I provide shared web-hosting for my customers. PHP works with fast-cgi, ftp access is also no problem. But how do I enable web-dav for my customers? Every customer has its own uid and gid. Apache uses for webdav its own uid/gid.
2 Answers
There is some explanation about this in the mod_dav
FAQ. The proposed options are:
Try setting some auth directives in your location section:
eg.
<Location /webshare/>
DAV On
AuthType Basic
AuthName "Editing Restricted"
AuthUserFile /home/httpd/vhosts/XXXXXXX.com/.DAVlogin
<LimitExcept GET HEAD OPTIONS>
Require user wbuser
</LimitExcept>
</Location>
That will ensure that anyone trying to see the files will have to supply credentials. You'll have to set the dav directory so apache's gid can see it though, but no-one should be able to view files without authenticating with the directories .DAVlogin file, which will only contain passwords for that site's user.