Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Errors-To: <wrowe@rowe-clan.net>
Message-Id: <5.2.0.9.2.20030416123458.03208d98@pop3.rowe-clan.net>
Date: Wed, 16 Apr 2003 13:33:20 -0500
To: users@httpd.apache.org
From: "William A. Rowe, Jr." <wrowe@rowe-clan.net>
Cc: users@httpd.apache.org
In-Reply-To: <AF2DD04007F3D511BFBC0003470D638804ED44E5@EX2LUJMOMBX04>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Subject: Re: [users@httpd] Serving according to NTFS permissions

At 04:45 AM 4/16/2003, Eddy.COLLART@cec.eu.int wrote:
>Hi all,
>
>No environment defined, for the sake of simplicity I'd tend to try with a
>Win32 server for this one, especially if NTLM is involved :
>
>Let's say there are documents on the server, and NTFS permissions are set to
>allow only specific users to each document. Does any of you know of any way
>to have Apache enforce the permissions when serving content ?
>
>2. I was wondering if the NTLM authentication might be more appropriate, but
>I still can't figure how security would be enforced at a document level,
>except through some server side cgi that would fulfill requests and do the
>trick.

IIUC, mod_auth_sspi now lets you do user impersonation on Win32.

http://www.syneapps.com/software/mod_auth_sspi/

The module compiled for 2.0.42-.43 should load on any later version of 2.0,
but it appears Tim is busy with other things.  I encourage you to try it though.

Bill 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org