[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Fwd: Apache problem



Hi...

> I want to be able to see a users directory if there 
> is no index.html or index.htm in the directory.

Indexing is turned off by default, since allowing others to see the raw
filelist of a directory may be a very bad idea.

You could achieve your goal using Access Control Lists as setup by the
.htaccess file (or files) you create. See the documentation at:
     http://www.apache.org/docs/mod/core.html
and search for .acl, AccessFileName, .htaccess and so on. This will let
you have a very fine level of control.

Easier: if you add a section like this:
      <directory /home/webusers/*>
       Options Indexes
      </directory>
to the end of /etc/httpd/conf/access.conf  (or wherever your access.conf
file is), then you'll be allowing the option of indexing any directory
in he /home/webusers/ path - only if that directory has a public_html
directory that the server will allow at all, that is.

Warnings:

* Am I an expert at this... no.

* If the Document root directory (set in srm.conf) overlaps/includes or
otherwise is connected with the /home/webusers/ path, you could be
setting up a security problem or unintentionally allowing access to
things that should remain private.

* You must also have the permissions on directories setup correctly -
they need, for example, to be "x" (executable) for all (not just
owner/group) in order to be listable, and they need to be "r" (readable)
for all for the same reason.

tom

-- 

tom farrell      <thf pvs k12 nm us>
pojoaque valley schools
santa fe   nm     87501
"Beauty is in the i of the Beholder"
                  (Julia Mandelbrot)



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]