Changes

Jump to navigation Jump to search
no edit summary
Line 1: Line 1: −
There is plenty of help on the web regarding how to set up a webdav area on an Apache 2.0 server using the mod_dav apache module.  If this is enabled on an area of the site secured with SSL/TLS (reachable by urls beginning with https:) there are a few extra steps, also widely documented.  What was not so easy to figure out how to do was how to do client authentication based on client certificates.  Most of the sites out there assume that people should use http basic authentication and type passwords all of the time.  I wanted to use my client certificate instead.  The short answer is that it is only possible if you are willing to configure a separate webdav area for each user.  In this case, one can configure the webdav directory as follows.
+
There is plenty of help on the web regarding how to set up a webdav area on an Apache 2.0 server using the mod_dav apache module.  If this is enabled on an area of the site secured with SSL/TLS (reachable by urls beginning with https:) there are a few extra steps, also widely documented.  What was not so easy to figure out how to do was how to do client authentication based on client certificates.  Most of the sites out there assume that people should use http basic authentication and type passwords all of the time.  I wanted to use my client certificate instead.  The short answer is that it is only possible if you are willing to configure a separate webdav area for each user.  In this case, one can configure a webdav directory for each user in ssl.conf as follows.
 
<pre>
 
<pre>
Alias /davusers/newman/ "/home/www/davusers/newman/"
+
Alias /davusers/ "/home/www/davusers/"
 
<Directory "/home/www/davusers/newman/">
 
<Directory "/home/www/davusers/newman/">
 
     DAV On
 
     DAV On
Line 9: Line 9:  
</Directory>
 
</Directory>
 
</pre>
 
</pre>
What I decided to do in the end was to have just one shared webdav area for all users, and use basic http authentication based on passwords.
+
Alternatively one might chose to have just one shared webdav area for all users, and use basic http authentication based on passwords.
 
<pre>
 
<pre>
 
Alias /davusers/ "/home/www/davusers/"
 
Alias /davusers/ "/home/www/davusers/"

Navigation menu