Red Hat DIRECTORY SERVER 2.0 - GATEWAY Manuel d'utilisateur télécharger pdf (Page 72)

Chapter 9. Delegated control

tells of its origins; it was used to set the access rights for a directory tree. It is, however,

a fully generic delegated conﬁguration, not just delegated access control.

The default ﬁle name used, .htaccess, also reﬂects its history as a delegated access

control mechanism. It is also traditionally a “dot ﬁle” to hide it from the index listings.

It’s far better to list the ﬁle name in a IndexIgnore statement and to give it a plain ﬁle

name so the conventional Unix utilities will actually show you it’s there.

So we could copy the contents of the <Directory /var/www/CHEESE/games>

block to /var/www/CHEESE/games/configuration and the

contents of the <Directory /var/www/CHEESE/bestiary> block to

/var/www/CHEESE/bestiary/configuration.

IndexIgnore "#*#" "*~" "configuration"

AccessFileName configuration

ServerName cheese.dept.cam.ac.uk

DocumentRoot /var/www/CHEESE

CustomLog logs/cheese_log clr

</VirtualHost>

Figure 9-6. httpd.conf: Delegated control

Options -Indexes

Figure 9-7. /var/www/CHEESE/games/configuration

DirectoryIndex main.html index.html

Figure 9-8. /var/www/CHEESE/bestiary/configuration

This puts the control of the ﬁles in the hands of the people who have access to the

directories.

However, there may be certain properties that you don’t want the users messing with.

To this end there is limited support for restricting what the users can override with

their delegated conﬁgurations. This is controlled via the AllowOverride command.

This rather unsatisfactory command allows the controllers of httpd.conf to stop the

Options command being used in the AccessFileName ﬁles, but not to specify which

options can and can’t be set. It can specify what you can do with IndexOptions but

not whether or not you can enable/disable indexes at all. It has many limitations.

Simple uses of AllowOverride

AllowOverride None

The delegated conﬁguration ﬁles aren’t even read. Their content is entirely ig-

nored.

AllowOverride All

Any command that is syntactically legal in the delegated conﬁguration ﬁle is

allowed to have effect.

AllowOverride Options

The delegated conﬁguration ﬁle is allowed to run the Options command. There

is no mechanism to control which of its arguments are permitted.

1 2 ... 67 68 69 70 71 72 73 74 75 76 77 ... 95 96

Pas de commentaire

Red Hat DIRECTORY SERVER 2.0 - GATEWAY Manuel d'utilisateur Page 72