Re: policy routing

2001-02-20 Thread Fraser Campbell

Cenk Hasirlioglu <[EMAIL PROTECTED]> writes:

> Packets are sending by dialup terminals (at the and of the
> FIGURE below).  Cisco routers on the way have their own
> different "default gateway"s but "next-hop" policies sends
> packets to linux.  Also linux sends packets to 7206
> (212.174.112.18, top of the FIGURE) by iproute settings. 
> 7206 can distribute local packets but it cannot send other
> packets to Internet.

Are you sure that the configuration of the 7206 would let it forward packets
from the other network?  Perhaps it only knows about it's attached network 
(212.174.112/?) and it is refusing to let out packets whose source address is
from the 212.174.232.0/24 network?

Your situation sounds a little more complicated than mine.  I have a single
firewall with a private IP DMZ.  Real IPs from each of the attached networks
are assigned to the firewall, ports are forwarded as needed and the ip rules
dictate that traffic from a given internal server be masqueraded as a
specific IP and routed out a specific gateway.  In all cases the default
route is a single hop.

-- 
fraser campbell <[EMAIL PROTECTED]>  starnix inc.
tollfree: (905) 771-0017thornhill, ontario, canada
http://www.starnix.com/ professional linux services & products


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Napster Cache?

2001-02-20 Thread Robert Davidson

Hi All,

Does anyone know if there is a napster cache daemon around the place?

Cya's
Robert Davidson.




Napster Cache?

2001-02-20 Thread Robert Davidson


Hi All,

Does anyone know if there is a napster cache daemon around the place?

Cya's
Robert Davidson.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: syslog

2001-02-20 Thread Tamas TEVESZ
On Tue, 20 Feb 2001, Kevin wrote:

 >   I've got a logging server that all my other servers log to.  Is
 >   there a way to get syslog to log each host to its own file, ie
 >   syslog.mail syslog.www etc?  I thought I saw something along these
 >   lines before but I don't see it in the archives.  Thanks.

no. syslog-ng is here for that.

-- 
[-]
So, you're a Ph.D. Just don't touch anything.




Re: Boot procedure on old SPARCs

2001-02-20 Thread Tamas TEVESZ
On Tue, 20 Feb 2001, Guenter Millahn wrote:

[sorry for the previous one]

 > 1. Can anybody send me a pointer to document/URL where is explained
 >the Old SPARCstation diskless boot sequence in detail (explanations
 >here are also welcome ;-)

there used to be one at http://geog.ubc.ca/s_linux.html. hm it
apparently points to ultralinux.org now, and you find what you need at
http://www.ultralinux.org/faq.html, section `booting'. i did use an lx
following this info.

 > 3. Are the Bootproms of the old SPARCs able to generate bootp requests
 >and to process bootp replies or is RARP/TFTP the only way to map MAC
 >to IP address for these machines and boot 'em up?

iirc (and i may as well not as it was several years ago..) using lx
rarp was the way to go.

-- 
[-]
So, you're a Ph.D. Just don't touch anything.




Re: Boot procedure on old SPARCs

2001-02-20 Thread Tamas TEVESZ
On Tue, 20 Feb 2001, Guenter Millahn wrote:

 > I want to re-animate them as Desktopsthem using Debian.
 > 
 > The Boot/Rootserver is a  Sun E450 running Solaris8. I want to  set up
 > a DHCP server for easier maintainance of my computers.
 > 
 > And here are my questions:
 > 1. Can anybody send me a pointer to document/URL where is explained
 >the Old SPARCstation diskless boot sequence in detail (explanations
 >here are also welcome ;-)
 > 2. Is it enough to install the Solaris8 DHCP Server Software on the E450
 >or do I need any of rarpd and tftpd?
 > 3. Are the Bootproms of the old SPARCs able to generate bootp requests
 >and to process bootp replies or is RARP/TFTP the only way to map MAC
 >to IP address for these machines and boot 'em up?
 > 
 > Thanks a lot for your time
 > Guenter
 > 

-- 
[-]
So, you're a Ph.D. Just don't touch anything.




Re: virtual pop login

2001-02-20 Thread Jeremy C. Reed
On Tue, 20 Feb 2001, Matt Fair wrote:

> Linuxconf gives these users ids and stores the information in
> /etc/vmail/passwd.virtualhostname, /etc/vmail/alias.virtualhostname, and
> /etc/vmail/shaddow.virtualhostname.
> I believe the user is to login with for example netscape or some other email
> client, the server would recognize the user by its username and domain.  So

Oh. So they are not real Unix logins -- just POP3 (or maybe IMAP).

> you can have a user [EMAIL PROTECTED] and [EMAIL PROTECTED], both have login 
> joe
> but are two separate email accounts.
> In order to get this to work, I need to have the system look up those other
> passwd, alias, and shadow files.  I don't know how to set that up.

You need to have a POP3 (and/or IMAP) server that will do this.

I don't use Linuxconf so I don't exactly understand what you need. But I
do use a POP3 that can supposedly work with Linuxconf.

> > When a user logs in to check their email I would like to have it check
> > /etc/passwd and /etc/aliases, and  if the user/password isn't in their
> > it will look in the /etc/vmail/passwd.VIRTUALHOST  and
> > /etc/vmail/aliases.VIRTUALHOST files.

Except that is checks the virtual passwd file first.

Look at: http://www.ndn.net/perl/minorfish/gnu-pop3d-list/2000/06/12 and
http://www.reedmedia.net/projects/virtualmail/.

  Jeremy C. Reed

 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/





Re: virtual pop login

2001-02-20 Thread Matt Fair
Linuxconf gives these users ids and stores the information in
/etc/vmail/passwd.virtualhostname, /etc/vmail/alias.virtualhostname, and
/etc/vmail/shaddow.virtualhostname.
I believe the user is to login with for example netscape or some other email
client, the server would recognize the user by its username and domain.  So
you can have a user [EMAIL PROTECTED] and [EMAIL PROTECTED], both have login joe
but are two separate email accounts.
In order to get this to work, I need to have the system look up those other
passwd, alias, and shadow files.  I don't know how to set that up.
Matt

"Jeremy C. Reed" wrote:

> On Tue, 20 Feb 2001, Matt Fair wrote:
>
> > Has anyone gotten virtual email working with linuxconf and sendmail?
> > My system is set up to sort out the virtual emails, but I cannot log in
> > to the system with the virtual user.
> > Each domain has a passwd file, so it looks like when I login, it doesn't
> > look in those files.
> > When a user logs in to check their email I would like to have it check
> > /etc/passwd and /etc/aliases, and  if the user/password isn't in their
> > it will look in the /etc/vmail/passwd.VIRTUALHOST  and
> > /etc/vmail/aliases.VIRTUALHOST files.
>
> This sounds interesting. When you say "login" do you mean by ssh or
> telnet, for example?
>
> I am curious, how does the server (or login program) know which passwd
> files to use?
>
> Is this with PAM?
>
> I am guessing, but maybe these "/etc/vmail/ users are mail-only users;
> maybe they are not real Unix users (no UID), so they can't log in.
>
>   Jeremy C. Reed
> 
>  BSD software, documentation, resources, news...
>  http://bsd.reedmedia.net/




Re: virtual pop login

2001-02-20 Thread Jeremy C. Reed
On Tue, 20 Feb 2001, Matt Fair wrote:

> Has anyone gotten virtual email working with linuxconf and sendmail?
> My system is set up to sort out the virtual emails, but I cannot log in
> to the system with the virtual user.
> Each domain has a passwd file, so it looks like when I login, it doesn't
> look in those files.
> When a user logs in to check their email I would like to have it check
> /etc/passwd and /etc/aliases, and  if the user/password isn't in their
> it will look in the /etc/vmail/passwd.VIRTUALHOST  and
> /etc/vmail/aliases.VIRTUALHOST files.

This sounds interesting. When you say "login" do you mean by ssh or
telnet, for example?

I am curious, how does the server (or login program) know which passwd
files to use?

Is this with PAM?

I am guessing, but maybe these "/etc/vmail/ users are mail-only users;
maybe they are not real Unix users (no UID), so they can't log in.

  Jeremy C. Reed

 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/




virtual pop login

2001-02-20 Thread Matt Fair
Has anyone gotten virtual email working with linuxconf and sendmail?
My system is set up to sort out the virtual emails, but I cannot log in
to the system with the virtual user.
Each domain has a passwd file, so it looks like when I login, it doesn't
look in those files.
When a user logs in to check their email I would like to have it check
/etc/passwd and /etc/aliases, and  if the user/password isn't in their
it will look in the /etc/vmail/passwd.VIRTUALHOST  and
/etc/vmail/aliases.VIRTUALHOST files.
I just don't know what to do to get this to work, I have tried
everything I can think of.
Any ideas?
Thanks in advance,
Matt




Re: virtual pop login

2001-02-20 Thread Matt Fair

Linuxconf gives these users ids and stores the information in
/etc/vmail/passwd.virtualhostname, /etc/vmail/alias.virtualhostname, and
/etc/vmail/shaddow.virtualhostname.
I believe the user is to login with for example netscape or some other email
client, the server would recognize the user by its username and domain.  So
you can have a user [EMAIL PROTECTED] and [EMAIL PROTECTED], both have login joe
but are two separate email accounts.
In order to get this to work, I need to have the system look up those other
passwd, alias, and shadow files.  I don't know how to set that up.
Matt

"Jeremy C. Reed" wrote:

> On Tue, 20 Feb 2001, Matt Fair wrote:
>
> > Has anyone gotten virtual email working with linuxconf and sendmail?
> > My system is set up to sort out the virtual emails, but I cannot log in
> > to the system with the virtual user.
> > Each domain has a passwd file, so it looks like when I login, it doesn't
> > look in those files.
> > When a user logs in to check their email I would like to have it check
> > /etc/passwd and /etc/aliases, and  if the user/password isn't in their
> > it will look in the /etc/vmail/passwd.VIRTUALHOST  and
> > /etc/vmail/aliases.VIRTUALHOST files.
>
> This sounds interesting. When you say "login" do you mean by ssh or
> telnet, for example?
>
> I am curious, how does the server (or login program) know which passwd
> files to use?
>
> Is this with PAM?
>
> I am guessing, but maybe these "/etc/vmail/ users are mail-only users;
> maybe they are not real Unix users (no UID), so they can't log in.
>
>   Jeremy C. Reed
> 
>  BSD software, documentation, resources, news...
>  http://bsd.reedmedia.net/


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: syslog

2001-02-20 Thread Tamas TEVESZ

On Tue, 20 Feb 2001, Kevin wrote:

 >   I've got a logging server that all my other servers log to.  Is
 >   there a way to get syslog to log each host to its own file, ie
 >   syslog.mail syslog.www etc?  I thought I saw something along these
 >   lines before but I don't see it in the archives.  Thanks.

no. syslog-ng is here for that.

-- 
[-]
So, you're a Ph.D. Just don't touch anything.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Boot procedure on old SPARCs

2001-02-20 Thread Tamas TEVESZ

On Tue, 20 Feb 2001, Guenter Millahn wrote:

[sorry for the previous one]

 > 1. Can anybody send me a pointer to document/URL where is explained
 >the Old SPARCstation diskless boot sequence in detail (explanations
 >here are also welcome ;-)

there used to be one at http://geog.ubc.ca/s_linux.html. hm it
apparently points to ultralinux.org now, and you find what you need at
http://www.ultralinux.org/faq.html, section `booting'. i did use an lx
following this info.

 > 3. Are the Bootproms of the old SPARCs able to generate bootp requests
 >and to process bootp replies or is RARP/TFTP the only way to map MAC
 >to IP address for these machines and boot 'em up?

iirc (and i may as well not as it was several years ago..) using lx
rarp was the way to go.

-- 
[-]
So, you're a Ph.D. Just don't touch anything.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Boot procedure on old SPARCs

2001-02-20 Thread Tamas TEVESZ

On Tue, 20 Feb 2001, Guenter Millahn wrote:

 > I want to re-animate them as Desktopsthem using Debian.
 > 
 > The Boot/Rootserver is a  Sun E450 running Solaris8. I want to  set up
 > a DHCP server for easier maintainance of my computers.
 > 
 > And here are my questions:
 > 1. Can anybody send me a pointer to document/URL where is explained
 >the Old SPARCstation diskless boot sequence in detail (explanations
 >here are also welcome ;-)
 > 2. Is it enough to install the Solaris8 DHCP Server Software on the E450
 >or do I need any of rarpd and tftpd?
 > 3. Are the Bootproms of the old SPARCs able to generate bootp requests
 >and to process bootp replies or is RARP/TFTP the only way to map MAC
 >to IP address for these machines and boot 'em up?
 > 
 > Thanks a lot for your time
 > Guenter
 > 

-- 
[-]
So, you're a Ph.D. Just don't touch anything.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: virtual pop login

2001-02-20 Thread Jeremy C. Reed

On Tue, 20 Feb 2001, Matt Fair wrote:

> Linuxconf gives these users ids and stores the information in
> /etc/vmail/passwd.virtualhostname, /etc/vmail/alias.virtualhostname, and
> /etc/vmail/shaddow.virtualhostname.
> I believe the user is to login with for example netscape or some other email
> client, the server would recognize the user by its username and domain.  So

Oh. So they are not real Unix logins -- just POP3 (or maybe IMAP).

> you can have a user [EMAIL PROTECTED] and [EMAIL PROTECTED], both have login joe
> but are two separate email accounts.
> In order to get this to work, I need to have the system look up those other
> passwd, alias, and shadow files.  I don't know how to set that up.

You need to have a POP3 (and/or IMAP) server that will do this.

I don't use Linuxconf so I don't exactly understand what you need. But I
do use a POP3 that can supposedly work with Linuxconf.

> > When a user logs in to check their email I would like to have it check
> > /etc/passwd and /etc/aliases, and  if the user/password isn't in their
> > it will look in the /etc/vmail/passwd.VIRTUALHOST  and
> > /etc/vmail/aliases.VIRTUALHOST files.

Except that is checks the virtual passwd file first.

Look at: http://www.ndn.net/perl/minorfish/gnu-pop3d-list/2000/06/12 and
http://www.reedmedia.net/projects/virtualmail/.

  Jeremy C. Reed

 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: virtual pop login

2001-02-20 Thread Jeremy C. Reed

On Tue, 20 Feb 2001, Matt Fair wrote:

> Has anyone gotten virtual email working with linuxconf and sendmail?
> My system is set up to sort out the virtual emails, but I cannot log in
> to the system with the virtual user.
> Each domain has a passwd file, so it looks like when I login, it doesn't
> look in those files.
> When a user logs in to check their email I would like to have it check
> /etc/passwd and /etc/aliases, and  if the user/password isn't in their
> it will look in the /etc/vmail/passwd.VIRTUALHOST  and
> /etc/vmail/aliases.VIRTUALHOST files.

This sounds interesting. When you say "login" do you mean by ssh or
telnet, for example?

I am curious, how does the server (or login program) know which passwd
files to use?

Is this with PAM?

I am guessing, but maybe these "/etc/vmail/ users are mail-only users;
maybe they are not real Unix users (no UID), so they can't log in.

  Jeremy C. Reed

 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




virtual pop login

2001-02-20 Thread Matt Fair

Has anyone gotten virtual email working with linuxconf and sendmail?
My system is set up to sort out the virtual emails, but I cannot log in
to the system with the virtual user.
Each domain has a passwd file, so it looks like when I login, it doesn't
look in those files.
When a user logs in to check their email I would like to have it check
/etc/passwd and /etc/aliases, and  if the user/password isn't in their
it will look in the /etc/vmail/passwd.VIRTUALHOST  and
/etc/vmail/aliases.VIRTUALHOST files.
I just don't know what to do to get this to work, I have tried
everything I can think of.
Any ideas?
Thanks in advance,
Matt


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




syslog

2001-02-20 Thread Kevin

  I've got a logging server that all my other servers log to.  Is
  there a way to get syslog to log each host to its own file, ie
  syslog.mail syslog.www etc?  I thought I saw something along these
  lines before but I don't see it in the archives.  Thanks.

-- 
Kevin - [EMAIL PROTECTED]





Boot procedure on old SPARCs

2001-02-20 Thread Guenter Millahn
Dear Linux'ers,

I have some old diskless SPARCstations of 4c and 4m series (SLC, LC, LX).
I want to re-animate them as Desktopsthem using Debian.

The Boot/Rootserver is a  Sun E450 running Solaris8. I want to  set up
a DHCP server for easier maintainance of my computers.

And here are my questions:
1. Can anybody send me a pointer to document/URL where is explained
   the Old SPARCstation diskless boot sequence in detail (explanations
   here are also welcome ;-)
2. Is it enough to install the Solaris8 DHCP Server Software on the E450
   or do I need any of rarpd and tftpd?
3. Are the Bootproms of the old SPARCs able to generate bootp requests
   and to process bootp replies or is RARP/TFTP the only way to map MAC
   to IP address for these machines and boot 'em up?

Thanks a lot for your time
Guenter
-- 
Dipl.-Ing. Guenter Millahn Brandenburg University of Technology
Systems, Network & DB AdminCS Dept / DB & IS Research Group
Voice: +49 (355) 69-2272/2700  P.O. Box: 10 13 44
Fax:   +49 (355) 69-2766   D-03013 Cottbus  GERMANY

"The real world is still far away from be led ad absurdum by the virtual
one."(Hal Faber, newsreel "What happened, what will be", 08/13/2000)




Re: htaccess failure

2001-02-20 Thread Martin WHEELER
Spoke too damn' soon.

Reboot; and the ability to react correctly to .htaccess files
disappears.

I have a gut feeling this behaviour is linked to MySQL
authorisations; and/or PHP (4.0.3).  How, I have  no idea.
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[1] [EMAIL PROTECTED]   http://www.startext.co.uk/

 - Share your knowledge. It's one way to achieve immortality. -




Re: htaccess failure

2001-02-20 Thread Martin WHEELER
> On Tue, 20 Feb 2001, Eric Jennings wrote:
> 
> > I *believe* you need to "AllowOverride AuthConfig" if you wish to use
> > .htaccess files within the /var/www directory to authenticate users.
> > I may be wrong, but give it a shot.
> 
> Sadly, you were wrong.  

Actually, you weren't  :)

Turning "AllowOverride AuthConfig" on caused Apache to barf 
unexpectedly, which in turn produced an intelligent message in the error
log.  (Worryingly, I hadn't been getting anything at all in the logs
previous to that.)

Turns out that I have legacy directives for xbithack set in _some_ of my
.htaccess files; but not all.

Removing these from all .htaccess files, and adding the AllowOverride
AuthConfig directive to my doc root  in access.conf has now
solved the problem.

> Other than regularly updating the system, I don't know what I've changed
> since it used to work :)

The need for the xbithack directive for SSIs must have been negated in
an update somewhere along the line; but I've no idea when.
Nothing gave me any warning.

Thanks for all help offered via the list though.
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[1] [EMAIL PROTECTED]   http://www.startext.co.uk/

 - Share your knowledge. It's one way to achieve immortality. -




syslog

2001-02-20 Thread Kevin


  I've got a logging server that all my other servers log to.  Is
  there a way to get syslog to log each host to its own file, ie
  syslog.mail syslog.www etc?  I thought I saw something along these
  lines before but I don't see it in the archives.  Thanks.

-- 
Kevin - [EMAIL PROTECTED]



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Boot procedure on old SPARCs

2001-02-20 Thread Guenter Millahn

Dear Linux'ers,

I have some old diskless SPARCstations of 4c and 4m series (SLC, LC, LX).
I want to re-animate them as Desktopsthem using Debian.

The Boot/Rootserver is a  Sun E450 running Solaris8. I want to  set up
a DHCP server for easier maintainance of my computers.

And here are my questions:
1. Can anybody send me a pointer to document/URL where is explained
   the Old SPARCstation diskless boot sequence in detail (explanations
   here are also welcome ;-)
2. Is it enough to install the Solaris8 DHCP Server Software on the E450
   or do I need any of rarpd and tftpd?
3. Are the Bootproms of the old SPARCs able to generate bootp requests
   and to process bootp replies or is RARP/TFTP the only way to map MAC
   to IP address for these machines and boot 'em up?

Thanks a lot for your time
Guenter
-- 
Dipl.-Ing. Guenter Millahn Brandenburg University of Technology
Systems, Network & DB AdminCS Dept / DB & IS Research Group
Voice: +49 (355) 69-2272/2700  P.O. Box: 10 13 44
Fax:   +49 (355) 69-2766   D-03013 Cottbus  GERMANY

"The real world is still far away from be led ad absurdum by the virtual
one."(Hal Faber, newsreel "What happened, what will be", 08/13/2000)


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: htaccess failure

2001-02-20 Thread Martin WHEELER

> On Tue, 20 Feb 2001, Eric Jennings wrote:
> 
> > I *believe* you need to "AllowOverride AuthConfig" if you wish to use
> > .htaccess files within the /var/www directory to authenticate users.
> > I may be wrong, but give it a shot.
> 
> Sadly, you were wrong.  

Actually, you weren't  :)

Turning "AllowOverride AuthConfig" on caused Apache to barf 
unexpectedly, which in turn produced an intelligent message in the error
log.  (Worryingly, I hadn't been getting anything at all in the logs
previous to that.)

Turns out that I have legacy directives for xbithack set in _some_ of my
.htaccess files; but not all.

Removing these from all .htaccess files, and adding the AllowOverride
AuthConfig directive to my doc root  in access.conf has now
solved the problem.

> Other than regularly updating the system, I don't know what I've changed
> since it used to work :)

The need for the xbithack directive for SSIs must have been negated in
an update somewhere along the line; but I've no idea when.
Nothing gave me any warning.

Thanks for all help offered via the list though.
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[1] [EMAIL PROTECTED]   http://www.startext.co.uk/

 - Share your knowledge. It's one way to achieve immortality. -


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: htaccess failure

2001-02-20 Thread Martin WHEELER

Spoke too damn' soon.

Reboot; and the ability to react correctly to .htaccess files
disappears.

I have a gut feeling this behaviour is linked to MySQL
authorisations; and/or PHP (4.0.3).  How, I have  no idea.
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[1] [EMAIL PROTECTED]   http://www.startext.co.uk/

 - Share your knowledge. It's one way to achieve immortality. -


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: htaccess failure

2001-02-20 Thread Keith G. Murphy
Mervyn Jack wrote:
> 
> I had some similar problem and although I can't remember exactly what was, 
> but it
> was something to do with the order of the commands. It had me fooled for a 
> while.
> 
> Here's an example of a .htaccess file that works.
> This one also allows access to a certain subnet of IP's without having to 
> enter a
> password.
> (replace xxx.xxx.xxx.xxx with relavent IP's)
> 
> Deny from all
> AuthName "Staff only"
> Allow from xxx.xxx.xxx.xxx/27
> AuthType Basic
> AuthUserFile /etc/staffonly
> Require valid-user
> Satisfy any
> 
Continuing on the theme of "ones that work":

AuthType Basic
AuthName OurStuff
AuthUserFile OurStuff
require valid-user

Note that the absolute path on AuthUserFile is not required; apache
seems to know to look for it in /etc/apache.

Also, is your AuthUserFile readable by www-data?




Re: htaccess failure

2001-02-20 Thread Bart-Jan Vrielink
On Mon, 19 Feb 2001, Martin WHEELER wrote:

> To my knowledge, protecting a directory using the .htaccess file method
> has always worked without a hitch for me on my local machine (Debian
> 2.2r2 + proposed-updates) -- but has "suddenly" stopped functioning.
> 
>  [EMAIL PROTECTED]:~$ apache -v
>  Server version: Apache/1.3.9 (Unix) Debian/GNU
>  Server built:   Jan 26 2001 00:10:13
> 
> is what I'm running (stable hasn't progressed to 1.3.12 yet); the
> access.conf file contains:
> 
>  
>   Options Includes Indexes FollowSymLinks
>   AllowOverride None

The line above means "ignore any .htaccess files in this directory". I
don't think you'll want that :)
I think you'll want that line to read
AllowOverride AuthConfig

>   order allow,deny
>   allow from all
>  
> 
> and:
> 
>  # Do not allow retrieval of the override files, a standard security
>  measure.
>  
>   order allow,deny
>   deny from all
>  
> 
> srm.conf contains:
> 
>  # AccessFileName: The name of the file to look for in each directory
>  # for access control information.
>  AccessFileName .htaccess
>  
> but no way will Apache stop and ask for authentication when any user
> goes into any directory containing a valid .htaccess file pointing to a 
> valid htusers/.htpasswd data file.

-- 
Tot ziens,

Bart-Jan




Re: htaccess failure

2001-02-20 Thread Keith G. Murphy

Mervyn Jack wrote:
> 
> I had some similar problem and although I can't remember exactly what was, but it
> was something to do with the order of the commands. It had me fooled for a while.
> 
> Here's an example of a .htaccess file that works.
> This one also allows access to a certain subnet of IP's without having to enter a
> password.
> (replace xxx.xxx.xxx.xxx with relavent IP's)
> 
> Deny from all
> AuthName "Staff only"
> Allow from xxx.xxx.xxx.xxx/27
> AuthType Basic
> AuthUserFile /etc/staffonly
> Require valid-user
> Satisfy any
> 
Continuing on the theme of "ones that work":

AuthType Basic
AuthName OurStuff
AuthUserFile OurStuff
require valid-user

Note that the absolute path on AuthUserFile is not required; apache
seems to know to look for it in /etc/apache.

Also, is your AuthUserFile readable by www-data?


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: htaccess failure

2001-02-20 Thread Bart-Jan Vrielink

On Mon, 19 Feb 2001, Martin WHEELER wrote:

> To my knowledge, protecting a directory using the .htaccess file method
> has always worked without a hitch for me on my local machine (Debian
> 2.2r2 + proposed-updates) -- but has "suddenly" stopped functioning.
> 
>  mwheeler@startext:~$ apache -v
>  Server version: Apache/1.3.9 (Unix) Debian/GNU
>  Server built:   Jan 26 2001 00:10:13
> 
> is what I'm running (stable hasn't progressed to 1.3.12 yet); the
> access.conf file contains:
> 
>  
>   Options Includes Indexes FollowSymLinks
>   AllowOverride None

The line above means "ignore any .htaccess files in this directory". I
don't think you'll want that :)
I think you'll want that line to read
AllowOverride AuthConfig

>   order allow,deny
>   allow from all
>  
> 
> and:
> 
>  # Do not allow retrieval of the override files, a standard security
>  measure.
>  
>   order allow,deny
>   deny from all
>  
> 
> srm.conf contains:
> 
>  # AccessFileName: The name of the file to look for in each directory
>  # for access control information.
>  AccessFileName .htaccess
>  
> but no way will Apache stop and ask for authentication when any user
> goes into any directory containing a valid .htaccess file pointing to a 
> valid htusers/.htpasswd data file.

-- 
Tot ziens,

Bart-Jan


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]