Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #2201 > unrolled thread

How to connect existing configuration with WebDAV?

Back to article view | Back to comp.os.linux.networking

Contents

  How to connect existing configuration with WebDAV? ein <ein@no.spam> - 2013-06-11 21:46 +0200
    Re: How to connect existing configuration with WebDAV? "Jonathan N. Little" <lws4art@gmail.com> - 2013-06-12 08:55 -0400
      Re: How to connect existing configuration with WebDAV? ein <ein@no.spam> - 2013-06-13 06:06 +0200

#2201 — How to connect existing configuration with WebDAV?

Hello,

I have machine which servers files to users (LDAP) via CIFS and SFTP
(Samba,SSH). I'm using Ext4 ACLs to restrict access to some directory
hierarchy. Everything works just fine. I'm wondering if it's possible
to configure some web server for example Apache to serve this
hierarchy via WebDAV. ACL restrictions is most important in this setup
and I'd like to not duplicate it, because there're very complicated
and complex. I want to give users a possibility to exchange files via
HTTP(S) without need for setting VPN (I'm using OpenVPN right now for
that). Main problem i encounter is that after successful user
authentication against OpenLDAP user doesn't have access to files.
Reason is prosaic - UID and GID used by Apache. :)

I tired:
Davenport WebDAV-CIFS (SMB) Gateway - seems to be outdated and not
supported now (development stopped in 2007), because I have problem
with access using newer web browsers.

I'm thinking about:
http://webdavcgi.sourceforge.net/ - this looks promising, but
documentation and instructions are so chaotic that I'm not sure that
it's a right way to do what I want...

Please advise.

[toc] | [next] | [standalone]

#2202

ein wrote:
> Hello,
>
> I have machine which servers files to users (LDAP) via CIFS and SFTP
> (Samba,SSH). I'm using Ext4 ACLs to restrict access to some directory
> hierarchy. Everything works just fine. I'm wondering if it's possible
> to configure some web server for example Apache to serve this
> hierarchy via WebDAV. ACL restrictions is most important in this setup
> and I'd like to not duplicate it, because there're very complicated
> and complex. I want to give users a possibility to exchange files via
> HTTP(S) without need for setting VPN (I'm using OpenVPN right now for
> that). Main problem i encounter is that after successful user
> authentication against OpenLDAP user doesn't have access to files.
> Reason is prosaic - UID and GID used by Apache. :)
>
> I tired:
> Davenport WebDAV-CIFS (SMB) Gateway - seems to be outdated and not
> supported now (development stopped in 2007), because I have problem
> with access using newer web browsers.
>
> I'm thinking about:
> http://webdavcgi.sourceforge.net/ - this looks promising, but
> documentation and instructions are so chaotic that I'm not sure that
> it's a right way to do what I want...
>
> Please advise.
>

Apache's mod_dav? I use it for a locally hosted calender server for LAN.

-- 
Take care,

Jonathan
-------------------
LITTLE WORKS STUDIO
http://www.LittleWorksStudio.com

[toc] | [prev] | [next] | [standalone]

#2203

Jonathan N. Little wrote:
> ein wrote:
>> Hello,
>> 
>> I have machine which servers files to users (LDAP) via CIFS and
>> SFTP (Samba,SSH). I'm using Ext4 ACLs to restrict access to some
>> directory hierarchy. Everything works just fine. I'm wondering if
>> it's possible to configure some web server for example Apache to
>> serve this hierarchy via WebDAV. ACL restrictions is most
>> important in this setup and I'd like to not duplicate it, because
>> there're very complicated and complex. I want to give users a
>> possibility to exchange files via HTTP(S) without need for
>> setting VPN (I'm using OpenVPN right now for that). Main problem
>> i encounter is that after successful user authentication against
>> OpenLDAP user doesn't have access to files. Reason is prosaic -
>> UID and GID used by Apache. :)
>> 
>> I tired: Davenport WebDAV-CIFS (SMB) Gateway - seems to be
>> outdated and not supported now (development stopped in 2007),
>> because I have problem with access using newer web browsers.
>> 
>> I'm thinking about: http://webdavcgi.sourceforge.net/ - this
>> looks promising, but documentation and instructions are so
>> chaotic that I'm not sure that it's a right way to do what I
>> want...
>> 
>> Please advise.
>> 
> Apache's mod_dav? I use it for a locally hosted calender server for
> LAN.

Of course it was the first choice. As I wrote before I can't do that,
because of permissions. When user connects to WebDAV share Apache uses
own UID and GID for file access. Extended ACLs became useless in that
case. I can change owner of my files, but if i do that everyone will
have access to everything or nobody to nothing. My permissions changes
in deeper level of described directory hierarchy and they are
different for each user or group I've created. How samba operates in
that case? After positive user auth. Samba create another 'smbd'
process with connected user UID and GID numbers, and OS (system
functions in example fopen) can take advantage from extended access
control lists.

Thanks.

[toc] | [prev] | [standalone]

Back to top | Article view | comp.os.linux.networking

csiph-web