setting up ACL in Apache Post: 302140091

Sponsored Content

Top Forums UNIX for Dummies Questions & Answers setting up ACL in Apache Post 302140091 by porter on Wednesday 10th of October 2007 04:46:45 PM

10-10-2007

Registered User

Authentication, Authorization, and Access Control

Quote:

How basic authentication works
When a particular resource has been protected using basic authentication, Apache sends a 401 Authentication Required header with the response to the request, in order to notify the client that user credentials must be supplied in order for the resource to be returned as requested.

Upon receiving a 401 response header, the client's browser, if it supports basic authentication, will ask the user to supply a username and password to be sent to the server. If you are using a graphical browser, such as Netscape or Internet Explorer, what you will see is a box which pops up and gives you a place to type in your username and password, to be sent back to the server. If the username is in the approved list, and if the password supplied is correct, the resource will be returned to the client.

Because the HTTP protocol is stateless, each request will be treated in the same way, even though they are from the same client. That is, every resource which is requested from the server will have to supply authentication credentials over again in order to receive the resource.

Quote:

Access control
Authentication by username and password is only part of the story. Frequently you want to let people in based on something other than who they are. Something such as where they are coming from. Restricting access based on something other than the identity of the user is generally referred to as Access Control.

Allow and Deny
The Allow and Deny directives let you allow and deny access based on the host name, or host address, of the machine requesting a document.

Nothing explicitly about email address. I think you will need an explicit logon/password per user.

porter

View Public Profile for porter

Find all posts by porter

10 More Discussions You Might Find Interesting

1. Cybersecurity

setting ACL's

Hi all, How can I set default owning user and default owning group with setfacl on Solaris 2.6 and up ? My idea is, that when a file is created by user x, and the default owning user is y, the ownership is set to y. This option is visible in the filemanager, though not editable. I can't find...

2. UNIX for Dummies Questions & Answers

Setting Last-Modified Bit in Apache

Hi, I have a co-worker that uses javascript code to generate the last-modified date on a file. The problem is our server does not properly send this date so javascript can display it. I know that it is better to use server-side scripting to generate this but she has already put it on multiple...

3. Linux

setting acl on linux

Hi, while setting access control list I am getting error "Operation NOt Supported" Example :user A wants full access on test directory /home/user B/test, I dont want to add in secondary group bcz group has read permission,

4. AIX

setting acl

Hi, I want to know how to set acl in aix via smitty and shell prompt, wheather we needs to install additional packages.

5. Web Development

Problem setting up apache

Hello there, I installed Ajaxterm on my Ubuntu 9.04 machine, and it's running ok if I use : http://localhost:8022/ in my browser. The problem is that I wanted to be able to acces it from somewere else through the internet. I read some instruction and help sites related to this problem, like :...

6. Web Development

First time setting up site on Apache

Hello All, I am relatively new to using Apache, I have recently set it up on Ubuntu. What I'm trying to do is make "/home/yves/MyFirstPHP/MyFirstPHP/HelloWorld.php" accessible through my browser using the URL: The UNIX and Linux Forums - Learn UNIX and Linux from Experts. The tutorials I have...

7. BSD

Setting up Apache/mySQL/PHP in Jail

Server: FreeBSD 7.2-Release Previously I admin a website that uses IP.Board as a forum. It was on a FreeBSD server but there were some issues with some other people on the server so the whole server has been resetup. It is has been set up as a Unix Jail and I was given root access. Apache has...

8. UNIX for Dummies Questions & Answers

Setting up HTTPS in Apache with Linux

I have recently setup a HTTP server using Apache. This was my first install of Apache, so I am very new to it. What I would now like to do is setup HTTPS for my server. Unfortunately, the official Apache 2.2 manual doesn't cover setting up HTTPS, and using Google search engine I have found...

9. Solaris

Is there a difference between setting a user as nologin and setting it as a role?

Trying to figure out the best method of security for oracle user accounts. In Solaris 10 they are set as regular users but have nologin set forcing the dev's to login as themselves and then su to the oracle users. In Solaris11 we have the option of making it a role because RBAC is enabled but...

10. UNIX for Beginners Questions & Answers

Help setting ACL's

Folks, Solaris 10 issue When I add a new directory to a path, I only get the "group@" line in the ACL The parent directory ACL is drwxrws---+ 12 root teama 12 Jul 18 10:31 . owner@:rwxp-DaARWc---:------:allow group@:rwxp-DaARWc--s:fd----:allow ...

LEARN ABOUT MINIX

vop_setacl

VOP_SETACL(9)						   BSD Kernel Developer's Manual					     VOP_SETACL(9)

NAME

     VOP_SETACL -- set the access control list for a vnode

SYNOPSIS

     #include <sys/param.h>
     #include <sys/vnode.h>
     #include <sys/acl.h>

     int
     VOP_SETACL(struct vnode *vp, acl_type_t type, struct acl *aclp, struct ucred *cred, struct thread *td);

DESCRIPTION

     This vnode call may be used to set the access control list (ACL) for a file or directory.

     Its arguments are:

     vp    The vnode of the file or directory.

     type  The type of ACL to set.

     aclp  A pointer to an ACL structure from which to retrieve the ACL data.

     cred  The user credentials to use in authorizing the request.

     td    The thread setting the ACL.

     The aclp pointer may be NULL to indicate that the specified ACL should be deleted.

     The cred pointer may be NULL to indicate that access control checks are not to be performed, if possible.	This cred setting might be used to
     allow the kernel to authorize ACL changes that the active process might not be permitted to make.

     The vnode ACL interface defines the syntax, and not semantics, of file and directory ACL interfaces.  More information about ACL management
     in kernel may be found in acl(9).

LOCKS

     The vnode will be locked on entry and should remain locked on return.

RETURN VALUES

     If the ACL is successfully set, then zero is returned.  Otherwise, an appropriate error code is returned.

ERRORS

     [EINVAL]		The ACL type passed is invalid for this vnode, or the ACL data is invalid.

     [EACCES]		The the caller does not have the appropriate privilege.

     [ENOMEM]		Sufficient memory is not available to fulfill the request.

     [EOPNOTSUPP]	The file system does not support VOP_SETACL().

     [ENOSPC]		The file system is out of space.

     [EROFS]		The file system is read-only.

SEE ALSO

     acl(9), vnode(9), VOP_ACLCHECK(9), VOP_GETACL(9)

AUTHORS

     This manual page was written by Robert Watson.

BSD
								 December 23, 1999							       BSD