questions about setting up users access

External Since: Aug 26, 2003 Posts: 9

Greetings everyone,

I have some questions about setting up and give users access to a httpd
server.

Ok, I have a single apache server (2.0.x) running on linux redhat 9.0,
set the whole linux box up yesterday.

Lets say I want to setup accounts, and give them webpages..

First thought was to create accounts thus make users URL's like this:

<a style='text-decoration: underline;' href="http://www.some_site.com/~some_user/" target="_blank">http://www.some_site.com/~some_user/</a>

according to the httpd.conf, you simple enable:

<IfModule mod_userdir.c>
UserDir public_html
</IfModule>

However, this results in a 403 forbidden error on the users pages.. I
checked the permissions..

/home/some_user/public_html/ is the directory and the permissions are
correct, however, the root directory (/home/<user>) each has there own
access. removing this access will compromise the users data will it not?
How do I give the webserver access without setting these users
directories to world read?

Should I setup Aliases instead? Or Virtual servers for each?? Seams
like it should be easier to use the userdir.c here?

Anyone shed some light on this?

Thanks
-Richard

External Since: Aug 14, 2003 Posts: 47

Richard Ragon wrote:

[...]
> First thought was to create accounts thus make users URL's like this:
>
<font color=purple> > <a style='text-decoration: underline;' href="http://www.some_site.com/~some_user/</font" target="_blank">http://www.some_site.com/~some_user/</font</a>>
>
> according to the httpd.conf, you simple enable:
>
> <IfModule mod_userdir.c>
> UserDir public_html
> </IfModule>
>
> However, this results in a 403 forbidden error on the users pages.. I
> checked the permissions..

Please tell us the (significant) content of ErrorLog.

> /home/some_user/public_html/ is the directory and the permissions are
> correct, however, the root directory (/home/<user>) each has there own
> access. removing this access will compromise the users data will it not?
> How do I give the webserver access without setting these users
> directories to world read? [...]

<a style='text-decoration: underline;' href="http://httpd.apache.org/docs-2.0/mod/mod_access.html#allow" target="_blank">http://httpd.apache.org/docs-2.0/mod/mod_access.html#allow</a>

<DirectoryMatch "^/home/.*/public_html$">
order allow,deny
allow from all
<DirectoryMatch>

If you want to configure the user-access (not host), please read the
documentation about mod_auth.

cc
--
Corrections of my english are welcome.
(please private because here its off-topic)