WebDAV Setup: Difference between revisions

From Research
Jump to navigation Jump to search
No edit summary
No edit summary
Line 18: Line 18:
     DAVMinTimeout 600
     DAVMinTimeout 600
   
   
#   so we can ~see~ PHP, rather than interpret/execute
#   so we can ~see~ PHP, rather than interpret/execute
     ForceType text/plain
     ForceType text/plain
     DavDepthInfinity On
     DavDepthInfinity On
     Options Indexes FollowSymLinks MultiViews
     Options Indexes FollowSymLinks MultiViews
   
   
#   don't give an .htaccess any any cred :-)
#   don't give an .htaccess any any cred :-)
     AllowOverride None
     AllowOverride None
     Order allow,deny
     Order allow,deny

Revision as of 14:50, 15 May 2007

Here is a reference-setup, for DAV-enabling a server. This was all placed in the file /etc/apache2/modules.d/45_mod_dav.conf.

<IfDefine DAV>

<IfModule dav_module>
<IfModule dav_fs_module>
<IfModule alias_module>
#<IfModule auth_digest_module>
<IfModule authn_file_module>

DavLockDB "/var/lib/dav/lockdb"

Alias /inferno /var/dav

<IfModule authnz_ldap_module>
<Directory /var/dav>
    Dav On
    DAVMinTimeout 600

#   so we can ~see~ PHP, rather than interpret/execute
    ForceType text/plain
    DavDepthInfinity On
    Options Indexes FollowSymLinks MultiViews

#   don't give an .htaccess any any cred :-)
    AllowOverride None
    Order allow,deny
    Allow from all

     <Limit GET PUT POST DELETE PROPFIND PROPPATCH PROPFETCH MKCOL COPY MOVE LOCK UNLOCK>
         AuthType Basic
         AuthName "Dav - Restricted Access"
         AuthBasicProvider ldap
         AuthLDAPURL ldap://192.168.0.192:389/ou=users,dc=whiterock?uid?one
         AuthLDAPBindDN "cn=Reader,dc=whiterock"
         AuthLDAPBindPassword ultra_secret

# Use only one of the following possible sections.

#        Explicitly list the permitted users, ~after~ authentication has succeeded.
#        Effectively a 2nd gate, at the authourization phase.
#         require ldap-user gordonp

#        There will be times when it's sufficient for an authenticated-user to be
#        authourized and granted access; it they're good in LDAP, they're OK by me.
         AuthzLDAPAuthoritative  off   # authourization will now pass to mod_authz_user
         require valid-user


     </Limit>

</Directory>
</IfModule>


</IfModule>
#</IfModule>
</IfModule>
</IfModule>
</IfModule>


#
# The following directives disable redirects on non-GET requests for
# a directory that does not include the trailing slash.  This fixes a 
# problem with several clients that do not appropriately handle 
# redirects for folders with DAV methods.
#
<IfModule setenvif_module>
BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
BrowserMatch "MS FrontPage" redirect-carefully
BrowserMatch "^WebDrive" redirect-carefully
BrowserMatch "^WebDAVFS/1.[0123]" redirect-carefully
BrowserMatch "^gnome-vfs/1.0" redirect-carefully
BrowserMatch "^XML Spy" redirect-carefully
BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully
</IfModule>



</IfDefine>