Groups > comp.os.linux.networking > #2203

Re: How to connect existing configuration with WebDAV?

From	ein <ein@no.spam>
Newsgroups	comp.os.linux.networking
Subject	Re: How to connect existing configuration with WebDAV?
Date	2013-06-13 06:06 +0200
Organization	ATMAN - ATM S.A.
Message-ID	<kpbggb$pul$1@node2.news.atman.pl> (permalink)
References	<kp7urd$aq8$1@node2.news.atman.pl> <kp9qqk$kpj$1@dont-email.me>

Show all headers | View raw

Jonathan N. Little wrote:
> ein wrote:
>> Hello,
>> 
>> I have machine which servers files to users (LDAP) via CIFS and
>> SFTP (Samba,SSH). I'm using Ext4 ACLs to restrict access to some
>> directory hierarchy. Everything works just fine. I'm wondering if
>> it's possible to configure some web server for example Apache to
>> serve this hierarchy via WebDAV. ACL restrictions is most
>> important in this setup and I'd like to not duplicate it, because
>> there're very complicated and complex. I want to give users a
>> possibility to exchange files via HTTP(S) without need for
>> setting VPN (I'm using OpenVPN right now for that). Main problem
>> i encounter is that after successful user authentication against
>> OpenLDAP user doesn't have access to files. Reason is prosaic -
>> UID and GID used by Apache. :)
>> 
>> I tired: Davenport WebDAV-CIFS (SMB) Gateway - seems to be
>> outdated and not supported now (development stopped in 2007),
>> because I have problem with access using newer web browsers.
>> 
>> I'm thinking about: http://webdavcgi.sourceforge.net/ - this
>> looks promising, but documentation and instructions are so
>> chaotic that I'm not sure that it's a right way to do what I
>> want...
>> 
>> Please advise.
>> 
> Apache's mod_dav? I use it for a locally hosted calender server for
> LAN.

Of course it was the first choice. As I wrote before I can't do that,
because of permissions. When user connects to WebDAV share Apache uses
own UID and GID for file access. Extended ACLs became useless in that
case. I can change owner of my files, but if i do that everyone will
have access to everything or nobody to nothing. My permissions changes
in deeper level of described directory hierarchy and they are
different for each user or group I've created. How samba operates in
that case? After positive user auth. Samba create another 'smbd'
process with connected user UID and GID numbers, and OS (system
functions in example fopen) can take advantage from extended access
control lists.

Thanks.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

How to connect existing configuration with WebDAV? ein <ein@no.spam> - 2013-06-11 21:46 +0200
  Re: How to connect existing configuration with WebDAV? "Jonathan N. Little" <lws4art@gmail.com> - 2013-06-12 08:55 -0400
    Re: How to connect existing configuration with WebDAV? ein <ein@no.spam> - 2013-06-13 06:06 +0200

csiph-web