I am running a CentOS file server bound to an IPA domain (IPA master is a different machine). I have successfully configured Apache with Kerberized WebDAV on the file server and I am able to login using Kerberos credentials.
The problem is that upon connection using a client, the files cannot be written to or read unless ownership is set to
apache (the group can be something else).
I have an issue with this because I am trying to use WebDAV alongside other protocols to provide access to the same folder (i.e., SFTP/SMB/NFS + WebDAV). Therefore, I would like to retain IPA domain user ownership if possible.
Does anyone know whether this is possible, or how this is handled when WebDAV provides access on top of other protocols?
This is my
DavLockDB /var/www/html/DavLock <VirtualHost *:80> ServerAdmin webmaster@localhost DocumentRoot /var/www/html/webdav/ ErrorLog /var/log/httpd/error.log CustomLog /var/log/httpd/access.log combined Alias /webdav /var/www/html/webdav <Directory /var/www/html/webdav> DAV On AuthType Kerberos AuthName "Kerberos Login" KrbMethodK5Passwd On KrbAuthRealms REALM.COM KrbSaveCredentials on Krb5KeyTab /etc/httpd/conf.d/krb5.keytab KrbServiceName HTTP Require valid-user </Directory> </VirtualHost>
So by way of example, the folder
webdav should be simultaneously accessible using protocols other than WebDAV and able to take on user/group ownership other than