From: barnboy%trilobyte.net <>
Date: Fri, 4 Apr 2008 11:46:00 +0000 (+0000)
Subject: Added bit about needing proper <Directory> permissions in order
X-Git-Tag: bugzilla-3.1.3~241
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e710660935b0a694612250c4da8b37394a16f853;p=thirdparty%2Fbugzilla.git

Added bit about needing proper <Directory> permissions in order
for .htaccess to function.  See bug 97668.
---

diff --git a/docs/en/xml/installation.xml b/docs/en/xml/installation.xml
index 37d339e937..6c2aeb39ef 100644
--- a/docs/en/xml/installation.xml
+++ b/docs/en/xml/installation.xml
@@ -1,4 +1,4 @@
-<!-- <!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook V4.1//EN"> -->
+<!-- <!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"> -->
 
   <chapter id="installation" xreflabel="Bugzilla Installation">
     <title>Installation</title>
@@ -1203,6 +1203,37 @@ bash# ./checksetup.pl
 	</note>
 	
       </para>
+
+      <para>
+	The default .htaccess file may not provide adequate access
+	restrictions, depending on your web server configuration.
+	Be sure to check the &lt;Directory&gt; entries for your
+	Bugzilla directory so that the <filename>.htaccess</filename>
+	file is allowed to override web server defaults.  For instance,
+	let's assume your installation of Bugzilla is installed to 
+	<filename>/usr/local/bugzilla</filename>.  You should have
+	this &lt;Directory&gt; entry in your <filename>httpd.conf</filename>
+	file:
+      </para>
+
+      <para>
+	<programlisting>
+<![CDATA[
+<Directory /usr/local/bugzilla/>
+  Options +FollowSymLinks +Indexes +Includes +ExecCGI
+  AllowOverride All
+</Directory>
+]]>
+	</programlisting>
+      </para>
+
+      <para>
+	The important part above is <quote>AllowOverride All</quote>.
+	Without that, the <filename>.htaccess</filename> file created by 
+	<filename>checksetup.pl</filename> will not have sufficient
+	permissions to protect your Bugzilla installation.
+      </para>
+
       <para>
 	If you are using Internet Information Server or other web
 	server which does not observe <filename>.htaccess</filename>