Topic: sysmon contrib on Primary ibay ? Apache question...

[ltwally]

I would like to make the sysmon contrib's "panel" available on the Primary ibay's website.  I think it's handy, and would like to be able to easily view it from the outside world as well as the server-manager.

I found the CGI script here: /etc/e-smith/web/functions/sysmon
I then made a softlink to it here: /home/e-smith/files/ibays/Primary/cgi-bin/sysmon
And manually edited /etc/http/conf/httpd.conf to add Options +FollowSymLinks to the Primay CGI directory.
Finally, I ran apachectl graceful.

But I still get a 403.

So, now that I've gone this far, I suppose I should stop and ask if this is not something I should do.  If I get this working, will it create a large security risk?

If not... what am I doing wrong?

[ltwally]

So, I found a way "around" the SymLink problem.

I copied the sysmon script into the Primary ibay's CGI directory.

While it would work, it would always pop up with a warning about the server's self-signed certificate, even though the script wasn't using https.  I dug around, and found that it was because the script was designed to load the following css file:  "/server-common/css/sme_core.css" and the code below redirects that to https.

In the Primary site's VirtualHost in httpd.conf:

Code: [Select]

    RewriteRule ^/server-common(/.*|$)    https://%{HTTP_HOST}/server-common$1 [L,R]
I remedied that by changing it to read:

Code: [Select]

    RewriteRule ^/server-common(/.*|$)    http://%{HTTP_HOST}/server-common$1 [L,R]
Now, I'm fairly certain this is not necessarily insecure, as the only things that can read that directory are still local subnets.

Anyhoo... I'm posting what I've done to see if anyone out there has any feedback on good/bad/ugly.

Thanks

[cactus]

I remedied that by changing it to read:

Code: [Select]

    RewriteRule ^/server-common(/.*|$)    http://%{HTTP_HOST}/server-common$1 [L,R]

Which makes no sense as it redirects to itself again, AFAIK you can remove that line as well.

[ltwally]

Which makes no sense as it redirects to itself again, AFAIK you can remove that line as well.

Just tested that, and it doesn't seem to cause any issues.  Thanks for the tip.