Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (herse.apache.org: domain of jslive@gmail.com designates
 209.85.132.244 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=Ol7xGN1WBPP8hi8GmmQKLTJWV9LgnmNLUV1C92EU7r+i9FE43g2AjIo3PjI/pcYgIt0DuxngmXF2O27qbWTfhGMsLOYLnjRWilYoJLpukcvcKg/qcI0v+gqTwLVTVI4tWPLTum1qx99MGLRIE92rTdCEVVBJPaFgurtZtCbR5Pg=
Message-ID: <e498c1660705051646w8a7b4d3j740fce9aeed3dc35@mail.gmail.com>
Date: Sat, 5 May 2007 19:46:07 -0400
From: "Joshua Slive" <joshua@slive.ca>
Sender: jslive@gmail.com
To: users@httpd.apache.org
In-Reply-To: <463BA4F5.5080307@gci.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <463BA4F5.5080307@gci.net>
Subject: Re: [users@httpd] URL Rewriting and DAV with Digest Authentication

On 5/4/07, The Gaijin <gaijin@gci.net> wrote:

>
>         <LocationMatch ~*>

Use <Location /~> -- it is more efficient and safer in this case.
>
>         RewriteEngine On
>         RewriteLog /var/log/apache2/rewrite.log
>         RewriteLogLevel 5
>         RewriteCond %{REQUEST_METHOD} ^(PROPFIND|PUT|DELETE)$
>         RewriteRule ^/~[[:alpha:]]+/(.*)$ /~%{LA-U:REMOTE_USER}/$1

Since mod_rewrite uses a sub-request to grab the REMOTE_USER, I'd
guess that the problem is that all subrequests are GET requests, and
therefore unauthenticated. You may be able to get around that problem
by putting the mod_rewrite stuff into a <Directory> section where the
REMOTE_USER may be available directly (and not through a sub-request).

Alternatively, you could leave all regular userdir requests as
unathenticated, and setup a separate directory (say
http://yourhost/edit) where DAV was turned on for editing. Then in
this directory you would transparently map to the correct location:

<Location /edit>
               DAV On
               AuthType Digest
               AuthName homes.gci.net
               AuthUserFile /etc/apache2/user.passwd
</Locatoin>

RewriteCond %{LA-U:REMOTE_USER} (.+)
RewriteRule ^/edit(.*) /home/%1$1

All users would then access files directly under http://yourhost/edit
and get automatically (transparently) redirected to their home
directory.

By the way, I assume you are aware that your users shouldn't be given
any direct (shell) access to the filesystem if you are using mod_dav.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org