Look at /etc/rc.config.d/apache.rc.config. This file is read by the apache init script /etc/init.d/apache, and sets the values of which modules to include on startup. This is true for 7.1, and is very likely similar in 7.0 On Wed, May 02, 2001 at 11:57:38PM +0200, OKDesign oHG Security Webmaster wrote:

Hi folks, just installed new system (7.0) and ran into little difficulties :) Okay, when starting apache the normal way (when entering runlevel2 or by /sbin/init.d/apache start) apache starts and seems to work normally, but I can't access directories secured with .htaccess. When stopping apache and restarting it the conventional way by /usr/sbin/httpd -f /etc/httpd/httpd.conf it works. So it seems as if the modules (backhand, ldap, susehelp and so on) are the problem. First question: Any idea what exactly is the problem ? Am I right with my theory ? Or is the problem anwhere else ? Second question: How do I disable single modules ? I couldn't find any entry in the httpd.conf for this. Third question: Is there a known problem with .htaccess and one of the mods ? If not, I think I'll have to diable the mods one after each other to find out the guilty one Forth (and last :) ) question: Are there any known vulnerabilities within the .htaccess-method ? I was on holiday the last time and am a little "out of date" due to this.

Thanks in advance.

---Stephan -------------------------------------------- Stephan M. Ott // OKDesign oHG ............. Internet-Providing und Netzwerkmanagement .. smo@okdesign.de ..... http://www.okdesign.de fon. +49 961 3814139 .. fax. +49 961 3814140 in dringenden faellen: mobil. 0171-7858064 . --------------------------------------------

--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com

-- -ashley One of these days I'm going to completely organize my life.