[OpenAFS] web access

[Måns Nilsson]

--==========12E3C9B0937C3D2A1DED==========
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

--On l=C3=B6rdag, l=C3=B6rdag 6 dec 2008 19.44.06 +0100 Jesus arteche
<chechu.linux@gmail.com> wrote:

> hey,
>=20
> I'd ike to know if there is  a possibility of access to my openAFS cell
> via web. and if its possible where I can find the info about how to do.

Put /afs/your.cell/ in an apache vhost like so:=20

<VirtualHost *>
    ServerName web-view.your.cell
    DocumentRoot /afs/your.cell
</VirtualHost>

Start apache with suitable tickets and tokens. An often used method is to
create a principal, extract it to a file and then:=20

#!/bin/ksh
#
#       Startup-script for apache-server with ticketfile.
#       $Id: apache-stacken.sh,v 1.3 2005/07/21 17:19:42 thn Exp $
#
ARGV=3D"$@"
REALSCRIPT=3D"/usr/local/apache2/bin/apachectl"

case $ARGV in
start)
    /usr/heimdal/bin/pagsh $0 second-level
    ;;
second-level)
    /usr/heimdal/bin/kauth -l 8d -t /my/principal/file websrvapache
    echo "Starting apache with kerberos-tickets:"
    /usr/heimdal/bin/klist -T
    $REALSCRIPT start
    ;;
restart)
    $REALSCRIPT stop
    /usr/heimdal/bin/pagsh $0 second-level   =20
    ;;
*)
    $REALSCRIPT $ARGV
    ;;
esac



--=20
M=C3=A5ns Nilsson			M A C H I N A

If I pull this SWITCH I'll be RITA HAYWORTH!!  Or a SCIENTOLOGIST!

--==========12E3C9B0937C3D2A1DED==========
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (Darwin)

iD8DBQFJOwpj02/pMZDM1cURAsmiAJ9R1Juu74X5sS8GAr6nYbQOBNKkgwCfd6MM
/VR3LvGbTZIVWr5Q4tXk7EE=
=Y/Ke
-----END PGP SIGNATURE-----

--==========12E3C9B0937C3D2A1DED==========--