Re: [gentoo-user] which type of access to a webserver?

2003-11-27 Thread Matthias F. Brandstetter
-- quoting Norbert Kamenicky -- Matthias F. Brandstetter wrote: Hi all, I have a question to all of you: What do you think, which would be the best, ie. most secure access to a webserver, so that users can update their sites? Use jail (chrooted environment) + ssh

Re: [gentoo-user] which type of access to a webserver?

2003-11-09 Thread Norbert Kamenicky
Matthias F. Brandstetter wrote: Hi all, I have a question to all of you: What do you think, which would be the best, ie. most secure access to a webserver, so that users can update their sites? Use jail (chrooted environment) + ssh emerge jail openssh - snip - noro -- [EMAIL

Re: [gentoo-user] which type of access to a webserver?

2003-11-08 Thread Matthias F. Brandstetter
-- quoting Daniel Wood -- What about WEBDAV on over https? Lock it down by 'Require User' or by IP or by any other apache authentication scheme? You can even use apache 'ALIAS' to create locations to directories which are not strictly speaking under your docroot. Everything

[gentoo-user] which type of access to a webserver?

2003-11-05 Thread Matthias F. Brandstetter
Hi all, I have a question to all of you: What do you think, which would be the best, ie. most secure access to a webserver, so that users can update their sites? To be more specific: I can't allow ssh login for most of this users for several reasons, that's why I set /bin/false as login shell

Re: [gentoo-user] which type of access to a webserver?

2003-11-05 Thread SN
- From: Matthias F. Brandstetter [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 05, 2003 9:03 PM Subject: [gentoo-user] which type of access to a webserver? Hi all, I have a question to all of you: What do you think, which would be the best, ie. most secure access

Re: [gentoo-user] which type of access to a webserver?

2003-11-05 Thread Matthias F. Brandstetter
-- quoting SN -- First SSH would be the best and most secure solution, you setup Apache so that each user has his site in his homedir, and set the chroot for each user is his home directory, they can update their site easily with scp through ssh or with a windows scp client

Re: [gentoo-user] which type of access to a webserver?

2003-11-05 Thread Daniel Wood
What about WEBDAV on over https? Lock it down by 'Require User' or by IP or by any other apache authentication scheme? You can even use apache 'ALIAS' to create locations to directories which are not strictly speaking under your docroot. Everything runs under http/s and thus would avoid