Setup for apache-modssl / mod_frontpage / mod_php

Here are step by step instructions for getting PHP, Apache and Frontpage with authoring over SSL to work. I don't actually use this system much, but apparently others do so these instructions may help someone.

These installs are done on FreeBSD 4.7 using the ports system. If you're using another OS, you'll have to change the installation procedure somewhat.

• Apache 1.3.27 (from ports)
• mod_frontpage 1.6.2 (from ports)
• PHP4 4.2.3

1. Install the required software in this order:

   # cd /usr/ports/www/apache13-modssl
   # make && make install
   # cd /usr/ports/www/mod_php4
   # make && make install
   # cd /usr/ports/www/mod_frontpage
   # make && make install

2. Create a user/group called 'fpuser'. It's important that the uid/gid is higher than 100.
3. The frontpage server extensions will complain if your web root is a symlink. Either make sure it's not, like so:

   # rm /usr/local/www/data
   # mkdir /usr/local/www/data
   # chown www:www /usr/local/www/data

   Or add the following line to /usr/local/frontpage/version5.0/frontpage.cnf:

   FollowSymLinks:1

4. Complete the installation of the frontpage extensions:
   1. Make sure you have the following lines near the top your httpd.conf:

      ResourceConfig /dev/null
      AccessConfig /dev/null

   2. The Allowoveride lines in httpd.conf should have the following options:

      AuthConfig Limit Indexes Options

   3. Add the following directives outside any sections in your httpd.conf (near the top, but after the modules):

      FrontPageEnable
      FrontPageAdminEnable

   4. While you're in httpd.conf, move the LoadModule and AddModule directives for mod_php4 and mod_frontpage outside the SSL block.
   5. Run the the actual frontpage web install command. When prompted for local user/group names make sure to specify fpuser or the user you created above.

      /usr/local/frontpage/version5.0/fp_install.sh

5. At this point you should check the permissions on your webs. The _vti_* directories and .htaccess files should not have the group write bit set.
6. Restart apache. Now you should be able to connect to the server and make a frontpage web etc....
7. To get authoring over SSL running:
   1. Add the following to the SSL virtual host:

      FrontpageEnable
      FrontpageAdminEnable
      
      <Directory />
          Options FollowSymLinks
          AllowOverride AuthConfig Limit Indexes Options
      </Directory>
      
      <Directory "/usr/local/www/data">
          Options Indexes FollowSymLinks MultiViews
          AllowOverride AuthConfig Limit Indexes Options
      
          Order allow,deny
          Allow from all
      </Directory>

   2. Run the following command:

      # cp /usr/local/frontpage/we80.cnf /usr/local/frontpage/we443.cnf

8. Restart apache (make sure to use the following commands as SSL doesn't always start by default):

   # apachectl stop
   # apachectl startssl

Additional Remarks

• The above configuration may not be completely secure by default. That's left to the reader to figure out. It's important that you understand the security implications. Apparently frontpage is regarded by some to have many risks associated with it.
• Frontpage limits the minimum uid/gid of the web owner. By default this is 100. That's why we create a new user/group with a higher uid.
• The apache build needs to be configured with --enable-suexec. Recent versions of the FreeBSD ports tree do that.
• If stuff doesn't work check the logs.

   [ home page ]