Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #360976
    acorncom
    Participant

    So, I’ve got a question for you guys. I’m trying to allow selected users to modify files in /Library/WebServer/Documents. And I’d like them to be able to use AFP so they can mount the volume and make the changes directly. And I don’t want every one on the network to be able to see the share, so I’m going to need to turn off Guest Access to that folder. Which means that I’ll need to allow Apache access through either the owner or group so that it can read the folder.

    Which leads to my question. How do I combine OD users and local users in a local group? For instance, I have user A in my OD and I want user A and the local www user in the wwweditors group. It seems like I would change to the local directory in Workgroup Manager, create a group that has the www user and User A in it, and then happily let them start editing. But when I do that and make sure the wwweditors group has read/write privileges to /Library/WebServer/Documents, User A can’t write to the folder (even when local). And when I take a look at the results of the groups command in Terminal, wwweditors doesn’t show up as an option.

    Any ideas?

    #360985
    dreness
    Participant

    I would use WebDAV instead of AFP. WebDAV is intended to provide writable access to web content areas. As WebDAV is implimented in an apache module, that’s one less extra service you need to run. Also, because all the WebDAV filesystem access is abstracted through the ‘www’ user, WebDAV has a MUCH more flexible permissions architecture. You may specify as many users or groups (local or shared) that you wish, and are not limited by the standard unix permisisons model of only three permissions categories (owner, group, other).

    WebDAV volumes can be mounted via ‘Connect To Server’ just like afp volumes can.

    -Andre

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.

Comments are closed