Directory Alias - how to pass credentials to a share

[NullTerminator]

apache running on server A, I want to alias a shared folder on server b using a unc in the directory tag. Is there any way I can pass credentias to access the share, or am I stuck with the credentials under which apache is running. Both boxes win2k.

Alias /webdocs/ "//b/share$/docs/webdocs"

<Directory "//b/share$/docs/webdocs">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

it works if the apache service account has read permissions, but I would like more explicit control.

 

[siberian]

Without 3rd party authentication modules methinks you stuck.

I am assuming that the real question you as asking is "Can I ask the user for their windows credentials, pass these through apache and then into the underlying windows network for directory access"

 

[NullTerminator]

That is not the real question, but I could settle for that solution.

IIS has such a facility when setting up aliased folders where a single credential is used for anonymous users. It is independent of the account under which IIS runs and can be different for each aliased folder.

 

[siberian]

So then what you are asking is 'Can I give apache an account to access the aliases shares on behalf of the users.'?

This to me seems like more of a windows issue then an apache issue. You shold be able to tell windows 'This user apache that runs the webserver ,give him anonymous, no password access to these shares'.

 

[NullTerminator]

Thats what I am doing. Apache runs under domain\svcaccount

domain\svcaccount has read permission to share

I would like to run apache using account which has no rights out side of the host box, and specify something like

<Directory "//svr/share/folder">
Impersonate "AUserAcctWithRightsToShare"
PwdEncrypted "caf9d47j"
</Directory>

 

[siberian]

Yea, not going to happen. Whatever use apache is running on would have to have rights on the host network.

 

[NullTerminator]

thanks siberian,
I'll watch for mod_impersonate in 3.x

\0