Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 12 Jan 2005 11:47:07 +0100
Message-ID: <43F6AE2C59CAC94EA7D45EE9103EECB9D713C0@exchange2k301.gaia.fr>
Thread-Topic: [users@httpd] start/stop apache & change apache configuration
Thread-Index: AcT4JJ4pu26EREAySme67tWMCikolwAbbMVg
From: =?iso-8859-1?Q?Axel-St=E9phane__SMORGRAV?=
 <Axel-Stephane.SMORGRAV@europe.adp.com>
To: <users@httpd.apache.org>
Subject: RE: [users@httpd] start/stop apache & change apache configuration

You need to use a combination of sudo and file access rights.

Keep in mind that a user who changes the apache configuration will need =
to be able to verify the validity of the modifications. He can limit =
this verification to a syntactic check of the configuration using "httpd =
-t -D DUMP_VHOSTS -f <config file>", but he cannot make sure that his =
configuration actually works until the instance has been restarted.

Another way to work is having two servers: one for pre-production and =
one for production. All configuration changes and testing are done on =
the pre-production server, and once the configuration has been =
validated, it is moved to the production server. The pre-production =
server can then also be used to reproduce problems occuring in =
production.

This is the approach that we are using.

-ascs=20

-----Message d'origine-----
De : Subramani, GnanaShekar (GE Healthcare, non-ge) =
[mailto:GnanaShekar.Subramani@med.ge.com]=20
Envoy=E9 : mardi 11 janvier 2005 22:31
=C0 : users@httpd.apache.org
Objet : [users@httpd] start/stop apache & change apache configuration

Hi,

I am asked to implement the following for security reasons.
1. A unix user who has the privileges to start/stop apache with read =
access to its configuration file.
2. A unix user who could change apache configuration but lacks privilege =
to start/stop apache.

Please provide inputs on how to do this.

Thanks & Regards,
-GnanaShekar-

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server =
Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org