Jim Owens wrote:
The Apache documentation certainly recommends against granting network access to the local System account. I don't know why MS thought to add that bit -- maybe they were just being thorough. As for my other remark, it was a bit confused -- sorry. From experience I know that I can't get a resource from a file server using an httpprotocol. That is, <a href="http://other_machine/directory/myfile.txt";>My file</a> won't work unless other_machine has an http service running.Likewise, <a href="file://other_machine/directory/myfile.txt">My file</a> won't work, at least not for a W3C compliant browser, because the file: protocol is not supposed to allow access over a network. This is where I think IE bends the rules.
When I said use the UNC path, I meant in the <Directory> block.As per my example yesterday, this should use the / 's (forward slashes) rather than the traditional MS \ 's (back slashes)
so that could look like <Directory "//server1/topshare"> Then using an alias Alias /topshare //server1/topshareThat could be used as http://example.com/topshare (if your site was example.com) This then accesses the network directory as the service account that Apache runs as. Not as the user logged in.
I have tried this, and it works well.
Error messages taken from a browser are not very helpful in troubleshooting your problem further. To obtain the best suport you need to get the error from the errorlog. This will apply for all issues you have with Apache.I haven't tried either formulation lately though. To answer your earlier question about the error message I was seeing, itappears in the browser, and it reads (for example):
"The requested URL /library/Documentation/Doc_home.html was not found on this server." -----Original Message-----From: William A. Rowe, Jr. [mailto:wrowe@xxxxxxxxxxxxx] Sent: June 7, 2007 22:49To: users@xxxxxxxxxxxxxxxx Subject: Re: Apache, Windows XP, and mapped drives Jim Owens wrote:"However, drive letters that are mapped from a service that is runningunder the local System account are visible to all logon sessions." WTH? That's nonsense since MS strongly recommends against EVERY granting the LocalSystem account any network privileges at all.Microsoft also recommends using a UNC, but in my case this doesn'twork. The resources I'm mapping are on a file server, not an http server, and when I request them directly from the file server using the http protocol, I don't get them. Not in Firefox anyway -- I think IE might bend the rules here. Huh?Alias /myuncpath "//server1.example.com/folder1/folder2/youruncpath" <Directory "//server1.example.com/folder1/folder2/youruncpath"... doesn't refer to an http server! server1.example.com, or simply server1, is the windows share machine, and folder1 is the share on server1. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|