ChrisH

Hacker!

What he is getting at is there is a way to mass produce virtual directories for all users using Apache and he is looking for a way to do it with IIS. afaik there isn't a built in way and it would involve some scripting.

Ok I have done this finally. The samba site search is still down but I found a reference from another website. So this does not end up being one of the hundred incomplete topics I have read on this topic I shall complete shall tell you what I have done and it can be wikified later. OS: Ubuntu 8.10 Apache 2.2.9 This assumes you have Samba and winbind already setup so you get use the following commands to get users and groups: wbinfo -u wbinfo -g Use a "+" as your winbind seperator in your smb.conf as I could not get it to work with "\" I wanted NTLM authentication on Apache but I wanted to restrict the website to a certain group eg teachers. mod_ntlm will not do anything with groups. mod_ntlm_winbind will do as I want. Get it here: Index of /ftp/unpacked/lorikeet/mod_auth_ntlm_winbind You will need some complier tools and some apache dev tools so apt-get install build-essentials apache2-mpm-prefork-dev You may also need the package autoconf In the directory with mod_ntlm_winbind.c ./configure apxs2 -DAPACHE2 -c -i mod_ntlm_winbind.c Once this is done it actually gives the module the name of mod_auth_ntlm_winbind You then need to create a configuration file to load the mod in the apache mod dir. nano /etc/apache2/mods-enabled/mod_auth_ntlm_winbind.load Then add the entry LoadModule auth_ntlm_winbind_module /usr/lib/apache2/modules/mod_auth_ntlm_winbind.so The directive for the web directory is: Restart samba, winbind and apache2 or reboot if you are lazy. If you are getting 500 internal server errors then you need to change permission of the following file. chmod 750 /var/run/samba/winbindd_privileged Add apache user (www-data) to the group winbindd_priv usermod -G winbindd_priv www-data and restart winbind. That should get you going

Your server should have an event registered on it as well from the client shutting it down.

Have you checked the clients are actually receiving an IP address? The most likely cause will also be a a problem with DNS as well. This could be the client settings or the server DNS.

I failed a bike test for....... Going round a corner a little to wide and there was a person near the kerb, not on it and they had their back to the road. The examiner said I was too close to the kerb and they could of stepped backwards into the road! If you were in a car you would of been in the gutter and even closer than I was.

Start reading here: A Guide to Profiles

Most decent FTP clients will do SFTP if you have SSH set up on the server. I have been using Filezilla while setting up while I have been setting up some servers this week.

It is the best I have used. I tried all the normal ones on my last problematic machine and this is the only one that detected the problem and shifted it!

The websites did seem unavailable earlier and as such my phone started ringing as the school website is our home page. Of course they never think to try another website! No its just omgwtfbbq the internet is down run for hills !!!

I log onto 30 at once with AB tutor which just automates the log on. I havent had to change any limits. Something strange there on your end.

Make that 3 books The 2008 Books: An Overview They will be worth every penny though.

I am waiting for Mark Minasi to come out with a new book. He hasnt let me down so far

You can delegate the ability to change passwords easy enough. Software installation is difficult though I would have though. The only awkward way I can think of is make him a local admin then lock him down through the local policy. Disallow control panel etc. Not sure if that would work though.

Not sure of a good one to audit them but when it comes to fixing them in bulk I can recommend WiseSoft - NTFSFix. NTFS Permissions Utility.

I thought that was for Apache on Windows server?

You will be because mod_ntlm doesnt seem to do groups unless you use some very basic static list. Of course the search is broken on the samba site due to their search host going down and all the google links I tried send me to an old link that doesnt work! That about sums up my day :\ Thanks for all the help I am sure once the samba site is fully operational I can use the method you described earlier.

Ok making some progress. I got it compiled with these files and instructions: Personal Bytes mod_ntlm2 on Apache 2.2.x Looking at the code block you gave me Geoff I have come to the conclusion you are using using mod_ntlm_winbind as only this has some of the directives you have listed.

Mine is a 32bit server. Thwarted at every turn! It's a conspiracy I tell you! Why are there no official packages for this? Is it something to do with M$ proprietry rubbish or something? Anyone else got a this file for 32 bit compiled for a recent version of Ubuntu?

wrong elfclass64.... Is your server 64 bit?

Then you must have been using voodoo because eveytime I fix one error on the compiling it finds another. any chance you can attach yours?

Ok this has turned out to be more of a pain than I realised. I assume you are compiling you own as there are no packages? I cannot get it to compile on mine no matter what I try. I found a compiled one on the ubuntu forums but it says its for a different verion of apache grrr. Everything else is ready I just need to get a working mod_ntlm.so.

What module needs to be enabled for this to work then as its moaning NTLMAuth is an invalid command.

Thanks I will give that a go. Any quirks I should know about? Hmm what about the squid reference?

Is that a solution to my original query or the .htaccess? I have tried that with my original solution and it doesnt seem to work. I couldnt find any examples of it being used with groups either. I am willing to try another apache module as well if you can recommend one which will give me ntlm and allow me to use a require group directive. Rofl top google hit is this thread!