A simple list of requirements for Server 3.5.
Update: Server 3.5 has been released (1 Nov 2005) a little later than I'd like, but we got many other things done, too (RPMs, our software in Fedora Core Extras, Server 4 started and working). The
data source protections outlined above should be folded into the Server 4 project's requirements. --
JamesGallagher - 06 Nov 2005
What: Server 3.5 is an interim release of the OPeNDAP server being made to enhance security and provide more streamlined code packaging and install methods. Some of its code will be superseded by Server4, but that won't be out until Dec 2005 or Jan 2006.
- Remove all executables other than nph-dods from a CGI bin directory. Store the OPeNDAP 'helpers' in a separate directory that Apache cannot access. Done
- Change asciival, et c., so that they access files directory, without using Apache. Done.
- Reorganize the code so it's easier to build. Done.
- Add use of .htaccess, et c., files to nph-dods so it does not have to rely on Apache for access control. Skip this since Server4 is moving along nicely.
Non-functional requirements:
- Rewrite docs. Done.
- Ensure the server does not contain any security holes. Done.
Information from users:
--
JamesGallagher - 04 May 2005