355b4669e025ff377602b6fc7caaf30dbc218371jacobs# CDDL HEADER START
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# The contents of this file are subject to the terms of the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Common Development and Distribution License (the "License").
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# You may not use this file except in compliance with the License.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# See the License for the specific language governing permissions
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# and limitations under the License.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# When distributing Covered Code, include this CDDL HEADER in each
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# If applicable, add the following below this CDDL HEADER, with the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# fields enclosed by brackets "[]" replaced with your own identifying
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# information: Portions Copyright [yyyy] [name of copyright owner]
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# CDDL HEADER END
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Copyright 2006 Sun Microsystems, Inc. All rights reserved.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Use is subject to license terms.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# "$Id: httpd-standalone-ipp.conf,v 1.4 2006/03/24 00:26:54 njacobs Exp $"
355b4669e025ff377602b6fc7caaf30dbc218371jacobs## httpd-standalone-ipp.conf -- Apache HTTP server configuration file for
355b4669e025ff377602b6fc7caaf30dbc218371jacobs## an Internet Print Protocol (IPP) listener
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Based upon the NCSA server configuration files originally by Rob McCool.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# This is the main Apache server configuration file. It contains the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# configuration directives that give the server its instructions.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# See <URL:http://www.apache.org/docs/> for detailed information about
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# the directives. mod_ipp specific directives are described in the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# mod_ipp(4) man page.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs### Section 1: Global Environment
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# The directives in this section affect the overall operation of Apache,
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# such as the number of concurrent requests it can handle or where it
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# can find its configuration files.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# ServerRoot: The top of the directory tree under which the server's
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# configuration, error, and log files are kept.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# NOTE! If you intend to place this on an NFS (or otherwise network)
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# mounted filesystem then please read the LockFile documentation
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# (available at <URL:http://www.apache.org/docs/mod/core.html#lockfile>);
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# you will save yourself a lot of trouble.
b0e753dd6a955fb2f10a0ce17d32bd33172e0400Gordon Ross# Change /usr/apache2/... if Apache 2.x is elsewhere.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# The LockFile directive sets the path to the lockfile used when Apache
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# its default value. The main reason for changing it is if the logs
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# DISK. The PID of the main server process is automatically appended to
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# the filename.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# PidFile: The file in which the server should record its process
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# identification number when it starts.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# ScoreBoardFile: File used to store internal server process information.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Not all architectures require this. But if yours does (you'll know because
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# this file will be created when you run Apache) then you *must* ensure that
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# no two invocations of Apache share the same scoreboard file.
355b4669e025ff377602b6fc7caaf30dbc218371jacobsScoreBoardFile /var/run/httpd-standalone-ipp.scoreboard
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# In the standard configuration, the server will process httpd.conf (this
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# file, specified by the -f command line option), srm.conf, and access.conf
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# in that order. The latter two files are now distributed empty, as it is
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# recommended that all directives be kept in a single file for simplicity.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# The commented-out values below are the built-in defaults. You can have the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# server ignore these files altogether by using "/dev/null" (for Unix) or
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# "nul" (for Win32) for the arguments to the directives.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs#ResourceConfig conf/srm.conf
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Timeout: The number of seconds before receives and sends time out.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# KeepAlive: Whether or not to allow persistent connections (more than
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# one request per connection). Set to "Off" to deactivate.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# MaxKeepAliveRequests: The maximum number of requests to allow
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# during a persistent connection. Set to 0 to allow an unlimited amount.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# We recommend you leave this number high, for maximum performance.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# KeepAliveTimeout: Number of seconds to wait for the next request from the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# same client on the same connection.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Server-pool size regulation. Rather than making you guess how many
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# server processes you need, Apache dynamically adapts to the load it
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# sees --- that is, it tries to maintain enough server processes to
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# handle the current load, plus a few spare servers to handle transient
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# load spikes (e.g., multiple simultaneous requests from a single
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Netscape browser).
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# It does this by periodically checking how many servers are waiting
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# for a request. If there are fewer than MinSpareServers, it creates
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# a new spare. If there are more than MaxSpareServers, some of the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# spares die off. The default values are probably OK for most sites.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Number of servers to start initially --- should be a reasonable ballpark
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Limit on total number of servers running, i.e., limit on the number
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# of clients who can simultaneously connect --- if this limit is ever
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# It is intended mainly as a brake to keep a runaway server from taking
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# the system with it as it spirals down...
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# MaxRequestsPerChild: the number of requests each child process is
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# allowed to process before the child dies. The child will exit so
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# as to avoid problems after prolonged use when Apache (and maybe the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# libraries it uses) leak memory or other resources. On most systems, this
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# isn't really needed, but a few (such as Solaris) do have notable leaks
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# in the libraries. For these platforms, set to something like 10000
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# or so; a setting of 0 means unlimited.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# NOTE: This value does not include keepalive requests after the initial
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# request per connection. For example, if a child process handles
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# an initial request and 10 subsequent "keptalive" requests, it
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# would only count as 1 request towards this limit.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Dynamic Shared Object (DSO) Support
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# To be able to use the functionality of a module which was built as a DSO you
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# have to place corresponding `LoadModule' lines at this location so the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# directives contained in it are actually available _before_ they are used.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Please read the file http://httpd.apache.org/docs/dso.html for more
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# details about the DSO mechanism and run `httpd -l' for the list of already
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# built-in (statically linked and thus always available) modules in your httpd
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Note: The order in which modules are loaded is important. Don't change
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# the order below without expert advice.
b0e753dd6a955fb2f10a0ce17d32bd33172e0400Gordon RossLoadModule auth_basic_module libexec/mod_auth_basic.so
b0e753dd6a955fb2f10a0ce17d32bd33172e0400Gordon RossLoadModule authn_file_module libexec/mod_authn_file.so
b0e753dd6a955fb2f10a0ce17d32bd33172e0400Gordon RossLoadModule authz_host_module libexec/mod_authz_host.so
b0e753dd6a955fb2f10a0ce17d32bd33172e0400Gordon RossLoadModule authz_user_module libexec/mod_authz_user.so
355b4669e025ff377602b6fc7caaf30dbc218371jacobsLoadModule mime_magic_module libexec/mod_mime_magic.so
355b4669e025ff377602b6fc7caaf30dbc218371jacobs### Section 2: 'Main' server configuration
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# The directives in this section set up the values used by the 'main'
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# server, which responds to any requests that aren't handled by a
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# <VirtualHost> definition. These values also provide defaults for
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# any <VirtualHost> containers you may define later in the file.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# All of these directives may appear inside <VirtualHost> containers,
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# in which case these default settings will be overridden for the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# virtual host being defined.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# If your ServerType directive (set earlier in the 'Global Environment'
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# section) is set to "inetd", the next few directives don't have any
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# effect since their settings are defined by the inetd configuration.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Skip ahead to the ServerAdmin directive.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Port: The port to which the standalone server listens. For
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# ports < 1023, you will need httpd to be run as root initially.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# If you wish httpd to run as a different user or group, you must run
b0e753dd6a955fb2f10a0ce17d32bd33172e0400Gordon Ross# httpd as root initially and it will switch.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# User/Group: The name (or #number) of the user/group to run httpd as.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# . On SCO (ODT 3) use "User nouser" and "Group nogroup".
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# . On HPUX you may not be able to use shared memory as nobody, and the
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# suggested workaround is to create a user www and use that user.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# when the value of (unsigned)Group is above 60000;
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# don't use Group nobody on these systems!
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# ServerAdmin: Your address, where problems with the server should be
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# e-mailed. This address appears on some server-generated pages, such
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# as error documents.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# ServerName allows you to set a host name which is sent back to clients for
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# your server if it's different than the one the program would get (i.e., use
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# "www" instead of the host's real name).
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Note: You cannot just invent host names and hope they work. The name you
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# define here must be a valid DNS name for your host. If you don't understand
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# this, ask your network administrator.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# If your host doesn't have a registered DNS name, enter its IP address here.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# You will have to access it by its address (e.g., http://123.45.67.89/)
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# anyway, and this will make redirections work in a sensible way.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# 127.0.0.1 is the TCP/IP local loop-back address, often named localhost. Your
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# machine always knows itself by this address. If you use Apache strictly for
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# local testing and development, you may use 127.0.0.1 as the server name.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# Allow passing PPD files from this service as well
355b4669e025ff377602b6fc7caaf30dbc218371jacobs# mod_ipp specific configuration
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # ipp-conformance automatic # default
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # ipp-default-user nobody
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # By default, only turn on operations that are not
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # likely to cause real problems when the user can't
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # be trusted.
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # redirect non-IPP requests
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # ipp-conformance automatic # default
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # ipp-default-user nobody
b0e753dd6a955fb2f10a0ce17d32bd33172e0400Gordon Ross # To be more restrictive, use this intead:
b0e753dd6a955fb2f10a0ce17d32bd33172e0400Gordon Ross # ipp-operation required on
355b4669e025ff377602b6fc7caaf30dbc218371jacobs # redirect non-IPP requests