-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Bjoern, On 5/21/16 5:08 PM, Bjoern Voigt wrote: > I am using Apache as a web and proxy server, but I am unhappy with > Apache as a WebDAV file server. > > I am missing a good file permission or ACL configuration in Apache > mod_dav. > > My wishlist: > > * "good/flexible" permission control (important) * stable and > secure (important) * Apache >= 2.4 based or an Apache alternative > (important) * permission control delegable to some users (nice to > have) * compatibility with Samba and local users (nice to have) > > The Apache path-based access control with directives like > > <Directory "/home/dav/user1"> <LimitExcept PROPFIND OPTIONS> > require user user1 </LimitExcept> > > <Limit PROPFIND OPTIONS> require group allusers </Limit> > </Directory> > > is inflexible, even in small user groups. > > Do you know good alternatives? (Please do not suggest Apache < 2.4 > alternatives. Some good projects have stopped development and are > incompatible with Apache 2.4. Apache alternatives are welcome > too.) mod_dav + mod_auth_ldap + LDAP server? We use this internally and have scripts to take a somewhat simple permission-configuration (e.g. /foo can be read by group foo and writable by group foowriters) and produce httpd.conf-style files with <Directory>, <Location>, etc. directives for those rules. - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJXQlAzAAoJEBzwKT+lPKRY13gP/jP9doBi2ca0jN5ShWbKd59K +zCbf40wPn/HPnE7WbxN+TmzMtlYeQBSeDuj9YkRHGATMfMoVgJ94CK1uWLtXmBL /2HWfgZcB/CBDJsj4rYr5rD1DT2Z+GZZtHsXLnC+ySokCw0zSetTAz9LxWxtPv9z VpL2/W2GM3THLYk47hAUQnLV8puHTtHGPubugHWDW3lPhY8FJjfS/PFMNktSKLz5 O4Ysxe1nk9JwxHx4WU4W/FoboH7wT8Rrph3lRejabpRXdqFhm6z2caK/a8lTysOe FzevFLtFAI6Jqafrnew4moGBaK5LTPIerYB+vzjyhBk/Drbq87TI0IWXK2dBe3Ug gYWb2OekFcGN8rOu5/f9aIiLhJkArM5zK7d4wHaVYZuWmu4aWKngbwu5/lq8g5au oWOu+r7s2rsvAJg7jWjOJkHNPFvsjwjpX8N68borcK6ke2Ojw805gj29KDrQLq9k Yt8koS6CMhUXLaMlqB+v9bYkBErUH1jW4LryQW8jXSagN0I+hOLRZT3xB5exWmfC PvwKVQFhU8N9NFS6/csjMZHSmVa/i3Q8rQDldWT54CqUIFeq7X3W5s5T3KJtHnkx ntL1HiO6AdiEABmdBZDZ2eJbMiNmhLDWnALvQ2ZAd5mwb/a1TZlJR08odtwds4gg pYaFHWZpvjF1LtIan4Do =UNgs -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|