From: guitarlynn [mailto:[EMAIL PROTECTED]] Sent: Wed 6/26/2002 5:37 PM
>I won't release anything that is not secured via authentication. >This would cause more problems for the project than what the >ease of administration would be worth IMHO. I completly agree! I'm an idealist in this endevor. I wish to see things move forward with out compromising the basics that make LEAF what it is. >In curiousity, being >that you are a little further along with your project, would you mind >checking out "stunnel" for authentication possibility. Someone is >using it, but I haven't researched it (yet). A quick look would indicate >that it could (should) be compiled statically. The dependancies look >huge though. You may be mistaking my enthusiasm for progress! I have done nothing but fiddle with the index.html and a few cgi scripts. That said, I'm willing to dive in as my time permits and help figure this stuff out! >http://www.stunnel.org/ I checked it out and it looks like it may be overkill. It needs OpenSSL or the like which on it's own would take care of this problem (or so it seems). Here is a quote from Charles S "If you've got the space, sh-httpd (or pretty much *ANY* inted launched service, web-server or otherwise) should be able to run via SSL using the wrapper programs provided with OpenSSL." Charles Steinkuehler The problem with OpenSSL is size (I'm sure there are others, this is just the first I see). I was hoping to keep things small. Jnilo's OpenSSL lrp is over 400K! I'm living in Bering land and find I like the option of keeping to one floppy. This weblet piece and others I'm interested in may push things to a CD version of Bering though. This would be OK, but I just wanted to try first at the floppy thing. I also want to set up VPN and there may be some way to reuse pieces between them. >Well, my thought was to create and CLI config script or menu program >instead of forcing direct edits with CLI. Something similar to the >Install-scripts I was playing with: This is where I get to plead ignorance! :-p What is CLI? did you mean CGI? Or am I just missing a new acronym. >http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/devel/guitarlynn/scripts.tar.gz I'll definitly check them out! >Have you had to make any concessions to get the conf files to write >because of permissions? I've been expecting to have problems with the >UID weblet runs with. If so, I imagine that you could still use the >weblet's UID with 744 permissions. Any thoughts-experiences??? I have yet to make any attempts to send info back through the weblet so I have not run into these issues. The first thing I will be trying though, are some links to bring my interfaces up and down. My setup primarily uses a DSL connection for the office but I have set it up with an external modem for emergency backup. I'm currently working on finnishing some scripts to automate the failover process, but for now it is manual. Simply an ifdown eth0 followed by ifup ppp0 I'll keep you posted on the results. Are you primarily working with DCD Lynn? Richard Amerman ------------------------------------------------------- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ _______________________________________________ Leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
