ports/57336: FrontPage publishing failure with mod_frontpage

[J.C. Archambeau]

>Number:         57336
>Category:       ports
>Synopsis:       FrontPage publishing failure with mod_frontpage
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Sep 28 19:30:17 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator:     J.C. Archambeau
>Release:        FreeBSD 4.8-RELEASE i386
>Organization:
>Environment:
System: FreeBSD mail.fundingworks.dyndns.biz 4.8-RELEASE FreeBSD 4.8-RELEASE #0: Tue Jun 10 19:43:41 PDT 2003 nxiv at mail.bsdworks.homeunix.net:/usr/src/sys/compile/MAIL i386


	FreeBSD 4.8
	
>Description:
	FrontPage publishing failure with mod_frontpage port
>How-To-Repeat:
	Install Apache, mod_frontpage port and attempt to publish a website using FrontPage.  I obtain no username/password challenge when attempting to publish, just the error from FrontPage that the server does not appear to have FrontPage extensions installed.  My /var/log/httpd-error.log file after restarting Apache and attempting to publish with FrontPage 2000.
	[Sat Sep 27 11:03:15 2003] [notice] Apache/1.3.27 (Unix) FrontPage/5.0.2.2623 PHP/4.3.2 configured -- resuming normal operations
	[Sat Sep 27 11:03:15 2003] [notice] suEXEC mechanism enabled (wrapper: /usr/local/sbin/suexec)
	[Sat Sep 27 11:03:15 2003] [notice] Accept mutex: flock (Default: flock)
	[Sat Sep 27 11:06:02 2003] [error] [client 192.168.1.254] web root owned by privileged user: /usr/local/www/data/_vti_bin/shtml.exe
	[Sat Sep 27 11:14:06 2003] [error] [client 192.168.1.254] web root owned by privileged user: /usr/local/www/data/_vti_bin/shtml.exe
>Fix:
	Unknown.  Only known workaround is to use the FrontPage DSO available from www.rtr.com and remove the FrontPageEnable and FrontPageAdminEnable directives from httpd.conf.  The RTR DSO does not support these directives in the httpd.conf file.  I would prefer to use the mod_frontpage port as it has the capability to enable FrontPage extensions per virtual host or web for added security.  The RTR DSO apparently does not have this capability.
>Release-Note:
>Audit-Trail:
>Unformatted: