Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-10 Thread Lamar Owen
On Tuesday, August 09, 2011 05:34:52 PM Trey Dockendorf wrote: That will probably be the best option while we move these sites to a CMS. The users are accustomed to using Windows drive letters that are mapped by our AD to access their content, and I'd like to have to leave that intact for

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-10 Thread Craig White
On Tue, 2011-08-09 at 23:03 +0200, Leonard den Ottolander wrote: Hello Craig, On Tue, 2011-08-09 at 08:44 -0700, Craig White wrote: I'm quite sure that if all the files are owned by the 'department_a' group and 'readable' by user apache as I have indicated, - create mask 664 directory

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-10 Thread Always Learning
On Wed, 2011-08-10 at 18:18 -0700, Craig White wrote: For that matter, please explain how if any html directory served by apache (runs as user/group apache/apache)... user/group root/department_group files 0664 directories 1775 are in any way vulnerable to world write access or

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-10 Thread Nguyen Vu Hung
Ngày 09:32 09/08/2011, Trey Dockendorf viết: I'm setting up a shared web server running Apache. If they are OK with svn, why not go for svn+ssh and and and svn update cronjob on httpd side? I presume that human being always makes error, so the reason is that you can track the change and save

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Leonard den Ottolander
On Mon, 2011-08-08 at 19:52 -0700, Craig White wrote: mkdir /var/www/html/department_a chown root:department_a /var/www/html/department_a chmod g+ws /var/www/html/department_a In which case you probably want to add apache to the department_a group. And all users accessing that share of course,

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread m . roth
Trey Dockendorf wrote: I'm setting up a shared web server running Apache. Each web root will belong to a department, which has a corresponding Active Directory group to give access. So far I've got samba working and such, but am having some trouble wrapping my head around the necessary

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Craig White
On Aug 8, 2011, at 11:31 PM, Leonard den Ottolander wrote: On Mon, 2011-08-08 at 19:52 -0700, Craig White wrote: mkdir /var/www/html/department_a chown root:department_a /var/www/html/department_a chmod g+ws /var/www/html/department_a In which case you probably want to add apache to the

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Les Mikesell
On 8/9/2011 10:44 AM, Craig White wrote: There's probably a way to add apache to that group with a configuration on the local machine so it doesn't have to query your ADS/NMB server. Not sure about the details but the docs at http://samba.org/samba/docs/ are invaluable. I'm quite sure

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Trey Dockendorf
On Tue, Aug 9, 2011 at 11:54 AM, Craig White craig.wh...@ttiltd.com wrote: On Aug 9, 2011, at 9:02 AM, Les Mikesell wrote: On 8/9/2011 10:44 AM, Craig White wrote: There's probably a way to add apache to that group with a configuration on the local machine so it doesn't have to query

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread John R Pierce
On 08/09/11 6:33 AM, m.r...@5-cent.us wrote: What I've done, where developers, for example, need to put updated pages in, is to have the directories owned by apache/httpd, but the*group* that they belong to, and make it group writeable. you don't actually want apache/http to own ANY of the

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Les Mikesell
On 8/9/2011 12:32 PM, Trey Dockendorf wrote: Now I have a new requirement passed to me, which is a bit more complicated. How would I allow individual users the ability only to access specific subfolders within that share without them being a part of the department_a group? My initial idea

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Leonard den Ottolander
Hello Craig, On Tue, 2011-08-09 at 08:44 -0700, Craig White wrote: I'm quite sure that if all the files are owned by the 'department_a' group and 'readable' by user apache as I have indicated, - create mask 664 directory mask 775 Perhaps I should have made explicit in my post that I

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Leonard den Ottolander
On Tue, 2011-08-09 at 13:33 -0700, Craig White wrote: The notion of a Macintosh having to resort to Windows protocol to use a Linux server is rather ugly. Heh. If only... I just started a job where I work with a Mac as my desktop. Had it connect to my Fedora 15 netbook via NFS, only to see

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Trey Dockendorf
On Tue, Aug 9, 2011 at 12:56 PM, Les Mikesell lesmikes...@gmail.com wrote: On 8/9/2011 12:32 PM, Trey Dockendorf wrote: Now I have a new requirement passed to me, which is a bit more complicated. How would I allow individual users the ability only to access specific subfolders

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-09 Thread Les Mikesell
On 8/9/2011 4:34 PM, Trey Dockendorf wrote: You could make a separate samba share with different ownership. At some point it might make more sense to use a web-based content manager that understands logins/permissions or perhaps a wiki that permits uploads instead of

Re: [CentOS] Using Samba to share Apache web root, securely

2011-08-08 Thread Craig White
On Mon, 2011-08-08 at 21:32 -0500, Trey Dockendorf wrote: I'm setting up a shared web server running Apache. Each web root will belong to a department, which has a corresponding Active Directory group to give access. So far I've got samba working and such, but am having some trouble wrapping