This in fact points up the need to have a "smart" server. It is important
that the server be able to identify the files it's serving not just by their
suffix (i.e., in the mime type file) but via any available attribute
(such as magic numbers). The information that's available differs
among platforms and application (server) needs. I'm in agreement that
we need a flexible method that allows the server to use it's "smarts"
and the users' needs (e.g., the scripts I am interested in providing
are all perl and tcl, so the #! would work for my application...).
> However, I could live with any of these alternatives. What would be nice
> at this point would be to develop a consensus around one of them, and get
> it into the servers, so that users could actually have the capability
> (where, of course, the server administrator feels it proper to grant it).
Based on some limited discussion here, I propose the following:
Add to the srm.conf file:
***************************
# UserExec: Whether local user executables is activated
#
UserExec True
***************************
Add a .srm_conf file in the users public_html directory
(or whatever it's set to in the server's srm.conf file)
***************************
# ScriptAlias: This controls which directories contain server scripts.
# Format: ScriptAlias fakename realname
ScriptAlias /cgi-bin /home/rhb/myscripts
#and possibly a line that includes info on how I identify
#my executable files
ExecAlias magic, suffix=exe
***************************
Now a more general question that turns the previous question inside
out. The original concern was in adding executables to directories
that were not indicated as having executables. Well it seems that
I can certainly have "regular" (non script) html files in executable
directories. What do I gain from having a directory "not executable"?
Why aren't all directories cgi-bin directories? I can restrict
GET in the directories in which I really have scripts if I'm concerned
about reading scripts...
One point brought to my attention is that all directories are already
"executable" in the NCSA server environment via the <inc var> directive
(i.e., this takes care of my original problem of getting to the
user variable in authentication), but it doesn't take care of things
like forms.
Rich
>
> rst
By the way - I'm continuing to receive all kinds of spurious messages
from the listserv server (e.g., the error messages for unknown users
are returned to me...).