Administrace komentářů

Ahoj,
na serveru mam Ubuntu 12.04 a potrebuju udelat pro uzivatele WebDAV. Potrebuju mit moznost pouzivat vestaveneho klienta ve Windows, jinak pouzivam SFTP, ale ten Win neumi.

OwnCloud a jeho PHP implementaci WeDAVu nechci. Rad byh pouzil "cisty Apache", nebo jiny webserver.

Muj aktualni konfigurak virtualhostu:

# cat /etc/apache2/sites-available/data-example-net 
<VirtualHost *:80>
	ServerName data.example.net
	Redirect permanent / https://data.example.net/
	ErrorLog /var/log/apache2/error_data-example-net.log
	LogLevel error
	CustomLog /var/log/apache2/access_data-example-net.log combined
</VirtualHost>
<VirtualHost *:443>
	ServerName data.example.net
	DocumentRoot /home
	ErrorLog /var/log/apache2/error_data-example-net.log
	LogLevel error
	CustomLog /var/log/apache2/access_data-example-net.log combined
	Options Indexes FollowSymLinks
	ServerSignature off

	#disable PHP in all sub-directories
	RemoveHandler .php .phtml .php3
	RemoveType .php .phtml .php3
	php_flag engine off

	Options +Indexes
	IndexOptions -IconsAreLinks NameWidth=* FancyIndexing FoldersFirst 
	IndexOrderDefault Ascending Name

	SSLEngine on
	SSLCertificateFile /etc/ssl/certs/data.example.net.crt
	SSLCertificateKeyFile /etc/ssl/private/data.example.net.key
	SSLProtocol all -SSLv2 -SSLv3
	SSLHonorCipherOrder On
	SSLCipherSuite EECDH+AES:EDH+AES:-SHA1:EECDH+RC4:EDH+RC4:RC4-SHA:EECDH+AES256:EDH+AES256:AES256-SHA:!aNULL:!eNULL:!EXP:!LOW:!MD5

	<IfModule mod_authnz_external.c>
		AddExternalAuth pwauth /usr/sbin/pwauth
		SetExternalAuthMethod pwauth pipe
	</IfModule>

	<Location "/">		
		SSLRequireSSL #allow only HTTPS, not HTTP		
		SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128 #allows export browsers to upgrade to stronger encryption
		Dav On
		Order allow,deny
		allow from all
		AuthType Basic
		AuthName "WebDAV data.example.net"
		AuthBasicProvider external
		AuthExternal pwauth
		Require valid-user
	</Location>
</VirtualHost>

Mam uzivatele user1 a user2 (v realnu jich je vic). Uzivatele jsou ve skupine www-data (pod ni jede Apache):

$ ls -lh /home/
celkem 36K
drwxrwx--- 77 user1   www-data  12K pro  6 02:00 user1
drwxrwx--- 29 user2   www-data 4,0K lis 26 20:54 user2
...
$

Adresare uzivatelu (rekurzivne) maji prava 770 (drwxrwx---) a soubory 660 (-rw-rw----). V /etc/login.defs mam nastavene UMASK 007, coz odpovida prave d770 a f660.

Pokud vlezu na adresu http://data.example.net/, prohlizec me presmeruje na https verzi a zepta se na heslo uzivatele. Funguje prihlasovani s overovanim pres PAM.

A ted nastava problem - po prihlaseni pod libovolnym povolenym uzivatelem na http://data.example.net/ vidim jmena vsech uzivatelu (to mi nevadi), ale muzu pristupovat k datum vsech uzivatelu - to mi vadi.

Muze mi nekdo poradit, jak dovolit uzivateli lezt pouze do sveho /home/$user? Zavirat je do /home/$user/neco nechci. Idealne mit na http://data.example.net/ rovnou svuj /home/$user. Jde to nejak? Mne to proad nejde nastavit