Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-24 Thread Todd Lewis
If you are running with SELinux enabled, try disabling SELinux and see what happens. I know Apache on Fedora Core 4 out of the box won't follow symlinks in AFS. You can make it do that, but you have to convince it you really want to. Disabling it is just for testing to see if that's the issue.

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-23 Thread Ken Hornstein
I mean, it seems to me to be such an obvious thing to do that I don't even know why it would surprise you. What he said. --Ken ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-23 Thread Suman Kansakar
Thank you all for your suggestions. After fiddling around with it a little bit and checking for all the suggested fixes, I realize that my problem is more of my Apache 2.0 installation problem than AFS authentication at this point. I do have the FollowSymLinks option set on my configuration,

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread Lars Schimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Suman Kansakar wrote: Does anybody have any experience with using an AFS directory as a virtual directory of an Apache server running on Linux? If yes, could you give me some pointers on making this work? Just for the sake of trying, I created a

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread Todd M. Lewis
If you're running Apache on Fedore Core 4 and SELinux is enabled, Apache won't be able to see anything in AFS. The easiest solution is to disable SELinux, but then you don't get any of SELinux's protections. Alternatively, you can use audit2why to find out what it is about your SELinux

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread David Bear
On Tue, Nov 22, 2005 at 12:39:50AM -0600, Suman Kansakar wrote: Does anybody have any experience with using an AFS directory as a virtual directory of an Apache server running on Linux? If yes, could you give me some pointers on making this work? Just for the sake of trying, I created a

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread zeroguy
On Tue, 22 Nov 2005 11:01:55 +0100 Frank Burkhardt [EMAIL PROTECTED] wrote: Currently I use a skript refreshing the token for apache's UID at a regular basis ( su - www-data make_token_from_keytab apache.keytab ) but I'm going to put Apache in a PAG ASAP. We just altered our apache init

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread Russ Allbery
zeroguy [EMAIL PROTECTED] writes: Frank Burkhardt [EMAIL PROTECTED] wrote: Currently I use a skript refreshing the token for apache's UID at a regular basis ( su - www-data make_token_from_keytab apache.keytab ) but I'm going to put Apache in a PAG ASAP. We just altered our apache init

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread Jim Rees
Those of you who are running apache authenticated to afs, I'm just curious... why? ___ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread Mitch Collinsworth
On Tue, 22 Nov 2005, Jim Rees wrote: Those of you who are running apache authenticated to afs, I'm just curious... why? Generally it's either because you want to allow the server to write into afs or because you have a secure site that needs better than an IP ACL to protect it's data. As

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread Russ Allbery
Jim Rees [EMAIL PROTECTED] writes: Those of you who are running apache authenticated to afs, I'm just curious... why? I'm very unsure how to answer that question. First try: Because unauthenticated access to AFS means either using IP-based ACLs, which haven no encryption and have to be

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-22 Thread zeroguy
On Tue, 22 Nov 2005 18:56:27 -0500 Jim Rees [EMAIL PROTECTED] wrote: Those of you who are running apache authenticated to afs, I'm just curious... why? So you can have users edit their files accessible to the web, and not need to have access to the web server, maybe? So you can have web data

[OpenAFS] AFS and Apache Virtual Directory

2005-11-21 Thread Suman Kansakar
Does anybody have any experience with using an AFS directory as a virtual directory of an Apache server running on Linux? If yes, could you give me some pointers on making this work? Just for the sake of trying, I created a symlink inside the /var/www/html directory that points to the AFS

Re: [OpenAFS] AFS and Apache Virtual Directory

2005-11-21 Thread Chris Huebsch
On Tue, 22 Nov 2005, Suman Kansakar wrote: Just for the sake of trying, I created a symlink inside the /var/www/html directory that points to the AFS directory. Is FollowSymlinks enabled in your apache config? Can you access the directory as apache user? Is the ACL correct? Chris -- Chris