Main Server Configuration - Red Hat ENTERPRISE LINUX 5 - DEPLOYMENT Deployment Manual

Important
If modifying the original file, note that it is of paramount importance that the httpd.conf
contains the following directive:
Include conf.d/*.conf
Omission of this directive results in the failure of all modules packaged in their own RPMs
(such as mod_perl, php, and mod_ssl).
22.2.2.1.4. Other Global Environment Changes
The following directives have been removed from Apache HTTP Server 2.0's configuration:
• ServerType — The Apache HTTP Server can only be run as ServerType standalone making
this directive irrelevant.
• AccessConfig and ResourceConfig — These directives have been removed as they mirror the
functionality of the Include directive. If the AccessConfig and ResourceConfig directives are
set, replace them with Include directives.
To ensure that the files are read in the order implied by the older directives, the Include directives
should be placed at the end of the httpd.conf, with the one corresponding to ResourceConfig
preceding the one corresponding to AccessConfig. If using the default values, include them
explicitly as conf/srm.conf and conf/access.conf files.

22.2.2.2. Main Server Configuration

The main server configuration section of the configuration file sets up the main server, which responds
to any requests that are not handled by a virtual host defined within a <VirtualHost> container.
Values here also provide defaults for any <VirtualHost> containers defined.
The directives used in this section have changed little between Apache HTTP Server 1.3 and version
2.0. If the main server configuration is heavily customized, it may be easier to modify the existing
configuration file to suit Apache HTTP Server 2.0. Users with only lightly customized main server
sections should migrate their changes into the default 2.0 configuration.
22.2.2.2.1. UserDir Mapping
The UserDir directive is used to enable URLs such as http://example.com/~bob/ to map to
a subdirectory within the home directory of the user bob, such as /home/bob/public_html/. A
side-effect of this feature allows a potential attacker to determine whether a given username is present
on the system. For this reason, the default configuration for Apache HTTP Server 2.0 disables this
directive.
To enable UserDir mapping, change the directive in httpd.conf from:
UserDir disable
to the following:
Migrating Apache HTTP Server 1.3 Configuration Files to 2.0
309