# Configuration paramters for various opendap servers, both the
# CGI-based servers and the new Servlet-based design. Update this file
# and copy to Apache's conf.d directory.

# ScriptAlias: This controls which directories contain server scripts.

# These are the Server3 CGIs

ScriptAlias /opendap-3.4/ "/usr/local/opendap/DODS-3.4/DODS/etc/"

ScriptAlias /opendap-3.5/ "/usr/local/opendap-3.5/share/dap-server-cgi/"
ScriptAlias /secure-3.5/ "/usr/local/secure-3.5/"

ScriptAlias /opendap-3.6/ "/usr/local/opendap-3.6/share/dap-server-cgi/"

ScriptAlias /opendap-3.7/ "/usr/local/opendap-3.7/share/dap-server-cgi/"

# The no-version-number names always point to the latest installed version.
# I removed the 'opendap' script alias because 'opendap' is the name of
# the Hyrax documentation server and I'm leery of issues with mod_rewrite. The
# ^/dap(.*) script alias match is now handled using mod rewrite rule down
# in the test.opendap.org VirtualHost block. The following shows how
# to mask the CGI name for the version 3 servers. 

# ScriptAlias /opendap/ "/usr/local/opendap-3.6/share/dap-server-cgi/"
# ScriptAliasMatch ^/dap(.*) "/usr/local/opendap-3.6/share/dap-server-cgi/nph-dods$1

ScriptAliasMatch ^/secure(.*) "/usr/local/secure-3.5/nph-dods$1

# These are the real directories that hold the servers.

<Directory "/usr/local/opendap/DODS-3.4/DODS/etc">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all
</Directory>

<Directory "/usr/local/opendap-3.5/share/dap-server-cgi">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all
</Directory>

<Directory "/usr/local/opendap-3.6/share/dap-server-cgi">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all
</Directory>

<Directory "/usr/local/opendap-3.7/share/dap-server-cgi">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all
</Directory>

<Directory "/usr/local/secure-3.5">
    Order deny,allow
    Deny from all
    # ALLOW SERVER (IP OF SERVER) MACHINE TO REQUEST DATA ITSELF
    Allow from test.opendap.org
    Require valid-user
    # ALL VISITORS NEED USERNAME AND PASS BUT NOT SERVER
    Satisfy any

    AuthType Basic
    AuthUserFile /etc/httpd/conf/htpasswd.users
    AuthGroupFile /etc/httpd/conf/htpasswd.groups
    AuthName "Secure server"
</Directory>

# Here's where we set up the linkage between Apache and Tomcat so that
# Hyrax works through Apache. This is useful for sites that are
# running Apache for other reasons or that want to spoof old URLs so
# that they use the new server. You'll see that test.opendap.org is
# really a virtual host and that's set up here too. we could move all
# of the CGI directives into this block also, but haven't done that yet. 

<VirtualHost *:80>
    DocumentRoot /var/www/test-data
    ServerName test.opendap.org
    ServerAlias test
    ErrorLog logs/test_data_error_log
    CustomLog logs/test_data_access_log common

    <Directory "/var/www/test-data">
        Options Indexes FollowSymLinks
        AllowOverride AuthConfig
    </Directory>

     # This enables calling Server4 using a Server3-like URL.

     # Enable the rewrite module
     RewriteEngine on
     # Target it's logging somehere useful
     RewriteLog /etc/httpd/logs/rewrite.log
     # Turn on logging (Set to 0 to disable)
     RewriteLogLevel 2

     # Configure mod_proxy to disable everything except reverse proxies.
     ProxyRequests Off
     <Proxy *>
	 Order deny,allow
	 Allow from all
     </Proxy>

     # Uses a reverse proxy to enable mapping old OPeNDAP URL's to Tomcat.
     # I didn't map 'cgi-bin/nph-dods' because the purpose of this
     # server is to have a bunch of different OPeNDAP's servers
     # running, so we have a number of CGI bin directories, one for
     # each of the old servers. To simulate mapping the old URLs to
     # the new server I used 'opendap-4.0' as if it was the name of an
     # old server3's CGI bin directory. I could have used
     # 'opendap-3.5', which is the name of a real CGI bin directory on
     # this host, but then accesses to that server would be routed off
     # to the new server, sort of defeating the purpose of having the
     # old servers ...

     RewriteRule ^/opendap-4.0/nph-dods(.*) http://test.opendap.org:8080/opendap/$1 [P]
     RewriteRule ^/opendap/nph-dods(.*) http://test.opendap.org:8080/opendap/$1 [P]

     # This does the same thing that the old ScriptAliasMatch for the
     # Server3 CGIs did. A URL that starts <host>/dap/data/... will work. 

     RewriteRule ^/dap(.*) http://test.opendap.org:8080/opendap/$1 [P]

     RewriteRule ^/opendap/(.*) http://test.opendap.org:8080/opendap/$1 [P]

     # End of the Server4-like-Server3 hacks

</VirtualHost>