Deny some users User Directorys

[axman505]

Hello,

Is there any easy way to deny some users a user html directory?

I was thinking, that the httpd.conf file could call to include a file when it is loading and setting up the userdirectorys options. If the file contained a list of users to deny, i.e.:

Disabled root jim john

this would do the trick, right? Does anyone know of an easier way to configure this?

We might be better of with a list of users to allow, rather than a list to deny. We will be using either LDAP authentication or will be configuring accounts via scripts.

Your input is appreciated. Thanks.

 

[siberian]

Your best bet using ldap is :

http://httpd.apache.org/docs-2.0/mod/mod_auth_ldap.html

mod_auth_ldap

This should give you some control over access.

Other then that you can use your scripts to write a big deny file but that would require an apache HUP since only .htaccess is per transaction and if you put a .htaccess in a dir the user can delete it, removing your restrictions.

 

[axman505]

Will this work with groups as well?

i.e

disable no_html_group

Thanks

 

[siberian]

I have never seen this 'disabled' command and do not see it in the 2.0 Apache docs.

What you could do is :

Require group group-name [group-name] ...
Only users in the named groups can access the resource.

Where group is the name of the group that has access. Add valid users to that group and you'll be set.

 

[siberian]

I actually misspoke- that command will not user your built in OS level groups but you can create groupfiles. Check the docs on it:

http://httpd.apache.org/docs-2.0/mod/core.html#require

 

[axman505]

I understand there is the require method, but how does this help with allowing users to have their own website?

The disabled directive is outline in the docs here:

http://httpd.apache.org/docs-2.0/howto/public_html.html

 

[siberian]

I doubt that will work with groups, try it though and let us know.

I'd go with a require / group rule in this case and then write my setup software to update the group file as required.

 

[axman505]

I have a new delima. We have an AliasMatch setup as follows for user website:

AliasMatch ^/users/([a-zA-Z0-9]+)/?(.*) /home/$1/html/$2

When i tried to disable a test user with the following configuration file entry:

Disabled root test

It only disables access to the test account via:

http://servername.com/~test/

I can still access the test account via:

http://servername.com/users/test

Is there any way to solve this problem?

Thanks.

 

[SirCharles]

Won't .htaccess work for this?

 

[axman505]

SirCharles, what were you thinking could be done in the .htaccess file?