Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: neutral (asf.osuosl.org: local policy)
Message-ID: <439E0342.1040109@rowe-clan.net>
Date: Mon, 12 Dec 2005 15:09:54 -0800
From: "William A. Rowe, Jr." <wrowe@rowe-clan.net>
User-Agent: Mozilla Thunderbird 1.0.7-1.1.fc3 (X11/20050929)
MIME-Version: 1.0
To: users@httpd.apache.org
References: <010e01c5ff04$7fde3bf0$3200000a@ANGELO>
In-Reply-To: <010e01c5ff04$7fde3bf0$3200000a@ANGELO>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] Windows ACL Wishes

Web users != Local machine users.  And in fact, it's somewhat dangerous
to do so.  That said, you might look up mod_auth_sspi.  I found a reference
over here; http://www.deadbeef.com/index.php/mod_auth_sspi


Tatham Oddie (Fuel Advance) wrote:
> Hi all,
> 
> I'm trying to setup an Apache 2.0 server that just acts as a simple,
> read-only, access-anywhere interface to some of our internal folders.
> 
> We are running Apache 2.0.54 on a Windows Server 2003 machine, which is also
> a domain controller.
> 
> I have the virtual root working well.
> I have the directory listings working well.
> I have SSPI authentication against our Windows 2003 domain working well.
> 
> However, Apache always accesses the folder from the account that is running
> under rendering Windows ACLs useless.
> 
> Is there any way that either:
> 
> - the server can impersonate the authenticated user (like IIS can)
> 
> Or
> 
> - the server can check the Windows ACLs
> 
> 
> Any help on this is greatly appreciated. Thank you in advance.
> 
> 
> Thanks,
> 
> Tatham Oddie
> Fuel Advance - Ignite Your Idea
> www.fueladvance.com
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
> .
> 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org