Re: apache2 ftp password

2011-01-29 Thread Waqqas Dadabhoy
I think you should mention the name of the ftp server software you are
using. If you are using ftp to upload files to /var/www, I don't think
it will have anything to do with Apache (as far as security or upload
management is concerned).

If have not installed ftp server software yet, a quick search on
Debian Packages led me to proftpd. If you wish to use SSL to protect
the password, then you might want to look at ftpd-ssl.

On Fri, Jan 28, 2011 at 11:53 PM, Russell L. Harris
rlhar...@broadcaster.org wrote:
 For the purpose of web site development and testing, I installed
 apache2 as a local http server on another machine in the LAN.

 The default web page directory is /var/www .  Of course, this
 directory is owned by root.

 I would like to use an ftp client such as ncftp or lftp to upload web
 pages to the local server, just as I would upload pages to the server
 of a commercial hosting outfit.  But I do not wish to use the root
 password for this purpose, even within the protected environment of
 the LAN.

 Where in the apache configuration may this password be set?  And is
 there any difference between the account/password for the apache
 administrator and the account/password of non-anonymous apache users?

 I have not encountered this question before, inasmuch as the web
 hosting outfit simply provides me with an administrator password.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/AANLkTi=dohtuwaq_9i+nr6tcxdojdx4wc-vmbpsrv...@mail.gmail.com



Re: apache2 ftp password

2011-01-29 Thread Camaleón
On Fri, 28 Jan 2011 23:53:22 +, Russell L. Harris wrote:

 For the purpose of web site development and testing, I installed apache2
 as a local http server on another machine in the LAN.
 
 The default web page directory is /var/www .  Of course, this directory
 is owned by root.
 
 I would like to use an ftp client such as ncftp or lftp to upload web
 pages to the local server, just as I would upload pages to the server of
 a commercial hosting outfit.  But I do not wish to use the root password
 for this purpose, even within the protected environment of the LAN.

(...)

Apache is not the program where to look, but the ftp server, as Waqqas 
already said.

You can instruct ftp server to use system users or virtual users, with no 
shell access at all. After that, you will have to disable anonymous 
logins, chroot your ftp users to their web upload folder (i.e., under /
var/www/site1.com/) and play with local_umask and 
file_open_mode (name of these values may vary, those are for Vsftpd) 
parameters to get the desired behaviour.

To avoid sending text clear login information (username and password) you 
can also add SSL/TLS (FTPS).

Greetings,

-- 
Camaleón


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/pan.2011.01.29.18.28...@gmail.com



Re: apache2 ftp password

2011-01-28 Thread Wayne Topa

On 01/28/2011 06:53 PM, Russell L. Harris wrote:

For the purpose of web site development and testing, I installed
apache2 as a local http server on another machine in the LAN.

The default web page directory is /var/www .  Of course, this
directory is owned by root.

I would like to use an ftp client such as ncftp or lftp to upload web
pages to the local server, just as I would upload pages to the server
of a commercial hosting outfit.  But I do not wish to use the root
password for this purpose, even within the protected environment of
the LAN.

Where in the apache configuration may this password be set?  And is
there any difference between the account/password for the apache
administrator and the account/password of non-anonymous apache users?

I have not encountered this question before, inasmuch as the web
hosting outfit simply provides me with an administrator password.

RLH



Maybe apt-cache search htaccess would help?

Wayne


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/4d4365e5.90...@gmail.com