0

I am running a CentOS file server bound to an IPA domain (IPA master is a different machine). I have successfully configured Apache with Kerberized WebDAV on the file server and I am able to login using Kerberos credentials.

The problem is that upon connection using a client, the files cannot be written to or read unless ownership is set to apache (the group can be something else).

I have an issue with this because I am trying to use WebDAV alongside other protocols to provide access to the same folder (i.e., SFTP/SMB/NFS + WebDAV). Therefore, I would like to retain IPA domain user ownership if possible.

Does anyone know whether this is possible, or how this is handled when WebDAV provides access on top of other protocols?

This is my webdav.conf file:

DavLockDB /var/www/html/DavLock
<VirtualHost *:80>
        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html/webdav/
    ErrorLog /var/log/httpd/error.log
    CustomLog /var/log/httpd/access.log combined
        Alias /webdav /var/www/html/webdav
        <Directory /var/www/html/webdav>
            DAV On
            AuthType Kerberos
            AuthName "Kerberos Login"
            KrbMethodK5Passwd On
            KrbAuthRealms REALM.COM
            KrbSaveCredentials on
            Krb5KeyTab /etc/httpd/conf.d/krb5.keytab
            KrbServiceName HTTP
            Require valid-user
        </Directory>
</VirtualHost>

So by way of example, the folder webdav should be simultaneously accessible using protocols other than WebDAV and able to take on user/group ownership other than apache.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.