass phrase on stdout.
-SSLPassPhraseDialog builtin
-
-# Inter-Process Session Cache:
-# Configure the SSL Session Cache: First the mechanism
-# to use and second the expiring timeout (in seconds).
-#SSLSessionCache none
-#SSLSessionCache shmht:logs/ssl_scache(512000)
-SSLSessionCache shmcb:logs/ssl_scache(512000)
-#SSLSessionCache shm:logs/ssl_scache(512000)
-SSLSessionCacheTimeout 300
-
-# Semaphore:
-# Configure the path to the mutual exclusion semaphore the
-# SSL engine uses internally for inter-process synchronization.
-SSLMutex file:logs/ssl_mutex
-
-# Pseudo Random Number Generator (PRNG):
-# Configure one or more sources to seed the PRNG of the
-# SSL library. The seed data should be of good random quality.
-# WARNING! On some platforms /dev/random blocks if not enough entropy
-# is available. This means you then cannot use the /dev/random device
-# because it would lead to very long connection times (as long as
-# it requires to make more entropy available). But usually those
-# platforms additionally provide a /dev/urandom device which doesn't
-# block. So, if available, use this one instead. Read the mod_ssl User
-# Manual for more details.
-SSLRandomSeed startup builtin
-SSLRandomSeed connect builtin
-#SSLRandomSeed startup file:/dev/random 512
-#SSLRandomSeed startup file:/dev/urandom 512
-#SSLRandomSeed connect file:/dev/random 512
-#SSLRandomSeed connect file:/dev/urandom 512
-
-# Logging:
-# The home of the dedicated SSL protocol logfile. Errors are
-# additionally duplicated in the general error log file. Put
-# this somewhere where it cannot be used for symlink attacks on
-# a real server (i.e. somewhere where only root can write).
-# Log levels are (ascending order: higher ones include lower ones):
-# none, error, warn, info, trace, debug.
-SSLLog logs/ssl_engine_log
-SSLLogLevel error
-
-</IfModule>
-
-<IfDefine HAVE_SSL>
-
-##
-## SSL Virtual Host Context
-##
-
-<VirtualHost _default_:443>
-
-# General setup for the virtual host
-#DocumentRoot "/etc/httpd/htdocs"
-#ServerName new.host.name
-#ServerAdmin you(a)your.address
-ErrorLog logs/error_log
-TransferLog logs/access_log
-
-# SSL Engine Switch:
-# Enable/Disable SSL for this virtual host.
-SSLEngine on
-
-# SSL Cipher Suite:
-# List the ciphers that the client is permitted to negotiate.
-# See the mod_ssl documentation for a complete list.
-#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
-
-# Server Certificate:
-# Point SSLCertificateFile at a PEM encoded certificate. If
-# the certificate is encrypted, then you will be prompted for a
-# pass phrase. Note that a kill -HUP will prompt again. A test
-# certificate can be generated with `make certificate' under
-# built time. Keep in mind that if you've both a RSA and a DSA
-# certificate you can configure both in parallel (to also allow
-# the use of DSA ciphers, etc.)
-SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
-#SSLCertificateFile /etc/httpd/conf/ssl.crt/server-dsa.crt
-
-# Server Private Key:
-# If the key is not combined with the certificate, use this
-# directive to point at the key file. Keep in mind that if
-# you've both a RSA and a DSA private key you can configure
-# both in parallel (to also allow the use of DSA ciphers, etc.)
-SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
-#SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server-dsa.key
-
-# Server Certificate Chain:
-# Point SSLCertificateChainFile at a file containing the
-# concatenation of PEM encoded CA certificates which form the
-# certificate chain for the server certificate. Alternatively
-# the referenced file can be the same as SSLCertificateFile
-# when the CA certificates are directly appended to the server
-# certificate for convinience.
-#SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca.crt
-
-# Certificate Authority (CA):
-# Set the CA certificate verification path where to find CA
-# certificates for client authentication or alternatively one
-# huge file containing all of them (file must be PEM encoded)
-# Note: Inside SSLCACertificatePath you need hash symlinks
-# to point to the certificate files. Use the provided
-# Makefile to update the hash symlinks after changes.
-#SSLCACertificatePath /etc/httpd/conf/ssl.crt
-#SSLCACertificateFile /etc/httpd/conf/ssl.crt/ca-bundle.crt
-
-# Certificate Revocation Lists (CRL):
-# Set the CA revocation path where to find CA CRLs for client
-# authentication or alternatively one huge file containing all
-# of them (file must be PEM encoded)
-# Note: Inside SSLCARevocationPath you need hash symlinks
-# to point to the certificate files. Use the provided
-# Makefile to update the hash symlinks after changes.
-#SSLCARevocationPath /etc/httpd/conf/ssl.crl
-#SSLCARevocationFile /etc/httpd/conf/ssl.crl/ca-bundle.crl
-
-# Client Authentication (Type):
-# Client certificate verification type and depth. Types are
-# none, optional, require and optional_no_ca. Depth is a
-# number which specifies how deeply to verify the certificate
-# issuer chain before deciding the certificate is not valid.
-#SSLVerifyClient require
-#SSLVerifyDepth 10
-
-# Access Control:
-# With SSLRequire you can do per-directory access control based
-# on arbitrary complex boolean expressions containing server
-# variable checks and other lookup directives. The syntax is a
-# mixture between C and Perl. See the mod_ssl documentation
-# for more details.
-#<Location />
-#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
-# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
-# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA",
"Dev"} \
-# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
-# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
-# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
-#</Location>
-
-# SSL Engine Options:
-# Set various options for the SSL engine.
-# o FakeBasicAuth:
-# Translate the client X.509 into a Basic Authorisation. This means that
-# the standard Auth/DBMAuth methods can be used for access control. The
-# user name is the `one line' version of the client's X.509 certificate.
-# Note that no password is obtained from the user. Every entry in the user
-# file needs this password: `xxj31ZMTZzkVA'.
-# o ExportCertData:
-# This exports two additional environment variables: SSL_CLIENT_CERT and
-# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
-# server (always existing) and the client (only existing when client
-# authentication is used). This can be used to import the certificates
-# into CGI scripts.
-# o StdEnvVars:
-# This exports the standard SSL/TLS related `SSL_*' environment variables.
-# Per default this exportation is switched off for performance reasons,
-# because the extraction step is an expensive operation and is usually
-# useless for serving static content. So one usually enables the
-# exportation for CGI and SSI requests only.
-# o CompatEnvVars:
-# This exports obsolete environment variables for backward compatibility
-# to Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. Use this
-# to provide compatibility to existing CGI scripts.
-# o StrictRequire:
-# This denies access when "SSLRequireSSL" or "SSLRequire" applied
even
-# under a "Satisfy any" situation, i.e. when it applies access is denied
-# and no other module can change it.
-# o OptRenegotiate:
-# This enables optimized SSL connection renegotiation handling when SSL
-# directives are used in per-directory context.
-#SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire
-<Files ~ "\.(cgi|shtml|phtml|php3?)$">
- SSLOptions +StdEnvVars
-</Files>
-<Directory "/var/www/cgi-bin">
- SSLOptions +StdEnvVars
-</Directory>
-
-# SSL Protocol Adjustments:
-# The safe and default but still SSL/TLS standard compliant shutdown
-# approach is that mod_ssl sends the close notify alert but doesn't wait for
-# the close notify alert from client. When you need a different shutdown
-# approach you can use one of the following variables:
-# o ssl-unclean-shutdown:
-# This forces an unclean shutdown when the connection is closed, i.e. no
-# SSL close notify alert is send or allowed to received. This violates
-# the SSL/TLS standard but is needed for some brain-dead browsers. Use
-# this when you receive I/O errors because of the standard approach where
-# mod_ssl sends the close notify alert.
-# o ssl-accurate-shutdown:
-# This forces an accurate shutdown when the connection is closed, i.e. a
-# SSL close notify alert is send and mod_ssl waits for the close notify
-# alert of the client. This is 100% SSL/TLS standard compliant, but in
-# practice often causes hanging connections with brain-dead browsers. Use
-# this only for browsers where you know that their SSL implementation
-# works correctly.
-# Notice: Most problems of broken clients are also related to the HTTP
-# keep-alive facility, so you usually additionally want to disable
-# keep-alive for those clients, too. Use variable "nokeepalive" for this.
-# Similarly, one has to force some clients to use HTTP/1.0 to workaround
-# their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
-# "force-response-1.0" for this.
-SetEnvIf User-Agent ".*MSIE.*" \
- nokeepalive ssl-unclean-shutdown \
- downgrade-1.0 force-response-1.0
-
-# Per-Server Logging:
-# The home of a custom SSL log file. Use this when you want a
-# compact non-error SSL logfile on a virtual host basis.
-CustomLog logs/ssl_request_log \
- "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
-
-</VirtualHost>
-
-</IfDefine>
-
-Include conf/rhn_proxy.conf
-Include conf/cobbler-proxy.conf
diff --git a/web/html/applications/rhn-proxy/4.0/httpd/rhn_proxy.conf
b/web/html/applications/rhn-proxy/4.0/httpd/rhn_proxy.conf
deleted file mode 100644
index fba9c9e..0000000
--- a/web/html/applications/rhn-proxy/4.0/httpd/rhn_proxy.conf
+++ /dev/null
@@ -1,46 +0,0 @@
-# ** DO NOT EDIT **
-# RHN Proxy handler configuration file
-
-# RHN Proxy Server location
-<LocationMatch "/*">
- # this stanza contains all the handlers for RHN app code
-
- # added for oracle
- SetEnv ORACLE_HOME /opt/oracle
- SetEnv NLS_LANG english.UTF8
-
- # mod_python
- <IfModule !mod_python.c>
- LoadModule python_module modules/mod_python.so
- AddModule mod_python.c
- </IfModule>
-
- PythonPath "sys.path+['/usr/share/rhn']"
- PythonDebug Off
-
- # this one shall be common for all the python configlets
- # (for pre-version 3.1 anyway)
- PythonOption RootDir /usr/share/rhn
-
- SetHandler python-program
- # all of these handlers are defined in apacheServer
- PythonHeaderParserHandler proxy.apacheServer::HeaderParserHandler
- PythonHandler proxy.apacheServer::Handler
- PythonCleanupHandler proxy.apacheServer::CleanupHandler
- DefaultType text/xml
-</LocationMatch>
-
-# let apache do it's default thing for /pub/*, /index.html, and /_rhn_proxy
-# /pub is where user accessible data resides
-# /_rhn_proxy is for the landing page and anything additional we may want to
-# expand to in the future
-<LocationMatch "/pub/*">
- SetHandler None
- DefaultType text/plain
-</LocationMatch>
-
-<LocationMatch "/_rhn_proxy">
- SetHandler None
- DefaultType text/plain
-</LocationMatch>
-
diff --git a/web/html/applications/rhn-proxy/4.0/install-rhn-proxy.xml
b/web/html/applications/rhn-proxy/4.0/install-rhn-proxy.xml
deleted file mode 100644
index f7c107e..0000000
--- a/web/html/applications/rhn-proxy/4.0/install-rhn-proxy.xml
+++ /dev/null
@@ -1,833 +0,0 @@
-<?xml version="1.0"?>
-
-<application acl-mixins="RHN::Access::System">
-
- <name>Satellite Proxy</name>
- <label>rhn_proxy</label>
- <version>4.0</version>
-
- <prerequisites>
- <org-channel-family>rhn-proxy</org-channel-family>
- <system-feature>ftr_proxy_capable</system-feature>
- <package-available>rhns-proxy-management</package-available>
- </prerequisites>
-
- <terms-and-conditions
url="http://www.redhat.com/licenses" />
-
- <install>
-
- <requirements>
-
<system-entitlement-possible>provisioning_entitled</system-entitlement-possible>
- <package-available>rhns-proxy-management</package-available>
- <client-capable>script.run</client-capable>
- <client-capable>configfiles.deploy</client-capable>
- </requirements>
-
-<activity description="Check for conflicting packages">
- <method-call class="RHN::ProxyInstall"
method="have_package">
- <package>bdb_perl</package>
- <package>ConfigPusher-general</package>
- <package>eventReceivers</package>
- <package>FcntlLock</package>
- <package>httpd</package>
- <package>httpd-suexec</package>
- <package>jabberd</package>
- <package>libapreq2</package>
- <package>LongLegs</package>
- <package>MessageQueue</package>
- <package>mm</package>
- <package>mod_perl</package>
- <package>mod_python</package>
- <package>mod_ssl</package>
- <package>NOCpulsePlugins</package>
- <package>NPalert</package>
- <package>np-config</package>
- <package>NPusers</package>
- <package>nslogs</package>
- <package>oracle-devel</package>
- <package>oracle_perl</package>
- <package>perl-Apache-Admin-Config</package>
- <package>perl-Apache-DBI</package>
- <package>perl-BerkeleyDB</package>
- <package>perl-BSD-Resource</package>
- <package>perl-Class-MethodMaker</package>
- <package>perl-Class-Singleton</package>
- <package>perl-Config-IniFiles</package>
- <package>perl-Crypt-DES</package>
- <package>perl-Crypt-GeneratePassword</package>
- <package>perl-Crypt-SSLeay</package>
- <package>perl-DateTime</package>
- <package>perl-DateTime-Locale</package>
- <package>perl-DateTime-TimeZone</package>
- <package>perl-DBD-Oracle</package>
- <package>perl-Devel-Symdump</package>
- <package>perl-Error</package>
- <package>perl-FreezeThaw</package>
- <package>perl-HTML-TableExtract</package>
- <package>perl-IO-Capture</package>
- <package>perl-IO-Socket-SSL</package>
- <package>perl-IO-stringy</package>
- <package>perl-libapreq2</package>
- <package>perl-Mail-Alias</package>
- <package>perl-MailTools</package>
- <package>perl-MIME-tools</package>
- <package>perl-Net-SNMP</package>
- <package>perl-Net_SSLeay</package>
- <package>perl-Network-IPv4Addr</package>
- <package>perl-NOCpulse-CLAC</package>
- <package>perl-NOCpulse-Debug</package>
- <package>perl-NOCpulse-Gritch</package>
- <package>perl-NOCpulse-Object</package>
- <package>perl-NOCpulse-OracleDB</package>
- <package>perl-NOCpulse-PersistentConnection</package>
- <package>perl-NOCpulse-Probe</package>
- <package>perl-NOCpulse-ProcessPool</package>
- <package>perl-NOCpulse-Scheduler</package>
- <package>perl-NOCpulse-SetID</package>
- <package>perl-NOCpulse-Utils</package>
- <package>perl-Params-Validate</package>
- <package>perl-TimeDate</package>
- <package>perl-XML-Generator</package>
- <package>ProgAGoGo</package>
- <package>python-sgmlop</package>
- <package>rhn-apache</package>
- <package>rhn-base-minimal</package>
- <package>rhn-modperl</package>
- <package>rhn-modpython</package>
- <package>rhn-modssl</package>
- <package>rhns</package>
- <package>rhns-auth-daemon</package>
- <package>rhns-certs-tools</package>
- <package>rhns-proxy-broker</package>
- <package>rhns-proxy-docs</package>
- <package>rhns-proxy-management</package>
- <package>rhns-proxy-monitoring</package>
- <package>rhns-proxy-package-manager</package>
- <package>rhns-proxy-redirect</package>
- <package>rhns-proxy-tools</package>
- <package>rhn-ssl-cert-check</package>
- <package>SatConfig-ApacheDepot</package>
- <package>SatConfig-autokick</package>
- <package>SatConfig-bootstrap</package>
- <package>SatConfig-bootstrap-server</package>
- <package>SatConfig-cluster</package>
- <package>SatConfig-dbsynch</package>
- <package>SatConfig-general</package>
- <package>SatConfig-generator</package>
- <package>SatConfig-installer</package>
- <package>SatConfig-spread</package>
- <package>scdb</package>
- <package>scdb_accessor_perl</package>
- <package>SNMPAlerts</package>
- <package>SputLite-client</package>
- <package>SputLite-server</package>
- <package>ssl_bridge</package>
- <package>status_log_acceptor</package>
- <package>Time-System</package>
- <package>tsdb</package>
- <package>tsdb_accessor_perl</package>
- <package>spacewalk-proxy-html</package>
- <package>spacewalk-ssl-cert-check</package>
- <package>spacewalk-proxy-common</package>
- <package>spacewalk-proxy-installer</package>
- <package>spacewalk-proxy-docs</package>
- <package>spacewalk-proxy-monitoring</package>
- <package>spacewalk-backend</package>
- <package>spacewalk-proxy-package-manager</package>
- <package>spacewalk-certs-tools</package>
- <package>spacewalk-proxy-broker</package>
- <package>spacewalk-proxy-management</package>
- <package>spacewalk-base-minimal</package>
- <package>spacewalk-proxy-redirect</package>
- <package>spacewalk-setup-jabberd</package>
- <package>nocpulse-common</package>
- <package>nocpulse-db-perl</package>
- <package>jabberd-selinux</package>
- <package>rhn-proxy-branding</package>
- <alias>proxy</alias>
- </method-call>
- </activity>
-
- <collect-data description="Enable Monitoring Proxy"
- acl="org_entitlement(rhn_monitor); package_available(rhns-proxy-monitoring);
global_config(satellite); global_config(is_monitoring_backend)">
-
- <header>
-Would you like to enable Monitoring Proxy functionality on this system?
- </header>
-
- <rhn-form name="Enable Monitoring"
label="enable_monitoring">
- <widget type="checkbox" name="Enable Monitoring?"
label="enable_monitoring" default="1"/>
- </rhn-form>
- </collect-data>
-
- <collect-data description="Remove Conflicting Packages"
acl="session_data_true(have_package_any_of_proxy)">
- <header>
- The following packages conflict with the new installation and will be removed:
- </header>
-
- <rhn-form name="Remove Conflicting Packages"
label="remove_packages">
- <widget type="literal" label="bdb_perl"
default="${session.have_package_bdb_perl}"
acl="session_data_true(have_package_bdb_perl)" />
- <widget type="literal"
label="ConfigPusher-general"
default="${session.have_package_ConfigPusher_general}"
acl="session_data_true(have_package_ConfigPusher_general)" />
- <widget type="literal" label="eventReceivers"
default="${session.have_package_eventReceivers}"
acl="session_data_true(have_package_eventReceivers)" />
- <widget type="literal" label="FcntlLock"
default="${session.have_package_FcntlLock}"
acl="session_data_true(have_package_FcntlLock)" />
- <widget type="literal" label="httpd"
default="${session.have_package_httpd}"
acl="session_data_true(have_package_httpd)" />
- <widget type="literal" label="httpd-suexec"
default="${session.have_package_httpd_suexec}"
acl="session_data_true(have_package_httpd_suexec)" />
- <widget type="literal" label="jabberd"
default="${session.have_package_jabberd}"
acl="session_data_true(have_package_jabberd)" />
- <widget type="literal" label="libapreq2"
default="${session.have_package_libapreq2}"
acl="session_data_true(have_package_libapreq2)" />
- <widget type="literal" label="LongLegs"
default="${session.have_package_LongLegs}"
acl="session_data_true(have_package_LongLegs)" />
- <widget type="literal" label="MessageQueue"
default="${session.have_package_MessageQueue}"
acl="session_data_true(have_package_MessageQueue)" />
- <widget type="literal" label="mm"
default="${session.have_package_mm}"
acl="session_data_true(have_package_mm)" />
- <widget type="literal" label="mod_perl"
default="${session.have_package_mod_perl}"
acl="session_data_true(have_package_mod_perl)" />
- <widget type="literal" label="mod_python"
default="${session.have_package_mod_python}"
acl="session_data_true(have_package_mod_python)" />
- <widget type="literal" label="mod_ssl"
default="${session.have_package_mod_ssl}"
acl="session_data_true(have_package_mod_ssl)" />
- <widget type="literal" label="NOCpulsePlugins"
default="${session.have_package_NOCpulsePlugins}"
acl="session_data_true(have_package_NOCpulsePlugins)" />
- <widget type="literal" label="NPalert"
default="${session.have_package_NPalert}"
acl="session_data_true(have_package_NPalert)" />
- <widget type="literal" label="np-config"
default="${session.have_package_np_config}"
acl="session_data_true(have_package_np_config)" />
- <widget type="literal" label="NPusers"
default="${session.have_package_NPusers}"
acl="session_data_true(have_package_NPusers)" />
- <widget type="literal" label="nslogs"
default="${session.have_package_nslogs}"
acl="session_data_true(have_package_nslogs)" />
- <widget type="literal" label="oracle-devel"
default="${session.have_package_oracle_devel}"
acl="session_data_true(have_package_oracle_devel)" />
- <widget type="literal" label="oracle_perl"
default="${session.have_package_oracle_perl}"
acl="session_data_true(have_package_oracle_perl)" />
- <widget type="literal"
label="perl-Apache-Admin-Config"
default="${session.have_package_perl_Apache_Admin_Config}"
acl="session_data_true(have_package_perl_Apache_Admin_Config)" />
- <widget type="literal" label="perl-Apache-DBI"
default="${session.have_package_perl_Apache_DBI}"
acl="session_data_true(have_package_perl_Apache_DBI)" />
- <widget type="literal" label="perl-BerkeleyDB"
default="${session.have_package_perl_BerkeleyDB}"
acl="session_data_true(have_package_perl_BerkeleyDB)" />
- <widget type="literal" label="perl-BSD-Resource"
default="${session.have_package_perl_BSD_Resource}"
acl="session_data_true(have_package_perl_BSD_Resource)" />
- <widget type="literal"
label="perl-Class-MethodMaker"
default="${session.have_package_perl_Class_MethodMaker}"
acl="session_data_true(have_package_perl_Class_MethodMaker)" />
- <widget type="literal"
label="perl-Class-Singleton"
default="${session.have_package_perl_Class_Singleton}"
acl="session_data_true(have_package_perl_Class_Singleton)" />
- <widget type="literal"
label="perl-Config-IniFiles"
default="${session.have_package_perl_Config_IniFiles}"
acl="session_data_true(have_package_perl_Config_IniFiles)" />
- <widget type="literal" label="perl-Crypt-DES"
default="${session.have_package_perl_Crypt_DES}"
acl="session_data_true(have_package_perl_Crypt_DES)" />
- <widget type="literal"
label="perl-Crypt-GeneratePassword"
default="${session.have_package_perl_Crypt_GeneratePassword}"
acl="session_data_true(have_package_perl_Crypt_GeneratePassword)" />
- <widget type="literal" label="perl-Crypt-SSLeay"
default="${session.have_package_perl_Crypt_SSLeay}"
acl="session_data_true(have_package_perl_Crypt_SSLeay)" />
- <widget type="literal" label="perl-DateTime"
default="${session.have_package_perl_DateTime}"
acl="session_data_true(have_package_perl_DateTime)" />
- <widget type="literal"
label="perl-DateTime-Locale"
default="${session.have_package_perl_DateTime_Locale}"
acl="session_data_true(have_package_perl_DateTime_Locale)" />
- <widget type="literal"
label="perl-DateTime-TimeZone"
default="${session.have_package_perl_DateTime_TimeZone}"
acl="session_data_true(have_package_perl_DateTime_TimeZone)" />
- <widget type="literal" label="perl-DBD-Oracle"
default="${session.have_package_perl_DBD_Oracle}"
acl="session_data_true(have_package_perl_DBD_Oracle)" />
- <widget type="literal" label="perl-Devel-Symdump"
default="${session.have_package_perl_Devel_Symdump}"
acl="session_data_true(have_package_perl_Devel_Symdump)" />
- <widget type="literal" label="perl-Error"
default="${session.have_package_perl_Error}"
acl="session_data_true(have_package_perl_Error)" />
- <widget type="literal" label="perl-FreezeThaw"
default="${session.have_package_perl_FreezeThaw}"
acl="session_data_true(have_package_perl_FreezeThaw)" />
- <widget type="literal"
label="perl-HTML-TableExtract"
default="${session.have_package_perl_HTML_TableExtract}"
acl="session_data_true(have_package_perl_HTML_TableExtract)" />
- <widget type="literal" label="perl-IO-Capture"
default="${session.have_package_perl_IO_Capture}"
acl="session_data_true(have_package_perl_IO_Capture)" />
- <widget type="literal" label="perl-IO-Socket-SSL"
default="${session.have_package_perl_IO_Socket_SSL}"
acl="session_data_true(have_package_perl_IO_Socket_SSL)" />
- <widget type="literal" label="perl-IO-stringy"
default="${session.have_package_perl_IO_stringy}"
acl="session_data_true(have_package_perl_IO_stringy)" />
- <widget type="literal" label="perl-libapreq2"
default="${session.have_package_perl_libapreq2}"
acl="session_data_true(have_package_perl_libapreq2)" />
- <widget type="literal" label="perl-Mail-Alias"
default="${session.have_package_perl_Mail_Alias}"
acl="session_data_true(have_package_perl_Mail_Alias)" />
- <widget type="literal" label="perl-MailTools"
default="${session.have_package_perl_MailTools}"
acl="session_data_true(have_package_perl_MailTools)" />
- <widget type="literal" label="perl-MIME-tools"
default="${session.have_package_perl_MIME_tools}"
acl="session_data_true(have_package_perl_MIME_tools)" />
- <widget type="literal" label="perl-Net-SNMP"
default="${session.have_package_perl_Net_SNMP}"
acl="session_data_true(have_package_perl_Net_SNMP)" />
- <widget type="literal" label="perl-Net_SSLeay"
default="${session.have_package_perl_Net_SSLeay}"
acl="session_data_true(have_package_perl_Net_SSLeay)" />
- <widget type="literal"
label="perl-Network-IPv4Addr"
default="${session.have_package_perl_Network_IPv4Addr}"
acl="session_data_true(have_package_perl_Network_IPv4Addr)" />
- <widget type="literal" label="perl-NOCpulse-CLAC"
default="${session.have_package_perl_NOCpulse_CLAC}"
acl="session_data_true(have_package_perl_NOCpulse_CLAC)" />
- <widget type="literal" label="perl-NOCpulse-Debug"
default="${session.have_package_perl_NOCpulse_Debug}"
acl="session_data_true(have_package_perl_NOCpulse_Debug)" />
- <widget type="literal"
label="perl-NOCpulse-Gritch"
default="${session.have_package_perl_NOCpulse_Gritch}"
acl="session_data_true(have_package_perl_NOCpulse_Gritch)" />
- <widget type="literal"
label="perl-NOCpulse-Object"
default="${session.have_package_perl_NOCpulse_Object}"
acl="session_data_true(have_package_perl_NOCpulse_Object)" />
- <widget type="literal"
label="perl-NOCpulse-OracleDB"
default="${session.have_package_perl_NOCpulse_OracleDB}"
acl="session_data_true(have_package_perl_NOCpulse_OracleDB)" />
- <widget type="literal"
label="perl-NOCpulse-PersistentConnection"
default="${session.have_package_perl_NOCpulse_PersistentConnection}"
acl="session_data_true(have_package_perl_NOCpulse_PersistentConnection)" />
- <widget type="literal" label="perl-NOCpulse-Probe"
default="${session.have_package_perl_NOCpulse_Probe}"
acl="session_data_true(have_package_perl_NOCpulse_Probe)" />
- <widget type="literal"
label="perl-NOCpulse-ProcessPool"
default="${session.have_package_perl_NOCpulse_ProcessPool}"
acl="session_data_true(have_package_perl_NOCpulse_ProcessPool)" />
- <widget type="literal"
label="perl-NOCpulse-Scheduler"
default="${session.have_package_perl_NOCpulse_Scheduler}"
acl="session_data_true(have_package_perl_NOCpulse_Scheduler)" />
- <widget type="literal" label="perl-NOCpulse-SetID"
default="${session.have_package_perl_NOCpulse_SetID}"
acl="session_data_true(have_package_perl_NOCpulse_SetID)" />
- <widget type="literal" label="perl-NOCpulse-Utils"
default="${session.have_package_perl_NOCpulse_Utils}"
acl="session_data_true(have_package_perl_NOCpulse_Utils)" />
- <widget type="literal"
label="perl-Params-Validate"
default="${session.have_package_perl_Params_Validate}"
acl="session_data_true(have_package_perl_Params_Validate)" />
- <widget type="literal" label="perl-TimeDate"
default="${session.have_package_perl_TimeDate}"
acl="session_data_true(have_package_perl_TimeDate)" />
- <widget type="literal" label="perl-XML-Generator"
default="${session.have_package_perl_XML_Generator}"
acl="session_data_true(have_package_perl_XML_Generator)" />
- <widget type="literal" label="ProgAGoGo"
default="${session.have_package_ProgAGoGo}"
acl="session_data_true(have_package_ProgAGoGo)" />
- <widget type="literal" label="python-sgmlop"
default="${session.have_package_python_sgmlop}"
acl="session_data_true(have_package_python_sgmlop)" />
- <widget type="literal" label="rhn-apache"
default="${session.have_package_rhn_apache}"
acl="session_data_true(have_package_rhn_apache)" />
- <widget type="literal" label="rhn-base-minimal"
default="${session.have_package_rhn_base_minimal}"
acl="session_data_true(have_package_rhn_base_minimal)" />
- <widget type="literal" label="rhn-modperl"
default="${session.have_package_rhn_modperl}"
acl="session_data_true(have_package_rhn_modperl)" />
- <widget type="literal" label="rhn-modpython"
default="${session.have_package_rhn_modpython}"
acl="session_data_true(have_package_rhn_modpython)" />
- <widget type="literal" label="rhn-modssl"
default="${session.have_package_rhn_modssl}"
acl="session_data_true(have_package_rhn_modssl)" />
- <widget type="literal" label="rhns"
default="${session.have_package_rhns}"
acl="session_data_true(have_package_rhns)" />
- <widget type="literal" label="rhns-auth-daemon"
default="${session.have_package_rhns_auth_daemon}"
acl="session_data_true(have_package_rhns_auth_daemon)" />
- <widget type="literal" label="rhns-certs-tools"
default="${session.have_package_rhns_certs_tools}"
acl="session_data_true(have_package_rhns_certs_tools)" />
- <widget type="literal" label="rhns-proxy-broker"
default="${session.have_package_rhns_proxy_broker}"
acl="session_data_true(have_package_rhns_proxy_broker)" />
- <widget type="literal" label="rhns-proxy-docs"
default="${session.have_package_rhns_proxy_docs}"
acl="session_data_true(have_package_rhns_proxy_docs)" />
- <widget type="literal"
label="rhns-proxy-management"
default="${session.have_package_rhns_proxy_management}"
acl="session_data_true(have_package_rhns_proxy_management)" />
- <widget type="literal"
label="rhns-proxy-monitoring"
default="${session.have_package_rhns_proxy_monitoring}"
acl="session_data_true(have_package_rhns_proxy_monitoring)" />
- <widget type="literal"
label="rhns-proxy-package-manager"
default="${session.have_package_rhns_proxy_package_manager}"
acl="session_data_true(have_package_rhns_proxy_package_manager)" />
- <widget type="literal" label="rhns-proxy-redirect"
default="${session.have_package_rhns_proxy_redirect}"
acl="session_data_true(have_package_rhns_proxy_redirect)" />
- <widget type="literal" label="rhns-proxy-tools"
default="${session.have_package_rhns_proxy_tools}"
acl="session_data_true(have_package_rhns_proxy_tools)" />
- <widget type="literal" label="rhn-ssl-cert-check"
default="${session.have_package_rhn_ssl_cert_check}"
acl="session_data_true(have_package_rhn_ssl_cert_check)" />
- <widget type="literal"
label="SatConfig-ApacheDepot"
default="${session.have_package_SatConfig_ApacheDepot}"
acl="session_data_true(have_package_SatConfig_ApacheDepot)" />
- <widget type="literal" label="SatConfig-autokick"
default="${session.have_package_SatConfig_autokick}"
acl="session_data_true(have_package_SatConfig_autokick)" />
- <widget type="literal" label="SatConfig-bootstrap"
default="${session.have_package_SatConfig_bootstrap}"
acl="session_data_true(have_package_SatConfig_bootstrap)" />
- <widget type="literal"
label="SatConfig-bootstrap-server"
default="${session.have_package_SatConfig_bootstrap_server}"
acl="session_data_true(have_package_SatConfig_bootstrap_server)" />
- <widget type="literal" label="SatConfig-cluster"
default="${session.have_package_SatConfig_cluster}"
acl="session_data_true(have_package_SatConfig_cluster)" />
- <widget type="literal" label="SatConfig-dbsynch"
default="${session.have_package_SatConfig_dbsynch}"
acl="session_data_true(have_package_SatConfig_dbsynch)" />
- <widget type="literal" label="SatConfig-general"
default="${session.have_package_SatConfig_general}"
acl="session_data_true(have_package_SatConfig_general)" />
- <widget type="literal" label="SatConfig-generator"
default="${session.have_package_SatConfig_generator}"
acl="session_data_true(have_package_SatConfig_generator)" />
- <widget type="literal" label="SatConfig-installer"
default="${session.have_package_SatConfig_installer}"
acl="session_data_true(have_package_SatConfig_installer)" />
- <widget type="literal" label="SatConfig-spread"
default="${session.have_package_SatConfig_spread}"
acl="session_data_true(have_package_SatConfig_spread)" />
- <widget type="literal" label="scdb"
default="${session.have_package_scdb}"
acl="session_data_true(have_package_scdb)" />
- <widget type="literal" label="scdb_accessor_perl"
default="${session.have_package_scdb_accessor_perl}"
acl="session_data_true(have_package_scdb_accessor_perl)" />
- <widget type="literal" label="SNMPAlerts"
default="${session.have_package_SNMPAlerts}"
acl="session_data_true(have_package_SNMPAlerts)" />
- <widget type="literal"
label="spacewalk-setup-jabberd"
default="${session.have_package_spacewalk_setup_jabberd}"
acl="session_data_true(have_package_spacewalk_setup_jabberd)" />
- <widget type="literal" label="SputLite-client"
default="${session.have_package_SputLite_client}"
acl="session_data_true(have_package_SputLite_client)" />
- <widget type="literal" label="SputLite-server"
default="${session.have_package_SputLite_server}"
acl="session_data_true(have_package_SputLite_server)" />
- <widget type="literal" label="ssl_bridge"
default="${session.have_package_ssl_bridge}"
acl="session_data_true(have_package_ssl_bridge)" />
- <widget type="literal" label="status_log_acceptor"
default="${session.have_package_status_log_acceptor}"
acl="session_data_true(have_package_status_log_acceptor)" />
- <widget type="literal" label="Time-System"
default="${session.have_package_Time_System}"
acl="session_data_true(have_package_Time_System)" />
- <widget type="literal" label="tsdb"
default="${session.have_package_tsdb}"
acl="session_data_true(have_package_tsdb)" />
- <widget type="literal" label="tsdb_accessor_perl"
default="${session.have_package_tsdb_accessor_perl}"
acl="session_data_true(have_package_tsdb_accessor_perl)" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Configure ${app.name} Server">
-
- <header>
-<p>
- Configure your ${app.name} Server below. The Administrator Email
- Address is the address to which system status messages are sent. For
- the ${app.name} Server to function properly, the ${app.name} Hostname
- must be set to the system's fully qualified domain name.
-</p>
-
-<p>
- The Satellite Parent Server is the hostname of the server this Proxy
- connects to. Depending on your configuration, it could be the
- central Satellite Servers, your organization's Satellite Server, or
- another ${app.name} Server. If this ${app.name} will be connecting
- through an HTTP proxy, populate the related fields.
-</p>
-
-<p>
- If you choose to enable Secure Sockets Layer (SSL), this Satellite Proxy
- will use SSL to connect to the Satellite Parent Server. Regardless of
- whether you enable SSL for the connection to the Satellite Parent Server,
- you will be prompted to generate an SSL certificate on the next page.
- This SSL certificate will allow client systems to connect to this
- ${app.name} securely. Refer to the RHN Proxy Installation Guide for
- more information.
-</p>
-<p>
- When using an HTTP Proxy Server, use the format servername:port to specify the server.
For example: proxy-server.corp.com:8888
-</p>
- </header>
-
- <rhn-form name="Configure Proxy"
label="configure_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Administrator Email Address"
label="traceback_mail" size="40"
default="${user.email}">
- <require valid-email="1" />
- </widget>
- <widget type="text" name="${app.name} Hostname"
label="hostname" size="40"
default="${system.guess_hostname}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="Satellite Parent Server"
label="rhn_parent" size="40"
default="${system.guess_rhn_parent}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Server"
label="http_proxy" size="30">
- <filter type="text" />
- <require fqdn-and-port="1"/>
- </widget>
- <widget type="text" name="HTTP Proxy Username"
label="http_proxy_username" size="10">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Password"
label="http_proxy_password" size="10">
- <filter type="text" />
- </widget>
- <widget type="checkbox" name="Enable SSL?"
label="enable_ssl" default="1" checked="1"
- acl="global_config(ssl_available) or not
global_config(satellite)"/>
- <widget type="literal" label="SSL" default="SSL is
not enabled on this Satellite."
- acl="global_config(satellite); not global_config(ssl_available)"/>
- <widget type="checkbox" name="Enable Push?"
label="enable_osad" default="1" checked="1"
- acl="global_config(satellite);
global_config(ssl_available)"/>
- </rhn-form>
-
- </collect-data>
-
- <collect-data description="Configure SSL"
acl="global_config(ssl_available); global_config(satellite)">
- <header>
- Enter your CA cert password and other SSL configuration
- information here. This information will be used to generate
- the server certificate used by the proxy server to communicate
- via SSL.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
-
- <widget type="password" name="CA Cert Password"
label="ca_cert_password" size="15">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Organization"
label="org" size="24">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Organizational Unit"
label="org-unit" size="24">
- <require max-length="128"/>
- </widget>
-
- <widget type="text" name="Email Address"
label="email" size="40"
default="${session.traceback_mail}">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="City" label="city"
size="16">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="State" label="state"
size="16">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="select" name="Country"
label="country" size="1" default="US"
populate_options="RHN::SatInstall->valid_cert_countries">
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Server cert Expiration (years)"
label="cert-expiration" size="3" default="5">
- <require max-length="3"/>
- <require response="1"/>
- </widget>
-
- <widget type="hidden" label="use_ssl"
default="1" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Skip SSL Configuration"
- acl="not global_config(ssl_available); global_config(satellite)">
- <header>
- You do not have SSL enabled for your Satellite Server.
- Therefore, SSL will not be available for this Satellite Proxy. SSL
- is a critical part of the security model of Satellite. If you wish
- to configure SSL at a later time, see the Satellite
- Installation Guide.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="hidden" label="ca_chain"
default="/usr/share/rhn/RHNS-CA-CERT" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Configure SSL" acl="not
global_config(satellite)">
- <header>
- In order to configure SSL on your ${app.name}, you will need
- to generate a CA certificate and an SSL key pair. See the
- <a
href="/help/proxy/s1-installation-install-config.html">Satellite Proxy
- Installation Guide </a> for more details. After you have
- generated the SSL key, you will need to upload the resulting
- tar file containing the certificate files using the form
- below. If the SSL CA certificate included in the tar file does
- not already exist in your org's <a
- href="/rhn/keys/CryptoKeysList.do" target="_new">list of
SSL
- keys</a>, it will be added to that list.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="file" name="SSL key files (tar)"
label="ssl_key_tar">
- <require response="1"/>
- </widget>
- <widget type="hidden" label="use_ssl"
default="1" />
- </rhn-form>
- </collect-data>
-
- <activity description="Lookup Parent IP Address"
- acl="session_data_true(enable_monitoring)">
- <method-call class="RHN::ProxyInstall"
method="load_ip_address" />
- </activity>
-
- <collect-data description="Configure Satellite Monitoring Proxy"
acl="session_data_true(enable_monitoring)">
-
- <header>
- Configure the Monitoring aspects of your ${app.name} below.
- </header>
-
- <rhn-form name="Configure Monitoring Proxy"
label="configure_monitoring_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Satellite Parent Server
Hostname" label="rhn_monitoring_parent" size="40"
default="${session.rhn_parent}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="Satellite Parent Server IP
Address" label="rhn_monitoring_parent_ip" size="15"
default="${session.rhn_parent_ip}">
- <require response="1"/>
- <require valid-ip="1"/>
- <filter type="text" />
- </widget>
- <widget type="hidden" label="enable_monitoring_scout"
default="1"/>
- </rhn-form>
-
- </collect-data>
-
- <activity description="Provisioning entitle system">
- <set-system-entitlement>provisioning_entitled</set-system-entitlement>
- </activity>
-
- <activity description="Create ${app.name} Config Channel for
system">
- <create-config-channel>
- <org-id>${user.org_id}</org-id>
- <type>normal</type>
- <name>${app.name} Config Channel for ${system.name}</name>
- <label>rhn_proxy_config_${system.id}</label>
- <description>This config channel is for the ${app.name} application running
on ${system.name} (${system.id})</description>
- </create-config-channel>
- </activity>
-
- <activity description="Subscribe to ${app.name} Config Channel">
- <subscribe-system-to-config-channel
channel-label="rhn_proxy_config_${system.id}" order="first"/>
- </activity>
-
- <activity description="Import SSL server cert into Config Channel"
- acl="not global_config(satellite)">
- <method-call class="RHN::ProxyInstall"
method="import_ssl_cert">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <cert-tar>${session.ssl_key_tar}</cert-tar>
- </method-call>
- </activity>
-
- <activity description="Generate SSL server cert"
acl="global_config(ssl_available);global_config(satellite)">
- <method-call class="RHN::ProxyInstall"
method="generate_ssl_cert">
- <hostname>${session.hostname}</hostname>
- <ca-cert-password>${session.ca_cert_password}</ca-cert-password>
- <org>${session.org}</org>
- <org-unit>${session.org-unit}</org-unit>
- <email>${session.email}</email>
- <city>${session.city}</city>
- <state>${session.state}</state>
- <country>${session.country}</country>
- <cert-expiration>${session.cert-expiration}</cert-expiration>
- <target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- </method-call>
- </activity>
-
- <activity description="Create SatCluster record for RHN Monitoring
Proxy" acl="session_data_true(enable_monitoring)">
- <method-call class="RHN::ProxyInstall"
method="create_sat_cluster_record">
- <customer-id>${user.org_id}</customer-id>
- <description>${app.name} ${system.name} (${system.id})</description>
- <last-update-user>installer</last-update-user>
- </method-call>
- </activity>
-
- <activity description="Generate /etc/rhn/rhn.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/rhn.conf"
- template="rhn.conf" mode="640" username="root"
groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/rhn/cluster.ini config file"
acl="session_data_true(enable_monitoring)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/cluster.ini"
- template="cluster.ini" mode="644" username="root"
groupname="root"/>
- </activity>
-
- <activity description="Generate /etc/squid/squid.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/squid/squid.conf"
- template="squid.conf" mode="755"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/httpd.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/httpd.conf"
- template="httpd/httpd.conf" mode="444"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/rhn_proxy.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/rhn_proxy.conf"
- template="httpd/rhn_proxy.conf" mode="640"
username="root" groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/cobbler-proxy.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/cobbler-proxy.conf"
- template="httpd/cobbler-proxy.conf"
mode="640" username="root" groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/jabberd/c2s.xml config file"
- acl="global_config(ssl_available);session_data_true(enable_osad)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/jabberd/c2s.xml"
- template="jabberd/c2s.xml" mode="644"
username="root" groupname="root"/>
- </activity>
-
- <activity description="Generate /etc/jabberd/sm.xml config file"
- acl="global_config(ssl_available);session_data_true(enable_osad)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/jabberd/sm.xml"
- template="jabberd/sm.xml" mode="644" username="root"
groupname="root"/>
- </activity>
-
- <activity description="Activate the ${app.name}">
- <method-call class="RHN::ProxyInstall"
method="activate_proxy">
- <version>${app.version}</version>
- </method-call>
- </activity>
-
- <schedule-actions description="Schedule ${app.name} install">
- <remove-packages>
- <rpm>python-xmlrpc</rpm>
- </remove-packages>
-
- <run-script acl="session_data_true(have_package_any_of_proxy)">
- <action-name>Remove conflicting proxy packages</action-name>
- <script>
-#!/bin/sh
-PACKAGES=`for package in ${session.packages_list_proxy}; do
- rpm -q $package >/dev/null && echo $package; done`
-if [ -n "$PACKAGES" ]; then
- rpm -e $PACKAGES
-fi
- </script>
- </run-script>
-
- <install-packages acl="not
session_data_true(have_package_any_of_proxy)">
- <rpm>rhns-proxy-management</rpm>
- <rpm
acl="session_data_true(enable_monitoring)">rhns-proxy-monitoring</rpm>
- </install-packages>
-
- <install-packages
acl="session_data_true(have_package_any_of_proxy)">
- <force>1</force>
- <rpm>rhns-proxy-management</rpm>
- <rpm
acl="session_data_true(enable_monitoring)">rhns-proxy-monitoring</rpm>
- </install-packages>
-
-
- <deploy-configs>
- <action-name>Deploy Configuration</action-name>
- <configfile>/etc/rhn/rhn.conf</configfile>
- <configfile
acl="session_data_true(enable_monitoring)">/etc/rhn/cluster.ini</configfile>
- <configfile>/etc/squid/squid.conf</configfile>
- <configfile>/etc/httpd/conf/httpd.conf</configfile>
- <configfile>/etc/httpd/conf/rhn_proxy.conf</configfile>
- <configfile>/etc/httpd/conf/cobbler-proxy.conf</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.crt/server.crt</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.csr/server.csr</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.key/server.key</configfile>
- <configfile
acl="session_data_true(org_ssl_cert)">/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT</configfile>
- <configfile
acl="session_data_true(ca_rpm)">${session.ca_rpm}</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/server.pem</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/c2s.xml</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/sm.xml</configfile>
- </deploy-configs>
-
- <run-script acl="session_data_true(enable_monitoring)">
- <action-name>Enable Monitoring Services</action-name>
- <script>
-#!/bin/sh
-
-/etc/rc.d/np.d/step MonitoringScout install
- </script>
- </run-script>
-
- <run-script>
- <action-name>Allow Proxy service to read Satellite
Configuration</action-name>
- <script>
-#!/bin/sh
-chown root.apache /etc/sysconfig/rhn/systemid
-chmod 640 /etc/sysconfig/rhn/systemid
- </script>
- </run-script>
-
- <restart-services>
- <action-name>Start ${app.name}</action-name>
- <service>rhn-proxy</service>
- </restart-services>
- </schedule-actions>
-
- <redirect
save-session="1">/network/systems/details/proxy/install_progress.pxt?sid=${system.id}&version=${app.version}</redirect>
-
- </install>
-
- <install-progress acl="action_pending_named(Start Satellite Proxy) or
last_action_attempt_failed(Start Satellite Proxy)">
-
- <action-status description="Install progress">
- <header>
-You are installing ${app.name} on this system. Below is the list of actions for this
installation.
- </header>
-
- <inprogress>
- Once these actions are complete, your ${app.name} should be available for use.
- </inprogress>
-
- <complete>
- The installation is complete.
- </complete>
-
- <failed>
- The installation has failed. Click on the failed action for
- more details, resolve the error that prevented installation,
- and
-<a
href="/network/systems/details/proxy/index.pxt?sid=${system.id}&version=${app.version}">try
your installation again</a>.
- Or, you can
-<a
href="/network/systems/details/proxy.pxt?sid=${system.id}&pxt_trap=rhn:cancel_scheduled_proxy_install_cb">cancel
this installation process</a>.
- </failed>
-
- <target-action name="Start ${app.name}" show-chain="1"/>
- </action-status>
-
- </install-progress>
-
- <configure>
- <activity description="Create ${app.name} Config Channel for system if does
not already exist">
- <create-config-channel>
- <org-id>${user.org_id}</org-id>
- <type>normal</type>
- <name>${app.name} Config Channel for ${system.name}</name>
- <label>rhn_proxy_config_${system.id}</label>
- <description>This config channel is for the ${app.name} application running
on ${system.name} (${system.id})</description>
- </create-config-channel>
- </activity>
-
- <activity description="Subscribe to ${app.name} Config Channel">
- <subscribe-system-to-config-channel
channel-label="rhn_proxy_config_${system.id}" order="first"/>
- </activity>
-
- <activity description="Generate /etc/rhn/rhn.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/rhn.conf"
- template="rhn.conf" mode="640" username="root"
groupname="apache" new_only="1"/>
- </activity>
-
-
- <activity description="Load current configuration">
- <method-call class="RHN::ProxyInstall"
method="load_configfile_into_session">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <target-config-file>/etc/rhn/rhn.conf</target-config-file>
- </method-call>
- </activity>
-
- <collect-data description="Configure ${app.name}">
-
- <header>
-<p>
-Configure your ${app.name} below. The Administrator Email Address is
-the address to which system status e-mail will be sent. Please note
-that if you have modified the configuration locally on the proxy
-without importing those changes into the Proxy Config Channel for this
-system, this action will overwrite those changes.
-</p>
-<p>
-Also, configuration changes here will not update the configuration for
-the up2date client. Only the ${app.name} application will be
-configured. For instance, if you want this system to connect through
-an HTTP proxy, you will need to configure the ${app.name} software
-here, and configure the up2date client separately.
-</p>
-<p>
- When using an HTTP Proxy Server, use the format "servername:port" to specify
the server. For example: "proxy-server.corp.com:8888".
-</p>
- </header>
-
- <rhn-form name="Configure Proxy"
label="configure_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Administrator Email Address"
label="traceback_mail" size="40"
default="${session.traceback_mail}">
- <require valid-email="1" />
- </widget>
- <widget type="text" name="HTTP Proxy Server"
label="proxy.http_proxy" size="30"
default="${session.proxy.http_proxy}">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Username"
label="proxy.http_proxy_username" size="10"
default="${session.proxy.http_proxy_username}">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Password"
label="proxy.http_proxy_password" size="10"
default="${session.proxy.http_proxy_password}">
- <filter type="text" />
- </widget>
- </rhn-form>
-
- </collect-data>
-
- <activity description="Update ${app.name} Configuration">
- <method-call class="RHN::ProxyInstall"
method="update_configfile_from_session">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <target-config-file>/etc/rhn/rhn.conf</target-config-file>
- </method-call>
- </activity>
-
- <schedule-actions description="Schedule ${app.name} install">
-
- <deploy-configs>
- <configfile>/etc/rhn/rhn.conf</configfile>
- </deploy-configs>
-
- <restart-services>
- <action-name>Start ${app.name}</action-name>
- <service>rhn-proxy</service>
- </restart-services>
-
- </schedule-actions>
-
- <collect-data description="Configuration update scheduled"
no-cancel="1">
- <header>
-Reconfiguration actions for ${app.name} ${app.version} have been scheduled.
- </header>
-
- <rhn-form name="Installation Complete"
label="install_complete">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="hidden" label="continue_redir"
default="/rhn/systems/details/Overview.do" />
- </rhn-form>
-
- </collect-data>
-
- </configure>
-
- <remove>
-
- <collect-data description="Deactivate ${app.name}">
-
- <header>
-You can deactivate your ${app.name}. The ${app.name} services on the system
-will be stopped, and it will not show up as a Proxy in the Satellite web
-interface. The packages set and configuration of the system will not
-otherwise be affected. Systems that connect to Satellite through this
-proxy will need to be reconfigured to use a different Satellite server.
- </header>
-
- <rhn-form name="Deactivate Proxy"
label="deactivate_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="checkbox" name="Remove Packages"
label="remove_packages" default="1" checked="1" />
- </rhn-form>
-
- </collect-data>
-
- <activity description="Deactivate ${app.name} in local
configuration">
- <method-call class="RHN::ProxyInstall"
method="deactivate_proxy"/>
- </activity>
-
- <schedule-actions description="Deactivate ${app.name}">
-
- <stop-services>
- <action-name>Stop ${app.name} Services</action-name>
- <service>rhn-proxy</service>
- </stop-services>
-
- <run-script acl="session_data_true(remove_packages)">
- <action-name>Remove proxy packages</action-name>
- <script>
-#!/bin/sh
-PACKAGES=`for package in bdb_perl ConfigPusher-general eventReceivers FcntlLock jabberd
jabberd jabberd MessageQueue mm NOCpulsePlugins np-config NPalert NPusers nslogs
oracle-devel oracle_perl perl-Apache-Admin-Config perl-Apache-DBI perl-BerkeleyDB
perl-BSD-Resource perl-Class-MethodMaker perl-Class-Singleton perl-Config-IniFiles
perl-Crypt-DES perl-Crypt-GeneratePassword perl-Crypt-SSLeay perl-DateTime
perl-DateTime-Locale perl-DateTime-TimeZone perl-DBD-Oracle perl-Devel-Symdump perl-Error
perl-FreezeThaw perl-HTML-TableExtract perl-IO-Capture perl-IO-Socket-SSL perl-IO-stringy
perl-Mail-Alias perl-MailTools perl-MIME-tools perl-Net-SNMP perl-Network-IPv4Addr
perl-Net_SSLeay perl-NOCpulse-CLAC perl-NOCpulse-Debug perl-NOCpulse-Gritch
perl-NOCpulse-Object perl-NOCpulse-OracleDB perl-NOCpulse-PersistentConnection
perl-NOCpulse-Probe perl-NOCpulse-ProcessPool perl-NOCpulse-Scheduler perl-NOCpulse-SetID
perl-NOCpulse-Utils perl-Params-Validate perl-TimeDate perl-XML-Generator ProgAGoGo
python-sgmlop rhn-apache rhn-base-minimal rhn-base-minimal rhn-base-minimal rhn-modperl
rhn-modpython rhn-modssl rhn-ssl-cert-check rhns rhns rhns rhns-auth-daemon
rhns-auth-daemon rhns-auth-daemon rhns-certs-tools rhns-certs-tools rhns-certs-tools
rhns-proxy-broker rhns-proxy-broker rhns-proxy-broker rhns-proxy-docs rhns-proxy-docs
rhns-proxy-docs rhns-proxy-management rhns-proxy-management rhns-proxy-management
rhns-proxy-monitoring rhns-proxy-monitoring rhns-proxy-package-manager
rhns-proxy-package-manager rhns-proxy-package-manager rhns-proxy-redirect
rhns-proxy-redirect rhns-proxy-redirect rhns-proxy-tools rhns-proxy-tools rhns-proxy-tools
SatConfig-ApacheDepot SatConfig-bootstrap SatConfig-bootstrap-server SatConfig-cluster
SatConfig-dbsynch SatConfig-general SatConfig-generator SatConfig-installer
SatConfig-spread scdb scdb_accessor_perl SNMPAlerts SputLite-client SputLite-server
ssl_bridge status_log_acceptor Time-System tsdb tsdb_accessor_perl
spacewalk-setup-jabberd; do
-rpm -q $package >/dev/null && echo $package; done`
-if [ -n "$PACKAGES" ]; then
- rpm -e $PACKAGES
-fi
- </script>
- </run-script>
-
- </schedule-actions>
-
- <collect-data description="Proxy deactivation scheduled"
no-cancel="1">
- <header>
-A deactivation for ${app.name} ${app.version} on ${system.name} has been scheduled.
- </header>
-
- <rhn-form name="Deactivation Complete"
label="deactivation_complete">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="literal" name="Remove Packages"
label="Remove Packages Yes" default="Yes"
acl="session_data_true(remove_packages)"/>
- <widget type="literal" name="Remove Packages" label="Remove
Packages No" default="No" acl="not
session_data_true(remove_packages)"/>
- <widget type="hidden" label="continue_redir"
default="/rhn/systems/details/Overview.do" />
- </rhn-form>
- </collect-data>
-
- </remove>
-
-</application>
diff --git a/web/html/applications/rhn-proxy/4.0/jabberd/c2s.xml
b/web/html/applications/rhn-proxy/4.0/jabberd/c2s.xml
deleted file mode 100644
index c070324..0000000
--- a/web/html/applications/rhn-proxy/4.0/jabberd/c2s.xml
+++ /dev/null
@@ -1,347 +0,0 @@
-<!-- c2s configuration -->
-<c2s>
- <!-- Our ID on the network (default: c2s) -->
- <id>c2s</id>
-
- <!-- The process ID file. comment this out if you don't need to know
- to know the process ID from outside the process (eg for control
- scripts) -->
- <pidfile>/var/run/jabberd-c2s.pid</pidfile>
-
- <!-- Router connection configuration -->
- <router>
- <!-- IP/port the router is waiting for connections on -->
- <ip>127.0.0.1</ip> <!-- default: 127.0.0.1 -->
- <port>5347</port> <!-- default: 5347 -->
-
- <!-- Username/password to authenticate as -->
- <user>jabberd</user> <!-- default: jabberd -->
- <pass>secret</pass> <!-- default: secret -->
-
- <!-- File containing a SSL certificate and private key to use when
- setting up an encrypted channel with the router. If this is
- commented out, or the file can't be read, no attempt will be
- made to establish an encrypted channel with the router. -->
-
- <pemfile>/etc/jabberd/server.pem</pemfile>
-
- <!-- Router connection retry -->
- <retry>
- <!-- If the connection to the router can't be established at
- startup, we should try again this many times before exiting.
- Use -1 to retry indefinitely. [default: 3] -->
- <init>3</init>
-
- <!-- If we lost the connection to the router during normal
- operation (ie we've successfully connected to the router in
- the past), we should try to reconnect this many times before
- exiting. Use -1 to retry indefinitely. [default: 3] -->
- <lost>3</lost>
-
- <!-- Sleep for this many seconds before trying attempting a
- reconnect. [default: 2] -->
- <sleep>2</sleep>
- </retry>
- </router>
-
- <!-- Log configuration - type is "syslog", "file" or
"stdout" -->
- <log type='syslog'>
- <!-- If logging to syslog, this is the log ident -->
- <ident>jabberd/c2s</ident>
-
- <!-- If logging to syslog, this is the log facility
- (local0 - local7) [default: local3] -->
- <facility>local3</facility>
-
- <!-- If logging to file, this is the filename of the logfile -->
- <!--
- <file>/var/log/jabberd/c2s.log</file>
- -->
- </log>
-
- <!-- Local network configuration -->
- <local>
- <!-- Who we identify ourselves as. This should correspond to the
- ID (host) that the session manager thinks it is. You can
- specify more than one to support virtual hosts, as long as you
- have additional session manager instances on the network to
- handle those hosts. The realm attribute specifies the auth/reg
- or SASL authentication realm for the host. If the attribute is
- not specified, the realm will be selected by the SASL
- mechanism, or will be the same as the ID itself. Be aware that
- users are assigned to a realm, not a host, so two hosts in the
- same realm will have the same users.
- If no realm is specified, it will be set to be the same as the
- ID. -->
- <id>${session.hostname}</id>
- <!-- <id realm='company'>localhost</id> -->
-
- <!-- IP address to bind to (default: 0.0.0.0) -->
- <ip>0.0.0.0</ip>
-
- <!-- Port to bind to, or 0 to disable unencrypted access to the
- server (default: 5222) -->
- <port>5222</port>
-
- <!-- File containing a SSL certificate and private key for client
- connections. If this is commented out, clients will not be
- offered the STARTTLS stream extension -->
- <pemfile>/etc/jabberd/server.pem</pemfile>
-
- <!-- Require STARTTLS. If this is enabled, clients must do STARTTLS
- before they can authenticate. Until the stream is encrypted,
- all packets will be dropped. -->
- <!--
- <require-starttls/>
- -->
-
- <!-- Older versions of jabberd support encrypted client connections
- via an additional listening socket on port 5223. If you want
- this (required to allow pre-STARTTLS clients to do SSL),
- uncomment this -->
- <!--
- <ssl-port>5223</ssl-port>
- -->
- </local>
-
- <!-- Input/output settings -->
- <io>
- <!-- Maximum number of file descriptors. Note that the number of
- possible connections will be slightly less than this, because
- c2s itself can use up five on its own, and auth/reg modules may
- need a few also. If the supply of file descriptors is
- exhausted, new incoming connections will be denied.
- (default: 1024) -->
- <max_fds>1024</max_fds>
-
- <!-- Rate limiting -->
- <limits>
- <!-- Maximum bytes per second - if more than X bytes are sent in Y
- seconds, connection is throttled for Z seconds. The format
- is:
-
- <bytes seconds='Y' throttle='Z'>X</bytes>
-
- Default Y is 1, default Z is 5. set X to 0 to disable. -->
- <bytes>0</bytes>
-
- <!-- Maximum connects per second - if more than X connects are
- attempted from a single IP in Y seconds, that IP is throttled
- for Z seconds. The format is:
-
- <connects seconds='Y' throttle='Z'>X</connects>
-
- Default Y is 5, default Z is 5. set X to 0 to disable. -->
- <connects>0</connects>
- </limits>
-
- <!-- IP-based access controls. If a connection IP matches an allow
- rule, the connection will be accepted. If a connecting IP
- matches a deny rule, the connection will be refused. If the
- connecting IP does not match any rules, or it matches both an
- allow and a deny rule, the contents of the <order/> option
- determines what happens. -->
- <access>
- <!-- Rule check order (default: allow,deny)
-
- allow,deny - Check allow rules, then check deny rules.
- Allow by default.
- deny,allow - Check deny rules, then check allow rules.
- Deny by default. -->
- <order>allow,deny</order>
-
- <!-- Allow a network. If the mask isn't specified, it defaults to
- 255.255.255.255 (ie allow onle the specified IP) -->
- <!--
- <allow ip='127.0.0.0' mask='255.0.0.0'/>
- -->
-
- <!-- Allow a single host -->
- <!--
- <allow ip='12.34.56.78'/>
- -->
-
- <!-- Deny a network or a host -->
- <!--
- <deny ip='127.0.0.1' mask='255.0.0.0'/>
- <deny ip='87.65.43.21'/>
- -->
- </access>
-
- <!-- Timed checks -->
- <check>
- <!-- Interval between checks.
-
- Open client connections will be checked every n seconds, and
- the following checks applied.
-
- 0 disables all checks. (default: 0) -->
- <interval>0</interval>
-
- <!-- Idle connection checks.
-
- Connections that have not sent data for longer than this many
- seconds will be dropped.
-
- 0 disables idle timeouts. (default: 0) -->
- <idle>0</idle>
-
- <!-- Keepalives.
-
- Connections that have not sent data for longer than this many
- seconds will have a single whitespace character sent to them.
- This will force the TCP connection to be closed if they have
- disconnected without us knowing about it.
-
- 0 disables keepalives. (default: 0) -->
- <keepalive>0</keepalive>
-
- </check>
-
- </io>
-
- <!-- Authentication/registration database configuration -->
- <authreg>
- <!-- Backend module to use -->
- <module>db</module>
-
- <!-- Registration configuration -->
- <register>
- <!-- Account registration is enabled by default (provided the
- auth/reg module in use supports it). Comment this out to
- disable. -->
- <enable/>
-
- <!-- Human-readable instructions to be returned to client when
- registration is requested. -->
- <instructions>Enter a username and password to register with this
server.</instructions>
-
- <!-- Password change only. When registration is disabled, it may
- still be useful to allow clients to change their password. If
- you want this, uncomment this when you disable registration. -->
- <!--
- <password/>
- -->
- </register>
-
- <!-- Available authentication mechanisms -->
- <mechanisms>
-
- <!-- These are the traditional Jabber authentication mechanisms.
- Comment out any that you don't want to be offered to clients.
- Note that if the auth/reg module does not support one of
- these mechanisms, then it will not be offered regardless of
- whether or not it is enabled here.
-
- Similarly, if <zerok/> is disabled, then zero-knowledge data
- will not be created when a user is registered. -->
- <traditional>
- <plain/>
- <digest/>
- <zerok/>
- </traditional>
-
- <!-- SASL authentication mechanisms. Comment out any that you
- don't want to be offered to clients. Again, if the auth/reg
- module does not support one of these mechanisms, then it will
- not be offered. -->
- <sasl>
- <plain/>
- <digest-md5/>
- <!--
- <anonymous/>
- -->
- </sasl>
-
- </mechanisms>
-
- <!-- MySQL module configuration -->
- <mysql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>3306</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
- </mysql>
-
- <!-- PostgreSQL module configuration -->
- <pgsql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>5432</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
- </pgsql>
-
- <!-- Berkeley DB module configuration -->
- <db>
- <!-- Directory to store database files under -->
- <path>/var/lib/jabberd</path>
-
- <!-- Synchronize the database to disk after each write. If you
- disable this, database accesses may be faster, but data may
- be lost if jabberd crashes. -->
- <sync/>
- </db>
-
- <!-- LDAP module configuration -->
- <ldap>
- <!-- LDAP server host and port (default: 389) -->
- <host>ldap.example.com</host>
- <port>389</port>
-
- <!-- Use LDAP v3 if possible. If disabled, v2 will be used.
- Encryption options are only available if v3 is enabled. -->
- <!--
- <v3/>
- -->
-
- <!-- Encryption. If enabled, this will create an encrypted channel
- to the LDAP server using the LDAP STARTTLS mechanism. -->
- <!--
- <starttls/>
- -->
-
- <!-- Encryption. If enabled, this will create an encrypted channel
- to the server using the old-style "ldaps://" mechanism. It is
- recommended that you use <starttls/> instead of this. -->
- <!--
- <ssl/>
- -->
-
- <!-- DN to bind as for searches. If unspecified, the searches
- will be done anonymously. -->
- <!--
- <binddn>cn=Directory Manager</binddn>
- <bindpw>secret</bindpw>
- -->
-
- <!-- LDAP attribute that holds the user ID (default: uid) -->
- <uidattr>uid</uidattr>
-
- <!-- base DN of the tree. You should specify a DN for each
- authentication realm declared in the <local/> section above,
- by using the realm attribute. -->
- <basedn realm='company'>o=Company.com</basedn>
- <basedn>o=Example Corp.</basedn>
- </ldap>
-
- <!-- Pipe module configuration -->
- <pipe>
- <!-- Program to execute -->
- <exec>/usr/bin/pipe-auth.pl</exec>
- </pipe>
-
- </authreg>
-
-</c2s>
diff --git a/web/html/applications/rhn-proxy/4.0/jabberd/sm.xml
b/web/html/applications/rhn-proxy/4.0/jabberd/sm.xml
deleted file mode 100644
index 44fa67b..0000000
--- a/web/html/applications/rhn-proxy/4.0/jabberd/sm.xml
+++ /dev/null
@@ -1,379 +0,0 @@
-<!-- Session manager configuration -->
-<sm>
- <!-- Our ID on the network. Users will have this as the domain part of
- their JID. If you want your server to be accessible from other
- Jabber servers, this ID must be resolvable by DNS.s
- (default: localhost) -->
- <id>${session.hostname}</id>
-
- <!-- The process ID file. comment this out if you don't need to know
- to know the process ID from outside the process (eg for control
- scripts) -->
- <pidfile>/var/run/jabberd-sm.pid</pidfile>
-
- <!-- Router connection configuration -->
- <router>
- <!-- IP/port the router is waiting for connections on -->
- <ip>127.0.0.1</ip> <!-- default: 127.0.0.1 -->
- <port>5347</port> <!-- default: 5347 -->
-
- <!-- Username/password to authenticate as -->
- <user>jabberd</user> <!-- default: jabberd -->
- <pass>secret</pass> <!-- default: secret -->
-
- <!-- File containing a SSL certificate and private key to use when
- setting up an encrypted channel with the router. If this is
- commented out, or the file can't be read, no attempt will be
- made to establish an encrypted channel with the router. -->
- <!--
- <pemfile>/etc/jabberd/server.pem</pemfile>
- -->
- <!-- Router connection retry -->
- <retry>
- <!-- If the connection to the router can't be established at
- startup, we should try again this many times before exiting.
- Use -1 to retry indefinitely. [default: 3] -->
- <init>3</init>
-
- <!-- If we lost the connection to the router during normal
- operation (ie we've successfully connected to the router in
- the past), we should try to reconnect this many times before
- exiting. Use -1 to retry indefinitely. [default: 3] -->
- <lost>3</lost>
-
- <!-- Sleep for this many seconds before trying attempting a
- reconnect. [default: 2] -->
- <sleep>2</sleep>
- </retry>
- </router>
-
- <!-- Log configuration - type is "syslog", "file" or
"stdout" -->
- <log type='syslog'>
- <!-- If logging to syslog, this is the log ident -->
- <ident>jabberd/sm</ident>
-
- <!-- If logging to syslog, this is the log facility
- (local0 - local7) [default: local3] -->
- <facility>local3</facility>
-
- <!-- If logging to file, this is the filename of the logfile -->
- <!--
- <file>/var/log/jabberd/sm.log</file>
- -->
- </log>
-
- <!-- Storage database configuration -->
- <storage>
- <!-- By default, we use the MySQL driver for all storage -->
- <driver>db</driver>
-
- <!-- Its also possible to explicitly list alternate drivers for
- specific data types. -->
- <!-- Store vcards in a PostgreSQL database instead -->
- <!--
- <driver type='vcard'>pgsql</driver>
- -->
-
- <!-- MySQL driver configuration -->
- <mysql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>3306</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
-
- <!-- Transacation support. If this is commented out, transactions
- will be disabled. This might make database accesses faster,
- but data may be lost if jabberd crashes.
-
- This will need to be disabled if you are using a MySQL
- earlier than v3.23.xx, as transaction support did not appear
- until this version. -->
- <transactions/>
- </mysql>
-
- <!-- PostgreSQL driver configuration -->
- <pgsql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>5432</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
-
- <!-- Transacation support. If this is commented out, transactions
- will be disabled. This might make database accesses faster,
- but data may be lost if jabberd crashes. -->
- <transactions/>
- </pgsql>
-
- <!-- Berkeley DB driver configuration -->
- <db>
- <!-- Directory to store database files under -->
- <path>/var/lib/jabberd</path>
-
- <!-- Synchronize the database to disk after each write. If you
- disable this, database accesses may be faster, but data may
- be lost if jabberd crashes. -->
- <sync/>
- </db>
- </storage>
-
- <!-- Access control information -->
- <aci>
- <!-- The JIDs listed here will get access to all restricted
- functions, regardless of restrictions further down -->
- <acl type='all'>
- <jid>admin@localhost</jid>
- </acl>
-
- <!-- These JIDs can send broadcast messages (announce, motd) -->
- <!--
- <acl type='broadcast'>
- <jid>nocstaff1@localhost</jid>
- <jid>nocstaff2@localhost</jid>
- </acl>
- -->
-
- <!-- These JIDs will receive messages addressed to the sm itself
- (help requestes and such) -->
- <!--
- <acl type='messages'>
- <jid>support@localhost</jid>
- </acl>
- -->
-
- <!-- These JIDs can discover active user/session information -->
- <!--
- <acl type='disco'>
- <jid>webstatus@localhost</jid>
- </acl>
- -->
- </aci>
-
- <!-- Module chain configuration
-
- Modules listed in a chain are called in the order specified at
- the appropriate time for that chain (assuming that the module
- knows how to work with that chain; otherwise it simply ignores
- it).
-
- Removing a module from these lists will stop the module being
- called, even if its compiled into the server.
-
- Serveral modules have a presence in more than one chain. It is
- possible to remove a module from one chain but not others, but
- this may cause strange behaviour. Make sure you know what you're
- doing. -->
- <modules>
-
- <!-- sess-start. The modules in this chain are called when a session
- is first started (usually on request by c2s as part of the
- authentication process). This is normally used to load
- per-session data. -->
- <chain id='sess-start'/>
-
- <!-- sess-end. The modules in this chain are called just before a
- session is destroyed (after the client has disconnected). -->
- <chain id='sess-end'>
- <module>iq-last</module> <!-- update logout time -->
- </chain>
-
- <!-- in-sess. The modules in this chain are called when a packet
- arrives from an active user session. Note that this chain is
- also responsible for delivering packets to their destinations -
- this is usually handled by the "deliver" module. -->
- <chain id='in-sess'>
- <module>validate</module> <!-- validate packet type -->
- <module>privacy</module> <!-- manage privacy lists -->
- <module>roster</module> <!-- handle roster get/sets and
s10ns -->
- <module>vacation</module> <!-- manage vacation settings
-->
- <module>iq-vcard</module> <!-- store and retrieve the
user's vcard -->
- <module>iq-private</module> <!-- manage the user's private
data store -->
- <module>disco</module> <!-- respond to agents requests
from sessions -->
- <module>offline</module> <!-- if we're coming online
for the first time, deliver queued messages -->
- <module>announce</module> <!-- deliver motd -->
- <module>presence</module> <!-- process and distribute
presence updates -->
- <module>deliver</module> <!-- deliver packets with full
jids directly -->
- </chain>
-
- <!-- out-sess. The modules in this chain are called just before a
- packet is delivered to an active user session. -->
- <chain id='out-sess'/>
-
- <!-- in-router. The modules in this chain are called when a packet
- arrives from the router (ie another component or s2s), but
- before any processing is done. This is a good place to filter
- incoming packets. -->
- <chain id='in-router'>
- <module>session</module> <!-- perform session actions as
required by c2s -->
- <module>validate</module> <!-- validate packet type -->
- <module>presence</module> <!-- drop incoming presence if
user not online -->
- <module>privacy</module> <!-- filter incoming packets based
on privacy rules -->
- </chain>
-
- <!-- out-router. The modules in this chain are called just before a
- packet is delivered to the router (destined for another
- component or s2s). This is a good place to filter outgoing
- packets. -->
- <chain id='out-router'>
- <module>privacy</module> <!-- filter outgoing packets based
on privacy rules -->
- </chain>
-
- <!-- pkt-sm. The modules in this chain are called when a packet
- arrives that is addressed to the session manager itself (ie the
- to JID has no node part). This is normally used to provide
- session-manager-wide services (like service discovery). -->
- <chain id='pkt-sm'>
- <module>iq-last</module> <!-- return the server uptime
-->
- <module>iq-time</module> <!-- return the current server
time -->
- <module>iq-version</module> <!-- return the server name and
version -->
- <module>disco</module> <!-- build the disco list; respond
to disco queries -->
- <module>announce</module> <!-- send broadcast messages
(announce, motd, etc) -->
- <module>help</module> <!-- resend sm messages to
administrators -->
- <module>echo</module> <!-- echo messages sent to /echo
-->
- </chain>
-
- <!-- pkt-user. The modules in this chain are called when a packet
- arrives that is address to a specific user. Note that this
- chain is also responsible for delivering packets to user
- sessions as appropriate - this is usually handled by the
- "deliver" module. -->
- <chain id='pkt-user'>
- <module>roster</module> <!-- handle s10n responses -->
- <module>presence</module> <!-- process and distribute
incoming presence from external entities -->
- <module>iq-vcard</module> <!-- grab user vcards -->
- <module>deliver</module> <!-- deliver the packet to an
active session if we can -->
- <module>vacation</module> <!-- send vacation messages
-->
- <module>offline</module> <!-- save messages and s10ns for
later -->
- <module>disco-publish</module> <!-- handle disco publishes;
return information about user sessions -->
- <module>iq-last</module> <!-- return time since last logout
-->
- </chain>
-
- <!-- pkt-router. The modules in this chain are called when a
- special-purpose packet arrives from the router (eg domain
- advertisements). -->
- <chain id='pkt-router'>
- <module>session</module> <!-- take sessions offline their
c2s disappears -->
- <module>disco</module> <!-- query new components for
service information -->
- </chain>
-
- <!-- user-load. The modules in this chain are called to load
- per-user data. This will happen before a user can be used (ie
- before a session is created). -->
- <chain id='user-load'>
- <module>active</module> <!-- get active status -->
- <module>roster</module> <!-- load the roster and trust
list -->
- <module>privacy</module> <!-- load privacy lists -->
- <module>disco-publish</module> <!-- load published information
-->
- <module>vacation</module> <!-- load vacation settings
-->
- </chain>
-
- <!-- user-create. The modules in this chain are called when a user
- creation request is received (usually from c2s as part of a
- registration request). This initialises any per-user data. -->
- <chain id='user-create'>
- <module>active</module> <!-- activate new users -->
- <module>template-roster</module> <!-- populate roster from template
-->
- </chain>
-
- <!-- user-delete. The modules in this chain are called when a user
- deletion request is received (usually from c2s as part of a
- registration removal request). This deletes all data that may
- have been previously created for the user during normal
- operation. -->
- <chain id='user-delete'>
- <module>active</module> <!-- deactivate users -->
- <module>announce</module> <!-- delete motd data -->
- <module>disco-publish</module> <!-- delete published information
-->
- <module>offline</module> <!-- bounce queued messages
-->
- <module>privacy</module> <!-- delete privacy lists -->
- <module>roster</module> <!-- delete roster -->
- <module>vacation</module> <!-- delete vacation settings
-->
- <module>iq-last</module> <!-- delete last logout time
-->
- <module>iq-private</module> <!-- delete private data -->
- <module>iq-vcard</module> <!-- delete vcard -->
- </chain>
-
- </modules>
-
- <!-- Service discovery configuration -->
- <discovery>
-
- <!-- Service identity. these specify the category, type and name of
- this service that will be included in discovery information
- responses. -->
- <identity>
- <category>server</category> <!-- default: server -->
- <type>im</type> <!-- default: im -->
- <name>Jabber IM server</name> <!-- default: Jabber IM server
-->
- </identity>
-
- <!-- The discovery module can respond to jabber:iq:agents queries
- for compatibility with older clients. Comment this out to
- disable this. -->
- <agents/>
-
- <!-- Static service list.
-
- The discover module can discover disco-capable services
- automatically as they come online. Most legacy services,
- however, will not support discovery. In order to get them to
- appear in disco/agents lists returned to the client, they
- should be listed here.
-
- Note that if a disco-capable service with the same name as one
- listed below comes online, the information it provides will
- override the information listed below.
-
- The "category" and "type" attributes, and the list of
supported
- namespaces are only used for agents compatibility. If you have
- disabled this above, you may omit them. -->
- <items>
-
- <!-- example entry for a user directory -->
- <!--
- <item category='service' type='jud'
jid='users.jabber.org' name='Jabber User Directory'/>
- -->
-
- <!-- example entry for a groupchat (conference) service -->
- <!--
- <item category='conference' type='public'
jid='conference.jabber.org' name='Text conferencing'/>
- -->
-
- </items>
-
- </discovery>
-
- <!-- User options -->
- <user>
- <!-- By default, users must explicitly created before they can start
- a session. The creation process is usually triggered by a c2s
- component in response to a client registering a new user.
-
- Enableing this option will make it so that a user create will be
- triggered the first time a non-existant user attempts to start
- a session. This is useful if you already have users in an
- external authentication database (eg LDAP) and you don't want
- them to have to register. -->
- <auto-create/>
-
- <!-- Templates. If defined, the contents of these files will be
- stored in the users data store when they are created. -->
- <template>
- <!--
- <roster>/etc/jabberd/templates/roster.xml</roster>
- -->
- </template>
- </user>
-
-</sm>
diff --git a/web/html/applications/rhn-proxy/4.0/rhn.conf
b/web/html/applications/rhn-proxy/4.0/rhn.conf
deleted file mode 100644
index 1114598..0000000
--- a/web/html/applications/rhn-proxy/4.0/rhn.conf
+++ /dev/null
@@ -1,29 +0,0 @@
-# Automatically generated RHN Proxy Server configuration file.
-# -------------------------------------------------------------------------
-
-# SSL CA certificate location
-proxy.ca_chain = ${session.ca_chain:/usr/share/rhn/RHNS-CA-CERT}
-
-# Corporate HTTP proxy, format: corp_gateway.example.com:8080
-proxy.http_proxy = ${session.http_proxy}
-
-# Username for that corporate HTTP proxy
-proxy.http_proxy_username = ${session.http_proxy_username}
-
-# Password for that corporate HTTP proxy
-proxy.http_proxy_password = ${session.http_proxy_password}
-
-# Location of locally built, custom packages
-proxy.pkg_dir = /var/spool/rhn-proxy
-
-# Hostname of RHN Server or RHN Satellite
-proxy.rhn_parent = ${session.rhn_parent}
-
-# Destination of all tracebacks, etc.
-traceback_mail = ${session.traceback_mail}
-
-# SSL eabled or disabled
-proxy.use_ssl = ${session.use_ssl:0}
-
-# Monitoring Scout enabled or disabled
-web.is_monitoring_scout = ${session.enable_monitoring_scout:0}
diff --git a/web/html/applications/rhn-proxy/4.0/squid.conf
b/web/html/applications/rhn-proxy/4.0/squid.conf
deleted file mode 100644
index 655e58e..0000000
--- a/web/html/applications/rhn-proxy/4.0/squid.conf
+++ /dev/null
@@ -1,30 +0,0 @@
-# squid.conf
-# To be used for RHN Proxy servers.
-#
-# $Id: squid.conf 27034 2005-02-23 23:28:47Z jesusr $
-
-http_port 8080
-
-cache_mem 400 MB
-maximum_object_size 200 MB
-cache_dir ufs /var/spool/squid 15000 32 256
-
-cache_replacement_policy heap LFUDA
-memory_replacement_policy heap GDSF
-
-refresh_pattern . 0 100% 120000
-
-acl all src 0.0.0.0/0.0.0.0
-acl localhost src 127.0.0.1/255.255.255.255
-acl SSL_ports port 443
-acl Safe_ports port 80 # http
-acl Safe_ports port 443 # https
-acl CONNECT method CONNECT
-
-http_access deny !Safe_ports
-http_access deny CONNECT !SSL_ports
-http_access allow localhost
-http_access deny all
-icp_access allow all
-miss_access allow all
-
diff --git a/web/html/applications/rhn-proxy/4.1/cluster.ini
b/web/html/applications/rhn-proxy/4.1/cluster.ini
deleted file mode 100644
index 5cb0ec1..0000000
--- a/web/html/applications/rhn-proxy/4.1/cluster.ini
+++ /dev/null
@@ -1,8 +0,0 @@
-RemoteConfig.0.protocol=https
-RemoteConfig.0.path=/satconfig/cgi-bin/fetch_nocpulseini.cgi
-smonaddr=${session.rhn_monitoring_parent_ip}
-smonfqdn=${session.rhn_monitoring_parent}
-smontestaddr=${session.rhn_monitoring_parent_ip}
-smontestfqdn=${session.rhn_monitoring_parent}
-scoutsharedkey=${session.scout_shared_key}
-PhysNode.1.exists=1
diff --git a/web/html/applications/rhn-proxy/4.1/httpd/cobbler-proxy.conf
b/web/html/applications/rhn-proxy/4.1/httpd/cobbler-proxy.conf
deleted file mode 100644
index e2fdce4..0000000
--- a/web/html/applications/rhn-proxy/4.1/httpd/cobbler-proxy.conf
+++ /dev/null
@@ -1,14 +0,0 @@
-
-<LocationMatch "^/(cblr|cobbler)">
- SetHandler none
-</LocationMatch>
-
-ProxyPass /cobbler_api https://${session.rhn_parent}/cobbler_api
-ProxyPassReverse /cobbler_api https://${session.rhn_parent}/cobbler_api
-
-ProxyPass /cblr https://${session.rhn_parent}/cblr
-ProxyPassReverse /cblr https://${session.rhn_parent}/cblr
-
-ProxyPass /cobbler https://${session.rhn_parent}/cobbler
-ProxyPassReverse /cobbler https://${session.rhn_parent}/cobbler
-
diff --git a/web/html/applications/rhn-proxy/4.1/httpd/httpd.conf
b/web/html/applications/rhn-proxy/4.1/httpd/httpd.conf
deleted file mode 100644
index 7cc80a1..0000000
--- a/web/html/applications/rhn-proxy/4.1/httpd/httpd.conf
+++ /dev/null
@@ -1,1462 +0,0 @@
-#
-# Based upon the NCSA server configuration files originally by Rob McCool.
-#
-# This is the main Apache server configuration file. It contains the
-# configuration directives that give the server its instructions.
-# See <
URL:http://www.apache.org/docs/> for detailed information about
-# the directives.
-#
-# Do NOT simply read the instructions in here without understanding
-# what they do. They're here only as hints or reminders. If you are unsure
-# consult the online docs. You have been warned.
-#
-# After this file is processed, the server will look for and process
-# /etc/httpd/conf/srm.conf and then /etc/httpd/conf/access.conf
-# unless you have overridden these with ResourceConfig and/or
-# AccessConfig directives here.
-#
-# The configuration directives are grouped into three basic sections:
-# 1. Directives that control the operation of the Apache server process as a
-# whole (the 'global environment').
-# 2. Directives that define the parameters of the 'main' or 'default'
server,
-# which responds to requests that aren't handled by a virtual host.
-# These directives also provide default values for the settings
-# of all virtual hosts.
-# 3. Settings for virtual hosts, which allow Web requests to be sent to
-# different IP addresses or hostnames and have them handled by the
-# same Apache server process.
-#
-# Configuration and logfile names: If the filenames you specify for many
-# of the server's control files begin with "/" (or "drive:/" for
Win32), the
-# server will use that explicit path. If the filenames do *not* begin
-# with "/", the value of ServerRoot is prepended -- so
"logs/foo.log"
-# with ServerRoot set to "/usr/local/apache" will be interpreted by the
-# server as "/usr/local/apache/logs/foo.log".
-#
-
-### Section 1: Global Environment
-#
-# The directives in this section affect the overall operation of Apache,
-# such as the number of concurrent requests it can handle or where it
-# can find its configuration files.
-#
-
-#
-# ServerType is either inetd, or standalone. Inetd mode is only supported on
-# Unix platforms.
-#
-ServerType standalone
-
-#
-# ServerRoot: The top of the directory tree under which the server's
-# configuration, error, and log files are kept.
-#
-# NOTE! If you intend to place this on an NFS (or otherwise network)
-# mounted filesystem then please read the LockFile documentation
-# (available at <
URL:http://www.apache.org/docs/mod/core.html#lockfile>);
-# you will save yourself a lot of trouble.
-#
-# Do NOT add a slash at the end of the directory path.
-#
-ServerRoot "/etc/httpd"
-
-#
-# The LockFile directive sets the path to the lockfile used when Apache
-# is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or
-# USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at
-# its default value. The main reason for changing it is if the logs
-# directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL
-# DISK. The PID of the main server process is automatically appended to
-# the filename.
-#
-LockFile /var/run/httpd.lock
-
-#
-# PidFile: The file in which the server should record its process
-# identification number when it starts.
-#
-PidFile /var/run/httpd.pid
-
-#
-# ScoreBoardFile: File used to store internal server process information.
-# Not all architectures require this. But if yours does (you'll know because
-# this file will be created when you run Apache) then you *must* ensure that
-# no two invocations of Apache share the same scoreboard file.
-#
-ScoreBoardFile logs/apache_runtime_status
-
-#
-# In the standard configuration, the server will process httpd.conf (this
-# file, specified by the -f command line option), srm.conf, and access.conf
-# in that order. The latter two files are now distributed empty, as it is
-# recommended that all directives be kept in a single file for simplicity.
-# The commented-out values below are the built-in defaults. You can have the
-# server ignore these files altogether by using "/dev/null" (for Unix) or
-# "nul" (for Win32) for the arguments to the directives.
-#
-#ResourceConfig conf/srm.conf
-#AccessConfig conf/access.conf
-
-#
-# Timeout: The number of seconds before receives and sends time out.
-#
-Timeout 300
-
-#
-# KeepAlive: Whether or not to allow persistent connections (more than
-# one request per connection). Set to "Off" to deactivate.
-#
-KeepAlive Off
-
-#
-# MaxKeepAliveRequests: The maximum number of requests to allow
-# during a persistent connection. Set to 0 to allow an unlimited amount.
-# We recommend you leave this number high, for maximum performance.
-#
-MaxKeepAliveRequests 100
-
-#
-# KeepAliveTimeout: Number of seconds to wait for the next request from the
-# same client on the same connection.
-#
-KeepAliveTimeout 15
-
-#
-# Server-pool size regulation. Rather than making you guess how many
-# server processes you need, Apache dynamically adapts to the load it
-# sees --- that is, it tries to maintain enough server processes to
-# handle the current load, plus a few spare servers to handle transient
-# load spikes (e.g., multiple simultaneous requests from a single
-# Netscape browser).
-#
-# It does this by periodically checking how many servers are waiting
-# for a request. If there are fewer than MinSpareServers, it creates
-# a new spare. If there are more than MaxSpareServers, some of the
-# spares die off. The default values are probably OK for most sites.
-#
-MinSpareServers 5
-MaxSpareServers 20
-
-#
-# Number of servers to start initially --- should be a reasonable ballpark
-# figure.
-#
-StartServers 8
-
-#
-# Limit on total number of servers running, i.e., limit on the number
-# of clients who can simultaneously connect --- if this limit is ever
-# reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW.
-# It is intended mainly as a brake to keep a runaway server from taking
-# the system with it as it spirals down...
-#
-MaxClients 150
-
-#
-# MaxRequestsPerChild: the number of requests each child process is
-# allowed to process before the child dies. The child will exit so
-# as to avoid problems after prolonged use when Apache (and maybe the
-# libraries it uses) leak memory or other resources. On most systems, this
-# isn't really needed, but a few (such as Solaris) do have notable leaks
-# in the libraries. For these platforms, set to something like 10000
-# or so; a setting of 0 means unlimited.
-#
-# NOTE: This value does not include keepalive requests after the initial
-# request per connection. For example, if a child process handles
-# an initial request and 10 subsequent "keptalive" requests, it
-# would only count as 1 request towards this limit.
-#
-MaxRequestsPerChild 1000
-
-#
-# Listen: Allows you to bind Apache to specific IP addresses and/or
-# ports, in addition to the default. See also the <VirtualHost>
-# directive.
-#
-#Listen 3000
-#Listen 12.34.56.78:80
-#Listen 80
-
-#
-# BindAddress: You can support virtual hosts with this option. This directive
-# is used to tell the server which IP address to listen to. It can either
-# contain "*", an IP address, or a fully qualified Internet domain name.
-# See also the <VirtualHost> and Listen directives.
-#
-#BindAddress *
-
-#
-# Dynamic Shared Object (DSO) Support
-#
-# To be able to use the functionality of a module which was built as a DSO you
-# have to place corresponding `LoadModule' lines at this location so the
-# directives contained in it are actually available _before_ they are used.
-# Please read the file
http://httpd.apache.org/docs/dso.html for more
-# details about the DSO mechanism and run `httpd -l' for the list of already
-# built-in (statically linked and thus always available) modules in your httpd
-# binary.
-#
-# Note: The order in which modules are loaded is important. Don't change
-# the order below without expert advice.
-#
-# Example:
-# LoadModule foo_module modules/mod_foo.so
-
-#LoadModule mmap_static_module modules/mod_mmap_static.so
-LoadModule vhost_alias_module modules/mod_vhost_alias.so
-<IfDefine HAVE_BANDWIDTH>
-LoadModule bandwidth_module modules/mod_bandwidth.so
-</IfDefine>
-<IfDefine HAVE_THROTTLE>
-LoadModule throttle_module modules/mod_throttle.so
-</IfDefine>
-LoadModule env_module modules/mod_env.so
-LoadModule config_log_module modules/mod_log_config.so
-LoadModule agent_log_module modules/mod_log_agent.so
-LoadModule referer_log_module modules/mod_log_referer.so
-#LoadModule mime_magic_module modules/mod_mime_magic.so
-LoadModule mime_module modules/mod_mime.so
-#LoadModule negotiation_module modules/mod_negotiation.so
-LoadModule status_module modules/mod_status.so
-LoadModule info_module modules/mod_info.so
-LoadModule includes_module modules/mod_include.so
-LoadModule autoindex_module modules/mod_autoindex.so
-LoadModule dir_module modules/mod_dir.so
-LoadModule cgi_module modules/mod_cgi.so
-LoadModule asis_module modules/mod_asis.so
-LoadModule imap_module modules/mod_imap.so
-LoadModule action_module modules/mod_actions.so
-#LoadModule speling_module modules/mod_speling.so
-LoadModule userdir_module modules/mod_userdir.so
-LoadModule alias_module modules/mod_alias.so
-LoadModule rewrite_module modules/mod_rewrite.so
-LoadModule access_module modules/mod_access.so
-LoadModule auth_module modules/mod_auth.so
-LoadModule anon_auth_module modules/mod_auth_anon.so
-#LoadModule db_auth_module modules/mod_auth_db.so
-#LoadModule auth_any_module modules/mod_auth_any.so
-#LoadModule dbm_auth_module modules/mod_auth_dbm.so
-#LoadModule auth_ldap_module modules/mod_auth_ldap.so
-#LoadModule mysql_auth_module modules/mod_auth_mysql.so
-#LoadModule auth_pgsql_module modules/mod_auth_pgsql.so
-#LoadModule digest_module modules/mod_digest.so
-LoadModule proxy_module modules/libproxy.so
-#LoadModule cern_meta_module modules/mod_cern_meta.so
-LoadModule expires_module modules/mod_expires.so
-LoadModule headers_module modules/mod_headers.so
-#LoadModule usertrack_module modules/mod_usertrack.so
-#LoadModule example_module modules/mod_example.so
-#LoadModule unique_id_module modules/mod_unique_id.so
-LoadModule setenvif_module modules/mod_setenvif.so
-<IfDefine HAVE_PERL>
-LoadModule perl_module modules/libperl.so
-</IfDefine>
-<IfDefine HAVE_PHP>
-LoadModule php_module modules/mod_php.so
-</IfDefine>
-<IfDefine HAVE_PHP3>
-LoadModule php3_module modules/libphp3.so
-</IfDefine>
-<IfDefine HAVE_PHP4>
-LoadModule php4_module modules/libphp4.so
-</IfDefine>
-<IfDefine HAVE_DAV>
-LoadModule dav_module modules/libdav.so
-</IfDefine>
-<IfDefine HAVE_ROAMING>
-LoadModule roaming_module modules/mod_roaming.so
-</IfDefine>
-<IfDefine HAVE_SSL>
-LoadModule ssl_module modules/libssl.so
-</IfDefine>
-<IfDefine HAVE_PUT>
-LoadModule put_module modules/mod_put.so
-</IfDefine>
-<IfDefine HAVE_PYTHON>
-LoadModule python_module modules/mod_python.so
-</IfDefine>
-
-# Reconstruction of the complete module list from all available modules
-# (static and shared ones) to achieve correct module execution order.
-# [WHENEVER YOU CHANGE THE LOADMODULE SECTION ABOVE UPDATE THIS, TOO]
-ClearModuleList
-#AddModule mod_mmap_static.c
-AddModule mod_vhost_alias.c
-<IfDefine HAVE_BANDWIDTH>
-AddModule mod_bandwidth.c
-</IfDefine>
-<IfDefine HAVE_THROTTLE>
-AddModule mod_throttle.c
-</IfDefine>
-AddModule mod_env.c
-AddModule mod_log_config.c
-AddModule mod_log_agent.c
-AddModule mod_log_referer.c
-#AddModule mod_mime_magic.c
-AddModule mod_mime.c
-#AddModule mod_negotiation.c
-AddModule mod_status.c
-AddModule mod_info.c
-AddModule mod_include.c
-AddModule mod_autoindex.c
-AddModule mod_dir.c
-AddModule mod_cgi.c
-AddModule mod_asis.c
-AddModule mod_imap.c
-AddModule mod_actions.c
-#AddModule mod_speling.c
-AddModule mod_userdir.c
-AddModule mod_alias.c
-AddModule mod_rewrite.c
-AddModule mod_access.c
-AddModule mod_auth.c
-AddModule mod_auth_anon.c
-#AddModule mod_auth_db.c
-#AddModule mod_auth_any.c
-#AddModule mod_auth_dbm.c
-#AddModule auth_ldap.c
-#AddModule mod_auth_mysql.c
-#AddModule mod_auth_pgsql.c
-#AddModule mod_digest.c
-AddModule mod_proxy.c
-#AddModule mod_cern_meta.c
-AddModule mod_expires.c
-AddModule mod_headers.c
-#AddModule mod_usertrack.c
-#AddModule mod_example.c
-#AddModule mod_unique_id.c
-AddModule mod_so.c
-AddModule mod_setenvif.c
-<IfDefine HAVE_PERL>
-AddModule mod_perl.c
-</IfDefine>
-<IfDefine HAVE_PHP>
-AddModule mod_php.c
-</IfDefine>
-<IfDefine HAVE_PHP3>
-AddModule mod_php3.c
-</IfDefine>
-<IfDefine HAVE_PHP4>
-AddModule mod_php4.c
-</IfDefine>
-<IfDefine HAVE_DAV>
-AddModule mod_dav.c
-</IfDefine>
-<IfDefine HAVE_ROAMING>
-AddModule mod_roaming.c
-</IfDefine>
-<IfDefine HAVE_SSL>
-AddModule mod_ssl.c
-</IfDefine>
-<IfDefine HAVE_PUT>
-AddModule mod_put.c
-</IfDefine>
-<IfDefine HAVE_PYTHON>
-AddModule mod_python.c
-</IfDefine>
-
-#
-# ExtendedStatus controls whether Apache will generate "full" status
-# information (ExtendedStatus On) or just basic information (ExtendedStatus
-# Off) when the "server-status" handler is called. The default is Off.
-#
-#ExtendedStatus On
-
-### Section 2: 'Main' server configuration
-#
-# The directives in this section set up the values used by the 'main'
-# server, which responds to any requests that aren't handled by a
-# <VirtualHost> definition. These values also provide defaults for
-# any <VirtualHost> containers you may define later in the file.
-#
-# All of these directives may appear inside <VirtualHost> containers,
-# in which case these default settings will be overridden for the
-# virtual host being defined.
-#
-
-#
-# If your ServerType directive (set earlier in the 'Global Environment'
-# section) is set to "inetd", the next few directives don't have any
-# effect since their settings are defined by the inetd configuration.
-# Skip ahead to the ServerAdmin directive.
-#
-
-#
-# Port: The port to which the standalone server listens. For
-# ports < 1023, you will need httpd to be run as root initially.
-#
-Port 80
-
-##
-## SSL Support
-##
-## When we also provide SSL we have to listen to the
-## standard HTTP port (see above) and to the HTTPS port
-##
-<IfDefine HAVE_SSL>
-Listen 80
-Listen 443
-</IfDefine>
-
-#
-# If you wish httpd to run as a different user or group, you must run
-# httpd as root initially and it will switch.
-#
-# User/Group: The name (or #number) of the user/group to run httpd as.
-# . On SCO (ODT 3) use "User nouser" and "Group nogroup".
-# . On HPUX you may not be able to use shared memory as nobody, and the
-# suggested workaround is to create a user www and use that user.
-# NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
-# when the value of (unsigned)Group is above 60000;
-# don't use Group "#-1" on these systems!
-#
-User apache
-Group apache
-
-#
-# ServerAdmin: Your address, where problems with the server should be
-# e-mailed. This address appears on some server-generated pages, such
-# as error documents.
-#
-ServerAdmin root@localhost
-
-#
-# ServerName allows you to set a host name which is sent back to clients for
-# your server if it's different than the one the program would get (i.e., use
-# "www" instead of the host's real name).
-#
-# Note: You cannot just invent host names and hope they work. The name you
-# define here must be a valid DNS name for your host. If you don't understand
-# this, ask your network administrator.
-# If your host doesn't have a registered DNS name, enter its IP address here.
-# You will have to access it by its address (e.g.,
http://123.45.67.89/)
-# anyway, and this will make redirections work in a sensible way.
-#
-# 127.0.0.1 is the TCP/IP local loop-back address, often named localhost. Your
-# machine always knows itself by this address. If you use Apache strictly for
-# local testing and development, you may use 127.0.0.1 as the server name.
-#
-#ServerName localhost
-
-#
-# DocumentRoot: The directory out of which you will serve your
-# documents. By default, all requests are taken from this directory, but
-# symbolic links and aliases may be used to point to other locations.
-#
-DocumentRoot "/var/www/html"
-
-#
-# Each directory to which Apache has access, can be configured with respect
-# to which services and features are allowed and/or disabled in that
-# directory (and its subdirectories).
-#
-# First, we configure the "default" to be a very restrictive set of
-# permissions.
-#
-<Directory />
- Options FollowSymLinks
- AllowOverride None
-</Directory>
-
-#
-# Note that from this point forward you must specifically allow
-# particular features to be enabled - so if something's not working as
-# you might expect, make sure that you have specifically enabled it
-# below.
-#
-
-#
-# This should be changed to whatever you set DocumentRoot to.
-#
-<Directory "/var/www/html">
-
-#
-# This may also be "None", "All", or any combination of
"Indexes",
-# "Includes", "FollowSymLinks", "ExecCGI", or
"MultiViews".
-#
-# Note that "MultiViews" must be named *explicitly* --- "Options
All"
-# doesn't give it to you.
-#
- Options Indexes FollowSymLinks
-
-#
-# This controls which options the .htaccess files in directories can
-# override. Can also be "All", or any combination of "Options",
"FileInfo",
-# "AuthConfig", and "Limit"
-#
- AllowOverride None
-
-#
-# Controls who can get stuff from this server.
-#
- Order allow,deny
- Allow from all
-</Directory>
-
-#
-# UserDir: The name of the directory which is appended onto a user's home
-# directory if a ~user request is received.
-#
-# The path to the end user account 'public_html' directory must be
-# accessible to the webserver userid. This usually means that ~userid
-# must have permissions of 711, ~userid/public_html must have permissions
-# of 755, and documents contained therein must be world-readable.
-# Otherwise, the client will only receive a "403 Forbidden" message.
-#
-# See also:
http://httpd.apache.org/docs/misc/FAQ.html#forbidden
-#
-<IfModule mod_userdir.c>
- UserDir public_html
-</IfModule>
-
-#
-# Control access to UserDir directories. The following is an example
-# for a site where these directories are restricted to read-only.
-#
-#<Directory /home/*/public_html>
-# AllowOverride FileInfo AuthConfig Limit
-# Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
-# <Limit GET POST OPTIONS PROPFIND>
-# Order allow,deny
-# Allow from all
-# </Limit>
-# <LimitExcept GET POST OPTIONS PROPFIND>
-# Order deny,allow
-# Deny from all
-# </LimitExcept>
-#</Directory>
-
-#
-# DirectoryIndex: Name of the file or files to use as a pre-written HTML
-# directory index. Separate multiple entries with spaces.
-#
-<IfModule mod_dir.c>
- DirectoryIndex _rhn_proxy/index.html index.html index.htm index.shtml index.php
index.php4 index.php3 index.phtml index.cgi
-</IfModule>
-
-#
-# AccessFileName: The name of the file to look for in each directory
-# for access control information.
-#
-AccessFileName .htaccess
-
-#
-# The following lines prevent .htaccess files from being viewed by
-# Web clients. Since .htaccess files often contain authorization
-# information, access is disallowed for security reasons. Comment
-# these lines out if you want Web visitors to see the contents of
-# .htaccess files. If you change the AccessFileName directive above,
-# be sure to make the corresponding changes here.
-#
-# Also, folks tend to use names such as .htpasswd for password
-# files, so this will protect those as well.
-#
-<Files ~ "^\.ht">
- Order allow,deny
- Deny from all
- Satisfy All
-</Files>
-
-#
-# CacheNegotiatedDocs: By default, Apache sends "Pragma: no-cache" with each
-# document that was negotiated on the basis of content. This asks proxy
-# servers not to cache the document. Uncommenting the following line disables
-# this behavior, and proxies will be allowed to cache the documents.
-#
-#CacheNegotiatedDocs
-
-#
-# UseCanonicalName: (new for 1.3) With this setting turned on, whenever
-# Apache needs to construct a self-referencing URL (a URL that refers back
-# to the server the response is coming from) it will use ServerName and
-# Port to form a "canonical" name. With this setting off, Apache will
-# use the hostname:port that the client supplied, when possible. This
-# also affects SERVER_NAME and SERVER_PORT in CGI scripts.
-#
-UseCanonicalName On
-
-#
-# TypesConfig describes where the mime.types file (or equivalent) is
-# to be found.
-#
-<IfModule mod_mime.c>
- TypesConfig /etc/mime.types
-</IfModule>
-
-#
-# DefaultType is the default MIME type the server will use for a document
-# if it cannot otherwise determine one, such as from filename extensions.
-# If your server contains mostly text or HTML documents, "text/plain" is
-# a good value. If most of your content is binary, such as applications
-# or images, you may want to use "application/octet-stream" instead to
-# keep browsers from trying to display binary files as though they are
-# text.
-#
-DefaultType text/plain
-
-#
-# The mod_mime_magic module allows the server to use various hints from the
-# contents of the file itself to determine its type. The MIMEMagicFile
-# directive tells the module where the hint definitions are located.
-# mod_mime_magic is not part of the default server (you have to add
-# it yourself with a LoadModule [see the DSO paragraph in the 'Global
-# Environment' section], or recompile the server and include mod_mime_magic
-# as part of the configuration), so it's enclosed in an <IfModule> container.
-# This means that the MIMEMagicFile directive will only be processed if the
-# module is part of the server.
-#
-<IfModule mod_mime_magic.c>
-# MIMEMagicFile /usr/share/magic.mime
- MIMEMagicFile conf/magic
-</IfModule>
-
-#
-# HostnameLookups: Log the names of clients or just their IP addresses
-# e.g.,
www.apache.org (on) or 204.62.129.132 (off).
-# The default is off because it'd be overall better for the net if people
-# had to knowingly turn this feature on, since enabling it means that
-# each client request will result in AT LEAST one lookup request to the
-# nameserver.
-#
-HostnameLookups Off
-
-#
-# ErrorLog: The location of the error log file.
-# If you do not specify an ErrorLog directive within a <VirtualHost>
-# container, error messages relating to that virtual host will be
-# logged here. If you *do* define an error logfile for a <VirtualHost>
-# container, that host's errors will be logged there and not here.
-#
-ErrorLog logs/error_log
-
-#
-# LogLevel: Control the number of messages logged to the error_log.
-# Possible values include: debug, info, notice, warn, error, crit,
-# alert, emerg.
-#
-LogLevel warn
-
-#
-# The following directives define some format nicknames for use with
-# a CustomLog directive (see below).
-#
-LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\"" combined
-LogFormat "%h %l %u %t \"%r\" %>s %b" common
-LogFormat "%{Referer}i -> %U" referer
-LogFormat "%{User-agent}i" agent
-
-#
-# The location and format of the access logfile (Common Logfile Format).
-# If you do not define any access logfiles within a <VirtualHost>
-# container, they will be logged here. Contrariwise, if you *do*
-# define per-<VirtualHost> access logfiles, transactions will be
-# logged therein and *not* in this file.
-#
-# CustomLog /var/log/httpd/access_log common
-CustomLog logs/access_log combined
-
-#
-# If you would like to have agent and referer logfiles, uncomment the
-# following directives.
-#
-#CustomLog logs/referer_log referer
-#CustomLog logs/agent_log agent
-
-#
-# If you prefer a single logfile with access, agent, and referer information
-# (Combined Logfile Format) you can use the following directive.
-#
-#CustomLog logs/access_log combined
-
-#
-# Optionally add a line containing the server version and virtual host
-# name to server-generated pages (error documents, FTP directory listings,
-# mod_status and mod_info output etc., but not CGI generated documents).
-# Set to "EMail" to also include a mailto: link to the ServerAdmin.
-# Set to one of: On | Off | EMail
-#
-ServerSignature On
-
-# EBCDIC configuration:
-# (only for mainframes using the EBCDIC codeset, currently one of:
-# Fujitsu-Siemens' BS2000/OSD, IBM's OS/390 and IBM's TPF)!!
-# The following default configuration assumes that "text files"
-# are stored in EBCDIC (so that you can operate on them using the
-# normal POSIX tools like grep and sort) while "binary files" are
-# stored with identical octets as on an ASCII machine.
-#
-# The directives are evaluated in configuration file order, with
-# the EBCDICConvert directives applied before EBCDICConvertByType.
-#
-# If you want to have ASCII HTML documents and EBCDIC HTML documents
-# at the same time, you can use the file extension to force
-# conversion off for the ASCII documents:
-# > AddType text/html .ahtml
-# > EBCDICConvert Off=InOut .ahtml
-#
-# EBCDICConvertByType On=InOut text/* message/* multipart/*
-# EBCDICConvertByType On=In application/x-www-form-urlencoded
-# EBCDICConvertByType On=InOut application/postscript model/vrml
-# EBCDICConvertByType Off=InOut */*
-
-
-#
-# Aliases: Add here as many aliases as you need (with no limit). The format is
-# Alias fakename realname
-#
-<IfModule mod_alias.c>
-
- #
- # Note that if you include a trailing / on fakename then the server will
- # require it to be present in the URL. So "/icons" isn't aliased in
this
- # example, only "/icons/". If the fakename is slash-terminated, then the
- # realname must also be slash terminated, and if the fakename omits the
- # trailing slash, the realname must also omit it.
- #
- Alias /icons/ "/var/www/icons/"
-
- <Directory "/var/www/icons">
- Options Indexes MultiViews
- AllowOverride None
- Order allow,deny
- Allow from all
- </Directory>
-
- # This Alias will project the on-line documentation tree under /manual/
- # even if you change the DocumentRoot. Comment it if you don't want to
- # provide access to the on-line documentation.
- #
- # Alias /manual/ "/etc/httpd/htdocs/manual/"
- #
- # <Directory "/etc/httpd/htdocs/manual">
- # Options Indexes FollowSymlinks MultiViews
- # AllowOverride None
- # Order allow,deny
- # Allow from all
- # </Directory>
-
- #
- # ScriptAlias: This controls which directories contain server scripts.
- # ScriptAliases are essentially the same as Aliases, except that
- # documents in the realname directory are treated as applications and
- # run by the server when requested rather than as documents sent to the client.
- # The same rules about trailing "/" apply to ScriptAlias directives as to
- # Alias.
- #
- ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
-
- #
- # "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
- # CGI directory exists, if you have that configured.
- #
- <Directory "/var/www/cgi-bin">
- AllowOverride None
- Options None
- Order allow,deny
- Allow from all
- </Directory>
-
-</IfModule>
-# End of aliases.
-
-#
-# Redirect allows you to tell clients about documents which used to exist in
-# your server's namespace, but do not anymore. This allows you to tell the
-# clients where to look for the relocated document.
-# Format: Redirect old-URI new-URL
-#
-
-#
-# Directives controlling the display of server-generated directory listings.
-#
-<IfModule mod_autoindex.c>
-
- #
- # FancyIndexing is whether you want fancy directory indexing or standard
- #
- IndexOptions FancyIndexing NameWidth=*
-
- #
- # AddIcon* directives tell the server which icon to show for different
- # files or filename extensions. These are only displayed for
- # FancyIndexed directories.
- #
- AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
-
- AddIconByType (TXT,/icons/text.gif) text/*
- AddIconByType (IMG,/icons/image2.gif) image/*
- AddIconByType (SND,/icons/sound2.gif) audio/*
- AddIconByType (VID,/icons/movie.gif) video/*
-
- AddIcon /icons/binary.gif .bin .exe
- AddIcon /icons/binhex.gif .hqx
- AddIcon /icons/tar.gif .tar
- AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
- AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
- AddIcon /icons/a.gif .ps .ai .eps
- AddIcon /icons/layout.gif .html .shtml .htm .pdf
- AddIcon /icons/text.gif .txt
- AddIcon /icons/c.gif .c
- AddIcon /icons/p.gif .pl .py
- AddIcon /icons/f.gif .for
- AddIcon /icons/dvi.gif .dvi
- AddIcon /icons/uuencoded.gif .uu
- AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
- AddIcon /icons/tex.gif .tex
- AddIcon /icons/bomb.gif core
-
- AddIcon /icons/back.gif ..
- AddIcon /icons/hand.right.gif README
- AddIcon /icons/folder.gif ^^DIRECTORY^^
- AddIcon /icons/blank.gif ^^BLANKICON^^
-
- #
- # DefaultIcon is which icon to show for files which do not have an icon
- # explicitly set.
- #
- DefaultIcon /icons/unknown.gif
-
- #
- # AddDescription allows you to place a short description after a file in
- # server-generated indexes. These are only displayed for FancyIndexed
- # directories.
- # Format: AddDescription "description" filename
- #
- #AddDescription "GZIP compressed document" .gz
- #AddDescription "tar archive" .tar
- #AddDescription "GZIP compressed tar archive" .tgz
-
- #
- # ReadmeName is the name of the README file the server will look for by
- # default, and append to directory listings.
- #
- # HeaderName is the name of a file which should be prepended to
- # directory indexes.
- #
- # If MultiViews are amongst the Options in effect, the server will
- # first look for name.html and include it if found. If name.html
- # doesn't exist, the server will then look for name.txt and include
- # it as plaintext if found.
- #
- ReadmeName README
- HeaderName HEADER
-
- #
- # IndexIgnore is a set of filenames which directory indexing should ignore
- # and not include in the listing. Shell-style wildcarding is permitted.
- #
- IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
-
-</IfModule>
-# End of indexing directives.
-
-#
-# Document types.
-#
-<IfModule mod_mime.c>
-
- #
- # AddEncoding allows you to have certain browsers (Mosaic/X 2.1+) uncompress
- # information on the fly. Note: Not all browsers support this.
- # Despite the name similarity, the following Add* directives have nothing
- # to do with the FancyIndexing customization directives above.
- #
- AddEncoding x-compress Z
- AddEncoding x-gzip gz tgz
-
- #
- # AddLanguage allows you to specify the language of a document. You can
- # then use content negotiation to give a browser a file in a language
- # it can understand.
- #
- # Note 1: The suffix does not have to be the same as the language
- # keyword --- those with documents in Polish (whose net-standard
- # language code is pl) may wish to use "AddLanguage pl .po" to
- # avoid the ambiguity with the common suffix for perl scripts.
- #
- # Note 2: The example entries below illustrate that in quite
- # some cases the two character 'Language' abbreviation is not
- # identical to the two character 'Country' code for its country,
- # E.g. 'Danmark/dk' versus 'Danish/da'.
- #
- # Note 3: In the case of 'ltz' we violate the RFC by using a three char
- # specifier. But there is 'work in progress' to fix this and get
- # the reference data for rfc1766 cleaned up.
- #
- # Danish (da) - Dutch (nl) - English (en) - Estonian (ee)
- # French (fr) - German (de) - Greek-Modern (el)
- # Italian (it) - Korean (kr) - Norwegian (no) - Norwegian Nynorsk (nn)
- # Portugese (pt) - Luxembourgeois* (ltz)
- # Spanish (es) - Swedish (sv) - Catalan (ca) - Czech(cz)
- # Polish (pl) - Brazilian Portuguese (pt-br) - Japanese (ja)
- # Russian (ru)
- #
- AddLanguage da .dk
- AddLanguage nl .nl
- AddLanguage en .en
- AddLanguage et .ee
- AddLanguage fr .fr
- AddLanguage de .de
- AddLanguage el .el
- AddLanguage he .he
- AddCharset ISO-8859-8 .iso8859-8
- AddLanguage it .it
- AddLanguage ja .ja
- AddCharset ISO-2022-JP .jis
- AddLanguage kr .kr
- AddCharset ISO-2022-KR .iso-kr
- AddLanguage nn .nn
- AddLanguage no .no
- AddLanguage pl .po
- AddCharset ISO-8859-2 .iso-pl
- AddLanguage pt .pt
- AddLanguage pt-br .pt-br
- AddLanguage ltz .lu
- AddLanguage ca .ca
- AddLanguage es .es
- AddLanguage sv .se
- AddLanguage cz .cz
- AddLanguage ru .ru
- AddLanguage zh-tw .tw
- AddLanguage tw .tw
- AddCharset Big5 .Big5 .big5
- AddCharset WINDOWS-1251 .cp-1251
- AddCharset CP866 .cp866
- AddCharset ISO-8859-5 .iso-ru
- AddCharset KOI8-R .koi8-r
- AddCharset UCS-2 .ucs2
- AddCharset UCS-4 .ucs4
- AddCharset UTF-8 .utf8
-
- # LanguagePriority allows you to give precedence to some languages
- # in case of a tie during content negotiation.
- #
- # Just list the languages in decreasing order of preference. We have
- # more or less alphabetized them here. You probably want to change this.
- #
- <IfModule mod_negotiation.c>
- LanguagePriority en da nl et fr de el it ja kr no pl pt pt-br ru ltz ca es sv tw
- </IfModule>
-
- #
- # AddType allows you to tweak mime.types without actually editing it, or to
- # make certain files to be certain types.
- #
- # For example, the PHP 3.x module (not part of the Apache distribution - see
- #
http://www.php.net) will typically use:
- #
- <IfModule mod_php3.c>
- AddType application/x-httpd-php3 .php3
- AddType application/x-httpd-php3-source .phps
- </IfModule>
- #
- # And for PHP 4.x, use:
- #
- <IfModule mod_php4.c>
- AddType application/x-httpd-php .php .php4 .php3 .phtml
- AddType application/x-httpd-php-source .phps
- </IfModule>
-
- #
- # For PHP/FI (PHP2), use:
- #
- <IfModule mod_php.c>
- AddType application/x-httpd-php .phtml
- </IfModule>
-
- AddType application/x-tar .tgz
-
- #
- # AddHandler allows you to map certain file extensions to "handlers",
- # actions unrelated to filetype. These can be either built into the server
- # or added with the Action command (see below)
- #
- # If you want to use server side includes, or CGI outside
- # ScriptAliased directories, uncomment the following lines.
- #
- # To use CGI scripts:
- #
- #AddHandler cgi-script .cgi
-
- #
- # To use server-parsed HTML files
- #
- AddType text/html .shtml
- AddHandler server-parsed .shtml
-
- #
- # Uncomment the following line to enable Apache's send-asis HTTP file
- # feature
- #
- #AddHandler send-as-is asis
-
- #
- # If you wish to use server-parsed imagemap files, use
- #
- AddHandler imap-file map
-
- #
- # To enable type maps, you might want to use
- #
- #AddHandler type-map var
-
-</IfModule>
-# End of document types.
-
-#
-# Action lets you define media types that will execute a script whenever
-# a matching file is called. This eliminates the need for repeated URL
-# pathnames for oft-used CGI file processors.
-# Format: Action media/type /cgi-script/location
-# Format: Action handler-name /cgi-script/location
-#
-
-#
-# MetaDir: specifies the name of the directory in which Apache can find
-# meta information files. These files contain additional HTTP headers
-# to include when sending the document
-#
-#MetaDir .web
-
-#
-# MetaSuffix: specifies the file name suffix for the file containing the
-# meta information.
-#
-#MetaSuffix .meta
-
-#
-# Customizable error response (Apache style)
-# these come in three flavors
-#
-# 1) plain text
-#ErrorDocument 500 "The server made a boo boo.
-# n.b. the single leading (") marks it as text, it does not get output
-#
-# 2) local redirects
-#ErrorDocument 404 /missing.html
-# to redirect to local URL /missing.html
-#ErrorDocument 404 /cgi-bin/missing_handler.pl
-# N.B.: You can redirect to a script or a document using server-side-includes.
-#
-# 3) external redirects
-#ErrorDocument 402
http://some.other_server.com/subscription_info.html
-# N.B.: Many of the environment variables associated with the original
-# request will *not* be available to such a script.
-
-#
-# Customize behaviour based on the browser
-#
-<IfModule mod_setenvif.c>
-
- #
- # The following directives modify normal HTTP response behavior.
- # The first directive disables keepalive for Netscape 2.x and browsers that
- # spoof it. There are known problems with these browser implementations.
- # The second directive is for Microsoft Internet Explorer 4.0b2
- # which has a broken HTTP/1.1 implementation and does not properly
- # support keepalive when it is used on 301 or 302 (redirect) responses.
- #
- BrowserMatch "Mozilla/2" nokeepalive
- BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
-
- #
- # The following directive disables HTTP/1.1 responses to browsers which
- # are in violation of the HTTP/1.0 spec by not being able to grok a
- # basic 1.1 response.
- #
- BrowserMatch "RealPlayer 4\.0" force-response-1.0
- BrowserMatch "Java/1\.0" force-response-1.0
- BrowserMatch "JDK/1\.0" force-response-1.0
-
-</IfModule>
-# End of browser customization directives
-
-#
-# If the perl module is installed, this will allow execution of mod_perl
-# to compile your scripts to subroutines which it will execute directly,
-# avoiding the costly compile process for most requests.
-#
-#<IfModule mod_perl.c>
-# Alias /perl /var/www/perl
-# <Directory /var/www/perl>
-# SetHandler perl-script
-# PerlHandler Apache::Registry
-# Options +ExecCGI
-# </Directory>
-#</IfModule>
-
-#
-# Allow http put (such as Netscape Gold's publish feature)
-# Use htpasswd to generate /etc/httpd/conf/passwd.
-#
-#<IfModule mod_put.c>
-# Alias /upload /tmp
-# <Directory /tmp>
-# EnablePut On
-# AuthType Basic
-# AuthName Temporary
-# AuthUserFile /etc/httpd/conf/passwd
-# EnableDelete Off
-# umask 007
-# <Limit PUT>
-# require valid-user
-# </Limit>
-# </Directory>
-#</IfModule>
-
-#
-# Allow server status reports, with the URL of
http://servername/server-status
-# Change the ".your_domain.com" to match your domain to enable.
-#
-#<Location /server-status>
-# SetHandler server-status
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-#</Location>
-
-#
-# Allow remote server configuration reports, with the URL of
-#
http://servername/server-info (requires that mod_info.c be loaded).
-# Change the ".your_domain.com" to match your domain to enable.
-#
-#<Location /server-info>
-# SetHandler server-info
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-#</Location>
-
-#
-# Allow access to local system documentation from localhost
-#
-Alias /doc/ /usr/share/doc/
-<Directory /usr/share/doc>
- order deny,allow
- deny from all
- allow from localhost .localdomain
- Options Indexes FollowSymLinks
-</Directory>
-
-#
-# There have been reports of people trying to abuse an old bug from pre-1.1
-# days. This bug involved a CGI script distributed as a part of Apache.
-# By uncommenting these lines you can redirect these attacks to a logging
-# script on
phf.apache.org. Or, you can record them yourself, using the script
-# support/phf_abuse_log.cgi.
-#
-#<Location /cgi-bin/phf*>
-# Deny from all
-# ErrorDocument 403
http://phf.apache.org/phf_abuse_log.cgi
-#</Location>
-
-#
-# Proxy Server directives. Uncomment the following lines to
-# enable the proxy server:
-#
-#<IfModule mod_proxy.c>
-# ProxyRequests On
-
-# <Directory proxy:*>
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-# </Directory>
-
- #
- # Enable/disable the handling of HTTP/1.1 "Via:" headers.
- # ("Full" adds the server version; "Block" removes all outgoing
Via: headers)
- # Set to one of: Off | On | Full | Block
- #
-# ProxyVia On
-
- #
- # To enable the cache as well, edit and uncomment the following lines:
- # (no caching without CacheRoot)
- #
-# CacheRoot "/var/cache/httpd"
-# CacheSize 5
-# CacheGcInterval 4
-# CacheMaxExpire 24
-# CacheLastModifiedFactor 0.1
-# CacheDefaultExpire 1
-# NoCache
a_domain.com another_domain.edu joes.garage_sale.com
-
-#</IfModule>
-# End of proxy directives.
-
-### Section 3: Virtual Hosts
-#
-# VirtualHost: If you want to maintain multiple domains/hostnames on your
-# machine you can setup VirtualHost containers for them. Most configurations
-# use only name-based virtual hosts so the server doesn't need to worry about
-# IP addresses. This is indicated by the asterisks in the directives below.
-#
-# Please see the documentation at <
URL:http://www.apache.org/docs/vhosts/>
-# for further details before you try to setup virtual hosts.
-#
-# You may use the command line option '-S' to verify your virtual host
-# configuration.
-
-#
-# Use name-based virtual hosting.
-#
-#NameVirtualHost *
-
-#
-# VirtualHost example:
-# Almost any Apache directive may go into a VirtualHost container.
-# The first VirtualHost section is used for requests without a known
-# server name.
-#
-#<VirtualHost *>
-# ServerAdmin webmaster(a)dummy-host.example.com
-# DocumentRoot /www/docs/dummy-host.example.com
-# ServerName
dummy-host.example.com
-# ErrorLog logs/dummy-host.example.com-error_log
-# CustomLog logs/dummy-host.example.com-access_log common
-#</VirtualHost>
-
-#<VirtualHost _default_:*>
-#</VirtualHost>
-
-##
-## SSL Global Context
-##
-## All SSL configuration in this context applies both to
-## the main server and all SSL-enabled virtual hosts.
-##
-
-#
-# Some MIME-types for downloading Certificates and CRLs
-#
-<IfDefine HAVE_SSL>
-AddType application/x-x509-ca-cert .crt
-AddType application/x-pkcs7-crl .crl
-</IfDefine>
-
-<IfModule mod_ssl.c>
-
-# Pass Phrase Dialog:
-# Configure the pass phrase gathering process.
-# The filtering dialog program (`builtin' is a internal
-# terminal dialog) has to provide the pass phrase on stdout.
-SSLPassPhraseDialog builtin
-
-# Inter-Process Session Cache:
-# Configure the SSL Session Cache: First the mechanism
-# to use and second the expiring timeout (in seconds).
-#SSLSessionCache none
-#SSLSessionCache shmht:logs/ssl_scache(512000)
-SSLSessionCache shmcb:logs/ssl_scache(512000)
-#SSLSessionCache shm:logs/ssl_scache(512000)
-SSLSessionCacheTimeout 300
-
-# Semaphore:
-# Configure the path to the mutual exclusion semaphore the
-# SSL engine uses internally for inter-process synchronization.
-SSLMutex file:logs/ssl_mutex
-
-# Pseudo Random Number Generator (PRNG):
-# Configure one or more sources to seed the PRNG of the
-# SSL library. The seed data should be of good random quality.
-# WARNING! On some platforms /dev/random blocks if not enough entropy
-# is available. This means you then cannot use the /dev/random device
-# because it would lead to very long connection times (as long as
-# it requires to make more entropy available). But usually those
-# platforms additionally provide a /dev/urandom device which doesn't
-# block. So, if available, use this one instead. Read the mod_ssl User
-# Manual for more details.
-SSLRandomSeed startup builtin
-SSLRandomSeed connect builtin
-#SSLRandomSeed startup file:/dev/random 512
-#SSLRandomSeed startup file:/dev/urandom 512
-#SSLRandomSeed connect file:/dev/random 512
-#SSLRandomSeed connect file:/dev/urandom 512
-
-# Logging:
-# The home of the dedicated SSL protocol logfile. Errors are
-# additionally duplicated in the general error log file. Put
-# this somewhere where it cannot be used for symlink attacks on
-# a real server (i.e. somewhere where only root can write).
-# Log levels are (ascending order: higher ones include lower ones):
-# none, error, warn, info, trace, debug.
-SSLLog logs/ssl_engine_log
-SSLLogLevel error
-
-</IfModule>
-
-<IfDefine HAVE_SSL>
-
-##
-## SSL Virtual Host Context
-##
-
-<VirtualHost _default_:443>
-
-# General setup for the virtual host
-#DocumentRoot "/etc/httpd/htdocs"
-#ServerName new.host.name
-#ServerAdmin you(a)your.address
-ErrorLog logs/error_log
-TransferLog logs/access_log
-
-# SSL Engine Switch:
-# Enable/Disable SSL for this virtual host.
-SSLEngine on
-
-# SSL Cipher Suite:
-# List the ciphers that the client is permitted to negotiate.
-# See the mod_ssl documentation for a complete list.
-#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
-
-# Server Certificate:
-# Point SSLCertificateFile at a PEM encoded certificate. If
-# the certificate is encrypted, then you will be prompted for a
-# pass phrase. Note that a kill -HUP will prompt again. A test
-# certificate can be generated with `make certificate' under
-# built time. Keep in mind that if you've both a RSA and a DSA
-# certificate you can configure both in parallel (to also allow
-# the use of DSA ciphers, etc.)
-SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
-#SSLCertificateFile /etc/httpd/conf/ssl.crt/server-dsa.crt
-
-# Server Private Key:
-# If the key is not combined with the certificate, use this
-# directive to point at the key file. Keep in mind that if
-# you've both a RSA and a DSA private key you can configure
-# both in parallel (to also allow the use of DSA ciphers, etc.)
-SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
-#SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server-dsa.key
-
-# Server Certificate Chain:
-# Point SSLCertificateChainFile at a file containing the
-# concatenation of PEM encoded CA certificates which form the
-# certificate chain for the server certificate. Alternatively
-# the referenced file can be the same as SSLCertificateFile
-# when the CA certificates are directly appended to the server
-# certificate for convinience.
-#SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca.crt
-
-# Certificate Authority (CA):
-# Set the CA certificate verification path where to find CA
-# certificates for client authentication or alternatively one
-# huge file containing all of them (file must be PEM encoded)
-# Note: Inside SSLCACertificatePath you need hash symlinks
-# to point to the certificate files. Use the provided
-# Makefile to update the hash symlinks after changes.
-#SSLCACertificatePath /etc/httpd/conf/ssl.crt
-#SSLCACertificateFile /etc/httpd/conf/ssl.crt/ca-bundle.crt
-
-# Certificate Revocation Lists (CRL):
-# Set the CA revocation path where to find CA CRLs for client
-# authentication or alternatively one huge file containing all
-# of them (file must be PEM encoded)
-# Note: Inside SSLCARevocationPath you need hash symlinks
-# to point to the certificate files. Use the provided
-# Makefile to update the hash symlinks after changes.
-#SSLCARevocationPath /etc/httpd/conf/ssl.crl
-#SSLCARevocationFile /etc/httpd/conf/ssl.crl/ca-bundle.crl
-
-# Client Authentication (Type):
-# Client certificate verification type and depth. Types are
-# none, optional, require and optional_no_ca. Depth is a
-# number which specifies how deeply to verify the certificate
-# issuer chain before deciding the certificate is not valid.
-#SSLVerifyClient require
-#SSLVerifyDepth 10
-
-# Access Control:
-# With SSLRequire you can do per-directory access control based
-# on arbitrary complex boolean expressions containing server
-# variable checks and other lookup directives. The syntax is a
-# mixture between C and Perl. See the mod_ssl documentation
-# for more details.
-#<Location />
-#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
-# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
-# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA",
"Dev"} \
-# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
-# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
-# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
-#</Location>
-
-# SSL Engine Options:
-# Set various options for the SSL engine.
-# o FakeBasicAuth:
-# Translate the client X.509 into a Basic Authorisation. This means that
-# the standard Auth/DBMAuth methods can be used for access control. The
-# user name is the `one line' version of the client's X.509 certificate.
-# Note that no password is obtained from the user. Every entry in the user
-# file needs this password: `xxj31ZMTZzkVA'.
-# o ExportCertData:
-# This exports two additional environment variables: SSL_CLIENT_CERT and
-# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
-# server (always existing) and the client (only existing when client
-# authentication is used). This can be used to import the certificates
-# into CGI scripts.
-# o StdEnvVars:
-# This exports the standard SSL/TLS related `SSL_*' environment variables.
-# Per default this exportation is switched off for performance reasons,
-# because the extraction step is an expensive operation and is usually
-# useless for serving static content. So one usually enables the
-# exportation for CGI and SSI requests only.
-# o CompatEnvVars:
-# This exports obsolete environment variables for backward compatibility
-# to Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. Use this
-# to provide compatibility to existing CGI scripts.
-# o StrictRequire:
-# This denies access when "SSLRequireSSL" or "SSLRequire" applied
even
-# under a "Satisfy any" situation, i.e. when it applies access is denied
-# and no other module can change it.
-# o OptRenegotiate:
-# This enables optimized SSL connection renegotiation handling when SSL
-# directives are used in per-directory context.
-#SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire
-<Files ~ "\.(cgi|shtml|phtml|php3?)$">
- SSLOptions +StdEnvVars
-</Files>
-<Directory "/var/www/cgi-bin">
- SSLOptions +StdEnvVars
-</Directory>
-
-# SSL Protocol Adjustments:
-# The safe and default but still SSL/TLS standard compliant shutdown
-# approach is that mod_ssl sends the close notify alert but doesn't wait for
-# the close notify alert from client. When you need a different shutdown
-# approach you can use one of the following variables:
-# o ssl-unclean-shutdown:
-# This forces an unclean shutdown when the connection is closed, i.e. no
-# SSL close notify alert is send or allowed to received. This violates
-# the SSL/TLS standard but is needed for some brain-dead browsers. Use
-# this when you receive I/O errors because of the standard approach where
-# mod_ssl sends the close notify alert.
-# o ssl-accurate-shutdown:
-# This forces an accurate shutdown when the connection is closed, i.e. a
-# SSL close notify alert is send and mod_ssl waits for the close notify
-# alert of the client. This is 100% SSL/TLS standard compliant, but in
-# practice often causes hanging connections with brain-dead browsers. Use
-# this only for browsers where you know that their SSL implementation
-# works correctly.
-# Notice: Most problems of broken clients are also related to the HTTP
-# keep-alive facility, so you usually additionally want to disable
-# keep-alive for those clients, too. Use variable "nokeepalive" for this.
-# Similarly, one has to force some clients to use HTTP/1.0 to workaround
-# their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
-# "force-response-1.0" for this.
-SetEnvIf User-Agent ".*MSIE.*" \
- nokeepalive ssl-unclean-shutdown \
- downgrade-1.0 force-response-1.0
-
-# Per-Server Logging:
-# The home of a custom SSL log file. Use this when you want a
-# compact non-error SSL logfile on a virtual host basis.
-CustomLog logs/ssl_request_log \
- "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
-
-</VirtualHost>
-
-</IfDefine>
-
-Include conf/rhn_proxy.conf
-Include conf/cobbler-proxy.conf
diff --git a/web/html/applications/rhn-proxy/4.1/httpd/rhn_proxy.conf
b/web/html/applications/rhn-proxy/4.1/httpd/rhn_proxy.conf
deleted file mode 100644
index fba9c9e..0000000
--- a/web/html/applications/rhn-proxy/4.1/httpd/rhn_proxy.conf
+++ /dev/null
@@ -1,46 +0,0 @@
-# ** DO NOT EDIT **
-# RHN Proxy handler configuration file
-
-# RHN Proxy Server location
-<LocationMatch "/*">
- # this stanza contains all the handlers for RHN app code
-
- # added for oracle
- SetEnv ORACLE_HOME /opt/oracle
- SetEnv NLS_LANG english.UTF8
-
- # mod_python
- <IfModule !mod_python.c>
- LoadModule python_module modules/mod_python.so
- AddModule mod_python.c
- </IfModule>
-
- PythonPath "sys.path+['/usr/share/rhn']"
- PythonDebug Off
-
- # this one shall be common for all the python configlets
- # (for pre-version 3.1 anyway)
- PythonOption RootDir /usr/share/rhn
-
- SetHandler python-program
- # all of these handlers are defined in apacheServer
- PythonHeaderParserHandler proxy.apacheServer::HeaderParserHandler
- PythonHandler proxy.apacheServer::Handler
- PythonCleanupHandler proxy.apacheServer::CleanupHandler
- DefaultType text/xml
-</LocationMatch>
-
-# let apache do it's default thing for /pub/*, /index.html, and /_rhn_proxy
-# /pub is where user accessible data resides
-# /_rhn_proxy is for the landing page and anything additional we may want to
-# expand to in the future
-<LocationMatch "/pub/*">
- SetHandler None
- DefaultType text/plain
-</LocationMatch>
-
-<LocationMatch "/_rhn_proxy">
- SetHandler None
- DefaultType text/plain
-</LocationMatch>
-
diff --git a/web/html/applications/rhn-proxy/4.1/install-rhn-proxy.xml
b/web/html/applications/rhn-proxy/4.1/install-rhn-proxy.xml
deleted file mode 100644
index 022dade..0000000
--- a/web/html/applications/rhn-proxy/4.1/install-rhn-proxy.xml
+++ /dev/null
@@ -1,833 +0,0 @@
-<?xml version="1.0"?>
-
-<application acl-mixins="RHN::Access::System">
-
- <name>Satellite Proxy</name>
- <label>rhn_proxy</label>
- <version>4.1</version>
-
- <prerequisites>
- <org-channel-family>rhn-proxy</org-channel-family>
- <system-feature>ftr_proxy_capable</system-feature>
- <package-available>rhns-proxy-management</package-available>
- </prerequisites>
-
- <terms-and-conditions
url="http://www.redhat.com/licenses" />
-
- <install>
-
- <requirements>
-
<system-entitlement-possible>provisioning_entitled</system-entitlement-possible>
- <package-available>rhns-proxy-management</package-available>
- <client-capable>script.run</client-capable>
- <client-capable>configfiles.deploy</client-capable>
- </requirements>
-
- <activity description="Check for conflicting packages">
- <method-call class="RHN::ProxyInstall"
method="have_package">
- <package>bdb_perl</package>
- <package>ConfigPusher-general</package>
- <package>eventReceivers</package>
- <package>FcntlLock</package>
- <package>httpd</package>
- <package>httpd-suexec</package>
- <package>jabberd</package>
- <package>libapreq2</package>
- <package>LongLegs</package>
- <package>MessageQueue</package>
- <package>mm</package>
- <package>mod_perl</package>
- <package>mod_python</package>
- <package>mod_ssl</package>
- <package>NOCpulsePlugins</package>
- <package>NPalert</package>
- <package>np-config</package>
- <package>NPusers</package>
- <package>nslogs</package>
- <package>oracle-devel</package>
- <package>oracle_perl</package>
- <package>perl-Apache-Admin-Config</package>
- <package>perl-Apache-DBI</package>
- <package>perl-BerkeleyDB</package>
- <package>perl-BSD-Resource</package>
- <package>perl-Class-MethodMaker</package>
- <package>perl-Class-Singleton</package>
- <package>perl-Config-IniFiles</package>
- <package>perl-Crypt-DES</package>
- <package>perl-Crypt-GeneratePassword</package>
- <package>perl-Crypt-SSLeay</package>
- <package>perl-DateTime</package>
- <package>perl-DateTime-Locale</package>
- <package>perl-DateTime-TimeZone</package>
- <package>perl-DBD-Oracle</package>
- <package>perl-Devel-Symdump</package>
- <package>perl-Error</package>
- <package>perl-FreezeThaw</package>
- <package>perl-HTML-TableExtract</package>
- <package>perl-IO-Capture</package>
- <package>perl-IO-Socket-SSL</package>
- <package>perl-IO-stringy</package>
- <package>perl-libapreq2</package>
- <package>perl-Mail-Alias</package>
- <package>perl-MailTools</package>
- <package>perl-MIME-tools</package>
- <package>perl-Net-SNMP</package>
- <package>perl-Net_SSLeay</package>
- <package>perl-Network-IPv4Addr</package>
- <package>perl-NOCpulse-CLAC</package>
- <package>perl-NOCpulse-Debug</package>
- <package>perl-NOCpulse-Gritch</package>
- <package>perl-NOCpulse-Object</package>
- <package>perl-NOCpulse-OracleDB</package>
- <package>perl-NOCpulse-PersistentConnection</package>
- <package>perl-NOCpulse-Probe</package>
- <package>perl-NOCpulse-ProcessPool</package>
- <package>perl-NOCpulse-Scheduler</package>
- <package>perl-NOCpulse-SetID</package>
- <package>perl-NOCpulse-Utils</package>
- <package>perl-Params-Validate</package>
- <package>perl-TimeDate</package>
- <package>perl-XML-Generator</package>
- <package>ProgAGoGo</package>
- <package>python-sgmlop</package>
- <package>rhn-apache</package>
- <package>rhn-base-minimal</package>
- <package>rhn-modperl</package>
- <package>rhn-modpython</package>
- <package>rhn-modssl</package>
- <package>rhns</package>
- <package>rhns-auth-daemon</package>
- <package>rhns-certs-tools</package>
- <package>rhns-proxy-broker</package>
- <package>rhns-proxy-docs</package>
- <package>rhns-proxy-management</package>
- <package>rhns-proxy-monitoring</package>
- <package>rhns-proxy-package-manager</package>
- <package>rhns-proxy-redirect</package>
- <package>rhns-proxy-tools</package>
- <package>rhn-ssl-cert-check</package>
- <package>SatConfig-ApacheDepot</package>
- <package>SatConfig-autokick</package>
- <package>SatConfig-bootstrap</package>
- <package>SatConfig-bootstrap-server</package>
- <package>SatConfig-cluster</package>
- <package>SatConfig-dbsynch</package>
- <package>SatConfig-general</package>
- <package>SatConfig-generator</package>
- <package>SatConfig-installer</package>
- <package>SatConfig-spread</package>
- <package>scdb</package>
- <package>scdb_accessor_perl</package>
- <package>SNMPAlerts</package>
- <package>SputLite-client</package>
- <package>SputLite-server</package>
- <package>ssl_bridge</package>
- <package>status_log_acceptor</package>
- <package>Time-System</package>
- <package>tsdb</package>
- <package>tsdb_accessor_perl</package>
- <package>spacewalk-proxy-html</package>
- <package>spacewalk-ssl-cert-check</package>
- <package>spacewalk-proxy-common</package>
- <package>spacewalk-proxy-installer</package>
- <package>spacewalk-proxy-docs</package>
- <package>spacewalk-proxy-monitoring</package>
- <package>spacewalk-backend</package>
- <package>spacewalk-proxy-package-manager</package>
- <package>spacewalk-certs-tools</package>
- <package>spacewalk-proxy-broker</package>
- <package>spacewalk-proxy-management</package>
- <package>spacewalk-base-minimal</package>
- <package>spacewalk-proxy-redirect</package>
- <package>spacewalk-setup-jabberd</package>
- <package>nocpulse-common</package>
- <package>nocpulse-db-perl</package>
- <package>jabberd-selinux</package>
- <package>rhn-proxy-branding</package>
- <alias>proxy</alias>
- </method-call>
- </activity>
-
- <collect-data description="Enable Monitoring Proxy"
- acl="org_entitlement(rhn_monitor); package_available(rhns-proxy-monitoring);
global_config(satellite); global_config(is_monitoring_backend)">
-
- <header>
-Would you like to enable Monitoring Proxy functionality on this system?
- </header>
-
- <rhn-form name="Enable Monitoring"
label="enable_monitoring">
- <widget type="checkbox" name="Enable Monitoring?"
label="enable_monitoring" default="1"/>
- </rhn-form>
- </collect-data>
-
- <collect-data description="Remove Conflicting Packages"
acl="session_data_true(have_package_any_of_proxy)">
- <header>
- The following packages conflict with the new installation and will be removed:
- </header>
-
- <rhn-form name="Remove Conflicting Packages"
label="remove_packages">
- <widget type="literal" label="bdb_perl"
default="${session.have_package_bdb_perl}"
acl="session_data_true(have_package_bdb_perl)" />
- <widget type="literal"
label="ConfigPusher-general"
default="${session.have_package_ConfigPusher_general}"
acl="session_data_true(have_package_ConfigPusher_general)" />
- <widget type="literal" label="eventReceivers"
default="${session.have_package_eventReceivers}"
acl="session_data_true(have_package_eventReceivers)" />
- <widget type="literal" label="FcntlLock"
default="${session.have_package_FcntlLock}"
acl="session_data_true(have_package_FcntlLock)" />
- <widget type="literal" label="httpd"
default="${session.have_package_httpd}"
acl="session_data_true(have_package_httpd)" />
- <widget type="literal" label="httpd-suexec"
default="${session.have_package_httpd_suexec}"
acl="session_data_true(have_package_httpd_suexec)" />
- <widget type="literal" label="jabberd"
default="${session.have_package_jabberd}"
acl="session_data_true(have_package_jabberd)" />
- <widget type="literal" label="libapreq2"
default="${session.have_package_libapreq2}"
acl="session_data_true(have_package_libapreq2)" />
- <widget type="literal" label="LongLegs"
default="${session.have_package_LongLegs}"
acl="session_data_true(have_package_LongLegs)" />
- <widget type="literal" label="MessageQueue"
default="${session.have_package_MessageQueue}"
acl="session_data_true(have_package_MessageQueue)" />
- <widget type="literal" label="mm"
default="${session.have_package_mm}"
acl="session_data_true(have_package_mm)" />
- <widget type="literal" label="mod_perl"
default="${session.have_package_mod_perl}"
acl="session_data_true(have_package_mod_perl)" />
- <widget type="literal" label="mod_python"
default="${session.have_package_mod_python}"
acl="session_data_true(have_package_mod_python)" />
- <widget type="literal" label="mod_ssl"
default="${session.have_package_mod_ssl}"
acl="session_data_true(have_package_mod_ssl)" />
- <widget type="literal" label="NOCpulsePlugins"
default="${session.have_package_NOCpulsePlugins}"
acl="session_data_true(have_package_NOCpulsePlugins)" />
- <widget type="literal" label="NPalert"
default="${session.have_package_NPalert}"
acl="session_data_true(have_package_NPalert)" />
- <widget type="literal" label="np-config"
default="${session.have_package_np_config}"
acl="session_data_true(have_package_np_config)" />
- <widget type="literal" label="NPusers"
default="${session.have_package_NPusers}"
acl="session_data_true(have_package_NPusers)" />
- <widget type="literal" label="nslogs"
default="${session.have_package_nslogs}"
acl="session_data_true(have_package_nslogs)" />
- <widget type="literal" label="oracle-devel"
default="${session.have_package_oracle_devel}"
acl="session_data_true(have_package_oracle_devel)" />
- <widget type="literal" label="oracle_perl"
default="${session.have_package_oracle_perl}"
acl="session_data_true(have_package_oracle_perl)" />
- <widget type="literal"
label="perl-Apache-Admin-Config"
default="${session.have_package_perl_Apache_Admin_Config}"
acl="session_data_true(have_package_perl_Apache_Admin_Config)" />
- <widget type="literal" label="perl-Apache-DBI"
default="${session.have_package_perl_Apache_DBI}"
acl="session_data_true(have_package_perl_Apache_DBI)" />
- <widget type="literal" label="perl-BerkeleyDB"
default="${session.have_package_perl_BerkeleyDB}"
acl="session_data_true(have_package_perl_BerkeleyDB)" />
- <widget type="literal" label="perl-BSD-Resource"
default="${session.have_package_perl_BSD_Resource}"
acl="session_data_true(have_package_perl_BSD_Resource)" />
- <widget type="literal"
label="perl-Class-MethodMaker"
default="${session.have_package_perl_Class_MethodMaker}"
acl="session_data_true(have_package_perl_Class_MethodMaker)" />
- <widget type="literal"
label="perl-Class-Singleton"
default="${session.have_package_perl_Class_Singleton}"
acl="session_data_true(have_package_perl_Class_Singleton)" />
- <widget type="literal"
label="perl-Config-IniFiles"
default="${session.have_package_perl_Config_IniFiles}"
acl="session_data_true(have_package_perl_Config_IniFiles)" />
- <widget type="literal" label="perl-Crypt-DES"
default="${session.have_package_perl_Crypt_DES}"
acl="session_data_true(have_package_perl_Crypt_DES)" />
- <widget type="literal"
label="perl-Crypt-GeneratePassword"
default="${session.have_package_perl_Crypt_GeneratePassword}"
acl="session_data_true(have_package_perl_Crypt_GeneratePassword)" />
- <widget type="literal" label="perl-Crypt-SSLeay"
default="${session.have_package_perl_Crypt_SSLeay}"
acl="session_data_true(have_package_perl_Crypt_SSLeay)" />
- <widget type="literal" label="perl-DateTime"
default="${session.have_package_perl_DateTime}"
acl="session_data_true(have_package_perl_DateTime)" />
- <widget type="literal"
label="perl-DateTime-Locale"
default="${session.have_package_perl_DateTime_Locale}"
acl="session_data_true(have_package_perl_DateTime_Locale)" />
- <widget type="literal"
label="perl-DateTime-TimeZone"
default="${session.have_package_perl_DateTime_TimeZone}"
acl="session_data_true(have_package_perl_DateTime_TimeZone)" />
- <widget type="literal" label="perl-DBD-Oracle"
default="${session.have_package_perl_DBD_Oracle}"
acl="session_data_true(have_package_perl_DBD_Oracle)" />
- <widget type="literal" label="perl-Devel-Symdump"
default="${session.have_package_perl_Devel_Symdump}"
acl="session_data_true(have_package_perl_Devel_Symdump)" />
- <widget type="literal" label="perl-Error"
default="${session.have_package_perl_Error}"
acl="session_data_true(have_package_perl_Error)" />
- <widget type="literal" label="perl-FreezeThaw"
default="${session.have_package_perl_FreezeThaw}"
acl="session_data_true(have_package_perl_FreezeThaw)" />
- <widget type="literal"
label="perl-HTML-TableExtract"
default="${session.have_package_perl_HTML_TableExtract}"
acl="session_data_true(have_package_perl_HTML_TableExtract)" />
- <widget type="literal" label="perl-IO-Capture"
default="${session.have_package_perl_IO_Capture}"
acl="session_data_true(have_package_perl_IO_Capture)" />
- <widget type="literal" label="perl-IO-Socket-SSL"
default="${session.have_package_perl_IO_Socket_SSL}"
acl="session_data_true(have_package_perl_IO_Socket_SSL)" />
- <widget type="literal" label="perl-IO-stringy"
default="${session.have_package_perl_IO_stringy}"
acl="session_data_true(have_package_perl_IO_stringy)" />
- <widget type="literal" label="perl-libapreq2"
default="${session.have_package_perl_libapreq2}"
acl="session_data_true(have_package_perl_libapreq2)" />
- <widget type="literal" label="perl-Mail-Alias"
default="${session.have_package_perl_Mail_Alias}"
acl="session_data_true(have_package_perl_Mail_Alias)" />
- <widget type="literal" label="perl-MailTools"
default="${session.have_package_perl_MailTools}"
acl="session_data_true(have_package_perl_MailTools)" />
- <widget type="literal" label="perl-MIME-tools"
default="${session.have_package_perl_MIME_tools}"
acl="session_data_true(have_package_perl_MIME_tools)" />
- <widget type="literal" label="perl-Net-SNMP"
default="${session.have_package_perl_Net_SNMP}"
acl="session_data_true(have_package_perl_Net_SNMP)" />
- <widget type="literal" label="perl-Net_SSLeay"
default="${session.have_package_perl_Net_SSLeay}"
acl="session_data_true(have_package_perl_Net_SSLeay)" />
- <widget type="literal"
label="perl-Network-IPv4Addr"
default="${session.have_package_perl_Network_IPv4Addr}"
acl="session_data_true(have_package_perl_Network_IPv4Addr)" />
- <widget type="literal" label="perl-NOCpulse-CLAC"
default="${session.have_package_perl_NOCpulse_CLAC}"
acl="session_data_true(have_package_perl_NOCpulse_CLAC)" />
- <widget type="literal" label="perl-NOCpulse-Debug"
default="${session.have_package_perl_NOCpulse_Debug}"
acl="session_data_true(have_package_perl_NOCpulse_Debug)" />
- <widget type="literal"
label="perl-NOCpulse-Gritch"
default="${session.have_package_perl_NOCpulse_Gritch}"
acl="session_data_true(have_package_perl_NOCpulse_Gritch)" />
- <widget type="literal"
label="perl-NOCpulse-Object"
default="${session.have_package_perl_NOCpulse_Object}"
acl="session_data_true(have_package_perl_NOCpulse_Object)" />
- <widget type="literal"
label="perl-NOCpulse-OracleDB"
default="${session.have_package_perl_NOCpulse_OracleDB}"
acl="session_data_true(have_package_perl_NOCpulse_OracleDB)" />
- <widget type="literal"
label="perl-NOCpulse-PersistentConnection"
default="${session.have_package_perl_NOCpulse_PersistentConnection}"
acl="session_data_true(have_package_perl_NOCpulse_PersistentConnection)" />
- <widget type="literal" label="perl-NOCpulse-Probe"
default="${session.have_package_perl_NOCpulse_Probe}"
acl="session_data_true(have_package_perl_NOCpulse_Probe)" />
- <widget type="literal"
label="perl-NOCpulse-ProcessPool"
default="${session.have_package_perl_NOCpulse_ProcessPool}"
acl="session_data_true(have_package_perl_NOCpulse_ProcessPool)" />
- <widget type="literal"
label="perl-NOCpulse-Scheduler"
default="${session.have_package_perl_NOCpulse_Scheduler}"
acl="session_data_true(have_package_perl_NOCpulse_Scheduler)" />
- <widget type="literal" label="perl-NOCpulse-SetID"
default="${session.have_package_perl_NOCpulse_SetID}"
acl="session_data_true(have_package_perl_NOCpulse_SetID)" />
- <widget type="literal" label="perl-NOCpulse-Utils"
default="${session.have_package_perl_NOCpulse_Utils}"
acl="session_data_true(have_package_perl_NOCpulse_Utils)" />
- <widget type="literal"
label="perl-Params-Validate"
default="${session.have_package_perl_Params_Validate}"
acl="session_data_true(have_package_perl_Params_Validate)" />
- <widget type="literal" label="perl-TimeDate"
default="${session.have_package_perl_TimeDate}"
acl="session_data_true(have_package_perl_TimeDate)" />
- <widget type="literal" label="perl-XML-Generator"
default="${session.have_package_perl_XML_Generator}"
acl="session_data_true(have_package_perl_XML_Generator)" />
- <widget type="literal" label="ProgAGoGo"
default="${session.have_package_ProgAGoGo}"
acl="session_data_true(have_package_ProgAGoGo)" />
- <widget type="literal" label="python-sgmlop"
default="${session.have_package_python_sgmlop}"
acl="session_data_true(have_package_python_sgmlop)" />
- <widget type="literal" label="rhn-apache"
default="${session.have_package_rhn_apache}"
acl="session_data_true(have_package_rhn_apache)" />
- <widget type="literal" label="rhn-base-minimal"
default="${session.have_package_rhn_base_minimal}"
acl="session_data_true(have_package_rhn_base_minimal)" />
- <widget type="literal" label="rhn-modperl"
default="${session.have_package_rhn_modperl}"
acl="session_data_true(have_package_rhn_modperl)" />
- <widget type="literal" label="rhn-modpython"
default="${session.have_package_rhn_modpython}"
acl="session_data_true(have_package_rhn_modpython)" />
- <widget type="literal" label="rhn-modssl"
default="${session.have_package_rhn_modssl}"
acl="session_data_true(have_package_rhn_modssl)" />
- <widget type="literal" label="rhns"
default="${session.have_package_rhns}"
acl="session_data_true(have_package_rhns)" />
- <widget type="literal" label="rhns-auth-daemon"
default="${session.have_package_rhns_auth_daemon}"
acl="session_data_true(have_package_rhns_auth_daemon)" />
- <widget type="literal" label="rhns-certs-tools"
default="${session.have_package_rhns_certs_tools}"
acl="session_data_true(have_package_rhns_certs_tools)" />
- <widget type="literal" label="rhns-proxy-broker"
default="${session.have_package_rhns_proxy_broker}"
acl="session_data_true(have_package_rhns_proxy_broker)" />
- <widget type="literal" label="rhns-proxy-docs"
default="${session.have_package_rhns_proxy_docs}"
acl="session_data_true(have_package_rhns_proxy_docs)" />
- <widget type="literal"
label="rhns-proxy-management"
default="${session.have_package_rhns_proxy_management}"
acl="session_data_true(have_package_rhns_proxy_management)" />
- <widget type="literal"
label="rhns-proxy-monitoring"
default="${session.have_package_rhns_proxy_monitoring}"
acl="session_data_true(have_package_rhns_proxy_monitoring)" />
- <widget type="literal"
label="rhns-proxy-package-manager"
default="${session.have_package_rhns_proxy_package_manager}"
acl="session_data_true(have_package_rhns_proxy_package_manager)" />
- <widget type="literal" label="rhns-proxy-redirect"
default="${session.have_package_rhns_proxy_redirect}"
acl="session_data_true(have_package_rhns_proxy_redirect)" />
- <widget type="literal" label="rhns-proxy-tools"
default="${session.have_package_rhns_proxy_tools}"
acl="session_data_true(have_package_rhns_proxy_tools)" />
- <widget type="literal" label="rhn-ssl-cert-check"
default="${session.have_package_rhn_ssl_cert_check}"
acl="session_data_true(have_package_rhn_ssl_cert_check)" />
- <widget type="literal"
label="SatConfig-ApacheDepot"
default="${session.have_package_SatConfig_ApacheDepot}"
acl="session_data_true(have_package_SatConfig_ApacheDepot)" />
- <widget type="literal" label="SatConfig-autokick"
default="${session.have_package_SatConfig_autokick}"
acl="session_data_true(have_package_SatConfig_autokick)" />
- <widget type="literal" label="SatConfig-bootstrap"
default="${session.have_package_SatConfig_bootstrap}"
acl="session_data_true(have_package_SatConfig_bootstrap)" />
- <widget type="literal"
label="SatConfig-bootstrap-server"
default="${session.have_package_SatConfig_bootstrap_server}"
acl="session_data_true(have_package_SatConfig_bootstrap_server)" />
- <widget type="literal" label="SatConfig-cluster"
default="${session.have_package_SatConfig_cluster}"
acl="session_data_true(have_package_SatConfig_cluster)" />
- <widget type="literal" label="SatConfig-dbsynch"
default="${session.have_package_SatConfig_dbsynch}"
acl="session_data_true(have_package_SatConfig_dbsynch)" />
- <widget type="literal" label="SatConfig-general"
default="${session.have_package_SatConfig_general}"
acl="session_data_true(have_package_SatConfig_general)" />
- <widget type="literal" label="SatConfig-generator"
default="${session.have_package_SatConfig_generator}"
acl="session_data_true(have_package_SatConfig_generator)" />
- <widget type="literal" label="SatConfig-installer"
default="${session.have_package_SatConfig_installer}"
acl="session_data_true(have_package_SatConfig_installer)" />
- <widget type="literal" label="SatConfig-spread"
default="${session.have_package_SatConfig_spread}"
acl="session_data_true(have_package_SatConfig_spread)" />
- <widget type="literal" label="scdb"
default="${session.have_package_scdb}"
acl="session_data_true(have_package_scdb)" />
- <widget type="literal" label="scdb_accessor_perl"
default="${session.have_package_scdb_accessor_perl}"
acl="session_data_true(have_package_scdb_accessor_perl)" />
- <widget type="literal" label="SNMPAlerts"
default="${session.have_package_SNMPAlerts}"
acl="session_data_true(have_package_SNMPAlerts)" />
- <widget type="literal"
label="spacewalk-setup-jabberd"
default="${session.have_package_spacewalk_setup_jabberd}"
acl="session_data_true(have_package_spacewalk_setup_jabberd)" />
- <widget type="literal" label="SputLite-client"
default="${session.have_package_SputLite_client}"
acl="session_data_true(have_package_SputLite_client)" />
- <widget type="literal" label="SputLite-server"
default="${session.have_package_SputLite_server}"
acl="session_data_true(have_package_SputLite_server)" />
- <widget type="literal" label="ssl_bridge"
default="${session.have_package_ssl_bridge}"
acl="session_data_true(have_package_ssl_bridge)" />
- <widget type="literal" label="status_log_acceptor"
default="${session.have_package_status_log_acceptor}"
acl="session_data_true(have_package_status_log_acceptor)" />
- <widget type="literal" label="Time-System"
default="${session.have_package_Time_System}"
acl="session_data_true(have_package_Time_System)" />
- <widget type="literal" label="tsdb"
default="${session.have_package_tsdb}"
acl="session_data_true(have_package_tsdb)" />
- <widget type="literal" label="tsdb_accessor_perl"
default="${session.have_package_tsdb_accessor_perl}"
acl="session_data_true(have_package_tsdb_accessor_perl)" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Configure ${app.name} Server">
-
- <header>
-<p>
- Configure your ${app.name} Server below. The Administrator Email
- Address is the address to which system status messages are sent. For
- the ${app.name} Server to function properly, the ${app.name} Hostname
- must be set to the system's fully qualified domain name.
-</p>
-
-<p>
- The Satellite Parent Server is the hostname of the server this Proxy
- connects to. Depending on your configuration, it could be the
- central Satellite Servers, your organization's Satellite Server, or
- another ${app.name} Server. If this ${app.name} will be connecting
- through an HTTP proxy, populate the related fields.
-</p>
-
-<p>
- If you choose to enable Secure Sockets Layer (SSL), this Satellite Proxy
- will use SSL to connect to the Satellite Parent Server. Regardless of
- whether you enable SSL for the connection to the Satellite Parent Server,
- you will be prompted to generate an SSL certificate on the next page.
- This SSL certificate will allow client systems to connect to this
- ${app.name} securely. Refer to the RHN Proxy Installation Guide for
- more information.
-</p>
-<p>
- When using an HTTP Proxy Server, use the format "servername:port" to specify
the server. For example: "proxy-server.corp.com:8888".
-</p>
- </header>
-
- <rhn-form name="Configure Proxy"
label="configure_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Administrator Email Address"
label="traceback_mail" size="40"
default="${user.email}">
- <require valid-email="1" />
- </widget>
- <widget type="text" name="${app.name} Hostname"
label="hostname" size="40"
default="${system.guess_hostname}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="Satellite Parent Server"
label="rhn_parent" size="40"
default="${system.guess_rhn_parent}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Server"
label="http_proxy" size="30">
- <filter type="text" />
- <require fqdn-and-port="1"/>
- </widget>
- <widget type="text" name="HTTP Proxy Username"
label="http_proxy_username" size="10">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Password"
label="http_proxy_password" size="10">
- <filter type="text" />
- </widget>
- <widget type="checkbox" name="Enable SSL?"
label="enable_ssl" default="1" checked="1"
- acl="global_config(ssl_available) or not
global_config(satellite)"/>
- <widget type="literal" label="SSL" default="SSL is
not enabled on this Satellite."
- acl="global_config(satellite); not global_config(ssl_available)"/>
- <widget type="checkbox" name="Enable Push?"
label="enable_osad" default="1" checked="1"
- acl="global_config(satellite);
global_config(ssl_available)"/>
- </rhn-form>
-
- </collect-data>
-
- <collect-data description="Configure SSL"
acl="global_config(ssl_available); global_config(satellite)">
- <header>
- Enter your CA cert password and other SSL configuration
- information here. This information will be used to generate
- the server certificate used by the proxy server to communicate
- via SSL.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
-
- <widget type="password" name="CA Cert Password"
label="ca_cert_password" size="15">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Organization"
label="org" size="24">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Organizational Unit"
label="org-unit" size="24">
- <require max-length="128"/>
- </widget>
-
- <widget type="text" name="Email Address"
label="email" size="40"
default="${session.traceback_mail}">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="City" label="city"
size="16">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="State" label="state"
size="16">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="select" name="Country"
label="country" size="1" default="US"
populate_options="RHN::SatInstall->valid_cert_countries">
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Server cert Expiration (years)"
label="cert-expiration" size="3" default="5">
- <require max-length="3"/>
- <require response="1"/>
- </widget>
-
- <widget type="hidden" label="use_ssl"
default="1" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Skip SSL Configuration"
- acl="not global_config(ssl_available); global_config(satellite)">
- <header>
- You do not have SSL enabled for your Satellite Server.
- Therefore, SSL will not be available for this Satellite Proxy. SSL
- is a critical part of the security model of Satellite. If you wish
- to configure SSL at a later time, see the Satellite
- Installation Guide.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="hidden" label="ca_chain"
default="/usr/share/rhn/RHNS-CA-CERT" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Configure SSL" acl="not
global_config(satellite)">
- <header>
- In order to configure SSL on your ${app.name}, you will need
- to generate a CA certificate and an SSL key pair. See the
- <a
href="/help/proxy/rhn415/en/s1-installation-install-config.jsp">RHN Proxy
- Installation Guide </a> for more details. After you have
- generated the SSL key, you will need to upload the resulting
- tar file containing the certificate files using the form
- below. If the SSL CA certificate included in the tar file does
- not already exist in your org's <a
- href="/rhn/keys/CryptoKeysList.do" target="_new">list of
SSL
- keys</a>, it will be added to that list.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="file" name="SSL key files (tar)"
label="ssl_key_tar">
- <require response="1"/>
- </widget>
- <widget type="hidden" label="use_ssl"
default="1" />
- </rhn-form>
- </collect-data>
-
- <activity description="Lookup Parent IP Address"
- acl="session_data_true(enable_monitoring)">
- <method-call class="RHN::ProxyInstall"
method="load_ip_address" />
- </activity>
-
- <collect-data description="Configure Satellite Monitoring Proxy"
acl="session_data_true(enable_monitoring)">
-
- <header>
- Configure the Monitoring aspects of your ${app.name} below.
- </header>
-
- <rhn-form name="Configure Monitoring Proxy"
label="configure_monitoring_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Satellite Parent Server
Hostname" label="rhn_monitoring_parent" size="40"
default="${session.rhn_parent}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="Satellite Parent Server IP
Address" label="rhn_monitoring_parent_ip" size="15"
default="${session.rhn_parent_ip}">
- <require response="1"/>
- <require valid-ip="1"/>
- <filter type="text" />
- </widget>
- <widget type="hidden" label="enable_monitoring_scout"
default="1"/>
- </rhn-form>
-
- </collect-data>
-
- <activity description="Provisioning entitle system">
- <set-system-entitlement>provisioning_entitled</set-system-entitlement>
- </activity>
-
- <activity description="Create ${app.name} Config Channel for
system">
- <create-config-channel>
- <org-id>${user.org_id}</org-id>
- <type>normal</type>
- <name>${app.name} Config Channel for ${system.name}</name>
- <label>rhn_proxy_config_${system.id}</label>
- <description>This config channel is for the ${app.name} application running
on ${system.name} (${system.id})</description>
- </create-config-channel>
- </activity>
-
- <activity description="Subscribe to ${app.name} Config Channel">
- <subscribe-system-to-config-channel
channel-label="rhn_proxy_config_${system.id}" order="first"/>
- </activity>
-
- <activity description="Import SSL server cert into Config Channel"
- acl="not global_config(satellite)">
- <method-call class="RHN::ProxyInstall"
method="import_ssl_cert">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <cert-tar>${session.ssl_key_tar}</cert-tar>
- </method-call>
- </activity>
-
- <activity description="Generate SSL server cert"
acl="global_config(ssl_available);global_config(satellite)">
- <method-call class="RHN::ProxyInstall"
method="generate_ssl_cert">
- <hostname>${session.hostname}</hostname>
- <ca-cert-password>${session.ca_cert_password}</ca-cert-password>
- <org>${session.org}</org>
- <org-unit>${session.org-unit}</org-unit>
- <email>${session.email}</email>
- <city>${session.city}</city>
- <state>${session.state}</state>
- <country>${session.country}</country>
- <cert-expiration>${session.cert-expiration}</cert-expiration>
- <target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- </method-call>
- </activity>
-
- <activity description="Create SatCluster record for Satellite Monitoring
Proxy" acl="session_data_true(enable_monitoring)">
- <method-call class="RHN::ProxyInstall"
method="create_sat_cluster_record">
- <customer-id>${user.org_id}</customer-id>
- <description>${app.name} ${system.name} (${system.id})</description>
- <last-update-user>installer</last-update-user>
- </method-call>
- </activity>
-
- <activity description="Generate /etc/rhn/rhn.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/rhn.conf"
- template="rhn.conf" mode="640" username="root"
groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/rhn/cluster.ini config file"
acl="session_data_true(enable_monitoring)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/cluster.ini"
- template="cluster.ini" mode="644" username="root"
groupname="root"/>
- </activity>
-
- <activity description="Generate /etc/squid/squid.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/squid/squid.conf"
- template="squid.conf" mode="755"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/httpd.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/httpd.conf"
- template="httpd/httpd.conf" mode="444"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/rhn_proxy.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/rhn_proxy.conf"
- template="httpd/rhn_proxy.conf" mode="640"
username="root" groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/cobbler-proxy.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/cobbler-proxy.conf"
- template="httpd/cobbler-proxy.conf"
mode="640" username="root" groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/jabberd/c2s.xml config file"
- acl="global_config(ssl_available);session_data_true(enable_osad)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/jabberd/c2s.xml"
- template="jabberd/c2s.xml" mode="644"
username="root" groupname="root"/>
- </activity>
-
- <activity description="Generate /etc/jabberd/sm.xml config file"
- acl="global_config(ssl_available);session_data_true(enable_osad)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/jabberd/sm.xml"
- template="jabberd/sm.xml" mode="644" username="root"
groupname="root"/>
- </activity>
-
- <activity description="Activate the ${app.name}">
- <method-call class="RHN::ProxyInstall"
method="activate_proxy">
- <version>${app.version}</version>
- </method-call>
- </activity>
-
- <schedule-actions description="Schedule ${app.name} install">
- <remove-packages>
- <rpm>python-xmlrpc</rpm>
- </remove-packages>
-
- <run-script acl="session_data_true(have_package_any_of_proxy)">
- <action-name>Remove conflicting proxy packages</action-name>
- <script>
-#!/bin/sh
-PACKAGES=`for package in ${session.packages_list_proxy}; do
- rpm -q $package >/dev/null && echo $package; done`
-if [ -n "$PACKAGES" ]; then
- rpm -e $PACKAGES
-fi
- </script>
- </run-script>
-
- <install-packages acl="not
session_data_true(have_package_any_of_proxy)">
- <rpm>rhns-proxy-management</rpm>
- <rpm
acl="session_data_true(enable_monitoring)">rhns-proxy-monitoring</rpm>
- </install-packages>
-
- <install-packages
acl="session_data_true(have_package_any_of_proxy)">
- <force>1</force>
- <rpm>rhns-proxy-management</rpm>
- <rpm
acl="session_data_true(enable_monitoring)">rhns-proxy-monitoring</rpm>
- </install-packages>
-
-
- <deploy-configs>
- <action-name>Deploy Configuration</action-name>
- <configfile>/etc/rhn/rhn.conf</configfile>
- <configfile
acl="session_data_true(enable_monitoring)">/etc/rhn/cluster.ini</configfile>
- <configfile>/etc/squid/squid.conf</configfile>
- <configfile>/etc/httpd/conf/httpd.conf</configfile>
- <configfile>/etc/httpd/conf/rhn_proxy.conf</configfile>
- <configfile>/etc/httpd/conf/cobbler-proxy.conf</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.crt/server.crt</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.csr/server.csr</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.key/server.key</configfile>
- <configfile
acl="session_data_true(org_ssl_cert)">/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT</configfile>
- <configfile
acl="session_data_true(ca_rpm)">${session.ca_rpm}</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/server.pem</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/c2s.xml</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/sm.xml</configfile>
- </deploy-configs>
-
- <run-script acl="session_data_true(enable_monitoring)">
- <action-name>Enable Monitoring Services</action-name>
- <script>
-#!/bin/sh
-
-/etc/rc.d/np.d/step MonitoringScout install
- </script>
- </run-script>
-
- <run-script>
- <action-name>Allow Proxy service to read Satellite
Configuration</action-name>
- <script>
-#!/bin/sh
-chown root.apache /etc/sysconfig/rhn/systemid
-chmod 640 /etc/sysconfig/rhn/systemid
- </script>
- </run-script>
-
- <restart-services>
- <action-name>Start ${app.name}</action-name>
- <service>rhn-proxy</service>
- </restart-services>
- </schedule-actions>
-
- <redirect
save-session="1">/network/systems/details/proxy/install_progress.pxt?sid=${system.id}&version=${app.version}</redirect>
-
- </install>
-
- <install-progress acl="action_pending_named(Start Satellite Proxy) or
last_action_attempt_failed(Start Satellite Proxy)">
-
- <action-status description="Install progress">
- <header>
-You are installing ${app.name} on this system. Below is the list of actions for this
installation.
- </header>
-
- <inprogress>
- Once these actions are complete, your ${app.name} should be available for use.
- </inprogress>
-
- <complete>
- The installation is complete.
- </complete>
-
- <failed>
- The installation has failed. Click on the failed action for
- more details, resolve the error that prevented installation,
- and
-<a
href="/network/systems/details/proxy/index.pxt?sid=${system.id}&version=${app.version}">try
your installation again</a>.
- Or, you can
-<a
href="/network/systems/details/proxy.pxt?sid=${system.id}&pxt_trap=rhn:cancel_scheduled_proxy_install_cb">cancel
this installation process</a>.
- </failed>
-
- <target-action name="Start ${app.name}" show-chain="1"/>
- </action-status>
-
- </install-progress>
-
- <configure>
- <activity description="Create ${app.name} Config Channel for system if does
not already exist">
- <create-config-channel>
- <org-id>${user.org_id}</org-id>
- <type>normal</type>
- <name>${app.name} Config Channel for ${system.name}</name>
- <label>rhn_proxy_config_${system.id}</label>
- <description>This config channel is for the ${app.name} application running
on ${system.name} (${system.id})</description>
- </create-config-channel>
- </activity>
-
- <activity description="Subscribe to ${app.name} Config Channel">
- <subscribe-system-to-config-channel
channel-label="rhn_proxy_config_${system.id}" order="first"/>
- </activity>
-
- <activity description="Generate /etc/rhn/rhn.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/rhn.conf"
- template="rhn.conf" mode="640" username="root"
groupname="apache" new_only="1"/>
- </activity>
-
-
- <activity description="Load current configuration">
- <method-call class="RHN::ProxyInstall"
method="load_configfile_into_session">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <target-config-file>/etc/rhn/rhn.conf</target-config-file>
- </method-call>
- </activity>
-
- <collect-data description="Configure ${app.name}">
-
- <header>
-<p>
-Configure your ${app.name} below. The Administrator Email Address is
-the address to which system status e-mail will be sent. Please note
-that if you have modified the configuration locally on the proxy
-without importing those changes into the Proxy Config Channel for this
-system, this action will overwrite those changes.
-</p>
-<p>
-Also, configuration changes here will not update the configuration for
-the up2date client. Only the ${app.name} application will be
-configured. For instance, if you want this system to connect through
-an HTTP proxy, you will need to configure the ${app.name} software
-here, and configure the up2date client separately.
-</p>
-<p>
- When using an HTTP Proxy Server, use the format "servername:port" to specify
the server. For example: "proxy-server.corp.com:8888".
-</p>
- </header>
-
- <rhn-form name="Configure Proxy"
label="configure_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Administrator Email Address"
label="traceback_mail" size="40"
default="${session.traceback_mail}">
- <require valid-email="1" />
- </widget>
- <widget type="text" name="HTTP Proxy Server"
label="proxy.http_proxy" size="30"
default="${session.proxy.http_proxy}">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Username"
label="proxy.http_proxy_username" size="10"
default="${session.proxy.http_proxy_username}">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Password"
label="proxy.http_proxy_password" size="10"
default="${session.proxy.http_proxy_password}">
- <filter type="text" />
- </widget>
- </rhn-form>
-
- </collect-data>
-
- <activity description="Update ${app.name} Configuration">
- <method-call class="RHN::ProxyInstall"
method="update_configfile_from_session">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <target-config-file>/etc/rhn/rhn.conf</target-config-file>
- </method-call>
- </activity>
-
- <schedule-actions description="Schedule ${app.name} install">
-
- <deploy-configs>
- <configfile>/etc/rhn/rhn.conf</configfile>
- </deploy-configs>
-
- <restart-services>
- <action-name>Start ${app.name}</action-name>
- <service>rhn-proxy</service>
- </restart-services>
-
- </schedule-actions>
-
- <collect-data description="Configuration update scheduled"
no-cancel="1">
- <header>
-Reconfiguration actions for ${app.name} ${app.version} have been scheduled.
- </header>
-
- <rhn-form name="Installation Complete"
label="install_complete">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="hidden" label="continue_redir"
default="/rhn/systems/details/Overview.do" />
- </rhn-form>
-
- </collect-data>
-
- </configure>
-
- <remove>
-
- <collect-data description="Deactivate ${app.name}">
-
- <header>
-You can deactivate your ${app.name}. The ${app.name} services on the system
-will be stopped, and it will not show up as a Proxy in the Satellite web
-interface. The packages set and configuration of the system will not
-otherwise be affected. Systems that connect to Satellite through this
-proxy will need to be reconfigured to use a different Satellite server.
- </header>
-
- <rhn-form name="Deactivate Proxy"
label="deactivate_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="checkbox" name="Remove Packages"
label="remove_packages" default="1" checked="1" />
- </rhn-form>
-
- </collect-data>
-
- <activity description="Deactivate ${app.name} in local
configuration">
- <method-call class="RHN::ProxyInstall"
method="deactivate_proxy"/>
- </activity>
-
- <schedule-actions description="Deactivate ${app.name}">
-
- <stop-services>
- <action-name>Stop ${app.name} Services</action-name>
- <service>rhn-proxy</service>
- </stop-services>
-
- <run-script acl="session_data_true(remove_packages)">
- <action-name>Remove proxy packages</action-name>
- <script>
-#!/bin/sh
-PACKAGES=`for package in bdb_perl ConfigPusher-general eventReceivers FcntlLock jabberd
MessageQueue mm NOCpulsePlugins np-config NPalert NPusers nslogs oracle-devel oracle_perl
perl-Apache-Admin-Config perl-Apache-DBI perl-BerkeleyDB perl-BSD-Resource
perl-Class-MethodMaker perl-Class-Singleton perl-Config-IniFiles perl-Crypt-DES
perl-Crypt-GeneratePassword perl-Crypt-SSLeay perl-DateTime perl-DateTime-Locale
perl-DateTime-TimeZone perl-DBD-Oracle perl-Devel-Symdump perl-Error perl-FreezeThaw
perl-HTML-TableExtract perl-IO-Capture perl-IO-Socket-SSL perl-IO-stringy perl-Mail-Alias
perl-MailTools perl-MIME-tools perl-Net-SNMP perl-Network-IPv4Addr perl-Net_SSLeay
perl-NOCpulse-CLAC perl-NOCpulse-Debug perl-NOCpulse-Gritch perl-NOCpulse-Object
perl-NOCpulse-OracleDB perl-NOCpulse-PersistentConnection perl-NOCpulse-Probe
perl-NOCpulse-ProcessPool perl-NOCpulse-Scheduler perl-NOCpulse-SetID perl-NOCpulse-Utils
perl-Params-Validate perl-TimeDate perl-XML-Generator ProgAGoGo python-sgmlop rhn-apache
rhn-base-minimal rhn-modperl rhn-modpython rhn-modssl rhn-ssl-cert-check rhns
rhns-auth-daemon rhns-certs-tools rhns-proxy-broker rhns-proxy-docs rhns-proxy-management
rhns-proxy-monitoring rhns-proxy-package-manager rhns-proxy-redirect rhns-proxy-tools
SatConfig-ApacheDepot SatConfig-bootstrap SatConfig-bootstrap-server SatConfig-cluster
SatConfig-dbsynch SatConfig-general SatConfig-generator SatConfig-installer
SatConfig-spread scdb scdb_accessor_perl SNMPAlerts SputLite-client SputLite-server
ssl_bridge status_log_acceptor Time-System tsdb tsdb_accessor_perl
spacewalk-setup-jabberd; do
-rpm -q $package >/dev/null && echo $package; done`
-if [ -n "$PACKAGES" ]; then
- rpm -e $PACKAGES
-fi
- </script>
- </run-script>
-
- </schedule-actions>
-
- <collect-data description="Proxy deactivation scheduled"
no-cancel="1">
- <header>
-A deactivation for ${app.name} ${app.version} on ${system.name} has been scheduled.
- </header>
-
- <rhn-form name="Deactivation Complete"
label="deactivation_complete">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="literal" name="Remove Packages"
label="Remove Packages Yes" default="Yes"
acl="session_data_true(remove_packages)"/>
- <widget type="literal" name="Remove Packages" label="Remove
Packages No" default="No" acl="not
session_data_true(remove_packages)"/>
- <widget type="hidden" label="continue_redir"
default="/rhn/systems/details/Overview.do" />
- </rhn-form>
- </collect-data>
-
- </remove>
-
-</application>
diff --git a/web/html/applications/rhn-proxy/4.1/jabberd/c2s.xml
b/web/html/applications/rhn-proxy/4.1/jabberd/c2s.xml
deleted file mode 100644
index 76e5ca2..0000000
--- a/web/html/applications/rhn-proxy/4.1/jabberd/c2s.xml
+++ /dev/null
@@ -1,347 +0,0 @@
-<!-- c2s configuration -->
-<c2s>
- <!-- Our ID on the network (default: c2s) -->
- <id>c2s</id>
-
- <!-- The process ID file. comment this out if you don't need to know
- to know the process ID from outside the process (eg for control
- scripts) -->
- <pidfile>/var/run/jabberd/jabberd-c2s.pid</pidfile>
-
- <!-- Router connection configuration -->
- <router>
- <!-- IP/port the router is waiting for connections on -->
- <ip>127.0.0.1</ip> <!-- default: 127.0.0.1 -->
- <port>5347</port> <!-- default: 5347 -->
-
- <!-- Username/password to authenticate as -->
- <user>jabberd</user> <!-- default: jabberd -->
- <pass>secret</pass> <!-- default: secret -->
-
- <!-- File containing a SSL certificate and private key to use when
- setting up an encrypted channel with the router. If this is
- commented out, or the file can't be read, no attempt will be
- made to establish an encrypted channel with the router. -->
-
- <pemfile>/etc/jabberd/server.pem</pemfile>
-
- <!-- Router connection retry -->
- <retry>
- <!-- If the connection to the router can't be established at
- startup, we should try again this many times before exiting.
- Use -1 to retry indefinitely. [default: 3] -->
- <init>3</init>
-
- <!-- If we lost the connection to the router during normal
- operation (ie we've successfully connected to the router in
- the past), we should try to reconnect this many times before
- exiting. Use -1 to retry indefinitely. [default: 3] -->
- <lost>3</lost>
-
- <!-- Sleep for this many seconds before trying attempting a
- reconnect. [default: 2] -->
- <sleep>2</sleep>
- </retry>
- </router>
-
- <!-- Log configuration - type is "syslog", "file" or
"stdout" -->
- <log type='syslog'>
- <!-- If logging to syslog, this is the log ident -->
- <ident>jabberd/c2s</ident>
-
- <!-- If logging to syslog, this is the log facility
- (local0 - local7) [default: local3] -->
- <facility>local3</facility>
-
- <!-- If logging to file, this is the filename of the logfile -->
- <!--
- <file>/var/log/jabberd/c2s.log</file>
- -->
- </log>
-
- <!-- Local network configuration -->
- <local>
- <!-- Who we identify ourselves as. This should correspond to the
- ID (host) that the session manager thinks it is. You can
- specify more than one to support virtual hosts, as long as you
- have additional session manager instances on the network to
- handle those hosts. The realm attribute specifies the auth/reg
- or SASL authentication realm for the host. If the attribute is
- not specified, the realm will be selected by the SASL
- mechanism, or will be the same as the ID itself. Be aware that
- users are assigned to a realm, not a host, so two hosts in the
- same realm will have the same users.
- If no realm is specified, it will be set to be the same as the
- ID. -->
- <id>${session.hostname}</id>
- <!-- <id realm='company'>localhost</id> -->
-
- <!-- IP address to bind to (default: 0.0.0.0) -->
- <ip>0.0.0.0</ip>
-
- <!-- Port to bind to, or 0 to disable unencrypted access to the
- server (default: 5222) -->
- <port>5222</port>
-
- <!-- File containing a SSL certificate and private key for client
- connections. If this is commented out, clients will not be
- offered the STARTTLS stream extension -->
- <pemfile>/etc/jabberd/server.pem</pemfile>
-
- <!-- Require STARTTLS. If this is enabled, clients must do STARTTLS
- before they can authenticate. Until the stream is encrypted,
- all packets will be dropped. -->
- <!--
- <require-starttls/>
- -->
-
- <!-- Older versions of jabberd support encrypted client connections
- via an additional listening socket on port 5223. If you want
- this (required to allow pre-STARTTLS clients to do SSL),
- uncomment this -->
- <!--
- <ssl-port>5223</ssl-port>
- -->
- </local>
-
- <!-- Input/output settings -->
- <io>
- <!-- Maximum number of file descriptors. Note that the number of
- possible connections will be slightly less than this, because
- c2s itself can use up five on its own, and auth/reg modules may
- need a few also. If the supply of file descriptors is
- exhausted, new incoming connections will be denied.
- (default: 1024) -->
- <max_fds>1024</max_fds>
-
- <!-- Rate limiting -->
- <limits>
- <!-- Maximum bytes per second - if more than X bytes are sent in Y
- seconds, connection is throttled for Z seconds. The format
- is:
-
- <bytes seconds='Y' throttle='Z'>X</bytes>
-
- Default Y is 1, default Z is 5. set X to 0 to disable. -->
- <bytes>0</bytes>
-
- <!-- Maximum connects per second - if more than X connects are
- attempted from a single IP in Y seconds, that IP is throttled
- for Z seconds. The format is:
-
- <connects seconds='Y' throttle='Z'>X</connects>
-
- Default Y is 5, default Z is 5. set X to 0 to disable. -->
- <connects>0</connects>
- </limits>
-
- <!-- IP-based access controls. If a connection IP matches an allow
- rule, the connection will be accepted. If a connecting IP
- matches a deny rule, the connection will be refused. If the
- connecting IP does not match any rules, or it matches both an
- allow and a deny rule, the contents of the <order/> option
- determines what happens. -->
- <access>
- <!-- Rule check order (default: allow,deny)
-
- allow,deny - Check allow rules, then check deny rules.
- Allow by default.
- deny,allow - Check deny rules, then check allow rules.
- Deny by default. -->
- <order>allow,deny</order>
-
- <!-- Allow a network. If the mask isn't specified, it defaults to
- 255.255.255.255 (ie allow onle the specified IP) -->
- <!--
- <allow ip='127.0.0.0' mask='255.0.0.0'/>
- -->
-
- <!-- Allow a single host -->
- <!--
- <allow ip='12.34.56.78'/>
- -->
-
- <!-- Deny a network or a host -->
- <!--
- <deny ip='127.0.0.1' mask='255.0.0.0'/>
- <deny ip='87.65.43.21'/>
- -->
- </access>
-
- <!-- Timed checks -->
- <check>
- <!-- Interval between checks.
-
- Open client connections will be checked every n seconds, and
- the following checks applied.
-
- 0 disables all checks. (default: 0) -->
- <interval>0</interval>
-
- <!-- Idle connection checks.
-
- Connections that have not sent data for longer than this many
- seconds will be dropped.
-
- 0 disables idle timeouts. (default: 0) -->
- <idle>0</idle>
-
- <!-- Keepalives.
-
- Connections that have not sent data for longer than this many
- seconds will have a single whitespace character sent to them.
- This will force the TCP connection to be closed if they have
- disconnected without us knowing about it.
-
- 0 disables keepalives. (default: 0) -->
- <keepalive>0</keepalive>
-
- </check>
-
- </io>
-
- <!-- Authentication/registration database configuration -->
- <authreg>
- <!-- Backend module to use -->
- <module>db</module>
-
- <!-- Registration configuration -->
- <register>
- <!-- Account registration is enabled by default (provided the
- auth/reg module in use supports it). Comment this out to
- disable. -->
- <enable/>
-
- <!-- Human-readable instructions to be returned to client when
- registration is requested. -->
- <instructions>Enter a username and password to register with this
server.</instructions>
-
- <!-- Password change only. When registration is disabled, it may
- still be useful to allow clients to change their password. If
- you want this, uncomment this when you disable registration. -->
- <!--
- <password/>
- -->
- </register>
-
- <!-- Available authentication mechanisms -->
- <mechanisms>
-
- <!-- These are the traditional Jabber authentication mechanisms.
- Comment out any that you don't want to be offered to clients.
- Note that if the auth/reg module does not support one of
- these mechanisms, then it will not be offered regardless of
- whether or not it is enabled here.
-
- Similarly, if <zerok/> is disabled, then zero-knowledge data
- will not be created when a user is registered. -->
- <traditional>
- <plain/>
- <digest/>
- <zerok/>
- </traditional>
-
- <!-- SASL authentication mechanisms. Comment out any that you
- don't want to be offered to clients. Again, if the auth/reg
- module does not support one of these mechanisms, then it will
- not be offered. -->
- <sasl>
- <plain/>
- <digest-md5/>
- <!--
- <anonymous/>
- -->
- </sasl>
-
- </mechanisms>
-
- <!-- MySQL module configuration -->
- <mysql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>3306</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
- </mysql>
-
- <!-- PostgreSQL module configuration -->
- <pgsql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>5432</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
- </pgsql>
-
- <!-- Berkeley DB module configuration -->
- <db>
- <!-- Directory to store database files under -->
- <path>/var/lib/jabberd</path>
-
- <!-- Synchronize the database to disk after each write. If you
- disable this, database accesses may be faster, but data may
- be lost if jabberd crashes. -->
- <sync/>
- </db>
-
- <!-- LDAP module configuration -->
- <ldap>
- <!-- LDAP server host and port (default: 389) -->
- <host>ldap.example.com</host>
- <port>389</port>
-
- <!-- Use LDAP v3 if possible. If disabled, v2 will be used.
- Encryption options are only available if v3 is enabled. -->
- <!--
- <v3/>
- -->
-
- <!-- Encryption. If enabled, this will create an encrypted channel
- to the LDAP server using the LDAP STARTTLS mechanism. -->
- <!--
- <starttls/>
- -->
-
- <!-- Encryption. If enabled, this will create an encrypted channel
- to the server using the old-style "ldaps://" mechanism. It is
- recommended that you use <starttls/> instead of this. -->
- <!--
- <ssl/>
- -->
-
- <!-- DN to bind as for searches. If unspecified, the searches
- will be done anonymously. -->
- <!--
- <binddn>cn=Directory Manager</binddn>
- <bindpw>secret</bindpw>
- -->
-
- <!-- LDAP attribute that holds the user ID (default: uid) -->
- <uidattr>uid</uidattr>
-
- <!-- base DN of the tree. You should specify a DN for each
- authentication realm declared in the <local/> section above,
- by using the realm attribute. -->
- <basedn realm='company'>o=Company.com</basedn>
- <basedn>o=Example Corp.</basedn>
- </ldap>
-
- <!-- Pipe module configuration -->
- <pipe>
- <!-- Program to execute -->
- <exec>/usr/bin/pipe-auth.pl</exec>
- </pipe>
-
- </authreg>
-
-</c2s>
diff --git a/web/html/applications/rhn-proxy/4.1/jabberd/sm.xml
b/web/html/applications/rhn-proxy/4.1/jabberd/sm.xml
deleted file mode 100644
index aa07be3..0000000
--- a/web/html/applications/rhn-proxy/4.1/jabberd/sm.xml
+++ /dev/null
@@ -1,379 +0,0 @@
-<!-- Session manager configuration -->
-<sm>
- <!-- Our ID on the network. Users will have this as the domain part of
- their JID. If you want your server to be accessible from other
- Jabber servers, this ID must be resolvable by DNS.s
- (default: localhost) -->
- <id>${session.hostname}</id>
-
- <!-- The process ID file. comment this out if you don't need to know
- to know the process ID from outside the process (eg for control
- scripts) -->
- <pidfile>/var/run/jabberd/jabberd-sm.pid</pidfile>
-
- <!-- Router connection configuration -->
- <router>
- <!-- IP/port the router is waiting for connections on -->
- <ip>127.0.0.1</ip> <!-- default: 127.0.0.1 -->
- <port>5347</port> <!-- default: 5347 -->
-
- <!-- Username/password to authenticate as -->
- <user>jabberd</user> <!-- default: jabberd -->
- <pass>secret</pass> <!-- default: secret -->
-
- <!-- File containing a SSL certificate and private key to use when
- setting up an encrypted channel with the router. If this is
- commented out, or the file can't be read, no attempt will be
- made to establish an encrypted channel with the router. -->
- <!--
- <pemfile>/etc/jabberd/server.pem</pemfile>
- -->
- <!-- Router connection retry -->
- <retry>
- <!-- If the connection to the router can't be established at
- startup, we should try again this many times before exiting.
- Use -1 to retry indefinitely. [default: 3] -->
- <init>3</init>
-
- <!-- If we lost the connection to the router during normal
- operation (ie we've successfully connected to the router in
- the past), we should try to reconnect this many times before
- exiting. Use -1 to retry indefinitely. [default: 3] -->
- <lost>3</lost>
-
- <!-- Sleep for this many seconds before trying attempting a
- reconnect. [default: 2] -->
- <sleep>2</sleep>
- </retry>
- </router>
-
- <!-- Log configuration - type is "syslog", "file" or
"stdout" -->
- <log type='syslog'>
- <!-- If logging to syslog, this is the log ident -->
- <ident>jabberd/sm</ident>
-
- <!-- If logging to syslog, this is the log facility
- (local0 - local7) [default: local3] -->
- <facility>local3</facility>
-
- <!-- If logging to file, this is the filename of the logfile -->
- <!--
- <file>/var/log/jabberd/sm.log</file>
- -->
- </log>
-
- <!-- Storage database configuration -->
- <storage>
- <!-- By default, we use the MySQL driver for all storage -->
- <driver>db</driver>
-
- <!-- Its also possible to explicitly list alternate drivers for
- specific data types. -->
- <!-- Store vcards in a PostgreSQL database instead -->
- <!--
- <driver type='vcard'>pgsql</driver>
- -->
-
- <!-- MySQL driver configuration -->
- <mysql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>3306</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
-
- <!-- Transacation support. If this is commented out, transactions
- will be disabled. This might make database accesses faster,
- but data may be lost if jabberd crashes.
-
- This will need to be disabled if you are using a MySQL
- earlier than v3.23.xx, as transaction support did not appear
- until this version. -->
- <transactions/>
- </mysql>
-
- <!-- PostgreSQL driver configuration -->
- <pgsql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>5432</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
-
- <!-- Transacation support. If this is commented out, transactions
- will be disabled. This might make database accesses faster,
- but data may be lost if jabberd crashes. -->
- <transactions/>
- </pgsql>
-
- <!-- Berkeley DB driver configuration -->
- <db>
- <!-- Directory to store database files under -->
- <path>/var/lib/jabberd</path>
-
- <!-- Synchronize the database to disk after each write. If you
- disable this, database accesses may be faster, but data may
- be lost if jabberd crashes. -->
- <sync/>
- </db>
- </storage>
-
- <!-- Access control information -->
- <aci>
- <!-- The JIDs listed here will get access to all restricted
- functions, regardless of restrictions further down -->
- <acl type='all'>
- <jid>admin@localhost</jid>
- </acl>
-
- <!-- These JIDs can send broadcast messages (announce, motd) -->
- <!--
- <acl type='broadcast'>
- <jid>nocstaff1@localhost</jid>
- <jid>nocstaff2@localhost</jid>
- </acl>
- -->
-
- <!-- These JIDs will receive messages addressed to the sm itself
- (help requestes and such) -->
- <!--
- <acl type='messages'>
- <jid>support@localhost</jid>
- </acl>
- -->
-
- <!-- These JIDs can discover active user/session information -->
- <!--
- <acl type='disco'>
- <jid>webstatus@localhost</jid>
- </acl>
- -->
- </aci>
-
- <!-- Module chain configuration
-
- Modules listed in a chain are called in the order specified at
- the appropriate time for that chain (assuming that the module
- knows how to work with that chain; otherwise it simply ignores
- it).
-
- Removing a module from these lists will stop the module being
- called, even if its compiled into the server.
-
- Serveral modules have a presence in more than one chain. It is
- possible to remove a module from one chain but not others, but
- this may cause strange behaviour. Make sure you know what you're
- doing. -->
- <modules>
-
- <!-- sess-start. The modules in this chain are called when a session
- is first started (usually on request by c2s as part of the
- authentication process). This is normally used to load
- per-session data. -->
- <chain id='sess-start'/>
-
- <!-- sess-end. The modules in this chain are called just before a
- session is destroyed (after the client has disconnected). -->
- <chain id='sess-end'>
- <module>iq-last</module> <!-- update logout time -->
- </chain>
-
- <!-- in-sess. The modules in this chain are called when a packet
- arrives from an active user session. Note that this chain is
- also responsible for delivering packets to their destinations -
- this is usually handled by the "deliver" module. -->
- <chain id='in-sess'>
- <module>validate</module> <!-- validate packet type -->
- <module>privacy</module> <!-- manage privacy lists -->
- <module>roster</module> <!-- handle roster get/sets and
s10ns -->
- <module>vacation</module> <!-- manage vacation settings
-->
- <module>iq-vcard</module> <!-- store and retrieve the
user's vcard -->
- <module>iq-private</module> <!-- manage the user's private
data store -->
- <module>disco</module> <!-- respond to agents requests
from sessions -->
- <module>offline</module> <!-- if we're coming online
for the first time, deliver queued messages -->
- <module>announce</module> <!-- deliver motd -->
- <module>presence</module> <!-- process and distribute
presence updates -->
- <module>deliver</module> <!-- deliver packets with full
jids directly -->
- </chain>
-
- <!-- out-sess. The modules in this chain are called just before a
- packet is delivered to an active user session. -->
- <chain id='out-sess'/>
-
- <!-- in-router. The modules in this chain are called when a packet
- arrives from the router (ie another component or s2s), but
- before any processing is done. This is a good place to filter
- incoming packets. -->
- <chain id='in-router'>
- <module>session</module> <!-- perform session actions as
required by c2s -->
- <module>validate</module> <!-- validate packet type -->
- <module>presence</module> <!-- drop incoming presence if
user not online -->
- <module>privacy</module> <!-- filter incoming packets based
on privacy rules -->
- </chain>
-
- <!-- out-router. The modules in this chain are called just before a
- packet is delivered to the router (destined for another
- component or s2s). This is a good place to filter outgoing
- packets. -->
- <chain id='out-router'>
- <module>privacy</module> <!-- filter outgoing packets based
on privacy rules -->
- </chain>
-
- <!-- pkt-sm. The modules in this chain are called when a packet
- arrives that is addressed to the session manager itself (ie the
- to JID has no node part). This is normally used to provide
- session-manager-wide services (like service discovery). -->
- <chain id='pkt-sm'>
- <module>iq-last</module> <!-- return the server uptime
-->
- <module>iq-time</module> <!-- return the current server
time -->
- <module>iq-version</module> <!-- return the server name and
version -->
- <module>disco</module> <!-- build the disco list; respond
to disco queries -->
- <module>announce</module> <!-- send broadcast messages
(announce, motd, etc) -->
- <module>help</module> <!-- resend sm messages to
administrators -->
- <module>echo</module> <!-- echo messages sent to /echo
-->
- </chain>
-
- <!-- pkt-user. The modules in this chain are called when a packet
- arrives that is address to a specific user. Note that this
- chain is also responsible for delivering packets to user
- sessions as appropriate - this is usually handled by the
- "deliver" module. -->
- <chain id='pkt-user'>
- <module>roster</module> <!-- handle s10n responses -->
- <module>presence</module> <!-- process and distribute
incoming presence from external entities -->
- <module>iq-vcard</module> <!-- grab user vcards -->
- <module>deliver</module> <!-- deliver the packet to an
active session if we can -->
- <module>vacation</module> <!-- send vacation messages
-->
- <module>offline</module> <!-- save messages and s10ns for
later -->
- <module>disco-publish</module> <!-- handle disco publishes;
return information about user sessions -->
- <module>iq-last</module> <!-- return time since last logout
-->
- </chain>
-
- <!-- pkt-router. The modules in this chain are called when a
- special-purpose packet arrives from the router (eg domain
- advertisements). -->
- <chain id='pkt-router'>
- <module>session</module> <!-- take sessions offline their
c2s disappears -->
- <module>disco</module> <!-- query new components for
service information -->
- </chain>
-
- <!-- user-load. The modules in this chain are called to load
- per-user data. This will happen before a user can be used (ie
- before a session is created). -->
- <chain id='user-load'>
- <module>active</module> <!-- get active status -->
- <module>roster</module> <!-- load the roster and trust
list -->
- <module>privacy</module> <!-- load privacy lists -->
- <module>disco-publish</module> <!-- load published information
-->
- <module>vacation</module> <!-- load vacation settings
-->
- </chain>
-
- <!-- user-create. The modules in this chain are called when a user
- creation request is received (usually from c2s as part of a
- registration request). This initialises any per-user data. -->
- <chain id='user-create'>
- <module>active</module> <!-- activate new users -->
- <module>template-roster</module> <!-- populate roster from template
-->
- </chain>
-
- <!-- user-delete. The modules in this chain are called when a user
- deletion request is received (usually from c2s as part of a
- registration removal request). This deletes all data that may
- have been previously created for the user during normal
- operation. -->
- <chain id='user-delete'>
- <module>active</module> <!-- deactivate users -->
- <module>announce</module> <!-- delete motd data -->
- <module>disco-publish</module> <!-- delete published information
-->
- <module>offline</module> <!-- bounce queued messages
-->
- <module>privacy</module> <!-- delete privacy lists -->
- <module>roster</module> <!-- delete roster -->
- <module>vacation</module> <!-- delete vacation settings
-->
- <module>iq-last</module> <!-- delete last logout time
-->
- <module>iq-private</module> <!-- delete private data -->
- <module>iq-vcard</module> <!-- delete vcard -->
- </chain>
-
- </modules>
-
- <!-- Service discovery configuration -->
- <discovery>
-
- <!-- Service identity. these specify the category, type and name of
- this service that will be included in discovery information
- responses. -->
- <identity>
- <category>server</category> <!-- default: server -->
- <type>im</type> <!-- default: im -->
- <name>Jabber IM server</name> <!-- default: Jabber IM server
-->
- </identity>
-
- <!-- The discovery module can respond to jabber:iq:agents queries
- for compatibility with older clients. Comment this out to
- disable this. -->
- <agents/>
-
- <!-- Static service list.
-
- The discover module can discover disco-capable services
- automatically as they come online. Most legacy services,
- however, will not support discovery. In order to get them to
- appear in disco/agents lists returned to the client, they
- should be listed here.
-
- Note that if a disco-capable service with the same name as one
- listed below comes online, the information it provides will
- override the information listed below.
-
- The "category" and "type" attributes, and the list of
supported
- namespaces are only used for agents compatibility. If you have
- disabled this above, you may omit them. -->
- <items>
-
- <!-- example entry for a user directory -->
- <!--
- <item category='service' type='jud'
jid='users.jabber.org' name='Jabber User Directory'/>
- -->
-
- <!-- example entry for a groupchat (conference) service -->
- <!--
- <item category='conference' type='public'
jid='conference.jabber.org' name='Text conferencing'/>
- -->
-
- </items>
-
- </discovery>
-
- <!-- User options -->
- <user>
- <!-- By default, users must explicitly created before they can start
- a session. The creation process is usually triggered by a c2s
- component in response to a client registering a new user.
-
- Enableing this option will make it so that a user create will be
- triggered the first time a non-existant user attempts to start
- a session. This is useful if you already have users in an
- external authentication database (eg LDAP) and you don't want
- them to have to register. -->
- <auto-create/>
-
- <!-- Templates. If defined, the contents of these files will be
- stored in the users data store when they are created. -->
- <template>
- <!--
- <roster>/etc/jabberd/templates/roster.xml</roster>
- -->
- </template>
- </user>
-
-</sm>
diff --git a/web/html/applications/rhn-proxy/4.1/rhn.conf
b/web/html/applications/rhn-proxy/4.1/rhn.conf
deleted file mode 100644
index 1114598..0000000
--- a/web/html/applications/rhn-proxy/4.1/rhn.conf
+++ /dev/null
@@ -1,29 +0,0 @@
-# Automatically generated RHN Proxy Server configuration file.
-# -------------------------------------------------------------------------
-
-# SSL CA certificate location
-proxy.ca_chain = ${session.ca_chain:/usr/share/rhn/RHNS-CA-CERT}
-
-# Corporate HTTP proxy, format: corp_gateway.example.com:8080
-proxy.http_proxy = ${session.http_proxy}
-
-# Username for that corporate HTTP proxy
-proxy.http_proxy_username = ${session.http_proxy_username}
-
-# Password for that corporate HTTP proxy
-proxy.http_proxy_password = ${session.http_proxy_password}
-
-# Location of locally built, custom packages
-proxy.pkg_dir = /var/spool/rhn-proxy
-
-# Hostname of RHN Server or RHN Satellite
-proxy.rhn_parent = ${session.rhn_parent}
-
-# Destination of all tracebacks, etc.
-traceback_mail = ${session.traceback_mail}
-
-# SSL eabled or disabled
-proxy.use_ssl = ${session.use_ssl:0}
-
-# Monitoring Scout enabled or disabled
-web.is_monitoring_scout = ${session.enable_monitoring_scout:0}
diff --git a/web/html/applications/rhn-proxy/4.1/squid.conf
b/web/html/applications/rhn-proxy/4.1/squid.conf
deleted file mode 100644
index 655e58e..0000000
--- a/web/html/applications/rhn-proxy/4.1/squid.conf
+++ /dev/null
@@ -1,30 +0,0 @@
-# squid.conf
-# To be used for RHN Proxy servers.
-#
-# $Id: squid.conf 27034 2005-02-23 23:28:47Z jesusr $
-
-http_port 8080
-
-cache_mem 400 MB
-maximum_object_size 200 MB
-cache_dir ufs /var/spool/squid 15000 32 256
-
-cache_replacement_policy heap LFUDA
-memory_replacement_policy heap GDSF
-
-refresh_pattern . 0 100% 120000
-
-acl all src 0.0.0.0/0.0.0.0
-acl localhost src 127.0.0.1/255.255.255.255
-acl SSL_ports port 443
-acl Safe_ports port 80 # http
-acl Safe_ports port 443 # https
-acl CONNECT method CONNECT
-
-http_access deny !Safe_ports
-http_access deny CONNECT !SSL_ports
-http_access allow localhost
-http_access deny all
-icp_access allow all
-miss_access allow all
-
diff --git a/web/html/applications/rhn-proxy/4.2/cluster.ini
b/web/html/applications/rhn-proxy/4.2/cluster.ini
deleted file mode 100644
index 5cb0ec1..0000000
--- a/web/html/applications/rhn-proxy/4.2/cluster.ini
+++ /dev/null
@@ -1,8 +0,0 @@
-RemoteConfig.0.protocol=https
-RemoteConfig.0.path=/satconfig/cgi-bin/fetch_nocpulseini.cgi
-smonaddr=${session.rhn_monitoring_parent_ip}
-smonfqdn=${session.rhn_monitoring_parent}
-smontestaddr=${session.rhn_monitoring_parent_ip}
-smontestfqdn=${session.rhn_monitoring_parent}
-scoutsharedkey=${session.scout_shared_key}
-PhysNode.1.exists=1
diff --git a/web/html/applications/rhn-proxy/4.2/httpd/cobbler-proxy.conf
b/web/html/applications/rhn-proxy/4.2/httpd/cobbler-proxy.conf
deleted file mode 100644
index e2fdce4..0000000
--- a/web/html/applications/rhn-proxy/4.2/httpd/cobbler-proxy.conf
+++ /dev/null
@@ -1,14 +0,0 @@
-
-<LocationMatch "^/(cblr|cobbler)">
- SetHandler none
-</LocationMatch>
-
-ProxyPass /cobbler_api https://${session.rhn_parent}/cobbler_api
-ProxyPassReverse /cobbler_api https://${session.rhn_parent}/cobbler_api
-
-ProxyPass /cblr https://${session.rhn_parent}/cblr
-ProxyPassReverse /cblr https://${session.rhn_parent}/cblr
-
-ProxyPass /cobbler https://${session.rhn_parent}/cobbler
-ProxyPassReverse /cobbler https://${session.rhn_parent}/cobbler
-
diff --git a/web/html/applications/rhn-proxy/4.2/httpd/httpd.conf
b/web/html/applications/rhn-proxy/4.2/httpd/httpd.conf
deleted file mode 100644
index 7cc80a1..0000000
--- a/web/html/applications/rhn-proxy/4.2/httpd/httpd.conf
+++ /dev/null
@@ -1,1462 +0,0 @@
-#
-# Based upon the NCSA server configuration files originally by Rob McCool.
-#
-# This is the main Apache server configuration file. It contains the
-# configuration directives that give the server its instructions.
-# See <
URL:http://www.apache.org/docs/> for detailed information about
-# the directives.
-#
-# Do NOT simply read the instructions in here without understanding
-# what they do. They're here only as hints or reminders. If you are unsure
-# consult the online docs. You have been warned.
-#
-# After this file is processed, the server will look for and process
-# /etc/httpd/conf/srm.conf and then /etc/httpd/conf/access.conf
-# unless you have overridden these with ResourceConfig and/or
-# AccessConfig directives here.
-#
-# The configuration directives are grouped into three basic sections:
-# 1. Directives that control the operation of the Apache server process as a
-# whole (the 'global environment').
-# 2. Directives that define the parameters of the 'main' or 'default'
server,
-# which responds to requests that aren't handled by a virtual host.
-# These directives also provide default values for the settings
-# of all virtual hosts.
-# 3. Settings for virtual hosts, which allow Web requests to be sent to
-# different IP addresses or hostnames and have them handled by the
-# same Apache server process.
-#
-# Configuration and logfile names: If the filenames you specify for many
-# of the server's control files begin with "/" (or "drive:/" for
Win32), the
-# server will use that explicit path. If the filenames do *not* begin
-# with "/", the value of ServerRoot is prepended -- so
"logs/foo.log"
-# with ServerRoot set to "/usr/local/apache" will be interpreted by the
-# server as "/usr/local/apache/logs/foo.log".
-#
-
-### Section 1: Global Environment
-#
-# The directives in this section affect the overall operation of Apache,
-# such as the number of concurrent requests it can handle or where it
-# can find its configuration files.
-#
-
-#
-# ServerType is either inetd, or standalone. Inetd mode is only supported on
-# Unix platforms.
-#
-ServerType standalone
-
-#
-# ServerRoot: The top of the directory tree under which the server's
-# configuration, error, and log files are kept.
-#
-# NOTE! If you intend to place this on an NFS (or otherwise network)
-# mounted filesystem then please read the LockFile documentation
-# (available at <
URL:http://www.apache.org/docs/mod/core.html#lockfile>);
-# you will save yourself a lot of trouble.
-#
-# Do NOT add a slash at the end of the directory path.
-#
-ServerRoot "/etc/httpd"
-
-#
-# The LockFile directive sets the path to the lockfile used when Apache
-# is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or
-# USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at
-# its default value. The main reason for changing it is if the logs
-# directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL
-# DISK. The PID of the main server process is automatically appended to
-# the filename.
-#
-LockFile /var/run/httpd.lock
-
-#
-# PidFile: The file in which the server should record its process
-# identification number when it starts.
-#
-PidFile /var/run/httpd.pid
-
-#
-# ScoreBoardFile: File used to store internal server process information.
-# Not all architectures require this. But if yours does (you'll know because
-# this file will be created when you run Apache) then you *must* ensure that
-# no two invocations of Apache share the same scoreboard file.
-#
-ScoreBoardFile logs/apache_runtime_status
-
-#
-# In the standard configuration, the server will process httpd.conf (this
-# file, specified by the -f command line option), srm.conf, and access.conf
-# in that order. The latter two files are now distributed empty, as it is
-# recommended that all directives be kept in a single file for simplicity.
-# The commented-out values below are the built-in defaults. You can have the
-# server ignore these files altogether by using "/dev/null" (for Unix) or
-# "nul" (for Win32) for the arguments to the directives.
-#
-#ResourceConfig conf/srm.conf
-#AccessConfig conf/access.conf
-
-#
-# Timeout: The number of seconds before receives and sends time out.
-#
-Timeout 300
-
-#
-# KeepAlive: Whether or not to allow persistent connections (more than
-# one request per connection). Set to "Off" to deactivate.
-#
-KeepAlive Off
-
-#
-# MaxKeepAliveRequests: The maximum number of requests to allow
-# during a persistent connection. Set to 0 to allow an unlimited amount.
-# We recommend you leave this number high, for maximum performance.
-#
-MaxKeepAliveRequests 100
-
-#
-# KeepAliveTimeout: Number of seconds to wait for the next request from the
-# same client on the same connection.
-#
-KeepAliveTimeout 15
-
-#
-# Server-pool size regulation. Rather than making you guess how many
-# server processes you need, Apache dynamically adapts to the load it
-# sees --- that is, it tries to maintain enough server processes to
-# handle the current load, plus a few spare servers to handle transient
-# load spikes (e.g., multiple simultaneous requests from a single
-# Netscape browser).
-#
-# It does this by periodically checking how many servers are waiting
-# for a request. If there are fewer than MinSpareServers, it creates
-# a new spare. If there are more than MaxSpareServers, some of the
-# spares die off. The default values are probably OK for most sites.
-#
-MinSpareServers 5
-MaxSpareServers 20
-
-#
-# Number of servers to start initially --- should be a reasonable ballpark
-# figure.
-#
-StartServers 8
-
-#
-# Limit on total number of servers running, i.e., limit on the number
-# of clients who can simultaneously connect --- if this limit is ever
-# reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW.
-# It is intended mainly as a brake to keep a runaway server from taking
-# the system with it as it spirals down...
-#
-MaxClients 150
-
-#
-# MaxRequestsPerChild: the number of requests each child process is
-# allowed to process before the child dies. The child will exit so
-# as to avoid problems after prolonged use when Apache (and maybe the
-# libraries it uses) leak memory or other resources. On most systems, this
-# isn't really needed, but a few (such as Solaris) do have notable leaks
-# in the libraries. For these platforms, set to something like 10000
-# or so; a setting of 0 means unlimited.
-#
-# NOTE: This value does not include keepalive requests after the initial
-# request per connection. For example, if a child process handles
-# an initial request and 10 subsequent "keptalive" requests, it
-# would only count as 1 request towards this limit.
-#
-MaxRequestsPerChild 1000
-
-#
-# Listen: Allows you to bind Apache to specific IP addresses and/or
-# ports, in addition to the default. See also the <VirtualHost>
-# directive.
-#
-#Listen 3000
-#Listen 12.34.56.78:80
-#Listen 80
-
-#
-# BindAddress: You can support virtual hosts with this option. This directive
-# is used to tell the server which IP address to listen to. It can either
-# contain "*", an IP address, or a fully qualified Internet domain name.
-# See also the <VirtualHost> and Listen directives.
-#
-#BindAddress *
-
-#
-# Dynamic Shared Object (DSO) Support
-#
-# To be able to use the functionality of a module which was built as a DSO you
-# have to place corresponding `LoadModule' lines at this location so the
-# directives contained in it are actually available _before_ they are used.
-# Please read the file
http://httpd.apache.org/docs/dso.html for more
-# details about the DSO mechanism and run `httpd -l' for the list of already
-# built-in (statically linked and thus always available) modules in your httpd
-# binary.
-#
-# Note: The order in which modules are loaded is important. Don't change
-# the order below without expert advice.
-#
-# Example:
-# LoadModule foo_module modules/mod_foo.so
-
-#LoadModule mmap_static_module modules/mod_mmap_static.so
-LoadModule vhost_alias_module modules/mod_vhost_alias.so
-<IfDefine HAVE_BANDWIDTH>
-LoadModule bandwidth_module modules/mod_bandwidth.so
-</IfDefine>
-<IfDefine HAVE_THROTTLE>
-LoadModule throttle_module modules/mod_throttle.so
-</IfDefine>
-LoadModule env_module modules/mod_env.so
-LoadModule config_log_module modules/mod_log_config.so
-LoadModule agent_log_module modules/mod_log_agent.so
-LoadModule referer_log_module modules/mod_log_referer.so
-#LoadModule mime_magic_module modules/mod_mime_magic.so
-LoadModule mime_module modules/mod_mime.so
-#LoadModule negotiation_module modules/mod_negotiation.so
-LoadModule status_module modules/mod_status.so
-LoadModule info_module modules/mod_info.so
-LoadModule includes_module modules/mod_include.so
-LoadModule autoindex_module modules/mod_autoindex.so
-LoadModule dir_module modules/mod_dir.so
-LoadModule cgi_module modules/mod_cgi.so
-LoadModule asis_module modules/mod_asis.so
-LoadModule imap_module modules/mod_imap.so
-LoadModule action_module modules/mod_actions.so
-#LoadModule speling_module modules/mod_speling.so
-LoadModule userdir_module modules/mod_userdir.so
-LoadModule alias_module modules/mod_alias.so
-LoadModule rewrite_module modules/mod_rewrite.so
-LoadModule access_module modules/mod_access.so
-LoadModule auth_module modules/mod_auth.so
-LoadModule anon_auth_module modules/mod_auth_anon.so
-#LoadModule db_auth_module modules/mod_auth_db.so
-#LoadModule auth_any_module modules/mod_auth_any.so
-#LoadModule dbm_auth_module modules/mod_auth_dbm.so
-#LoadModule auth_ldap_module modules/mod_auth_ldap.so
-#LoadModule mysql_auth_module modules/mod_auth_mysql.so
-#LoadModule auth_pgsql_module modules/mod_auth_pgsql.so
-#LoadModule digest_module modules/mod_digest.so
-LoadModule proxy_module modules/libproxy.so
-#LoadModule cern_meta_module modules/mod_cern_meta.so
-LoadModule expires_module modules/mod_expires.so
-LoadModule headers_module modules/mod_headers.so
-#LoadModule usertrack_module modules/mod_usertrack.so
-#LoadModule example_module modules/mod_example.so
-#LoadModule unique_id_module modules/mod_unique_id.so
-LoadModule setenvif_module modules/mod_setenvif.so
-<IfDefine HAVE_PERL>
-LoadModule perl_module modules/libperl.so
-</IfDefine>
-<IfDefine HAVE_PHP>
-LoadModule php_module modules/mod_php.so
-</IfDefine>
-<IfDefine HAVE_PHP3>
-LoadModule php3_module modules/libphp3.so
-</IfDefine>
-<IfDefine HAVE_PHP4>
-LoadModule php4_module modules/libphp4.so
-</IfDefine>
-<IfDefine HAVE_DAV>
-LoadModule dav_module modules/libdav.so
-</IfDefine>
-<IfDefine HAVE_ROAMING>
-LoadModule roaming_module modules/mod_roaming.so
-</IfDefine>
-<IfDefine HAVE_SSL>
-LoadModule ssl_module modules/libssl.so
-</IfDefine>
-<IfDefine HAVE_PUT>
-LoadModule put_module modules/mod_put.so
-</IfDefine>
-<IfDefine HAVE_PYTHON>
-LoadModule python_module modules/mod_python.so
-</IfDefine>
-
-# Reconstruction of the complete module list from all available modules
-# (static and shared ones) to achieve correct module execution order.
-# [WHENEVER YOU CHANGE THE LOADMODULE SECTION ABOVE UPDATE THIS, TOO]
-ClearModuleList
-#AddModule mod_mmap_static.c
-AddModule mod_vhost_alias.c
-<IfDefine HAVE_BANDWIDTH>
-AddModule mod_bandwidth.c
-</IfDefine>
-<IfDefine HAVE_THROTTLE>
-AddModule mod_throttle.c
-</IfDefine>
-AddModule mod_env.c
-AddModule mod_log_config.c
-AddModule mod_log_agent.c
-AddModule mod_log_referer.c
-#AddModule mod_mime_magic.c
-AddModule mod_mime.c
-#AddModule mod_negotiation.c
-AddModule mod_status.c
-AddModule mod_info.c
-AddModule mod_include.c
-AddModule mod_autoindex.c
-AddModule mod_dir.c
-AddModule mod_cgi.c
-AddModule mod_asis.c
-AddModule mod_imap.c
-AddModule mod_actions.c
-#AddModule mod_speling.c
-AddModule mod_userdir.c
-AddModule mod_alias.c
-AddModule mod_rewrite.c
-AddModule mod_access.c
-AddModule mod_auth.c
-AddModule mod_auth_anon.c
-#AddModule mod_auth_db.c
-#AddModule mod_auth_any.c
-#AddModule mod_auth_dbm.c
-#AddModule auth_ldap.c
-#AddModule mod_auth_mysql.c
-#AddModule mod_auth_pgsql.c
-#AddModule mod_digest.c
-AddModule mod_proxy.c
-#AddModule mod_cern_meta.c
-AddModule mod_expires.c
-AddModule mod_headers.c
-#AddModule mod_usertrack.c
-#AddModule mod_example.c
-#AddModule mod_unique_id.c
-AddModule mod_so.c
-AddModule mod_setenvif.c
-<IfDefine HAVE_PERL>
-AddModule mod_perl.c
-</IfDefine>
-<IfDefine HAVE_PHP>
-AddModule mod_php.c
-</IfDefine>
-<IfDefine HAVE_PHP3>
-AddModule mod_php3.c
-</IfDefine>
-<IfDefine HAVE_PHP4>
-AddModule mod_php4.c
-</IfDefine>
-<IfDefine HAVE_DAV>
-AddModule mod_dav.c
-</IfDefine>
-<IfDefine HAVE_ROAMING>
-AddModule mod_roaming.c
-</IfDefine>
-<IfDefine HAVE_SSL>
-AddModule mod_ssl.c
-</IfDefine>
-<IfDefine HAVE_PUT>
-AddModule mod_put.c
-</IfDefine>
-<IfDefine HAVE_PYTHON>
-AddModule mod_python.c
-</IfDefine>
-
-#
-# ExtendedStatus controls whether Apache will generate "full" status
-# information (ExtendedStatus On) or just basic information (ExtendedStatus
-# Off) when the "server-status" handler is called. The default is Off.
-#
-#ExtendedStatus On
-
-### Section 2: 'Main' server configuration
-#
-# The directives in this section set up the values used by the 'main'
-# server, which responds to any requests that aren't handled by a
-# <VirtualHost> definition. These values also provide defaults for
-# any <VirtualHost> containers you may define later in the file.
-#
-# All of these directives may appear inside <VirtualHost> containers,
-# in which case these default settings will be overridden for the
-# virtual host being defined.
-#
-
-#
-# If your ServerType directive (set earlier in the 'Global Environment'
-# section) is set to "inetd", the next few directives don't have any
-# effect since their settings are defined by the inetd configuration.
-# Skip ahead to the ServerAdmin directive.
-#
-
-#
-# Port: The port to which the standalone server listens. For
-# ports < 1023, you will need httpd to be run as root initially.
-#
-Port 80
-
-##
-## SSL Support
-##
-## When we also provide SSL we have to listen to the
-## standard HTTP port (see above) and to the HTTPS port
-##
-<IfDefine HAVE_SSL>
-Listen 80
-Listen 443
-</IfDefine>
-
-#
-# If you wish httpd to run as a different user or group, you must run
-# httpd as root initially and it will switch.
-#
-# User/Group: The name (or #number) of the user/group to run httpd as.
-# . On SCO (ODT 3) use "User nouser" and "Group nogroup".
-# . On HPUX you may not be able to use shared memory as nobody, and the
-# suggested workaround is to create a user www and use that user.
-# NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
-# when the value of (unsigned)Group is above 60000;
-# don't use Group "#-1" on these systems!
-#
-User apache
-Group apache
-
-#
-# ServerAdmin: Your address, where problems with the server should be
-# e-mailed. This address appears on some server-generated pages, such
-# as error documents.
-#
-ServerAdmin root@localhost
-
-#
-# ServerName allows you to set a host name which is sent back to clients for
-# your server if it's different than the one the program would get (i.e., use
-# "www" instead of the host's real name).
-#
-# Note: You cannot just invent host names and hope they work. The name you
-# define here must be a valid DNS name for your host. If you don't understand
-# this, ask your network administrator.
-# If your host doesn't have a registered DNS name, enter its IP address here.
-# You will have to access it by its address (e.g.,
http://123.45.67.89/)
-# anyway, and this will make redirections work in a sensible way.
-#
-# 127.0.0.1 is the TCP/IP local loop-back address, often named localhost. Your
-# machine always knows itself by this address. If you use Apache strictly for
-# local testing and development, you may use 127.0.0.1 as the server name.
-#
-#ServerName localhost
-
-#
-# DocumentRoot: The directory out of which you will serve your
-# documents. By default, all requests are taken from this directory, but
-# symbolic links and aliases may be used to point to other locations.
-#
-DocumentRoot "/var/www/html"
-
-#
-# Each directory to which Apache has access, can be configured with respect
-# to which services and features are allowed and/or disabled in that
-# directory (and its subdirectories).
-#
-# First, we configure the "default" to be a very restrictive set of
-# permissions.
-#
-<Directory />
- Options FollowSymLinks
- AllowOverride None
-</Directory>
-
-#
-# Note that from this point forward you must specifically allow
-# particular features to be enabled - so if something's not working as
-# you might expect, make sure that you have specifically enabled it
-# below.
-#
-
-#
-# This should be changed to whatever you set DocumentRoot to.
-#
-<Directory "/var/www/html">
-
-#
-# This may also be "None", "All", or any combination of
"Indexes",
-# "Includes", "FollowSymLinks", "ExecCGI", or
"MultiViews".
-#
-# Note that "MultiViews" must be named *explicitly* --- "Options
All"
-# doesn't give it to you.
-#
- Options Indexes FollowSymLinks
-
-#
-# This controls which options the .htaccess files in directories can
-# override. Can also be "All", or any combination of "Options",
"FileInfo",
-# "AuthConfig", and "Limit"
-#
- AllowOverride None
-
-#
-# Controls who can get stuff from this server.
-#
- Order allow,deny
- Allow from all
-</Directory>
-
-#
-# UserDir: The name of the directory which is appended onto a user's home
-# directory if a ~user request is received.
-#
-# The path to the end user account 'public_html' directory must be
-# accessible to the webserver userid. This usually means that ~userid
-# must have permissions of 711, ~userid/public_html must have permissions
-# of 755, and documents contained therein must be world-readable.
-# Otherwise, the client will only receive a "403 Forbidden" message.
-#
-# See also:
http://httpd.apache.org/docs/misc/FAQ.html#forbidden
-#
-<IfModule mod_userdir.c>
- UserDir public_html
-</IfModule>
-
-#
-# Control access to UserDir directories. The following is an example
-# for a site where these directories are restricted to read-only.
-#
-#<Directory /home/*/public_html>
-# AllowOverride FileInfo AuthConfig Limit
-# Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
-# <Limit GET POST OPTIONS PROPFIND>
-# Order allow,deny
-# Allow from all
-# </Limit>
-# <LimitExcept GET POST OPTIONS PROPFIND>
-# Order deny,allow
-# Deny from all
-# </LimitExcept>
-#</Directory>
-
-#
-# DirectoryIndex: Name of the file or files to use as a pre-written HTML
-# directory index. Separate multiple entries with spaces.
-#
-<IfModule mod_dir.c>
- DirectoryIndex _rhn_proxy/index.html index.html index.htm index.shtml index.php
index.php4 index.php3 index.phtml index.cgi
-</IfModule>
-
-#
-# AccessFileName: The name of the file to look for in each directory
-# for access control information.
-#
-AccessFileName .htaccess
-
-#
-# The following lines prevent .htaccess files from being viewed by
-# Web clients. Since .htaccess files often contain authorization
-# information, access is disallowed for security reasons. Comment
-# these lines out if you want Web visitors to see the contents of
-# .htaccess files. If you change the AccessFileName directive above,
-# be sure to make the corresponding changes here.
-#
-# Also, folks tend to use names such as .htpasswd for password
-# files, so this will protect those as well.
-#
-<Files ~ "^\.ht">
- Order allow,deny
- Deny from all
- Satisfy All
-</Files>
-
-#
-# CacheNegotiatedDocs: By default, Apache sends "Pragma: no-cache" with each
-# document that was negotiated on the basis of content. This asks proxy
-# servers not to cache the document. Uncommenting the following line disables
-# this behavior, and proxies will be allowed to cache the documents.
-#
-#CacheNegotiatedDocs
-
-#
-# UseCanonicalName: (new for 1.3) With this setting turned on, whenever
-# Apache needs to construct a self-referencing URL (a URL that refers back
-# to the server the response is coming from) it will use ServerName and
-# Port to form a "canonical" name. With this setting off, Apache will
-# use the hostname:port that the client supplied, when possible. This
-# also affects SERVER_NAME and SERVER_PORT in CGI scripts.
-#
-UseCanonicalName On
-
-#
-# TypesConfig describes where the mime.types file (or equivalent) is
-# to be found.
-#
-<IfModule mod_mime.c>
- TypesConfig /etc/mime.types
-</IfModule>
-
-#
-# DefaultType is the default MIME type the server will use for a document
-# if it cannot otherwise determine one, such as from filename extensions.
-# If your server contains mostly text or HTML documents, "text/plain" is
-# a good value. If most of your content is binary, such as applications
-# or images, you may want to use "application/octet-stream" instead to
-# keep browsers from trying to display binary files as though they are
-# text.
-#
-DefaultType text/plain
-
-#
-# The mod_mime_magic module allows the server to use various hints from the
-# contents of the file itself to determine its type. The MIMEMagicFile
-# directive tells the module where the hint definitions are located.
-# mod_mime_magic is not part of the default server (you have to add
-# it yourself with a LoadModule [see the DSO paragraph in the 'Global
-# Environment' section], or recompile the server and include mod_mime_magic
-# as part of the configuration), so it's enclosed in an <IfModule> container.
-# This means that the MIMEMagicFile directive will only be processed if the
-# module is part of the server.
-#
-<IfModule mod_mime_magic.c>
-# MIMEMagicFile /usr/share/magic.mime
- MIMEMagicFile conf/magic
-</IfModule>
-
-#
-# HostnameLookups: Log the names of clients or just their IP addresses
-# e.g.,
www.apache.org (on) or 204.62.129.132 (off).
-# The default is off because it'd be overall better for the net if people
-# had to knowingly turn this feature on, since enabling it means that
-# each client request will result in AT LEAST one lookup request to the
-# nameserver.
-#
-HostnameLookups Off
-
-#
-# ErrorLog: The location of the error log file.
-# If you do not specify an ErrorLog directive within a <VirtualHost>
-# container, error messages relating to that virtual host will be
-# logged here. If you *do* define an error logfile for a <VirtualHost>
-# container, that host's errors will be logged there and not here.
-#
-ErrorLog logs/error_log
-
-#
-# LogLevel: Control the number of messages logged to the error_log.
-# Possible values include: debug, info, notice, warn, error, crit,
-# alert, emerg.
-#
-LogLevel warn
-
-#
-# The following directives define some format nicknames for use with
-# a CustomLog directive (see below).
-#
-LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\"
\"%{User-Agent}i\"" combined
-LogFormat "%h %l %u %t \"%r\" %>s %b" common
-LogFormat "%{Referer}i -> %U" referer
-LogFormat "%{User-agent}i" agent
-
-#
-# The location and format of the access logfile (Common Logfile Format).
-# If you do not define any access logfiles within a <VirtualHost>
-# container, they will be logged here. Contrariwise, if you *do*
-# define per-<VirtualHost> access logfiles, transactions will be
-# logged therein and *not* in this file.
-#
-# CustomLog /var/log/httpd/access_log common
-CustomLog logs/access_log combined
-
-#
-# If you would like to have agent and referer logfiles, uncomment the
-# following directives.
-#
-#CustomLog logs/referer_log referer
-#CustomLog logs/agent_log agent
-
-#
-# If you prefer a single logfile with access, agent, and referer information
-# (Combined Logfile Format) you can use the following directive.
-#
-#CustomLog logs/access_log combined
-
-#
-# Optionally add a line containing the server version and virtual host
-# name to server-generated pages (error documents, FTP directory listings,
-# mod_status and mod_info output etc., but not CGI generated documents).
-# Set to "EMail" to also include a mailto: link to the ServerAdmin.
-# Set to one of: On | Off | EMail
-#
-ServerSignature On
-
-# EBCDIC configuration:
-# (only for mainframes using the EBCDIC codeset, currently one of:
-# Fujitsu-Siemens' BS2000/OSD, IBM's OS/390 and IBM's TPF)!!
-# The following default configuration assumes that "text files"
-# are stored in EBCDIC (so that you can operate on them using the
-# normal POSIX tools like grep and sort) while "binary files" are
-# stored with identical octets as on an ASCII machine.
-#
-# The directives are evaluated in configuration file order, with
-# the EBCDICConvert directives applied before EBCDICConvertByType.
-#
-# If you want to have ASCII HTML documents and EBCDIC HTML documents
-# at the same time, you can use the file extension to force
-# conversion off for the ASCII documents:
-# > AddType text/html .ahtml
-# > EBCDICConvert Off=InOut .ahtml
-#
-# EBCDICConvertByType On=InOut text/* message/* multipart/*
-# EBCDICConvertByType On=In application/x-www-form-urlencoded
-# EBCDICConvertByType On=InOut application/postscript model/vrml
-# EBCDICConvertByType Off=InOut */*
-
-
-#
-# Aliases: Add here as many aliases as you need (with no limit). The format is
-# Alias fakename realname
-#
-<IfModule mod_alias.c>
-
- #
- # Note that if you include a trailing / on fakename then the server will
- # require it to be present in the URL. So "/icons" isn't aliased in
this
- # example, only "/icons/". If the fakename is slash-terminated, then the
- # realname must also be slash terminated, and if the fakename omits the
- # trailing slash, the realname must also omit it.
- #
- Alias /icons/ "/var/www/icons/"
-
- <Directory "/var/www/icons">
- Options Indexes MultiViews
- AllowOverride None
- Order allow,deny
- Allow from all
- </Directory>
-
- # This Alias will project the on-line documentation tree under /manual/
- # even if you change the DocumentRoot. Comment it if you don't want to
- # provide access to the on-line documentation.
- #
- # Alias /manual/ "/etc/httpd/htdocs/manual/"
- #
- # <Directory "/etc/httpd/htdocs/manual">
- # Options Indexes FollowSymlinks MultiViews
- # AllowOverride None
- # Order allow,deny
- # Allow from all
- # </Directory>
-
- #
- # ScriptAlias: This controls which directories contain server scripts.
- # ScriptAliases are essentially the same as Aliases, except that
- # documents in the realname directory are treated as applications and
- # run by the server when requested rather than as documents sent to the client.
- # The same rules about trailing "/" apply to ScriptAlias directives as to
- # Alias.
- #
- ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
-
- #
- # "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
- # CGI directory exists, if you have that configured.
- #
- <Directory "/var/www/cgi-bin">
- AllowOverride None
- Options None
- Order allow,deny
- Allow from all
- </Directory>
-
-</IfModule>
-# End of aliases.
-
-#
-# Redirect allows you to tell clients about documents which used to exist in
-# your server's namespace, but do not anymore. This allows you to tell the
-# clients where to look for the relocated document.
-# Format: Redirect old-URI new-URL
-#
-
-#
-# Directives controlling the display of server-generated directory listings.
-#
-<IfModule mod_autoindex.c>
-
- #
- # FancyIndexing is whether you want fancy directory indexing or standard
- #
- IndexOptions FancyIndexing NameWidth=*
-
- #
- # AddIcon* directives tell the server which icon to show for different
- # files or filename extensions. These are only displayed for
- # FancyIndexed directories.
- #
- AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
-
- AddIconByType (TXT,/icons/text.gif) text/*
- AddIconByType (IMG,/icons/image2.gif) image/*
- AddIconByType (SND,/icons/sound2.gif) audio/*
- AddIconByType (VID,/icons/movie.gif) video/*
-
- AddIcon /icons/binary.gif .bin .exe
- AddIcon /icons/binhex.gif .hqx
- AddIcon /icons/tar.gif .tar
- AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
- AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
- AddIcon /icons/a.gif .ps .ai .eps
- AddIcon /icons/layout.gif .html .shtml .htm .pdf
- AddIcon /icons/text.gif .txt
- AddIcon /icons/c.gif .c
- AddIcon /icons/p.gif .pl .py
- AddIcon /icons/f.gif .for
- AddIcon /icons/dvi.gif .dvi
- AddIcon /icons/uuencoded.gif .uu
- AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
- AddIcon /icons/tex.gif .tex
- AddIcon /icons/bomb.gif core
-
- AddIcon /icons/back.gif ..
- AddIcon /icons/hand.right.gif README
- AddIcon /icons/folder.gif ^^DIRECTORY^^
- AddIcon /icons/blank.gif ^^BLANKICON^^
-
- #
- # DefaultIcon is which icon to show for files which do not have an icon
- # explicitly set.
- #
- DefaultIcon /icons/unknown.gif
-
- #
- # AddDescription allows you to place a short description after a file in
- # server-generated indexes. These are only displayed for FancyIndexed
- # directories.
- # Format: AddDescription "description" filename
- #
- #AddDescription "GZIP compressed document" .gz
- #AddDescription "tar archive" .tar
- #AddDescription "GZIP compressed tar archive" .tgz
-
- #
- # ReadmeName is the name of the README file the server will look for by
- # default, and append to directory listings.
- #
- # HeaderName is the name of a file which should be prepended to
- # directory indexes.
- #
- # If MultiViews are amongst the Options in effect, the server will
- # first look for name.html and include it if found. If name.html
- # doesn't exist, the server will then look for name.txt and include
- # it as plaintext if found.
- #
- ReadmeName README
- HeaderName HEADER
-
- #
- # IndexIgnore is a set of filenames which directory indexing should ignore
- # and not include in the listing. Shell-style wildcarding is permitted.
- #
- IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
-
-</IfModule>
-# End of indexing directives.
-
-#
-# Document types.
-#
-<IfModule mod_mime.c>
-
- #
- # AddEncoding allows you to have certain browsers (Mosaic/X 2.1+) uncompress
- # information on the fly. Note: Not all browsers support this.
- # Despite the name similarity, the following Add* directives have nothing
- # to do with the FancyIndexing customization directives above.
- #
- AddEncoding x-compress Z
- AddEncoding x-gzip gz tgz
-
- #
- # AddLanguage allows you to specify the language of a document. You can
- # then use content negotiation to give a browser a file in a language
- # it can understand.
- #
- # Note 1: The suffix does not have to be the same as the language
- # keyword --- those with documents in Polish (whose net-standard
- # language code is pl) may wish to use "AddLanguage pl .po" to
- # avoid the ambiguity with the common suffix for perl scripts.
- #
- # Note 2: The example entries below illustrate that in quite
- # some cases the two character 'Language' abbreviation is not
- # identical to the two character 'Country' code for its country,
- # E.g. 'Danmark/dk' versus 'Danish/da'.
- #
- # Note 3: In the case of 'ltz' we violate the RFC by using a three char
- # specifier. But there is 'work in progress' to fix this and get
- # the reference data for rfc1766 cleaned up.
- #
- # Danish (da) - Dutch (nl) - English (en) - Estonian (ee)
- # French (fr) - German (de) - Greek-Modern (el)
- # Italian (it) - Korean (kr) - Norwegian (no) - Norwegian Nynorsk (nn)
- # Portugese (pt) - Luxembourgeois* (ltz)
- # Spanish (es) - Swedish (sv) - Catalan (ca) - Czech(cz)
- # Polish (pl) - Brazilian Portuguese (pt-br) - Japanese (ja)
- # Russian (ru)
- #
- AddLanguage da .dk
- AddLanguage nl .nl
- AddLanguage en .en
- AddLanguage et .ee
- AddLanguage fr .fr
- AddLanguage de .de
- AddLanguage el .el
- AddLanguage he .he
- AddCharset ISO-8859-8 .iso8859-8
- AddLanguage it .it
- AddLanguage ja .ja
- AddCharset ISO-2022-JP .jis
- AddLanguage kr .kr
- AddCharset ISO-2022-KR .iso-kr
- AddLanguage nn .nn
- AddLanguage no .no
- AddLanguage pl .po
- AddCharset ISO-8859-2 .iso-pl
- AddLanguage pt .pt
- AddLanguage pt-br .pt-br
- AddLanguage ltz .lu
- AddLanguage ca .ca
- AddLanguage es .es
- AddLanguage sv .se
- AddLanguage cz .cz
- AddLanguage ru .ru
- AddLanguage zh-tw .tw
- AddLanguage tw .tw
- AddCharset Big5 .Big5 .big5
- AddCharset WINDOWS-1251 .cp-1251
- AddCharset CP866 .cp866
- AddCharset ISO-8859-5 .iso-ru
- AddCharset KOI8-R .koi8-r
- AddCharset UCS-2 .ucs2
- AddCharset UCS-4 .ucs4
- AddCharset UTF-8 .utf8
-
- # LanguagePriority allows you to give precedence to some languages
- # in case of a tie during content negotiation.
- #
- # Just list the languages in decreasing order of preference. We have
- # more or less alphabetized them here. You probably want to change this.
- #
- <IfModule mod_negotiation.c>
- LanguagePriority en da nl et fr de el it ja kr no pl pt pt-br ru ltz ca es sv tw
- </IfModule>
-
- #
- # AddType allows you to tweak mime.types without actually editing it, or to
- # make certain files to be certain types.
- #
- # For example, the PHP 3.x module (not part of the Apache distribution - see
- #
http://www.php.net) will typically use:
- #
- <IfModule mod_php3.c>
- AddType application/x-httpd-php3 .php3
- AddType application/x-httpd-php3-source .phps
- </IfModule>
- #
- # And for PHP 4.x, use:
- #
- <IfModule mod_php4.c>
- AddType application/x-httpd-php .php .php4 .php3 .phtml
- AddType application/x-httpd-php-source .phps
- </IfModule>
-
- #
- # For PHP/FI (PHP2), use:
- #
- <IfModule mod_php.c>
- AddType application/x-httpd-php .phtml
- </IfModule>
-
- AddType application/x-tar .tgz
-
- #
- # AddHandler allows you to map certain file extensions to "handlers",
- # actions unrelated to filetype. These can be either built into the server
- # or added with the Action command (see below)
- #
- # If you want to use server side includes, or CGI outside
- # ScriptAliased directories, uncomment the following lines.
- #
- # To use CGI scripts:
- #
- #AddHandler cgi-script .cgi
-
- #
- # To use server-parsed HTML files
- #
- AddType text/html .shtml
- AddHandler server-parsed .shtml
-
- #
- # Uncomment the following line to enable Apache's send-asis HTTP file
- # feature
- #
- #AddHandler send-as-is asis
-
- #
- # If you wish to use server-parsed imagemap files, use
- #
- AddHandler imap-file map
-
- #
- # To enable type maps, you might want to use
- #
- #AddHandler type-map var
-
-</IfModule>
-# End of document types.
-
-#
-# Action lets you define media types that will execute a script whenever
-# a matching file is called. This eliminates the need for repeated URL
-# pathnames for oft-used CGI file processors.
-# Format: Action media/type /cgi-script/location
-# Format: Action handler-name /cgi-script/location
-#
-
-#
-# MetaDir: specifies the name of the directory in which Apache can find
-# meta information files. These files contain additional HTTP headers
-# to include when sending the document
-#
-#MetaDir .web
-
-#
-# MetaSuffix: specifies the file name suffix for the file containing the
-# meta information.
-#
-#MetaSuffix .meta
-
-#
-# Customizable error response (Apache style)
-# these come in three flavors
-#
-# 1) plain text
-#ErrorDocument 500 "The server made a boo boo.
-# n.b. the single leading (") marks it as text, it does not get output
-#
-# 2) local redirects
-#ErrorDocument 404 /missing.html
-# to redirect to local URL /missing.html
-#ErrorDocument 404 /cgi-bin/missing_handler.pl
-# N.B.: You can redirect to a script or a document using server-side-includes.
-#
-# 3) external redirects
-#ErrorDocument 402
http://some.other_server.com/subscription_info.html
-# N.B.: Many of the environment variables associated with the original
-# request will *not* be available to such a script.
-
-#
-# Customize behaviour based on the browser
-#
-<IfModule mod_setenvif.c>
-
- #
- # The following directives modify normal HTTP response behavior.
- # The first directive disables keepalive for Netscape 2.x and browsers that
- # spoof it. There are known problems with these browser implementations.
- # The second directive is for Microsoft Internet Explorer 4.0b2
- # which has a broken HTTP/1.1 implementation and does not properly
- # support keepalive when it is used on 301 or 302 (redirect) responses.
- #
- BrowserMatch "Mozilla/2" nokeepalive
- BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
-
- #
- # The following directive disables HTTP/1.1 responses to browsers which
- # are in violation of the HTTP/1.0 spec by not being able to grok a
- # basic 1.1 response.
- #
- BrowserMatch "RealPlayer 4\.0" force-response-1.0
- BrowserMatch "Java/1\.0" force-response-1.0
- BrowserMatch "JDK/1\.0" force-response-1.0
-
-</IfModule>
-# End of browser customization directives
-
-#
-# If the perl module is installed, this will allow execution of mod_perl
-# to compile your scripts to subroutines which it will execute directly,
-# avoiding the costly compile process for most requests.
-#
-#<IfModule mod_perl.c>
-# Alias /perl /var/www/perl
-# <Directory /var/www/perl>
-# SetHandler perl-script
-# PerlHandler Apache::Registry
-# Options +ExecCGI
-# </Directory>
-#</IfModule>
-
-#
-# Allow http put (such as Netscape Gold's publish feature)
-# Use htpasswd to generate /etc/httpd/conf/passwd.
-#
-#<IfModule mod_put.c>
-# Alias /upload /tmp
-# <Directory /tmp>
-# EnablePut On
-# AuthType Basic
-# AuthName Temporary
-# AuthUserFile /etc/httpd/conf/passwd
-# EnableDelete Off
-# umask 007
-# <Limit PUT>
-# require valid-user
-# </Limit>
-# </Directory>
-#</IfModule>
-
-#
-# Allow server status reports, with the URL of
http://servername/server-status
-# Change the ".your_domain.com" to match your domain to enable.
-#
-#<Location /server-status>
-# SetHandler server-status
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-#</Location>
-
-#
-# Allow remote server configuration reports, with the URL of
-#
http://servername/server-info (requires that mod_info.c be loaded).
-# Change the ".your_domain.com" to match your domain to enable.
-#
-#<Location /server-info>
-# SetHandler server-info
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-#</Location>
-
-#
-# Allow access to local system documentation from localhost
-#
-Alias /doc/ /usr/share/doc/
-<Directory /usr/share/doc>
- order deny,allow
- deny from all
- allow from localhost .localdomain
- Options Indexes FollowSymLinks
-</Directory>
-
-#
-# There have been reports of people trying to abuse an old bug from pre-1.1
-# days. This bug involved a CGI script distributed as a part of Apache.
-# By uncommenting these lines you can redirect these attacks to a logging
-# script on
phf.apache.org. Or, you can record them yourself, using the script
-# support/phf_abuse_log.cgi.
-#
-#<Location /cgi-bin/phf*>
-# Deny from all
-# ErrorDocument 403
http://phf.apache.org/phf_abuse_log.cgi
-#</Location>
-
-#
-# Proxy Server directives. Uncomment the following lines to
-# enable the proxy server:
-#
-#<IfModule mod_proxy.c>
-# ProxyRequests On
-
-# <Directory proxy:*>
-# Order deny,allow
-# Deny from all
-# Allow from .your_domain.com
-# </Directory>
-
- #
- # Enable/disable the handling of HTTP/1.1 "Via:" headers.
- # ("Full" adds the server version; "Block" removes all outgoing
Via: headers)
- # Set to one of: Off | On | Full | Block
- #
-# ProxyVia On
-
- #
- # To enable the cache as well, edit and uncomment the following lines:
- # (no caching without CacheRoot)
- #
-# CacheRoot "/var/cache/httpd"
-# CacheSize 5
-# CacheGcInterval 4
-# CacheMaxExpire 24
-# CacheLastModifiedFactor 0.1
-# CacheDefaultExpire 1
-# NoCache
a_domain.com another_domain.edu joes.garage_sale.com
-
-#</IfModule>
-# End of proxy directives.
-
-### Section 3: Virtual Hosts
-#
-# VirtualHost: If you want to maintain multiple domains/hostnames on your
-# machine you can setup VirtualHost containers for them. Most configurations
-# use only name-based virtual hosts so the server doesn't need to worry about
-# IP addresses. This is indicated by the asterisks in the directives below.
-#
-# Please see the documentation at <
URL:http://www.apache.org/docs/vhosts/>
-# for further details before you try to setup virtual hosts.
-#
-# You may use the command line option '-S' to verify your virtual host
-# configuration.
-
-#
-# Use name-based virtual hosting.
-#
-#NameVirtualHost *
-
-#
-# VirtualHost example:
-# Almost any Apache directive may go into a VirtualHost container.
-# The first VirtualHost section is used for requests without a known
-# server name.
-#
-#<VirtualHost *>
-# ServerAdmin webmaster(a)dummy-host.example.com
-# DocumentRoot /www/docs/dummy-host.example.com
-# ServerName
dummy-host.example.com
-# ErrorLog logs/dummy-host.example.com-error_log
-# CustomLog logs/dummy-host.example.com-access_log common
-#</VirtualHost>
-
-#<VirtualHost _default_:*>
-#</VirtualHost>
-
-##
-## SSL Global Context
-##
-## All SSL configuration in this context applies both to
-## the main server and all SSL-enabled virtual hosts.
-##
-
-#
-# Some MIME-types for downloading Certificates and CRLs
-#
-<IfDefine HAVE_SSL>
-AddType application/x-x509-ca-cert .crt
-AddType application/x-pkcs7-crl .crl
-</IfDefine>
-
-<IfModule mod_ssl.c>
-
-# Pass Phrase Dialog:
-# Configure the pass phrase gathering process.
-# The filtering dialog program (`builtin' is a internal
-# terminal dialog) has to provide the pass phrase on stdout.
-SSLPassPhraseDialog builtin
-
-# Inter-Process Session Cache:
-# Configure the SSL Session Cache: First the mechanism
-# to use and second the expiring timeout (in seconds).
-#SSLSessionCache none
-#SSLSessionCache shmht:logs/ssl_scache(512000)
-SSLSessionCache shmcb:logs/ssl_scache(512000)
-#SSLSessionCache shm:logs/ssl_scache(512000)
-SSLSessionCacheTimeout 300
-
-# Semaphore:
-# Configure the path to the mutual exclusion semaphore the
-# SSL engine uses internally for inter-process synchronization.
-SSLMutex file:logs/ssl_mutex
-
-# Pseudo Random Number Generator (PRNG):
-# Configure one or more sources to seed the PRNG of the
-# SSL library. The seed data should be of good random quality.
-# WARNING! On some platforms /dev/random blocks if not enough entropy
-# is available. This means you then cannot use the /dev/random device
-# because it would lead to very long connection times (as long as
-# it requires to make more entropy available). But usually those
-# platforms additionally provide a /dev/urandom device which doesn't
-# block. So, if available, use this one instead. Read the mod_ssl User
-# Manual for more details.
-SSLRandomSeed startup builtin
-SSLRandomSeed connect builtin
-#SSLRandomSeed startup file:/dev/random 512
-#SSLRandomSeed startup file:/dev/urandom 512
-#SSLRandomSeed connect file:/dev/random 512
-#SSLRandomSeed connect file:/dev/urandom 512
-
-# Logging:
-# The home of the dedicated SSL protocol logfile. Errors are
-# additionally duplicated in the general error log file. Put
-# this somewhere where it cannot be used for symlink attacks on
-# a real server (i.e. somewhere where only root can write).
-# Log levels are (ascending order: higher ones include lower ones):
-# none, error, warn, info, trace, debug.
-SSLLog logs/ssl_engine_log
-SSLLogLevel error
-
-</IfModule>
-
-<IfDefine HAVE_SSL>
-
-##
-## SSL Virtual Host Context
-##
-
-<VirtualHost _default_:443>
-
-# General setup for the virtual host
-#DocumentRoot "/etc/httpd/htdocs"
-#ServerName new.host.name
-#ServerAdmin you(a)your.address
-ErrorLog logs/error_log
-TransferLog logs/access_log
-
-# SSL Engine Switch:
-# Enable/Disable SSL for this virtual host.
-SSLEngine on
-
-# SSL Cipher Suite:
-# List the ciphers that the client is permitted to negotiate.
-# See the mod_ssl documentation for a complete list.
-#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
-
-# Server Certificate:
-# Point SSLCertificateFile at a PEM encoded certificate. If
-# the certificate is encrypted, then you will be prompted for a
-# pass phrase. Note that a kill -HUP will prompt again. A test
-# certificate can be generated with `make certificate' under
-# built time. Keep in mind that if you've both a RSA and a DSA
-# certificate you can configure both in parallel (to also allow
-# the use of DSA ciphers, etc.)
-SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
-#SSLCertificateFile /etc/httpd/conf/ssl.crt/server-dsa.crt
-
-# Server Private Key:
-# If the key is not combined with the certificate, use this
-# directive to point at the key file. Keep in mind that if
-# you've both a RSA and a DSA private key you can configure
-# both in parallel (to also allow the use of DSA ciphers, etc.)
-SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
-#SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server-dsa.key
-
-# Server Certificate Chain:
-# Point SSLCertificateChainFile at a file containing the
-# concatenation of PEM encoded CA certificates which form the
-# certificate chain for the server certificate. Alternatively
-# the referenced file can be the same as SSLCertificateFile
-# when the CA certificates are directly appended to the server
-# certificate for convinience.
-#SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca.crt
-
-# Certificate Authority (CA):
-# Set the CA certificate verification path where to find CA
-# certificates for client authentication or alternatively one
-# huge file containing all of them (file must be PEM encoded)
-# Note: Inside SSLCACertificatePath you need hash symlinks
-# to point to the certificate files. Use the provided
-# Makefile to update the hash symlinks after changes.
-#SSLCACertificatePath /etc/httpd/conf/ssl.crt
-#SSLCACertificateFile /etc/httpd/conf/ssl.crt/ca-bundle.crt
-
-# Certificate Revocation Lists (CRL):
-# Set the CA revocation path where to find CA CRLs for client
-# authentication or alternatively one huge file containing all
-# of them (file must be PEM encoded)
-# Note: Inside SSLCARevocationPath you need hash symlinks
-# to point to the certificate files. Use the provided
-# Makefile to update the hash symlinks after changes.
-#SSLCARevocationPath /etc/httpd/conf/ssl.crl
-#SSLCARevocationFile /etc/httpd/conf/ssl.crl/ca-bundle.crl
-
-# Client Authentication (Type):
-# Client certificate verification type and depth. Types are
-# none, optional, require and optional_no_ca. Depth is a
-# number which specifies how deeply to verify the certificate
-# issuer chain before deciding the certificate is not valid.
-#SSLVerifyClient require
-#SSLVerifyDepth 10
-
-# Access Control:
-# With SSLRequire you can do per-directory access control based
-# on arbitrary complex boolean expressions containing server
-# variable checks and other lookup directives. The syntax is a
-# mixture between C and Perl. See the mod_ssl documentation
-# for more details.
-#<Location />
-#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
-# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
-# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA",
"Dev"} \
-# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
-# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
-# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
-#</Location>
-
-# SSL Engine Options:
-# Set various options for the SSL engine.
-# o FakeBasicAuth:
-# Translate the client X.509 into a Basic Authorisation. This means that
-# the standard Auth/DBMAuth methods can be used for access control. The
-# user name is the `one line' version of the client's X.509 certificate.
-# Note that no password is obtained from the user. Every entry in the user
-# file needs this password: `xxj31ZMTZzkVA'.
-# o ExportCertData:
-# This exports two additional environment variables: SSL_CLIENT_CERT and
-# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
-# server (always existing) and the client (only existing when client
-# authentication is used). This can be used to import the certificates
-# into CGI scripts.
-# o StdEnvVars:
-# This exports the standard SSL/TLS related `SSL_*' environment variables.
-# Per default this exportation is switched off for performance reasons,
-# because the extraction step is an expensive operation and is usually
-# useless for serving static content. So one usually enables the
-# exportation for CGI and SSI requests only.
-# o CompatEnvVars:
-# This exports obsolete environment variables for backward compatibility
-# to Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. Use this
-# to provide compatibility to existing CGI scripts.
-# o StrictRequire:
-# This denies access when "SSLRequireSSL" or "SSLRequire" applied
even
-# under a "Satisfy any" situation, i.e. when it applies access is denied
-# and no other module can change it.
-# o OptRenegotiate:
-# This enables optimized SSL connection renegotiation handling when SSL
-# directives are used in per-directory context.
-#SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire
-<Files ~ "\.(cgi|shtml|phtml|php3?)$">
- SSLOptions +StdEnvVars
-</Files>
-<Directory "/var/www/cgi-bin">
- SSLOptions +StdEnvVars
-</Directory>
-
-# SSL Protocol Adjustments:
-# The safe and default but still SSL/TLS standard compliant shutdown
-# approach is that mod_ssl sends the close notify alert but doesn't wait for
-# the close notify alert from client. When you need a different shutdown
-# approach you can use one of the following variables:
-# o ssl-unclean-shutdown:
-# This forces an unclean shutdown when the connection is closed, i.e. no
-# SSL close notify alert is send or allowed to received. This violates
-# the SSL/TLS standard but is needed for some brain-dead browsers. Use
-# this when you receive I/O errors because of the standard approach where
-# mod_ssl sends the close notify alert.
-# o ssl-accurate-shutdown:
-# This forces an accurate shutdown when the connection is closed, i.e. a
-# SSL close notify alert is send and mod_ssl waits for the close notify
-# alert of the client. This is 100% SSL/TLS standard compliant, but in
-# practice often causes hanging connections with brain-dead browsers. Use
-# this only for browsers where you know that their SSL implementation
-# works correctly.
-# Notice: Most problems of broken clients are also related to the HTTP
-# keep-alive facility, so you usually additionally want to disable
-# keep-alive for those clients, too. Use variable "nokeepalive" for this.
-# Similarly, one has to force some clients to use HTTP/1.0 to workaround
-# their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
-# "force-response-1.0" for this.
-SetEnvIf User-Agent ".*MSIE.*" \
- nokeepalive ssl-unclean-shutdown \
- downgrade-1.0 force-response-1.0
-
-# Per-Server Logging:
-# The home of a custom SSL log file. Use this when you want a
-# compact non-error SSL logfile on a virtual host basis.
-CustomLog logs/ssl_request_log \
- "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
-
-</VirtualHost>
-
-</IfDefine>
-
-Include conf/rhn_proxy.conf
-Include conf/cobbler-proxy.conf
diff --git a/web/html/applications/rhn-proxy/4.2/httpd/rhn_proxy.conf
b/web/html/applications/rhn-proxy/4.2/httpd/rhn_proxy.conf
deleted file mode 100644
index fba9c9e..0000000
--- a/web/html/applications/rhn-proxy/4.2/httpd/rhn_proxy.conf
+++ /dev/null
@@ -1,46 +0,0 @@
-# ** DO NOT EDIT **
-# RHN Proxy handler configuration file
-
-# RHN Proxy Server location
-<LocationMatch "/*">
- # this stanza contains all the handlers for RHN app code
-
- # added for oracle
- SetEnv ORACLE_HOME /opt/oracle
- SetEnv NLS_LANG english.UTF8
-
- # mod_python
- <IfModule !mod_python.c>
- LoadModule python_module modules/mod_python.so
- AddModule mod_python.c
- </IfModule>
-
- PythonPath "sys.path+['/usr/share/rhn']"
- PythonDebug Off
-
- # this one shall be common for all the python configlets
- # (for pre-version 3.1 anyway)
- PythonOption RootDir /usr/share/rhn
-
- SetHandler python-program
- # all of these handlers are defined in apacheServer
- PythonHeaderParserHandler proxy.apacheServer::HeaderParserHandler
- PythonHandler proxy.apacheServer::Handler
- PythonCleanupHandler proxy.apacheServer::CleanupHandler
- DefaultType text/xml
-</LocationMatch>
-
-# let apache do it's default thing for /pub/*, /index.html, and /_rhn_proxy
-# /pub is where user accessible data resides
-# /_rhn_proxy is for the landing page and anything additional we may want to
-# expand to in the future
-<LocationMatch "/pub/*">
- SetHandler None
- DefaultType text/plain
-</LocationMatch>
-
-<LocationMatch "/_rhn_proxy">
- SetHandler None
- DefaultType text/plain
-</LocationMatch>
-
diff --git a/web/html/applications/rhn-proxy/4.2/install-rhn-proxy.xml
b/web/html/applications/rhn-proxy/4.2/install-rhn-proxy.xml
deleted file mode 100644
index da5cacc..0000000
--- a/web/html/applications/rhn-proxy/4.2/install-rhn-proxy.xml
+++ /dev/null
@@ -1,850 +0,0 @@
-<?xml version="1.0"?>
-
-<application acl-mixins="RHN::Access::System">
-
- <name>Satellite Proxy</name>
- <label>rhn_proxy</label>
- <version>4.2</version>
-
- <prerequisites>
- <org-channel-family>rhn-proxy</org-channel-family>
- <system-feature>ftr_proxy_capable</system-feature>
- <package-available>rhns-proxy-management</package-available>
- </prerequisites>
-
- <terms-and-conditions
url="http://www.redhat.com/licenses" />
-
- <install>
-
- <requirements>
-
<system-entitlement-possible>provisioning_entitled</system-entitlement-possible>
- <package-available>rhns-proxy-management</package-available>
- <client-capable>script.run</client-capable>
- <client-capable>configfiles.deploy</client-capable>
- </requirements>
-
- <activity description="Check for conflicting packages">
- <method-call class="RHN::ProxyInstall"
method="have_package">
- <package>bdb_perl</package>
- <package>ConfigPusher-general</package>
- <package>eventReceivers</package>
- <package>FcntlLock</package>
- <package>httpd</package>
- <package>httpd-suexec</package>
- <package>jabberd</package>
- <package>jabberd-selinux</package>
- <package>libapreq2</package>
- <package>LongLegs</package>
- <package>MessageQueue</package>
- <package>mm</package>
- <package>mod_perl</package>
- <package>mod_python</package>
- <package>mod_ssl</package>
- <package>nocpulse-common</package>
- <package>nocpulse-db-perl</package>
- <package>NOCpulsePlugins</package>
- <package>NPalert</package>
- <package>np-config</package>
- <package>NPusers</package>
- <package>nslogs</package>
- <package>oracle-devel</package>
- <package>oracle_perl</package>
- <package>perl-Apache-Admin-Config</package>
- <package>perl-Apache-DBI</package>
- <package>perl-BerkeleyDB</package>
- <package>perl-BSD-Resource</package>
- <package>perl-Class-MethodMaker</package>
- <package>perl-Class-Singleton</package>
- <package>perl-Config-IniFiles</package>
- <package>perl-Crypt-DES</package>
- <package>perl-Crypt-GeneratePassword</package>
- <package>perl-Crypt-SSLeay</package>
- <package>perl-DateTime-Locale</package>
- <package>perl-DateTime</package>
- <package>perl-DateTime-TimeZone</package>
- <package>perl-DBD-Oracle</package>
- <package>perl-Devel-Symdump</package>
- <package>perl-Error</package>
- <package>perl-FreezeThaw</package>
- <package>perl-HTML-TableExtract</package>
- <package>perl-IO-Capture</package>
- <package>perl-IO-Socket-SSL</package>
- <package>perl-IO-stringy</package>
- <package>perl-libapreq2</package>
- <package>perl-Mail-Alias</package>
- <package>perl-MailTools</package>
- <package>perl-MIME-tools</package>
- <package>perl-Net-SNMP</package>
- <package>perl-Net_SSLeay</package>
- <package>perl-Network-IPv4Addr</package>
- <package>perl-NOCpulse-CLAC</package>
- <package>perl-NOCpulse-Debug</package>
- <package>perl-NOCpulse-Gritch</package>
- <package>perl-NOCpulse-Object</package>
- <package>perl-NOCpulse-OracleDB</package>
- <package>perl-NOCpulse-PersistentConnection</package>
- <package>perl-NOCpulse-Probe</package>
- <package>perl-NOCpulse-ProcessPool</package>
- <package>perl-NOCpulse-Scheduler</package>
- <package>perl-NOCpulse-SetID</package>
- <package>perl-NOCpulse-Utils</package>
- <package>perl-Params-Validate</package>
- <package>perl-TimeDate</package>
- <package>perl-XML-Generator</package>
- <package>ProgAGoGo</package>
- <package>python-sgmlop</package>
- <package>rhn-apache</package>
- <package>rhn-base-minimal</package>
- <package>rhn-modperl</package>
- <package>rhn-modpython</package>
- <package>rhn-modssl</package>
- <package>rhn-proxy-branding</package>
- <package>rhns-auth-daemon</package>
- <package>rhns-certs-tools</package>
- <package>rhns</package>
- <package>rhns-proxy-broker</package>
- <package>rhns-proxy-docs</package>
- <package>rhns-proxy-management</package>
- <package>rhns-proxy-monitoring</package>
- <package>rhns-proxy-package-manager</package>
- <package>rhns-proxy-redirect</package>
- <package>rhns-proxy-tools</package>
- <package>rhn-ssl-cert-check</package>
- <package>SatConfig-ApacheDepot</package>
- <package>SatConfig-autokick</package>
- <package>SatConfig-bootstrap</package>
- <package>SatConfig-bootstrap-server</package>
- <package>SatConfig-cluster</package>
- <package>SatConfig-dbsynch</package>
- <package>SatConfig-general</package>
- <package>SatConfig-generator</package>
- <package>SatConfig-installer</package>
- <package>SatConfig-spread</package>
- <package>scdb_accessor_perl</package>
- <package>scdb</package>
- <package>SNMPAlerts</package>
- <package>spacewalk-backend</package>
- <package>spacewalk-base-minimal</package>
- <package>spacewalk-certs-tools</package>
- <package>spacewalk-proxy-broker</package>
- <package>spacewalk-proxy-common</package>
- <package>spacewalk-proxy-docs</package>
- <package>spacewalk-proxy-html</package>
- <package>spacewalk-proxy-installer</package>
- <package>spacewalk-proxy-management</package>
- <package>spacewalk-proxy-monitoring</package>
- <package>spacewalk-proxy-package-manager</package>
- <package>spacewalk-proxy-redirect</package>
- <package>spacewalk-setup-jabberd</package>
- <package>spacewalk-ssl-cert-check</package>
- <package>SputLite-client</package>
- <package>SputLite-server</package>
- <package>ssl_bridge</package>
- <package>status_log_acceptor</package>
- <package>Time-System</package>
- <package>tsdb_accessor_perl</package>
- <package>tsdb</package>
- <alias>proxy</alias>
- </method-call>
- </activity>
-
- <collect-data description="Enable Monitoring Proxy"
- acl="org_entitlement(rhn_monitor); package_available(rhns-proxy-monitoring);
global_config(satellite); global_config(is_monitoring_backend)">
-
- <header>
-Would you like to enable Monitoring Proxy functionality on this system?
- </header>
-
- <rhn-form name="Enable Monitoring"
label="enable_monitoring">
- <widget type="checkbox" name="Enable Monitoring?"
label="enable_monitoring" default="1"/>
- </rhn-form>
- </collect-data>
-
- <collect-data description="Remove Conflicting Packages"
acl="session_data_true(have_package_any_of_proxy)">
- <header>
- The following packages conflict with the new installation and will be removed:
- </header>
-
- <rhn-form name="Remove Conflicting Packages"
label="remove_packages">
- <widget type="literal" label="bdb_perl"
default="${session.have_package_bdb_perl}"
acl="session_data_true(have_package_bdb_perl)" />
- <widget type="literal"
label="ConfigPusher-general"
default="${session.have_package_ConfigPusher_general}"
acl="session_data_true(have_package_ConfigPusher_general)" />
- <widget type="literal" label="eventReceivers"
default="${session.have_package_eventReceivers}"
acl="session_data_true(have_package_eventReceivers)" />
- <widget type="literal" label="FcntlLock"
default="${session.have_package_FcntlLock}"
acl="session_data_true(have_package_FcntlLock)" />
- <widget type="literal" label="httpd"
default="${session.have_package_httpd}"
acl="session_data_true(have_package_httpd)" />
- <widget type="literal" label="httpd-suexec"
default="${session.have_package_httpd_suexec}"
acl="session_data_true(have_package_httpd_suexec)" />
- <widget type="literal" label="jabberd"
default="${session.have_package_jabberd}"
acl="session_data_true(have_package_jabberd)" />
- <widget type="literal" label="jabberd-selinux"
default="${session.have_package_jabberd_selinux}"
acl="session_data_true(have_package_jabberd_selinux)" />
- <widget type="literal" label="libapreq2"
default="${session.have_package_libapreq2}"
acl="session_data_true(have_package_libapreq2)" />
- <widget type="literal" label="LongLegs"
default="${session.have_package_LongLegs}"
acl="session_data_true(have_package_LongLegs)" />
- <widget type="literal" label="MessageQueue"
default="${session.have_package_MessageQueue}"
acl="session_data_true(have_package_MessageQueue)" />
- <widget type="literal" label="mm"
default="${session.have_package_mm}"
acl="session_data_true(have_package_mm)" />
- <widget type="literal" label="mod_perl"
default="${session.have_package_mod_perl}"
acl="session_data_true(have_package_mod_perl)" />
- <widget type="literal" label="mod_python"
default="${session.have_package_mod_python}"
acl="session_data_true(have_package_mod_python)" />
- <widget type="literal" label="mod_ssl"
default="${session.have_package_mod_ssl}"
acl="session_data_true(have_package_mod_ssl)" />
- <widget type="literal" label="nocpulse-common"
default="${session.have_package_nocpulse_common}"
acl="session_data_true(have_package_nocpulse_common)" />
- <widget type="literal" label="nocpulse-db-perl"
default="${session.have_package_nocpulse_db_perl}"
acl="session_data_true(have_package_nocpulse_db_perl)" />
- <widget type="literal" label="NOCpulsePlugins"
default="${session.have_package_NOCpulsePlugins}"
acl="session_data_true(have_package_NOCpulsePlugins)" />
- <widget type="literal" label="NPalert"
default="${session.have_package_NPalert}"
acl="session_data_true(have_package_NPalert)" />
- <widget type="literal" label="np-config"
default="${session.have_package_np_config}"
acl="session_data_true(have_package_np_config)" />
- <widget type="literal" label="NPusers"
default="${session.have_package_NPusers}"
acl="session_data_true(have_package_NPusers)" />
- <widget type="literal" label="nslogs"
default="${session.have_package_nslogs}"
acl="session_data_true(have_package_nslogs)" />
- <widget type="literal" label="oracle-devel"
default="${session.have_package_oracle_devel}"
acl="session_data_true(have_package_oracle_devel)" />
- <widget type="literal" label="oracle_perl"
default="${session.have_package_oracle_perl}"
acl="session_data_true(have_package_oracle_perl)" />
- <widget type="literal"
label="perl-Apache-Admin-Config"
default="${session.have_package_perl_Apache_Admin_Config}"
acl="session_data_true(have_package_perl_Apache_Admin_Config)" />
- <widget type="literal" label="perl-Apache-DBI"
default="${session.have_package_perl_Apache_DBI}"
acl="session_data_true(have_package_perl_Apache_DBI)" />
- <widget type="literal" label="perl-BerkeleyDB"
default="${session.have_package_perl_BerkeleyDB}"
acl="session_data_true(have_package_perl_BerkeleyDB)" />
- <widget type="literal" label="perl-BSD-Resource"
default="${session.have_package_perl_BSD_Resource}"
acl="session_data_true(have_package_perl_BSD_Resource)" />
- <widget type="literal"
label="perl-Class-MethodMaker"
default="${session.have_package_perl_Class_MethodMaker}"
acl="session_data_true(have_package_perl_Class_MethodMaker)" />
- <widget type="literal"
label="perl-Class-Singleton"
default="${session.have_package_perl_Class_Singleton}"
acl="session_data_true(have_package_perl_Class_Singleton)" />
- <widget type="literal"
label="perl-Config-IniFiles"
default="${session.have_package_perl_Config_IniFiles}"
acl="session_data_true(have_package_perl_Config_IniFiles)" />
- <widget type="literal" label="perl-Crypt-DES"
default="${session.have_package_perl_Crypt_DES}"
acl="session_data_true(have_package_perl_Crypt_DES)" />
- <widget type="literal"
label="perl-Crypt-GeneratePassword"
default="${session.have_package_perl_Crypt_GeneratePassword}"
acl="session_data_true(have_package_perl_Crypt_GeneratePassword)" />
- <widget type="literal" label="perl-Crypt-SSLeay"
default="${session.have_package_perl_Crypt_SSLeay}"
acl="session_data_true(have_package_perl_Crypt_SSLeay)" />
- <widget type="literal" label="perl-DateTime"
default="${session.have_package_perl_DateTime}"
acl="session_data_true(have_package_perl_DateTime)" />
- <widget type="literal"
label="perl-DateTime-Locale"
default="${session.have_package_perl_DateTime_Locale}"
acl="session_data_true(have_package_perl_DateTime_Locale)" />
- <widget type="literal"
label="perl-DateTime-TimeZone"
default="${session.have_package_perl_DateTime_TimeZone}"
acl="session_data_true(have_package_perl_DateTime_TimeZone)" />
- <widget type="literal" label="perl-DBD-Oracle"
default="${session.have_package_perl_DBD_Oracle}"
acl="session_data_true(have_package_perl_DBD_Oracle)" />
- <widget type="literal" label="perl-Devel-Symdump"
default="${session.have_package_perl_Devel_Symdump}"
acl="session_data_true(have_package_perl_Devel_Symdump)" />
- <widget type="literal" label="perl-Error"
default="${session.have_package_perl_Error}"
acl="session_data_true(have_package_perl_Error)" />
- <widget type="literal" label="perl-FreezeThaw"
default="${session.have_package_perl_FreezeThaw}"
acl="session_data_true(have_package_perl_FreezeThaw)" />
- <widget type="literal"
label="perl-HTML-TableExtract"
default="${session.have_package_perl_HTML_TableExtract}"
acl="session_data_true(have_package_perl_HTML_TableExtract)" />
- <widget type="literal" label="perl-IO-Capture"
default="${session.have_package_perl_IO_Capture}"
acl="session_data_true(have_package_perl_IO_Capture)" />
- <widget type="literal" label="perl-IO-Socket-SSL"
default="${session.have_package_perl_IO_Socket_SSL}"
acl="session_data_true(have_package_perl_IO_Socket_SSL)" />
- <widget type="literal" label="perl-IO-stringy"
default="${session.have_package_perl_IO_stringy}"
acl="session_data_true(have_package_perl_IO_stringy)" />
- <widget type="literal" label="perl-libapreq2"
default="${session.have_package_perl_libapreq2}"
acl="session_data_true(have_package_perl_libapreq2)" />
- <widget type="literal" label="perl-Mail-Alias"
default="${session.have_package_perl_Mail_Alias}"
acl="session_data_true(have_package_perl_Mail_Alias)" />
- <widget type="literal" label="perl-MailTools"
default="${session.have_package_perl_MailTools}"
acl="session_data_true(have_package_perl_MailTools)" />
- <widget type="literal" label="perl-MIME-tools"
default="${session.have_package_perl_MIME_tools}"
acl="session_data_true(have_package_perl_MIME_tools)" />
- <widget type="literal" label="perl-Net-SNMP"
default="${session.have_package_perl_Net_SNMP}"
acl="session_data_true(have_package_perl_Net_SNMP)" />
- <widget type="literal" label="perl-Net_SSLeay"
default="${session.have_package_perl_Net_SSLeay}"
acl="session_data_true(have_package_perl_Net_SSLeay)" />
- <widget type="literal"
label="perl-Network-IPv4Addr"
default="${session.have_package_perl_Network_IPv4Addr}"
acl="session_data_true(have_package_perl_Network_IPv4Addr)" />
- <widget type="literal" label="perl-NOCpulse-CLAC"
default="${session.have_package_perl_NOCpulse_CLAC}"
acl="session_data_true(have_package_perl_NOCpulse_CLAC)" />
- <widget type="literal" label="perl-NOCpulse-Debug"
default="${session.have_package_perl_NOCpulse_Debug}"
acl="session_data_true(have_package_perl_NOCpulse_Debug)" />
- <widget type="literal"
label="perl-NOCpulse-Gritch"
default="${session.have_package_perl_NOCpulse_Gritch}"
acl="session_data_true(have_package_perl_NOCpulse_Gritch)" />
- <widget type="literal"
label="perl-NOCpulse-Object"
default="${session.have_package_perl_NOCpulse_Object}"
acl="session_data_true(have_package_perl_NOCpulse_Object)" />
- <widget type="literal"
label="perl-NOCpulse-OracleDB"
default="${session.have_package_perl_NOCpulse_OracleDB}"
acl="session_data_true(have_package_perl_NOCpulse_OracleDB)" />
- <widget type="literal"
label="perl-NOCpulse-PersistentConnection"
default="${session.have_package_perl_NOCpulse_PersistentConnection}"
acl="session_data_true(have_package_perl_NOCpulse_PersistentConnection)" />
- <widget type="literal" label="perl-NOCpulse-Probe"
default="${session.have_package_perl_NOCpulse_Probe}"
acl="session_data_true(have_package_perl_NOCpulse_Probe)" />
- <widget type="literal"
label="perl-NOCpulse-ProcessPool"
default="${session.have_package_perl_NOCpulse_ProcessPool}"
acl="session_data_true(have_package_perl_NOCpulse_ProcessPool)" />
- <widget type="literal"
label="perl-NOCpulse-Scheduler"
default="${session.have_package_perl_NOCpulse_Scheduler}"
acl="session_data_true(have_package_perl_NOCpulse_Scheduler)" />
- <widget type="literal" label="perl-NOCpulse-SetID"
default="${session.have_package_perl_NOCpulse_SetID}"
acl="session_data_true(have_package_perl_NOCpulse_SetID)" />
- <widget type="literal" label="perl-NOCpulse-Utils"
default="${session.have_package_perl_NOCpulse_Utils}"
acl="session_data_true(have_package_perl_NOCpulse_Utils)" />
- <widget type="literal"
label="perl-Params-Validate"
default="${session.have_package_perl_Params_Validate}"
acl="session_data_true(have_package_perl_Params_Validate)" />
- <widget type="literal" label="perl-TimeDate"
default="${session.have_package_perl_TimeDate}"
acl="session_data_true(have_package_perl_TimeDate)" />
- <widget type="literal" label="perl-XML-Generator"
default="${session.have_package_perl_XML_Generator}"
acl="session_data_true(have_package_perl_XML_Generator)" />
- <widget type="literal" label="ProgAGoGo"
default="${session.have_package_ProgAGoGo}"
acl="session_data_true(have_package_ProgAGoGo)" />
- <widget type="literal" label="python-sgmlop"
default="${session.have_package_python_sgmlop}"
acl="session_data_true(have_package_python_sgmlop)" />
- <widget type="literal" label="rhn-apache"
default="${session.have_package_rhn_apache}"
acl="session_data_true(have_package_rhn_apache)" />
- <widget type="literal" label="rhn-base-minimal"
default="${session.have_package_rhn_base_minimal}"
acl="session_data_true(have_package_rhn_base_minimal)" />
- <widget type="literal" label="rhn-modperl"
default="${session.have_package_rhn_modperl}"
acl="session_data_true(have_package_rhn_modperl)" />
- <widget type="literal" label="rhn-modpython"
default="${session.have_package_rhn_modpython}"
acl="session_data_true(have_package_rhn_modpython)" />
- <widget type="literal" label="rhn-modssl"
default="${session.have_package_rhn_modssl}"
acl="session_data_true(have_package_rhn_modssl)" />
- <widget type="literal" label="rhn-proxy-branding"
default="${session.have_package_rhn_proxy_branding}"
acl="session_data_true(have_package_rhn_proxy_branding)" />
- <widget type="literal" label="rhns-auth-daemon"
default="${session.have_package_rhns_auth_daemon}"
acl="session_data_true(have_package_rhns_auth_daemon)" />
- <widget type="literal" label="rhns-certs-tools"
default="${session.have_package_rhns_certs_tools}"
acl="session_data_true(have_package_rhns_certs_tools)" />
- <widget type="literal" label="rhns"
default="${session.have_package_rhns}"
acl="session_data_true(have_package_rhns)" />
- <widget type="literal" label="rhns-proxy-broker"
default="${session.have_package_rhns_proxy_broker}"
acl="session_data_true(have_package_rhns_proxy_broker)" />
- <widget type="literal" label="rhns-proxy-docs"
default="${session.have_package_rhns_proxy_docs}"
acl="session_data_true(have_package_rhns_proxy_docs)" />
- <widget type="literal"
label="rhns-proxy-management"
default="${session.have_package_rhns_proxy_management}"
acl="session_data_true(have_package_rhns_proxy_management)" />
- <widget type="literal"
label="rhns-proxy-monitoring"
default="${session.have_package_rhns_proxy_monitoring}"
acl="session_data_true(have_package_rhns_proxy_monitoring)" />
- <widget type="literal"
label="rhns-proxy-package-manager"
default="${session.have_package_rhns_proxy_package_manager}"
acl="session_data_true(have_package_rhns_proxy_package_manager)" />
- <widget type="literal" label="rhns-proxy-redirect"
default="${session.have_package_rhns_proxy_redirect}"
acl="session_data_true(have_package_rhns_proxy_redirect)" />
- <widget type="literal" label="rhns-proxy-tools"
default="${session.have_package_rhns_proxy_tools}"
acl="session_data_true(have_package_rhns_proxy_tools)" />
- <widget type="literal" label="rhn-ssl-cert-check"
default="${session.have_package_rhn_ssl_cert_check}"
acl="session_data_true(have_package_rhn_ssl_cert_check)" />
- <widget type="literal"
label="SatConfig-ApacheDepot"
default="${session.have_package_SatConfig_ApacheDepot}"
acl="session_data_true(have_package_SatConfig_ApacheDepot)" />
- <widget type="literal" label="SatConfig-autokick"
default="${session.have_package_SatConfig_autokick}"
acl="session_data_true(have_package_SatConfig_autokick)" />
- <widget type="literal" label="SatConfig-bootstrap"
default="${session.have_package_SatConfig_bootstrap}"
acl="session_data_true(have_package_SatConfig_bootstrap)" />
- <widget type="literal"
label="SatConfig-bootstrap-server"
default="${session.have_package_SatConfig_bootstrap_server}"
acl="session_data_true(have_package_SatConfig_bootstrap_server)" />
- <widget type="literal" label="SatConfig-cluster"
default="${session.have_package_SatConfig_cluster}"
acl="session_data_true(have_package_SatConfig_cluster)" />
- <widget type="literal" label="SatConfig-dbsynch"
default="${session.have_package_SatConfig_dbsynch}"
acl="session_data_true(have_package_SatConfig_dbsynch)" />
- <widget type="literal" label="SatConfig-general"
default="${session.have_package_SatConfig_general}"
acl="session_data_true(have_package_SatConfig_general)" />
- <widget type="literal" label="SatConfig-generator"
default="${session.have_package_SatConfig_generator}"
acl="session_data_true(have_package_SatConfig_generator)" />
- <widget type="literal" label="SatConfig-installer"
default="${session.have_package_SatConfig_installer}"
acl="session_data_true(have_package_SatConfig_installer)" />
- <widget type="literal" label="SatConfig-spread"
default="${session.have_package_SatConfig_spread}"
acl="session_data_true(have_package_SatConfig_spread)" />
- <widget type="literal" label="scdb_accessor_perl"
default="${session.have_package_scdb_accessor_perl}"
acl="session_data_true(have_package_scdb_accessor_perl)" />
- <widget type="literal" label="scdb"
default="${session.have_package_scdb}"
acl="session_data_true(have_package_scdb)" />
- <widget type="literal" label="SNMPAlerts"
default="${session.have_package_SNMPAlerts}"
acl="session_data_true(have_package_SNMPAlerts)" />
- <widget type="literal" label="spacewalk-backend"
default="${session.have_package_spacewalk_backend}"
acl="session_data_true(have_package_spacewalk_backend)" />
- <widget type="literal"
label="spacewalk-base-minimal"
default="${session.have_package_spacewalk_base_minimal}"
acl="session_data_true(have_package_spacewalk_base_minimal)" />
- <widget type="literal"
label="spacewalk-certs-tools"
default="${session.have_package_spacewalk_certs_tools}"
acl="session_data_true(have_package_spacewalk_certs_tools)" />
- <widget type="literal"
label="spacewalk-proxy-broker"
default="${session.have_package_spacewalk_proxy_broker}"
acl="session_data_true(have_package_spacewalk_proxy_broker)" />
- <widget type="literal"
label="spacewalk-proxy-common"
default="${session.have_package_spacewalk_proxy_common}"
acl="session_data_true(have_package_spacewalk_proxy_common)" />
- <widget type="literal"
label="spacewalk-proxy-docs"
default="${session.have_package_spacewalk_proxy_docs}"
acl="session_data_true(have_package_spacewalk_proxy_docs)" />
- <widget type="literal"
label="spacewalk-proxy-html"
default="${session.have_package_spacewalk_proxy_html}"
acl="session_data_true(have_package_spacewalk_proxy_html)" />
- <widget type="literal"
label="spacewalk-proxy-installer"
default="${session.have_package_spacewalk_installer}"
acl="session_data_true(have_package_spacewalk_proxy_installer)" />
- <widget type="literal"
label="spacewalk-proxy-management"
default="${session.have_package_spacewalk_proxy_management}"
acl="session_data_true(have_package_spacewalk_proxy_management)" />
- <widget type="literal"
label="spacewalk-proxy-monitoring"
default="${session.have_package_spacewalk_proxy_monitoring}"
acl="session_data_true(have_package_spacewalk_proxy_monitoring)" />
- <widget type="literal"
label="spacewalk-proxy-package-manager"
default="${session.have_package_spacewalk_proxy_package_manager}"
acl="session_data_true(have_package_spacewalk_proxy_package_manager)" />
- <widget type="literal"
label="spacewalk-proxy-redirect"
default="${session.have_package_spacewalk_proxy_redirect}"
acl="session_data_true(have_package_spacewalk_proxy_redirect)" />
- <widget type="literal"
label="spacewalk-setup-jabberd"
default="${session.have_package_spacewalk_setup_jabberd}"
acl="session_data_true(have_package_spacewalk_setup_jabberd)" />
- <widget type="literal"
label="spacewalk-ssl-cert-check"
default="${session.have_package_spacewalk_ssl_cert_check}"
acl="session_data_true(have_package_spacewalk_ssl_cert_check)" />
- <widget type="literal" label="SputLite-client"
default="${session.have_package_SputLite_client}"
acl="session_data_true(have_package_SputLite_client)" />
- <widget type="literal" label="SputLite-server"
default="${session.have_package_SputLite_server}"
acl="session_data_true(have_package_SputLite_server)" />
- <widget type="literal" label="ssl_bridge"
default="${session.have_package_ssl_bridge}"
acl="session_data_true(have_package_ssl_bridge)" />
- <widget type="literal" label="status_log_acceptor"
default="${session.have_package_status_log_acceptor}"
acl="session_data_true(have_package_status_log_acceptor)" />
- <widget type="literal" label="Time-System"
default="${session.have_package_Time_System}"
acl="session_data_true(have_package_Time_System)" />
- <widget type="literal" label="tsdb_accessor_perl"
default="${session.have_package_tsdb_accessor_perl}"
acl="session_data_true(have_package_tsdb_accessor_perl)" />
- <widget type="literal" label="tsdb"
default="${session.have_package_tsdb}"
acl="session_data_true(have_package_tsdb)" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Configure ${app.name} Server">
-
- <header>
-<p>
- Configure your ${app.name} Server below. The Administrator Email
- Address is the address to which system status messages are sent. For
- the ${app.name} Server to function properly, the ${app.name} Hostname
- must be set to the system's fully qualified domain name.
-</p>
-
-<p>
- The Satellite Parent Server is the hostname of the server this Proxy
- connects to. Depending on your configuration, it could be the
- central Satellite Servers, your organization's Satellite Server, or
- another ${app.name} Server. If this ${app.name} will be connecting
- through an HTTP proxy, populate the related fields.
-</p>
-
-<p>
- If you choose to enable Secure Sockets Layer (SSL), this Satellite Proxy
- will use SSL to connect to the Satellite Parent Server. Regardless of
- whether you enable SSL for the connection to the Satellite Parent Server,
- you will be prompted to generate an SSL certificate on the next page.
- This SSL certificate will allow client systems to connect to this
- ${app.name} securely. Refer to the RHN Proxy Installation Guide for
- more information.
-</p>
-<p>
- When using an HTTP Proxy Server, use the format "servername:port" to specify
the server. For example: "proxy-server.corp.com:8888".
-</p>
- </header>
-
- <rhn-form name="Configure Proxy"
label="configure_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Administrator Email Address"
label="traceback_mail" size="40"
default="${user.email}">
- <require valid-email="1" />
- </widget>
- <widget type="text" name="${app.name} Hostname"
label="hostname" size="40"
default="${system.guess_hostname}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="Satellite Parent Server"
label="rhn_parent" size="40"
default="${system.guess_rhn_parent}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Server"
label="http_proxy" size="30">
- <filter type="text" />
- <require fqdn-and-port="1"/>
- </widget>
- <widget type="text" name="HTTP Proxy Username"
label="http_proxy_username" size="10">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Password"
label="http_proxy_password" size="10">
- <filter type="text" />
- </widget>
- <widget type="checkbox" name="Enable SSL?"
label="enable_ssl" default="1" checked="1"
- acl="global_config(ssl_available) or not
global_config(satellite)"/>
- <widget type="literal" label="SSL" default="SSL is
not enabled on this Satellite."
- acl="global_config(satellite); not global_config(ssl_available)"/>
- <widget type="checkbox" name="Enable Push?"
label="enable_osad" default="1" checked="1"
- acl="global_config(satellite);
global_config(ssl_available)"/>
- </rhn-form>
-
- </collect-data>
-
- <collect-data description="Configure SSL"
acl="global_config(ssl_available); global_config(satellite)">
- <header>
- Enter your CA cert password and other SSL configuration
- information here. This information will be used to generate
- the server certificate used by the proxy server to communicate
- via SSL.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
-
- <widget type="password" name="CA Cert Password"
label="ca_cert_password" size="15">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Organization"
label="org" size="24">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Organizational Unit"
label="org-unit" size="24">
- <require max-length="128"/>
- </widget>
-
- <widget type="text" name="Email Address"
label="email" size="40"
default="${session.traceback_mail}">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="City" label="city"
size="16">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="text" name="State" label="state"
size="16">
- <require max-length="128"/>
- <require response="1"/>
- </widget>
-
- <widget type="select" name="Country"
label="country" size="1" default="US"
populate_options="RHN::SatInstall->valid_cert_countries">
- <require response="1"/>
- </widget>
-
- <widget type="text" name="Server cert Expiration (years)"
label="cert-expiration" size="3" default="5">
- <require max-length="3"/>
- <require response="1"/>
- </widget>
-
- <widget type="hidden" label="use_ssl"
default="1" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Skip SSL Configuration"
- acl="not global_config(ssl_available); global_config(satellite)">
- <header>
- You do not have SSL enabled for your Satellite Server.
- Therefore, SSL will not be available for this Satellite Proxy. SSL
- is a critical part of the security model of Satellite. If you wish
- to configure SSL at a later time, see the Satellite
- Installation Guide.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="hidden" label="ca_chain"
default="/usr/share/rhn/RHNS-CA-CERT" />
- </rhn-form>
- </collect-data>
-
- <collect-data description="Configure SSL" acl="not
global_config(satellite)">
- <header>
- In order to configure SSL on your ${app.name}, you will need
- to generate a CA certificate and an SSL key pair. See the
- <a
href="/help/proxy/rhn420/en/s1-installation-install-config.jsp">RHN Proxy
- Installation Guide </a> for more details. After you have
- generated the SSL key, you will need to upload the resulting
- tar file containing the certificate files using the form
- below. If the SSL CA certificate included in the tar file does
- not already exist in your org's <a
- href="/rhn/keys/CryptoKeysList.do" target="_new">list of
SSL
- keys</a>, it will be added to that list.
- </header>
-
- <rhn-form name="Configure SSL" label="configure_ssl">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="file" name="SSL key files (tar)"
label="ssl_key_tar">
- <require response="1"/>
- </widget>
- <widget type="hidden" label="use_ssl"
default="1" />
- </rhn-form>
- </collect-data>
-
- <activity description="Lookup Parent IP Address"
- acl="session_data_true(enable_monitoring)">
- <method-call class="RHN::ProxyInstall"
method="load_ip_address" />
- </activity>
-
- <collect-data description="Configure Satellite Monitoring Proxy"
acl="session_data_true(enable_monitoring)">
-
- <header>
- Configure the Monitoring aspects of your ${app.name} below.
- </header>
-
- <rhn-form name="Configure Monitoring Proxy"
label="configure_monitoring_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Satellite Parent Server
Hostname" label="rhn_monitoring_parent" size="40"
default="${session.rhn_parent}">
- <require response="1"/>
- <require fqdn="1"/>
- <filter type="text" />
- </widget>
- <widget type="text" name="Satellite Parent Server IP
Address" label="rhn_monitoring_parent_ip" size="15"
default="${session.rhn_parent_ip}">
- <require response="1"/>
- <require valid-ip="1"/>
- <filter type="text" />
- </widget>
- <widget type="hidden" label="enable_monitoring_scout"
default="1"/>
- </rhn-form>
-
- </collect-data>
-
- <activity description="Provisioning entitle system">
- <set-system-entitlement>provisioning_entitled</set-system-entitlement>
- </activity>
-
- <activity description="Create ${app.name} Config Channel for
system">
- <create-config-channel>
- <org-id>${user.org_id}</org-id>
- <type>normal</type>
- <name>${app.name} Config Channel for ${system.name}</name>
- <label>rhn_proxy_config_${system.id}</label>
- <description>This config channel is for the ${app.name} application running
on ${system.name} (${system.id})</description>
- </create-config-channel>
- </activity>
-
- <activity description="Subscribe to ${app.name} Config Channel">
- <subscribe-system-to-config-channel
channel-label="rhn_proxy_config_${system.id}" order="first"/>
- </activity>
-
- <activity description="Import SSL server cert into Config Channel"
- acl="not global_config(satellite)">
- <method-call class="RHN::ProxyInstall"
method="import_ssl_cert">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <cert-tar>${session.ssl_key_tar}</cert-tar>
- </method-call>
- </activity>
-
- <activity description="Generate SSL server cert"
acl="global_config(ssl_available);global_config(satellite)">
- <method-call class="RHN::ProxyInstall"
method="generate_ssl_cert">
- <hostname>${session.hostname}</hostname>
- <ca-cert-password>${session.ca_cert_password}</ca-cert-password>
- <org>${session.org}</org>
- <org-unit>${session.org-unit}</org-unit>
- <email>${session.email}</email>
- <city>${session.city}</city>
- <state>${session.state}</state>
- <country>${session.country}</country>
- <cert-expiration>${session.cert-expiration}</cert-expiration>
- <target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- </method-call>
- </activity>
-
- <activity description="Create SatCluster record for Satellite Monitoring
Proxy" acl="session_data_true(enable_monitoring)">
- <method-call class="RHN::ProxyInstall"
method="create_sat_cluster_record">
- <customer-id>${user.org_id}</customer-id>
- <description>${app.name} ${system.name} (${system.id})</description>
- <last-update-user>installer</last-update-user>
- </method-call>
- </activity>
-
- <activity description="Generate /etc/rhn/rhn.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/rhn.conf"
- template="rhn.conf" mode="640" username="root"
groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/rhn/cluster.ini config file"
acl="session_data_true(enable_monitoring)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/cluster.ini"
- template="cluster.ini" mode="644" username="root"
groupname="root"/>
- </activity>
-
- <activity description="Generate /etc/squid/squid.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/squid/squid.conf"
- template="squid.conf" mode="755"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/httpd.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/httpd.conf"
- template="httpd/httpd.conf" mode="444"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/rhn_proxy.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/rhn_proxy.conf"
- template="httpd/rhn_proxy.conf" mode="640"
username="root" groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/httpd/conf/cobbler-proxy.conf config
file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/httpd/conf/cobbler-proxy.conf"
- template="httpd/cobbler-proxy.conf"
mode="640" username="root" groupname="apache"/>
- </activity>
-
- <activity description="Generate /etc/jabberd/c2s.xml config file"
- acl="global_config(ssl_available);session_data_true(enable_osad)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/jabberd/c2s.xml"
- template="jabberd/c2s.xml" mode="644"
username="root" groupname="root"/>
- </activity>
-
- <activity description="Generate /etc/jabberd/sm.xml config file"
- acl="global_config(ssl_available);session_data_true(enable_osad)">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/jabberd/sm.xml"
- template="jabberd/sm.xml" mode="644" username="root"
groupname="root"/>
- </activity>
-
- <activity description="Activate the ${app.name}">
- <method-call class="RHN::ProxyInstall"
method="activate_proxy">
- <version>${app.version}</version>
- </method-call>
- </activity>
-
- <schedule-actions description="Schedule ${app.name} install">
- <remove-packages>
- <rpm>python-xmlrpc</rpm>
- </remove-packages>
-
- <run-script acl="session_data_true(have_package_any_of_proxy)">
- <action-name>Remove conflicting proxy packages</action-name>
- <script>
-#!/bin/sh
-PACKAGES=`for package in ${session.packages_list_proxy}; do
- rpm -q $package >/dev/null && echo $package; done`
-if [ -n "$PACKAGES" ]; then
- rpm -e $PACKAGES
-fi
- </script>
- </run-script>
-
- <install-packages acl="not
session_data_true(have_package_any_of_proxy)">
- <rpm>rhns-proxy-management</rpm>
- <rpm
acl="session_data_true(enable_monitoring)">rhns-proxy-monitoring</rpm>
- </install-packages>
-
- <install-packages
acl="session_data_true(have_package_any_of_proxy)">
- <force>1</force>
- <rpm>rhns-proxy-management</rpm>
- <rpm
acl="session_data_true(enable_monitoring)">rhns-proxy-monitoring</rpm>
- </install-packages>
-
-
- <deploy-configs>
- <action-name>Deploy Configuration</action-name>
- <configfile>/etc/rhn/rhn.conf</configfile>
- <configfile
acl="session_data_true(enable_monitoring)">/etc/rhn/cluster.ini</configfile>
- <configfile>/etc/squid/squid.conf</configfile>
- <configfile>/etc/httpd/conf/httpd.conf</configfile>
- <configfile>/etc/httpd/conf/rhn_proxy.conf</configfile>
- <configfile>/etc/httpd/conf/cobbler-proxy.conf</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.crt/server.crt</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.csr/server.csr</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/etc/httpd/conf/ssl.key/server.key</configfile>
- <configfile
acl="session_data_true(org_ssl_cert)">/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT</configfile>
- <configfile acl="global_config(ssl_available) or not
global_config(satellite)">/var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT</configfile>
- <configfile
acl="session_data_true(ca_rpm)">${session.ca_rpm}</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/server.pem</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/c2s.xml</configfile>
- <configfile
acl="global_config(ssl_available);session_data_true(enable_osad)">/etc/jabberd/sm.xml</configfile>
- </deploy-configs>
-
- <run-script acl="session_data_true(enable_monitoring)">
- <action-name>Enable Monitoring Services</action-name>
- <script>
-#!/bin/sh
-
-/etc/rc.d/np.d/step MonitoringScout install
- </script>
- </run-script>
-
- <run-script>
- <action-name>Allow Proxy service to read Satellite
Configuration</action-name>
- <script>
-#!/bin/sh
-chown root.apache /etc/sysconfig/rhn/systemid
-chmod 640 /etc/sysconfig/rhn/systemid
- </script>
- </run-script>
-
- <restart-services>
- <action-name>Start ${app.name}</action-name>
- <service>rhn-proxy</service>
- </restart-services>
- </schedule-actions>
-
- <redirect
save-session="1">/network/systems/details/proxy/install_progress.pxt?sid=${system.id}&version=${app.version}</redirect>
-
- </install>
-
- <install-progress acl="action_pending_named(Start Satellite Proxy) or
last_action_attempt_failed(Start Satellite Proxy)">
-
- <action-status description="Install progress">
- <header>
-You are installing ${app.name} on this system. Below is the list of actions for this
installation.
- </header>
-
- <inprogress>
- Once these actions are complete, your ${app.name} should be available for use.
- </inprogress>
-
- <complete>
- The installation is complete.
- </complete>
-
- <failed>
- The installation has failed. Click on the failed action for
- more details, resolve the error that prevented installation,
- and
-<a
href="/network/systems/details/proxy/index.pxt?sid=${system.id}&version=${app.version}">try
your installation again</a>.
- Or, you can
-<a
href="/network/systems/details/proxy.pxt?sid=${system.id}&pxt_trap=rhn:cancel_scheduled_proxy_install_cb">cancel
this installation process</a>.
- </failed>
-
- <target-action name="Start ${app.name}" show-chain="1"/>
- </action-status>
-
- </install-progress>
-
- <configure>
- <activity description="Create ${app.name} Config Channel for system if does
not already exist">
- <create-config-channel>
- <org-id>${user.org_id}</org-id>
- <type>normal</type>
- <name>${app.name} Config Channel for ${system.name}</name>
- <label>rhn_proxy_config_${system.id}</label>
- <description>This config channel is for the ${app.name} application running
on ${system.name} (${system.id})</description>
- </create-config-channel>
- </activity>
-
- <activity description="Subscribe to ${app.name} Config Channel">
- <subscribe-system-to-config-channel
channel-label="rhn_proxy_config_${system.id}" order="first"/>
- </activity>
-
- <activity description="Generate /etc/rhn/rhn.conf config file">
- <generate-config-file
target-config-channel="rhn_proxy_config_${system.id}"
path="/etc/rhn/rhn.conf"
- template="rhn.conf" mode="640" username="root"
groupname="apache" new_only="1"/>
- </activity>
-
-
- <activity description="Load current configuration">
- <method-call class="RHN::ProxyInstall"
method="load_configfile_into_session">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <target-config-file>/etc/rhn/rhn.conf</target-config-file>
- </method-call>
- </activity>
-
- <collect-data description="Configure ${app.name}">
-
- <header>
-<p>
-Configure your ${app.name} below. The Administrator Email Address is
-the address to which system status e-mail will be sent. Please note
-that if you have modified the configuration locally on the proxy
-without importing those changes into the Proxy Config Channel for this
-system, this action will overwrite those changes.
-</p>
-<p>
-Also, configuration changes here will not update the configuration for
-the up2date client. Only the ${app.name} application will be
-configured. For instance, if you want this system to connect through
-an HTTP proxy, you will need to configure the ${app.name} software
-here, and configure the up2date client separately.
-</p>
-<p>
- When using an HTTP Proxy Server, use the format "servername:port" to specify
the server. For example: "proxy-server.corp.com:8888".
-</p>
- </header>
-
- <rhn-form name="Configure Proxy"
label="configure_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="text" name="Administrator Email Address"
label="traceback_mail" size="40"
default="${session.traceback_mail}">
- <require valid-email="1" />
- </widget>
- <widget type="text" name="HTTP Proxy Server"
label="proxy.http_proxy" size="30"
default="${session.proxy.http_proxy}">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Username"
label="proxy.http_proxy_username" size="10"
default="${session.proxy.http_proxy_username}">
- <filter type="text" />
- </widget>
- <widget type="text" name="HTTP Proxy Password"
label="proxy.http_proxy_password" size="10"
default="${session.proxy.http_proxy_password}">
- <filter type="text" />
- </widget>
- </rhn-form>
-
- </collect-data>
-
- <activity description="Update ${app.name} Configuration">
- <method-call class="RHN::ProxyInstall"
method="update_configfile_from_session">
-
<target-config-channel>rhn_proxy_config_${system.id}</target-config-channel>
- <target-config-file>/etc/rhn/rhn.conf</target-config-file>
- </method-call>
- </activity>
-
- <schedule-actions description="Schedule ${app.name} install">
-
- <deploy-configs>
- <configfile>/etc/rhn/rhn.conf</configfile>
- </deploy-configs>
-
- <restart-services>
- <action-name>Start ${app.name}</action-name>
- <service>rhn-proxy</service>
- </restart-services>
-
- </schedule-actions>
-
- <collect-data description="Configuration update scheduled"
no-cancel="1">
- <header>
-Reconfiguration actions for ${app.name} ${app.version} have been scheduled.
- </header>
-
- <rhn-form name="Installation Complete"
label="install_complete">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="hidden" label="continue_redir"
default="/rhn/systems/details/Overview.do" />
- </rhn-form>
-
- </collect-data>
-
- </configure>
-
- <remove>
-
- <collect-data description="Deactivate ${app.name}">
-
- <header>
-You can deactivate your ${app.name}. The ${app.name} services on the system
-will be stopped, and it will not show up as a Proxy in the Satellite web
-interface. The packages set and configuration of the system will not
-otherwise be affected. Systems that connect to Satellite through this
-proxy will need to be reconfigured to use a different Satellite server.
- </header>
-
- <rhn-form name="Deactivate Proxy"
label="deactivate_proxy">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="checkbox" name="Remove Packages"
label="remove_packages" default="1" checked="1" />
- </rhn-form>
-
- </collect-data>
-
- <activity description="Deactivate ${app.name} in local
configuration">
- <method-call class="RHN::ProxyInstall"
method="deactivate_proxy"/>
- </activity>
-
- <schedule-actions description="Deactivate ${app.name}">
-
- <stop-services>
- <action-name>Stop ${app.name} Services</action-name>
- <service>rhn-proxy</service>
- </stop-services>
-
- <run-script acl="session_data_true(remove_packages)">
- <action-name>Remove proxy packages</action-name>
- <script>
-#!/bin/sh
-PACKAGES=`for package in bdb_perl ConfigPusher-general eventReceivers FcntlLock jabberd
MessageQueue mm NOCpulsePlugins np-config NPalert NPusers nslogs oracle-devel oracle_perl
perl-Apache-Admin-Config perl-Apache-DBI perl-BerkeleyDB perl-BSD-Resource
perl-Class-MethodMaker perl-Class-Singleton perl-Config-IniFiles perl-Crypt-DES
perl-Crypt-GeneratePassword perl-Crypt-SSLeay perl-DateTime perl-DateTime-Locale
perl-DateTime-TimeZone perl-DBD-Oracle perl-Devel-Symdump perl-Error perl-FreezeThaw
perl-HTML-TableExtract perl-IO-Capture perl-IO-Socket-SSL perl-IO-stringy perl-Mail-Alias
perl-MailTools perl-MIME-tools perl-Net-SNMP perl-Network-IPv4Addr perl-Net_SSLeay
perl-NOCpulse-CLAC perl-NOCpulse-Debug perl-NOCpulse-Gritch perl-NOCpulse-Object
perl-NOCpulse-OracleDB perl-NOCpulse-PersistentConnection perl-NOCpulse-Probe
perl-NOCpulse-ProcessPool perl-NOCpulse-Scheduler perl-NOCpulse-SetID perl-NOCpulse-Utils
perl-Params-Validate perl-TimeDate perl-XML-Generator ProgAGoGo python-sgmlop rhn-apache
rhn-base-minimal rhn-modperl rhn-modpython rhn-modssl rhn-ssl-cert-check rhns rhns
rhns-auth-daemon rhns-auth-daemon rhns-certs-tools rhns-proxy-broker rhns-proxy-broker
rhns-proxy-docs rhns-proxy-docs rhns-proxy-management rhns-proxy-management
rhns-proxy-monitoring rhns-proxy-package-manager rhns-proxy-package-manager
rhns-proxy-redirect rhns-proxy-redirect rhns-proxy-tools rhns-proxy-tools
SatConfig-ApacheDepot SatConfig-bootstrap SatConfig-bootstrap-server SatConfig-cluster
SatConfig-dbsynch SatConfig-general SatConfig-generator SatConfig-installer
SatConfig-spread scdb scdb_accessor_perl SNMPAlerts SputLite-client SputLite-server
ssl_bridge status_log_acceptor Time-System tsdb tsdb_accessor_perl
spacewalk-setup-jabberd; do
-rpm -q $package >/dev/null && echo $package; done`
-if [ -n "$PACKAGES" ]; then
- rpm -e $PACKAGES
-fi
- </script>
- </run-script>
-
- </schedule-actions>
-
- <collect-data description="Proxy deactivation scheduled"
no-cancel="1">
- <header>
-A deactivation for ${app.name} ${app.version} on ${system.name} has been scheduled.
- </header>
-
- <rhn-form name="Deactivation Complete"
label="deactivation_complete">
- <widget type="literal" label="Product"
default="${app.name}" />
- <widget type="literal" label="Version"
default="${app.version}" />
- <widget type="literal" name="Remove Packages"
label="Remove Packages Yes" default="Yes"
acl="session_data_true(remove_packages)"/>
- <widget type="literal" name="Remove Packages" label="Remove
Packages No" default="No" acl="not
session_data_true(remove_packages)"/>
- <widget type="hidden" label="continue_redir"
default="/rhn/systems/details/Overview.do" />
- </rhn-form>
- </collect-data>
-
- </remove>
-
-</application>
diff --git a/web/html/applications/rhn-proxy/4.2/jabberd/c2s.xml
b/web/html/applications/rhn-proxy/4.2/jabberd/c2s.xml
deleted file mode 100644
index 76e5ca2..0000000
--- a/web/html/applications/rhn-proxy/4.2/jabberd/c2s.xml
+++ /dev/null
@@ -1,347 +0,0 @@
-<!-- c2s configuration -->
-<c2s>
- <!-- Our ID on the network (default: c2s) -->
- <id>c2s</id>
-
- <!-- The process ID file. comment this out if you don't need to know
- to know the process ID from outside the process (eg for control
- scripts) -->
- <pidfile>/var/run/jabberd/jabberd-c2s.pid</pidfile>
-
- <!-- Router connection configuration -->
- <router>
- <!-- IP/port the router is waiting for connections on -->
- <ip>127.0.0.1</ip> <!-- default: 127.0.0.1 -->
- <port>5347</port> <!-- default: 5347 -->
-
- <!-- Username/password to authenticate as -->
- <user>jabberd</user> <!-- default: jabberd -->
- <pass>secret</pass> <!-- default: secret -->
-
- <!-- File containing a SSL certificate and private key to use when
- setting up an encrypted channel with the router. If this is
- commented out, or the file can't be read, no attempt will be
- made to establish an encrypted channel with the router. -->
-
- <pemfile>/etc/jabberd/server.pem</pemfile>
-
- <!-- Router connection retry -->
- <retry>
- <!-- If the connection to the router can't be established at
- startup, we should try again this many times before exiting.
- Use -1 to retry indefinitely. [default: 3] -->
- <init>3</init>
-
- <!-- If we lost the connection to the router during normal
- operation (ie we've successfully connected to the router in
- the past), we should try to reconnect this many times before
- exiting. Use -1 to retry indefinitely. [default: 3] -->
- <lost>3</lost>
-
- <!-- Sleep for this many seconds before trying attempting a
- reconnect. [default: 2] -->
- <sleep>2</sleep>
- </retry>
- </router>
-
- <!-- Log configuration - type is "syslog", "file" or
"stdout" -->
- <log type='syslog'>
- <!-- If logging to syslog, this is the log ident -->
- <ident>jabberd/c2s</ident>
-
- <!-- If logging to syslog, this is the log facility
- (local0 - local7) [default: local3] -->
- <facility>local3</facility>
-
- <!-- If logging to file, this is the filename of the logfile -->
- <!--
- <file>/var/log/jabberd/c2s.log</file>
- -->
- </log>
-
- <!-- Local network configuration -->
- <local>
- <!-- Who we identify ourselves as. This should correspond to the
- ID (host) that the session manager thinks it is. You can
- specify more than one to support virtual hosts, as long as you
- have additional session manager instances on the network to
- handle those hosts. The realm attribute specifies the auth/reg
- or SASL authentication realm for the host. If the attribute is
- not specified, the realm will be selected by the SASL
- mechanism, or will be the same as the ID itself. Be aware that
- users are assigned to a realm, not a host, so two hosts in the
- same realm will have the same users.
- If no realm is specified, it will be set to be the same as the
- ID. -->
- <id>${session.hostname}</id>
- <!-- <id realm='company'>localhost</id> -->
-
- <!-- IP address to bind to (default: 0.0.0.0) -->
- <ip>0.0.0.0</ip>
-
- <!-- Port to bind to, or 0 to disable unencrypted access to the
- server (default: 5222) -->
- <port>5222</port>
-
- <!-- File containing a SSL certificate and private key for client
- connections. If this is commented out, clients will not be
- offered the STARTTLS stream extension -->
- <pemfile>/etc/jabberd/server.pem</pemfile>
-
- <!-- Require STARTTLS. If this is enabled, clients must do STARTTLS
- before they can authenticate. Until the stream is encrypted,
- all packets will be dropped. -->
- <!--
- <require-starttls/>
- -->
-
- <!-- Older versions of jabberd support encrypted client connections
- via an additional listening socket on port 5223. If you want
- this (required to allow pre-STARTTLS clients to do SSL),
- uncomment this -->
- <!--
- <ssl-port>5223</ssl-port>
- -->
- </local>
-
- <!-- Input/output settings -->
- <io>
- <!-- Maximum number of file descriptors. Note that the number of
- possible connections will be slightly less than this, because
- c2s itself can use up five on its own, and auth/reg modules may
- need a few also. If the supply of file descriptors is
- exhausted, new incoming connections will be denied.
- (default: 1024) -->
- <max_fds>1024</max_fds>
-
- <!-- Rate limiting -->
- <limits>
- <!-- Maximum bytes per second - if more than X bytes are sent in Y
- seconds, connection is throttled for Z seconds. The format
- is:
-
- <bytes seconds='Y' throttle='Z'>X</bytes>
-
- Default Y is 1, default Z is 5. set X to 0 to disable. -->
- <bytes>0</bytes>
-
- <!-- Maximum connects per second - if more than X connects are
- attempted from a single IP in Y seconds, that IP is throttled
- for Z seconds. The format is:
-
- <connects seconds='Y' throttle='Z'>X</connects>
-
- Default Y is 5, default Z is 5. set X to 0 to disable. -->
- <connects>0</connects>
- </limits>
-
- <!-- IP-based access controls. If a connection IP matches an allow
- rule, the connection will be accepted. If a connecting IP
- matches a deny rule, the connection will be refused. If the
- connecting IP does not match any rules, or it matches both an
- allow and a deny rule, the contents of the <order/> option
- determines what happens. -->
- <access>
- <!-- Rule check order (default: allow,deny)
-
- allow,deny - Check allow rules, then check deny rules.
- Allow by default.
- deny,allow - Check deny rules, then check allow rules.
- Deny by default. -->
- <order>allow,deny</order>
-
- <!-- Allow a network. If the mask isn't specified, it defaults to
- 255.255.255.255 (ie allow onle the specified IP) -->
- <!--
- <allow ip='127.0.0.0' mask='255.0.0.0'/>
- -->
-
- <!-- Allow a single host -->
- <!--
- <allow ip='12.34.56.78'/>
- -->
-
- <!-- Deny a network or a host -->
- <!--
- <deny ip='127.0.0.1' mask='255.0.0.0'/>
- <deny ip='87.65.43.21'/>
- -->
- </access>
-
- <!-- Timed checks -->
- <check>
- <!-- Interval between checks.
-
- Open client connections will be checked every n seconds, and
- the following checks applied.
-
- 0 disables all checks. (default: 0) -->
- <interval>0</interval>
-
- <!-- Idle connection checks.
-
- Connections that have not sent data for longer than this many
- seconds will be dropped.
-
- 0 disables idle timeouts. (default: 0) -->
- <idle>0</idle>
-
- <!-- Keepalives.
-
- Connections that have not sent data for longer than this many
- seconds will have a single whitespace character sent to them.
- This will force the TCP connection to be closed if they have
- disconnected without us knowing about it.
-
- 0 disables keepalives. (default: 0) -->
- <keepalive>0</keepalive>
-
- </check>
-
- </io>
-
- <!-- Authentication/registration database configuration -->
- <authreg>
- <!-- Backend module to use -->
- <module>db</module>
-
- <!-- Registration configuration -->
- <register>
- <!-- Account registration is enabled by default (provided the
- auth/reg module in use supports it). Comment this out to
- disable. -->
- <enable/>
-
- <!-- Human-readable instructions to be returned to client when
- registration is requested. -->
- <instructions>Enter a username and password to register with this
server.</instructions>
-
- <!-- Password change only. When registration is disabled, it may
- still be useful to allow clients to change their password. If
- you want this, uncomment this when you disable registration. -->
- <!--
- <password/>
- -->
- </register>
-
- <!-- Available authentication mechanisms -->
- <mechanisms>
-
- <!-- These are the traditional Jabber authentication mechanisms.
- Comment out any that you don't want to be offered to clients.
- Note that if the auth/reg module does not support one of
- these mechanisms, then it will not be offered regardless of
- whether or not it is enabled here.
-
- Similarly, if <zerok/> is disabled, then zero-knowledge data
- will not be created when a user is registered. -->
- <traditional>
- <plain/>
- <digest/>
- <zerok/>
- </traditional>
-
- <!-- SASL authentication mechanisms. Comment out any that you
- don't want to be offered to clients. Again, if the auth/reg
- module does not support one of these mechanisms, then it will
- not be offered. -->
- <sasl>
- <plain/>
- <digest-md5/>
- <!--
- <anonymous/>
- -->
- </sasl>
-
- </mechanisms>
-
- <!-- MySQL module configuration -->
- <mysql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>3306</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
- </mysql>
-
- <!-- PostgreSQL module configuration -->
- <pgsql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>5432</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
- </pgsql>
-
- <!-- Berkeley DB module configuration -->
- <db>
- <!-- Directory to store database files under -->
- <path>/var/lib/jabberd</path>
-
- <!-- Synchronize the database to disk after each write. If you
- disable this, database accesses may be faster, but data may
- be lost if jabberd crashes. -->
- <sync/>
- </db>
-
- <!-- LDAP module configuration -->
- <ldap>
- <!-- LDAP server host and port (default: 389) -->
- <host>ldap.example.com</host>
- <port>389</port>
-
- <!-- Use LDAP v3 if possible. If disabled, v2 will be used.
- Encryption options are only available if v3 is enabled. -->
- <!--
- <v3/>
- -->
-
- <!-- Encryption. If enabled, this will create an encrypted channel
- to the LDAP server using the LDAP STARTTLS mechanism. -->
- <!--
- <starttls/>
- -->
-
- <!-- Encryption. If enabled, this will create an encrypted channel
- to the server using the old-style "ldaps://" mechanism. It is
- recommended that you use <starttls/> instead of this. -->
- <!--
- <ssl/>
- -->
-
- <!-- DN to bind as for searches. If unspecified, the searches
- will be done anonymously. -->
- <!--
- <binddn>cn=Directory Manager</binddn>
- <bindpw>secret</bindpw>
- -->
-
- <!-- LDAP attribute that holds the user ID (default: uid) -->
- <uidattr>uid</uidattr>
-
- <!-- base DN of the tree. You should specify a DN for each
- authentication realm declared in the <local/> section above,
- by using the realm attribute. -->
- <basedn realm='company'>o=Company.com</basedn>
- <basedn>o=Example Corp.</basedn>
- </ldap>
-
- <!-- Pipe module configuration -->
- <pipe>
- <!-- Program to execute -->
- <exec>/usr/bin/pipe-auth.pl</exec>
- </pipe>
-
- </authreg>
-
-</c2s>
diff --git a/web/html/applications/rhn-proxy/4.2/jabberd/sm.xml
b/web/html/applications/rhn-proxy/4.2/jabberd/sm.xml
deleted file mode 100644
index aa07be3..0000000
--- a/web/html/applications/rhn-proxy/4.2/jabberd/sm.xml
+++ /dev/null
@@ -1,379 +0,0 @@
-<!-- Session manager configuration -->
-<sm>
- <!-- Our ID on the network. Users will have this as the domain part of
- their JID. If you want your server to be accessible from other
- Jabber servers, this ID must be resolvable by DNS.s
- (default: localhost) -->
- <id>${session.hostname}</id>
-
- <!-- The process ID file. comment this out if you don't need to know
- to know the process ID from outside the process (eg for control
- scripts) -->
- <pidfile>/var/run/jabberd/jabberd-sm.pid</pidfile>
-
- <!-- Router connection configuration -->
- <router>
- <!-- IP/port the router is waiting for connections on -->
- <ip>127.0.0.1</ip> <!-- default: 127.0.0.1 -->
- <port>5347</port> <!-- default: 5347 -->
-
- <!-- Username/password to authenticate as -->
- <user>jabberd</user> <!-- default: jabberd -->
- <pass>secret</pass> <!-- default: secret -->
-
- <!-- File containing a SSL certificate and private key to use when
- setting up an encrypted channel with the router. If this is
- commented out, or the file can't be read, no attempt will be
- made to establish an encrypted channel with the router. -->
- <!--
- <pemfile>/etc/jabberd/server.pem</pemfile>
- -->
- <!-- Router connection retry -->
- <retry>
- <!-- If the connection to the router can't be established at
- startup, we should try again this many times before exiting.
- Use -1 to retry indefinitely. [default: 3] -->
- <init>3</init>
-
- <!-- If we lost the connection to the router during normal
- operation (ie we've successfully connected to the router in
- the past), we should try to reconnect this many times before
- exiting. Use -1 to retry indefinitely. [default: 3] -->
- <lost>3</lost>
-
- <!-- Sleep for this many seconds before trying attempting a
- reconnect. [default: 2] -->
- <sleep>2</sleep>
- </retry>
- </router>
-
- <!-- Log configuration - type is "syslog", "file" or
"stdout" -->
- <log type='syslog'>
- <!-- If logging to syslog, this is the log ident -->
- <ident>jabberd/sm</ident>
-
- <!-- If logging to syslog, this is the log facility
- (local0 - local7) [default: local3] -->
- <facility>local3</facility>
-
- <!-- If logging to file, this is the filename of the logfile -->
- <!--
- <file>/var/log/jabberd/sm.log</file>
- -->
- </log>
-
- <!-- Storage database configuration -->
- <storage>
- <!-- By default, we use the MySQL driver for all storage -->
- <driver>db</driver>
-
- <!-- Its also possible to explicitly list alternate drivers for
- specific data types. -->
- <!-- Store vcards in a PostgreSQL database instead -->
- <!--
- <driver type='vcard'>pgsql</driver>
- -->
-
- <!-- MySQL driver configuration -->
- <mysql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>3306</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
-
- <!-- Transacation support. If this is commented out, transactions
- will be disabled. This might make database accesses faster,
- but data may be lost if jabberd crashes.
-
- This will need to be disabled if you are using a MySQL
- earlier than v3.23.xx, as transaction support did not appear
- until this version. -->
- <transactions/>
- </mysql>
-
- <!-- PostgreSQL driver configuration -->
- <pgsql>
- <!-- Database server host and port -->
- <host>localhost</host>
- <port>5432</port>
-
- <!-- Database name -->
- <dbname>jabberd2</dbname>
-
- <!-- Database username and password -->
- <user>jabberd2</user>
- <pass>secret</pass>
-
- <!-- Transacation support. If this is commented out, transactions
- will be disabled. This might make database accesses faster,
- but data may be lost if jabberd crashes. -->
- <transactions/>
- </pgsql>
-
- <!-- Berkeley DB driver configuration -->
- <db>
- <!-- Directory to store database files under -->
- <path>/var/lib/jabberd</path>
-
- <!-- Synchronize the database to disk after each write. If you
- disable this, database accesses may be faster, but data may
- be lost if jabberd crashes. -->
- <sync/>
- </db>
- </storage>
-
- <!-- Access control information -->
- <aci>
- <!-- The JIDs listed here will get access to all restricted
- functions, regardless of restrictions further down -->
- <acl type='all'>
- <jid>admin@localhost</jid>
- </acl>
-
- <!-- These JIDs can send broadcast messages (announce, motd) -->
- <!--
- <acl type='broadcast'>
- <jid>nocstaff1@localhost</jid>
- <jid>nocstaff2@localhost</jid>
- </acl>
- -->
-
- <!-- These JIDs will receive messages addressed to the sm itself
- (help requestes and such) -->
- <!--
- <acl type='messages'>
- <jid>support@localhost</jid>
- </acl>
- -->
-
- <!-- These JIDs can discover active user/session information -->
- <!--
- <acl type='disco'>
- <jid>webstatus@localhost</jid>
- </acl>
- -->
- </aci>
-
- <!-- Module chain configuration
-
- Modules listed in a chain are called in the order specified at
- the appropriate time for that chain (assuming that the module
- knows how to work with that chain; otherwise it simply ignores
- it).
-
- Removing a module from these lists will stop the module being
- called, even if its compiled into the server.
-
- Serveral modules have a presence in more than one chain. It is
- possible to remove a module from one chain but not others, but
- this may cause strange behaviour. Make sure you know what you're
- doing. -->
- <modules>
-
- <!-- sess-start. The modules in this chain are called when a session
- is first started (usually on request by c2s as part of the
- authentication process). This is normally used to load
- per-session data. -->
- <chain id='sess-start'/>
-
- <!-- sess-end. The modules in this chain are called just before a
- session is destroyed (after the client has disconnected). -->
- <chain id='sess-end'>
- <module>iq-last</module> <!-- update logout time -->
- </chain>
-
- <!-- in-sess. The modules in this chain are called when a packet
- arrives from an active user session. Note that this chain is
- also responsible for delivering packets to their destinations -
- this is usually handled by the "deliver" module. -->
- <chain id='in-sess'>
- <module>validate</module> <!-- validate packet type -->
- <module>privacy</module> <!-- manage privacy lists -->
- <module>roster</module> <!-- handle roster get/sets and
s10ns -->
- <module>vacation</module> <!-- manage vacation settings
-->
- <module>iq-vcard</module> <!-- store and retrieve the
user's vcard -->
- <module>iq-private</module> <!-- manage the user's private
data store -->
- <module>disco</module> <!-- respond to agents requests
from sessions -->
- <module>offline</module> <!-- if we're coming online
for the first time, deliver queued messages -->
- <module>announce</module> <!-- deliver motd -->
- <module>presence</module> <!-- process and distribute
presence updates -->
- <module>deliver</module> <!-- deliver packets with full
jids directly -->
- </chain>
-
- <!-- out-sess. The modules in this chain are called just before a
- packet is delivered to an active user session. -->
- <chain id='out-sess'/>
-
- <!-- in-router. The modules in this chain are called when a packet
- arrives from the router (ie another component or s2s), but
- before any processing is done. This is a good place to filter
- incoming packets. -->
- <chain id='in-router'>
- <module>session</module> <!-- perform session actions as
required by c2s -->
- <module>validate</module> <!-- validate packet type -->
- <module>presence</module> <!-- drop incoming presence if
user not online -->
- <module>privacy</module> <!-- filter incoming packets based
on privacy rules -->
- </chain>
-
- <!-- out-router. The modules in this chain are called just before a
- packet is delivered to the router (destined for another
- component or s2s). This is a good place to filter outgoing
- packets. -->
- <chain id='out-router'>
- <module>privacy</module> <!-- filter outgoing packets based
on privacy rules -->
- </chain>
-
- <!-- pkt-sm. The modules in this chain are called when a packet
- arrives that is addressed to the session manager itself (ie the
- to JID has no node part). This is normally used to provide
- session-manager-wide services (like service discovery). -->
- <chain id='pkt-sm'>
- <module>iq-last</module> <!-- return the server uptime
-->
- <module>iq-time</module> <!-- return the current server
time -->
- <module>iq-version</module> <!-- return the server name and
version -->
- <module>disco</module> <!-- build the disco list; respond
to disco queries -->
- <module>announce</module> <!-- send broadcast messages
(announce, motd, etc) -->
- <module>help</module> <!-- resend sm messages to
administrators -->
- <module>echo</module> <!-- echo messages sent to /echo
-->
- </chain>
-
- <!-- pkt-user. The modules in this chain are called when a packet
- arrives that is address to a specific user. Note that this
- chain is also responsible for delivering packets to user
- sessions as appropriate - this is usually handled by the
- "deliver" module. -->
- <chain id='pkt-user'>
- <module>roster</module> <!-- handle s10n responses -->
- <module>presence</module> <!-- process and distribute
incoming presence from external entities -->
- <module>iq-vcard</module> <!-- grab user vcards -->
- <module>deliver</module> <!-- deliver the packet to an
active session if we can -->
- <module>vacation</module> <!-- send vacation messages
-->
- <module>offline</module> <!-- save messages and s10ns for
later -->
- <module>disco-publish</module> <!-- handle disco publishes;
return information about user sessions -->
- <module>iq-last</module> <!-- return time since last logout
-->
- </chain>
-
- <!-- pkt-router. The modules in this chain are called when a
- special-purpose packet arrives from the router (eg domain
- advertisements). -->
- <chain id='pkt-router'>
- <module>session</module> <!-- take sessions offline their
c2s disappears -->
- <module>disco</module> <!-- query new components for
service information -->
- </chain>
-
- <!-- user-load. The modules in this chain are called to load
- per-user data. This will happen before a user can be used (ie
- before a session is created). -->
- <chain id='user-load'>
- <module>active</module> <!-- get active status -->
- <module>roster</module> <!-- load the roster and trust
list -->
- <module>privacy</module> <!-- load privacy lists -->
- <module>disco-publish</module> <!-- load published information
-->
- <module>vacation</module> <!-- load vacation settings
-->
- </chain>
-
- <!-- user-create. The modules in this chain are called when a user
- creation request is received (usually from c2s as part of a
- registration request). This initialises any per-user data. -->
- <chain id='user-create'>
- <module>active</module> <!-- activate new users -->
- <module>template-roster</module> <!-- populate roster from template
-->
- </chain>
-
- <!-- user-delete. The modules in this chain are called when a user
- deletion request is received (usually from c2s as part of a
- registration removal request). This deletes all data that may
- have been previously created for the user during normal
- operation. -->
- <chain id='user-delete'>
- <module>active</module> <!-- deactivate users -->
- <module>announce</module> <!-- delete motd data -->
- <module>disco-publish</module> <!-- delete published information
-->
- <module>offline</module> <!-- bounce queued messages
-->
- <module>privacy</module> <!-- delete privacy lists -->
- <module>roster</module> <!-- delete roster -->
- <module>vacation</module> <!-- delete vacation settings
-->
- <module>iq-last</module> <!-- delete last logout time
-->
- <module>iq-private</module> <!-- delete private data -->
- <module>iq-vcard</module> <!-- delete vcard -->
- </chain>
-
- </modules>
-
- <!-- Service discovery configuration -->
- <discovery>
-
- <!-- Service identity. these specify the category, type and name of
- this service that will be included in discovery information
- responses. -->
- <identity>
- <category>server</category> <!-- default: server -->
- <type>im</type> <!-- default: im -->
- <name>Jabber IM server</name> <!-- default: Jabber IM server
-->
- </identity>
-
- <!-- The discovery module can respond to jabber:iq:agents queries
- for compatibility with older clients. Comment this out to
- disable this. -->
- <agents/>
-
- <!-- Static service list.
-
- The discover module can discover disco-capable services
- automatically as they come online. Most legacy services,
- however, will not support discovery. In order to get them to
- appear in disco/agents lists returned to the client, they
- should be listed here.
-
- Note that if a disco-capable service with the same name as one
- listed below comes online, the information it provides will
- override the information listed below.
-
- The "category" and "type" attributes, and the list of
supported
- namespaces are only used for agents compatibility. If you have
- disabled this above, you may omit them. -->
- <items>
-
- <!-- example entry for a user directory -->
- <!--
- <item category='service' type='jud'
jid='users.jabber.org' name='Jabber User Directory'/>
- -->
-
- <!-- example entry for a groupchat (conference) service -->
- <!--
- <item category='conference' type='public'
jid='conference.jabber.org' name='Text conferencing'/>
- -->
-
- </items>
-
- </discovery>
-
- <!-- User options -->
- <user>
- <!-- By default, users must explicitly created before they can start
- a session. The creation process is usually triggered by a c2s
- component in response to a client registering a new user.
-
- Enableing this option will make it so that a user create will be
- triggered the first time a non-existant user attempts to start
- a session. This is useful if you already have users in an
- external authentication database (eg LDAP) and you don't want
- them to have to register. -->
- <auto-create/>
-
- <!-- Templates. If defined, the contents of these files will be
- stored in the users data store when they are created. -->
- <template>
- <!--
- <roster>/etc/jabberd/templates/roster.xml</roster>
- -->
- </template>
- </user>
-
-</sm>
diff --git a/web/html/applications/rhn-proxy/4.2/rhn.conf
b/web/html/applications/rhn-proxy/4.2/rhn.conf
deleted file mode 100644
index 1114598..0000000
--- a/web/html/applications/rhn-proxy/4.2/rhn.conf
+++ /dev/null
@@ -1,29 +0,0 @@
-# Automatically generated RHN Proxy Server configuration file.
-# -------------------------------------------------------------------------
-
-# SSL CA certificate location
-proxy.ca_chain = ${session.ca_chain:/usr/share/rhn/RHNS-CA-CERT}
-
-# Corporate HTTP proxy, format: corp_gateway.example.com:8080
-proxy.http_proxy = ${session.http_proxy}
-
-# Username for that corporate HTTP proxy
-proxy.http_proxy_username = ${session.http_proxy_username}
-
-# Password for that corporate HTTP proxy
-proxy.http_proxy_password = ${session.http_proxy_password}
-
-# Location of locally built, custom packages
-proxy.pkg_dir = /var/spool/rhn-proxy
-
-# Hostname of RHN Server or RHN Satellite
-proxy.rhn_parent = ${session.rhn_parent}
-
-# Destination of all tracebacks, etc.
-traceback_mail = ${session.traceback_mail}
-
-# SSL eabled or disabled
-proxy.use_ssl = ${session.use_ssl:0}
-
-# Monitoring Scout enabled or disabled
-web.is_monitoring_scout = ${session.enable_monitoring_scout:0}
diff --git a/web/html/applications/rhn-proxy/4.2/squid.conf
b/web/html/applications/rhn-proxy/4.2/squid.conf
deleted file mode 100644
index 2335e42..0000000
--- a/web/html/applications/rhn-proxy/4.2/squid.conf
+++ /dev/null
@@ -1,34 +0,0 @@
-# squid.conf
-# To be used for RHN Proxy servers.
-#
-# $Id: squid.conf 27034 2005-02-23 23:28:47Z jesusr $
-
-http_port 8080
-
-cache_mem 400 MB
-maximum_object_size 200 MB
-cache_dir ufs /var/spool/squid 15000 32 256
-
-cache_replacement_policy heap LFUDA
-memory_replacement_policy heap GDSF
-
-refresh_pattern . 0 100% 120000
-
-acl all src 0.0.0.0/0.0.0.0
-acl localhost src 127.0.0.1/255.255.255.255
-acl SSL_ports port 443
-acl Safe_ports port 80 # http
-acl Safe_ports port 443 # https
-acl CONNECT method CONNECT
-
-http_access deny !Safe_ports
-http_access deny CONNECT !SSL_ports
-http_access allow localhost
-http_access deny all
-icp_access allow all
-miss_access allow all
-
-quick_abort_pct -1
-quick_abort_min -1 KB
-
-range_offset_limit -1 KB
diff --git a/web/modules/rhn/RHN/DB/Channel.pm b/web/modules/rhn/RHN/DB/Channel.pm
index 302a13b..0c3b78f 100644
--- a/web/modules/rhn/RHN/DB/Channel.pm
+++ b/web/modules/rhn/RHN/DB/Channel.pm
@@ -268,18 +268,7 @@ sub trusted_orgs {
# Channel package functions
################################
-my %proxy_chans_by_version = ('1.1' =>
['redhat-rhn-proxy-as-i386-2.1', 'redhat-rhn-proxy-i386-7.2'],
- '3.2' => ['redhat-rhn-proxy-3.2-as-i386-2.1'],
- '3.6' => ['redhat-rhn-proxy-3.6-as-i386-2.1',
'redhat-rhn-proxy-3.6-as-i386-3'],
- '3.7' => ['redhat-rhn-proxy-3.7-as-i386-2.1',
'redhat-rhn-proxy-3.7-as-i386-3',
- 'redhat-rhn-proxy-3.7-as-i386-4'],
- '4.0' => ['redhat-rhn-proxy-4.0-as-i386-3',
- 'redhat-rhn-proxy-4.0-as-i386-4',
- 'redhat-rhn-proxy-4.0-as-x86_64-4'],
- '4.1' => ['redhat-rhn-proxy-4.1-as-i386-3',
- 'redhat-rhn-proxy-4.1-as-i386-4'],
- '4.2' => ['redhat-rhn-proxy-4.2-as-i386-3',
- 'redhat-rhn-proxy-4.2-as-i386-4'],
+my %proxy_chans_by_version = (
'5.0' => ['redhat-rhn-proxy-5.0-as-i386-4'],
'5.1' => ['redhat-rhn-proxy-5.1-as-i386-4',
'redhat-rhn-proxy-5.1-as-x86_64-4',
commit 4c5c526f9ef40631e5cba9b7ad72621b4df8fed0
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 09:40:50 2011 +0200
705363 - description must end with full stop
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index 82ed1fc..d70119a 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -13,7 +13,7 @@ BuildRequires: perl(ExtUtils::MakeMaker)
%description
This package contains the code for the Spacewalk Web Site.
Normally this source RPM does not generate a %{name} binary package,
-but it does generate a number of sub-packages
+but it does generate a number of sub-packages.
%package -n spacewalk-html
Summary: HTML document files for Spacewalk
@@ -46,7 +46,7 @@ Provides: rhn-base = 5.3.0
%description -n spacewalk-base
This package includes the core RHN:: packages necessary to manipulate
-database. This includes RHN::* and RHN::DB::*
+database. This includes RHN::* and RHN::DB::*.
%package -n spacewalk-base-minimal
@@ -102,7 +102,7 @@ Provides: rhn-pxt = 5.3.0
%description -n spacewalk-pxt
This package is the core software of the new Spacewalk site. It is responsible
for HTML, XML, WML, HDML, and SOAP output of data. It is more or less
-equivalent to things like Apache::ASP and Mason
+equivalent to things like Apache::ASP and Mason.
%package -n spacewalk-sniglets
@@ -112,7 +112,7 @@ Obsoletes: rhn-sniglets < 5.3.0
Provides: rhn-sniglets = 5.3.0
%description -n spacewalk-sniglets
-This package contains the tag handlers for the PXT templates
+This package contains the tag handlers for the PXT templates.
%prep
commit 6e10e8a3cfde8b640dd6713eb61b49cdaa182da1
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 09:39:35 2011 +0200
705363 - spacewalk-web package summary contains lower-case `rpm' abbreviation. Use
upper case.
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index c3f1064..82ed1fc 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -12,7 +12,7 @@ BuildRequires: perl(ExtUtils::MakeMaker)
%description
This package contains the code for the Spacewalk Web Site.
-Normally this source rpm does not generate a %{name} binary package,
+Normally this source RPM does not generate a %{name} binary package,
but it does generate a number of sub-packages
%package -n spacewalk-html
commit a64ecbe3bbad94f7c97609b2abd470cf2e0b7939
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 09:38:23 2011 +0200
705363 - clarify description and summary
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index 6f6191d..c3f1064 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -50,7 +50,7 @@ database. This includes RHN::* and RHN::DB::*
%package -n spacewalk-base-minimal
-Summary: Minimal .pm's for %{name} package
+Summary: Core of Perl modules for %{name} package
Group: Applications/Internet
Provides: spacewalk(spacewalk-base-minimal) = %{version}-%{release}
%if 0%{?rhel} && 0%{?rhel} < 6
@@ -64,6 +64,8 @@ Provides: rhn-base-minimal = 5.3.0
%description -n spacewalk-base-minimal
Independent Perl modules in the RHN:: name-space.
+This are very basic modules need to handle config files, database, sessions
+and exceptions.
%package -n spacewalk-dobby
Summary: Perl modules and scripts to administer an Oracle database
commit 7703299d64701a909e9dca8a2be34e3c5b5415c3
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 09:23:53 2011 +0200
705363 - be more specific about license
files html/javascript/{builder.js,controls.js,dragdrop.js,effects.js,
prototype-1.6.0.js,scriptaculous.js,slider.js,sound.js,unittest.js}
are licensed under MIT license
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index c404920..6f6191d 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -24,7 +24,10 @@ Obsoletes: rhn-help < 5.3.0
Provides: rhn-help = 5.3.0
Obsoletes: rhn-html < 5.3.0
Provides: rhn-html = 5.3.0
-
+# files html/javascript/{builder.js,controls.js,dragdrop.js,effects.js,
+# prototype-1.6.0.js,scriptaculous.js,slider.js,sound.js,unittest.js}
+# are licensed under MIT license
+License: GPLv2 and MIT
%description -n spacewalk-html
This package contains the HTML files for the Spacewalk web site.
commit 6ded3782be61c1cd08fcc609517f4bcccd7ba1f7
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Jul 29 08:58:14 2011 +0200
705363 - change summary of package
TODO: I think `Spacewalk web site' or `Spacewalk web interface' would be
enough. The word (Spacewalk) `packages' interfere with RPM packages.
diff --git a/web/spacewalk-web.spec b/web/spacewalk-web.spec
index 39740bd..c404920 100644
--- a/web/spacewalk-web.spec
+++ b/web/spacewalk-web.spec
@@ -1,5 +1,5 @@
Name: spacewalk-web
-Summary: Spacewalk Web site packages
+Summary: Spacewalk Web site - Perl modules
Group: Applications/Internet
License: GPLv2
Version: 1.6.5