httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Axel-Stéphane SMORGRAV <Axel-Stephane.SMORG...@europe.adp.com>
Subject RE: [users@httpd] start/stop apache & change apache configuration
Date Wed, 12 Jan 2005 10:47:07 GMT
You need to use a combination of sudo and file access rights.

Keep in mind that a user who changes the apache configuration will need to be able to verify
the validity of the modifications. He can limit this verification to a syntactic check of
the configuration using "httpd -t -D DUMP_VHOSTS -f <config file>", but he cannot make
sure that his configuration actually works until the instance has been restarted.

Another way to work is having two servers: one for pre-production and one for production.
All configuration changes and testing are done on the pre-production server, and once the
configuration has been validated, it is moved to the production server. The pre-production
server can then also be used to reproduce problems occuring in production.

This is the approach that we are using.

-ascs 

-----Message d'origine-----
De : Subramani, GnanaShekar (GE Healthcare, non-ge) [mailto:GnanaShekar.Subramani@med.ge.com]

Envoyé : mardi 11 janvier 2005 22:31
À : users@httpd.apache.org
Objet : [users@httpd] start/stop apache & change apache configuration

Hi,

I am asked to implement the following for security reasons.
1. A unix user who has the privileges to start/stop apache with read access to its configuration
file.
2. A unix user who could change apache configuration but lacks privilege to start/stop apache.

Please provide inputs on how to do this.

Thanks & Regards,
-GnanaShekar-

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message