Well, I see others are frustrated with this "feature" of the NetView Apache
Server. I wound up installing a separate standard Apache server in order to
implement our security requirements. I have also considered turning off the
NetView Apache server and serving everything from the standard Apache
server.
The NetView server is for most users (I would think) more than just NetView.
It might be desirable to apply different security to different applications
such as Nways, Optivity, etc. The server running NetView is logically going
to be the source of much of your network documentation, reports, charts,
etc. It is ridiculous to assume that management, operations, general users,
etc. all have the same security requirements for all applications.
Personally I do not like the security design of the NetView Apache server. I
think it would be a great inhancement to the product if it would at least
honor standard Apache security conventions should the user choose to
implement them.
Blaine Owens
Eastman Chemical Company
Email - bowens@eastman.com
Phone - (423)229-3579
Fax - (423)229-1188
> -----Original Message-----
> From: Gil Irizarry [SMTP:IRIZARRG@labs.wyeth.com]
> Sent: Friday, April 30, 1999 8:44 AM
> To: NV-L@UCSBVM.ucsb.edu
> Subject: Re: Using the Apache server of Netview
>
> Alfred:
> I have apache 1.2.4 running as well as Netview's apache, my problem is
> port with numbers. I have apache using port 80 and have changed Netview
> 5.1.1 to port 8080, however it is not responding on that port.
> Here is a list of things that I have checked.
> 1. default map is open on the console with read-write.
> 2. ps -ef |grep webquery, it shows to be active.
> 3. I have execute the "chmod_web_ovw -a" successfully.
> What others actions can I take to identify my problem?
> Also, once I resolve this problem I would like enable security on the web
> and hopefully apply that security to my other apache web server. Is anyone
> doing this today?
> Thank in advance.
> Gil Irizarry
>
> is >>> REIBENSCHUH Alfred <alfred.reibenschuh@IT-AUSTRIA.COM> 04/30 5:46
> AM >>>
> "frederic_mottiat@BE.IBM.COM" wrote :
>
> >[...]
> >No we would like to restrict the access to the NWays web pages, but not
> to
> >the Netview ones. As such, security has not been turned on in Netview.
> >We wanted to use the Apache's basic security options, but get no results
> >with it.
> >Usually, if this was a real and complete Apache server (which I suppose
> it
> >is), you would just create a .htaccess file in the directory you want to
> >limit the access to, and put in this file something like :
> >
> >AuthName "Restricted Access"
> >AuthType Basic
> >AuthUserFile /usr/OV/web/httpd/conf/nways.user
> >require valid-user
> >
> >We have created the nways.user file using the htpasswd binary found in
> >/usr/OV/web/httpd, but when I point my browser to the directory in which
> my
> >HTML files are, I got no user/passwd prompt.
> >I'm sure this .htaccess file is read, because if I add the statement :
> >"deny for all" in it, then I cannot get access to this directory anymore.
> >
> >Has anyone already tried to use this Apache server that way ? With
> success
> ?
> >If yes, please tell me how... I feel I'm missing something...
>
> We have currently a apache 1.3.6 installed parallel to the
> netview-webserver
> and integrated some of the configuration directives of the
> netview-webserver
> to equally serve both netview and other pages with our own security
> (none or apache).
>
>
> "James_Shanks@TIVOLI.COM" wrote:
>
> >I don't know the whole answer, but one of the developers told me that we
> >put hooks into the user/password validation to force the Apache server to
> >use NetView userids and passwords. So I wouldn't be surprised if the
> line:
> > AuthUserFile /usr/OV/web/httpd/conf/nways.user
> >has no effect.
> >
> >One way to do this may be to serve the the Nways pages off another web
> >server (using different ports for the NetView and Nways web servers)
>
> I hope that netview 6.0 will come with at least Apache 1.3.6 and all
> module
> mechanism enabled so we could compile some misc modules for it
> (namely: mod_perl and mod_php3)
>
> Hopefully,
>
>
> mfg. Alfred Reibenschuh
> INFORMATIONSTECHNOLOGIE AUSTRIA GMBH
> Telekommunikation - LAN/WAN-Services - Netzwerkmanagement
> A-1020 Wien, Lassallestrasse 5
> T: ++43-1-21717-58947
> F: ++43-1-21717-58979
> E: alfred.reibenschuh@it-austria.com
|