CentOS 5 :: WebDAV - Limiting Access To Subfolders?
Dec 13, 2010
On our web server I want to have a WebDAV folder and I would like customers to be able to log in with MySQL authentication from our customers database (this I have set up with no problems and it works fine). HOWEVER, I want each customer to have their own subfolder and, having logged in with access to the main WebDAV folder, I want each customer ONLY to be able to access their own subfolder(s). I don't mind them seeing other subfolders exist but obviously I don't want them to have access to other customers subfolders.
OK, of course I could achieve this by adding new WebDAV locations to the httpd.conf for every customer but with a large number of customers httpd.conf will become very large and messy. I have tried applying further restrictions by putting an .httaccess file in each subfolder but that doesn't work - indeed the presence of a .htaccess file oddly prevents users from seeing any other files in the subfolder but has no effect on the access.
I installed Samba on CentOS, create a principal share called "public" . I want to populate this share with subfolders, and to grant access rights to specific folders for specific users. The content of "public" will be visible for all Samba users, but they will have read/write access only to the specified subfolders based on my security policy. I need the best way for doing this kind of stuff...
I'm having a problem with my webdav share. I have a secure webdav folder that gets accessed via a non-standard port and requires basic authentication. I can connect and interact with it fine via cadaver. However, when I try to connect from nautilus, it says "Access was denied." To make it even stranger, sometimes I can click on the folder in nautilus (it still mounts) and access it. Sometimes not (just repeats the error message and won't show me the contents). I may not even un-mount it, but just look at other folder, then click it again and be able to access it, but again - only rarely.
I asked a friend to try connecting from his windows vista computer and it would not work. It would not work from my windows XP virtual computer either. However, it mounts and works just find from my work computer (also Windows XP).
So it seems to be a 50/50 chance that the drive will mount on any given computer/system and work. Do anyone know what the problem may be? I'm guessing user permissions, but I can't figure out what.
I've made sure the webdav folder is owned by www-data and www-data has read access to the password file as well.
When I try connecting from nautilus, I get this in the log file:
Code:
Here is one of the (many) sites I've tried looking at: [url]
I have a WebDAV folder (complete folder hierarchy in fact) currently managed by SAP's KM module. Long story short: it's in Windows, it's slow, I hate it.
I want to migrate the hole tree to my brand new Ubuntu Server 10.04 with a functional WebDAV server I just finished configuring. It connects to LDAP for user authentication, it's fast, it works like a charm.
Do you guys know any way I can transfer/migrate files from the Windows WebDAV to to Ubuntu WebDAV? The only thing that is important to keep is file security properties. Both WebDAVs have the same user database: our corporate Active Directory.
My server listens to POP3/IMAP requests. Some users have configured their mailers with high checking frequencies, say once every minute, such that the system logs are full of entries with no significance at all.I'd like to ask if there is a way to limit the per IP frequency of POP3/IMAP access ?I'm using "xinetd" to wrap the "ipop3d" and "imapd" which come with the Alpine package.
I just created new user account, but the new user is able to access all the directories structure (including other's home directories).I'd like to limit the user to access ONLY his home directory (and nothing "above"). How do I do this?
I have a server with a /data/ directory, everything in the /data/ folder has "-rwxrw-rw- 1 root root" permissions.all works fine, multiple users are mounting this over a lan and everyone is able to modify files. However I would like to be able to access the /data/music/ directory from the internet.
Is it possible to configure sshfs to only accept logins from a user restricted to reading the /data/music directory, or would it be possible to tunnel nfs over ssh in such a way that everyone on the lan 192.168.0.xxx has unrestricted access to the data directory, but something coming from outside only has read access to the music directory. Although is one were tunneling nfs over ssh, the nfs mount request would appear to come from the server itself. The router is at 192.168.0.1 and the server is at 192.168.0.3.This Seems very much like what I want to do, however I'm having a bit of trouble getting this to work well with other users mounting with full rights over the lan too.
I was looking for a way to protect my samba server for limiting access to certain domains.Can I use the parameterhosts allow = example.comor something like that or is there another way to do the job for domains
Ubuntu and am using the 64bit version of Ubuntu 10.04.Now I can access the folders in my home folder through the places GUI, but I can't access them in the terminal. When I begin typing in the terminal and press tab it does not autocomplete, and typing the directory manually says that there is no such file or directory, even though when I type dir or ls they are clearly there.
I am using samba t share my files.I am sharing /media/MEDIA folder. it is a ntfs partition mounted with ntfs-3g with write/read access from linux.I can see and browse my shares and also create files in the root of this partition, ie /media/MEDIA, but in its subfolders i do not have write permissions.
another interesting thing is that i have permission to create directory and delete files everywhere and in any folder, subfolder but when trying to create files i get not enough free disk space error.by the way i dont know if this config file is correct, i find as template in internet.
I've installed webdav on my server and I can access it fine through cadaver. However, when I try to access it via nautilus, I get Forbidden. It is NOT secured (SSL). When I try to access it via firefox, I get an error since I DO NOT have "Options Indexes" in my apache config file. If I add this option in, then I can browse the root direction and webdav folder via firefox, but still not from nautilus. what other information you need. I've googled and searched the forums for awhile, but not "solutions" I found have worked for me. I want the webdav folder to just be a single folder within the direction, so this is how I have my config file setup:
[Code]....
As a side-note...when I included "Option Indexes", it allowed me to view the passwd.dav file from firefox!That doesn't seem very good...
How can I mount a webdav location to my 11.3 pc at home so I can access the same files that I do via my ipad while I am on the move.
I have an mobile-me account therefore I use idisk.
I would like idisk mounted so it appears as a folder on my desktop at home, so I can edit the same documents without having to upload and download using a web browser.
is this possible?
the idisk url is https://idisk.me.com/YourMemberName/
I have a WebDav (davfs2) mounted in /home/myuser/mydavmountI would like to prevent updatedb from indexing the content of the mounted drive. I tried editing /etc/updatedb.conf and setting the following:
Code: PRUNEPATHS="/tmp /var/spool /media /home/myuser/mydavmount" also tried these:
I use davfs2 to mount a Webdav drive at startup. It mounts correctly and I have read access to all files my account gives me access to. One big problem though: I can't create of modify any file. I know it is not a user account problem because everything works well when I mount the drive in Windows 7 using WebDrive.
Here's the entry in /etc/fstab to automatically mount the drive:
The Webdav is hosted on a local SAP Portal server (if anyone is familiar with this).
I also tried to use Cadaver. It connects and reads perfectly. But when I try to create a file, I get a "409 Conflict" error, even the file has never existed on the server before.
I configure named and stumble upon the following problem: named is serious about user rights, every config file named uses should be named:named. I set rights to named:named as follows, but they get changed to root:named when I restart named as root. The same thing happens with SELinux context. This results in access denied type errors.
I am using Debian GNU/Linux 7.8 with Linux 3.16.0-0 (x86_64) from backports and XFCE. I am using nautilus for the default file manager because thunar is not able to connect to server. My problem is that when i want to upload a file from iceweasel, the bookmarked webdav location on nautilus is not shown. This mean that iceweasel doesn't use nautilus? If so how to change this? Nautilus is checked in the default programs.
I've recently installed CentOS 5, because I needed a good OS to run VMware Server. Just a heads up, I'm not very familiar with RH/CentOS distros, I usually use Arch Linux. My VMware install went fine, config is standard settings. Now I'm trying to access the VMware Infrastructure Web Access using port 8222 (http) and 8333 (https), but it's a no go. I'm connecting from another machine on the LAN, as the CentOS box is headless. I restarted the vmware services, and they seem to be launching fine. I don't know much about VMware though. I verified with netstat and ports 8222 and 8333 are listening.
I want to setup a SSL encrypted WebDAV share on my OpenSUSE 11.4 server that is accessible from the internet. Everything is working fine when using Windows XP or Linux clients, but a connection with Windows 7 is not possible ("the selected folder is not valid").
I already searched for a solution to this problem I tried several setups: - with and without encryption - with Basic authentication - with Digest authentication - without authentication
I did not have success so far. Is there any solution to this (except not using Windows 7)? Or can anyone confirm that this should be working (and maybe my configuration is messed up)?
I'm trying to make ecryptfs work on my GMX Mediacenter share (a service quite popular in Germany). I followed the instructions to include my mediacenter share in my fstab which works pretty well. So now I'm able to connect via Secure WebDAV as a regular user (no sudo needed). When connected, I try to create a ecryptfs transparent layer so everything saved remotely is seamlessly encrypted. Although no error message is thrown during creation, the process fails. When entering the remote share (cd mediacenter) and performing any remote command such as "ls -la", the following error message is thrown:
i am using ubuntu 10.10. I had installed apache2 and subversion, using webdav, as described in the unbuntu wiki. SVN was working as expected, I could commit files, etc. I then installed php5 and mysql, as described in the ubuntu wiki, and i now get the following on apache restart:
apache2: Syntax error on line 203 of /etc/apache2/apache2.conf: Syntax error on line 2 of /etc/apache2/mods-enabled/dav_svn.load: Cannot load /usr/lib/apache2/modules/mod_dav_svn.so into server: /usr/lib/libgssapi_krb5.so.2: symbol krb5_authdata_context_copy, version krb5_3_MIT not defined in file libkrb5.so.3 with link time reference Action 'configtest' failed.
I am using Safesync from Trendmicro to backup my data. Since some time I am experiencing heavy problems. Normally my Backup should look like this: But when I am mounting it with WebDAV, it is looking different:
Code: cdrewing@christian-desktop:~$ sudo mount -t davfs http://dav.trendmicro.safesync.com /media/Safesync [sudo] password for cdrewing: Gib bitte den Benutzernamen f�r den Server http://dav.trendmicro.safesync.com an; wenn du keinen angeben willst, dr�cke Return.
[Code]...
Note: When I am mounting Safesync with Nautilus, everything is functional and ok. But I need my command line access because I want to use rsync. A workaround could be to access the resource via the nautilus mount. Where can I find this via the command line?
My workplace recently switched to Active Directory for our netdisk space (I work at a University in the US). The "only way" (recommended) by our IT department is to use a cifs protocol. I've had absolutely no luck with that at all. However, it turns out that there is secure WebDAV protocol setup which works well on campus. If I'm off campus I have to connect via a VPN connection; our school uses Cisco Anyconnect 2.3.0254. It works well for me to connect to a printer, etc on campus.
Here's my problem: I can't connect to my netdisk space from off-campus using the Secure WebDAV bookmark that was working oncampus, even when I am connected via the VPN connection. I am using UFW. Is there a port I need to open up, or am I missing something else?
I have 2 ISP where give me IP Public with ISP A (/29) and ISP B (/28). So, I connect this two ISP to unmanaged switch. And from that switch, I take one cable connected to eth0 on the server. (Note : My server have 2 dev ethernet, eth0 and eth1). eth1 will go to the Switch which will go to the LAN.
My Question is : 1. Is this possible to make bandwith control on the gateway server with mode separating International bandwith and local bandwith (my country bandwith)? ie, for my Mail Server I will give the "intl bandwith" only 512 kpbs and for local bandwith with 1Mbps. What a software can I use for this model ?
2. Which model I should to used, with NAT or with Bridging router? That's all for now..
You may have seen some other posts by me about my final year college project. Im implementing a web based network management website. Iv got a lot of the functionality working at this stage but one part is allocating bandwidth.
Iv got an eircom 3mb broadband connection and I want to be able to split this between users. At the moment I only have my desktop and laptop on the network. Im looking for advice on how i can allocate bandwidth with iptables and/or the tc tool in ubuntu.
My website is on an ubuntu virtual machine and written in php. Whatever about running the iptables and tc commands from php I still need to figure out the actual commands i need to use in the first place.
FTP servers I use frequently have imposed a simultaneous connections limit, usually 5-10 at the time. It was no problem under Windows, since Windows artificially limits allowed FTP connections to ~10 as far as I know. But it is a problem under Linux very much since I cannot find how to limit them :/ So far I used these clients: Native FTP client (Places -> Connect to FTP server). No apparent way to limit connections.
FileZilla. Under particular server settings you can limit number of simultaneous connections. Also you can do that globally in Edit -> Preferences -> Transfers. Problem is, it doesn't work, I still keep getting the 530 Sorry the maximum number of clients (10) for this user are already connected. And netstat shows quite a few simultaneous FileZilla connections no matter that I limited them to 1 both in global and local settings.
NCFTPPUT. 10 successful uploads and hi 530. Total Commander under Wine. Same. NetBeans IDE integrated ftp. Same. Some other crapy FTP clients which names I already forgot. Same. OS is Ubuntu 10.04 So, is there any way to force any of these FTP clients to use less than 10 concurrent connections?
