Realms on XAMPP

Problems with the Windows version of XAMPP, questions, comments, and anything related.

Realms on XAMPP

Postby Atcold » 12. April 2010 00:56

I'm studing at university some network stuff, so I decided to install XAMPP to have a try.
At the moment I'm studing the realms with their ACL (Access Control List) and I would like to apply theorical things to the real world but I do not find some documentation about realms for this server application.

Thanks in advace =)
Atcold
 
Posts: 3
Joined: 12. April 2010 00:49

Re: Realms on XAMPP

Postby Atcold » 16. June 2010 09:38

Could anybody help me? Was I be not too clear?
Atcold
 
Posts: 3
Joined: 12. April 2010 00:49

Re: Realms on XAMPP

Postby Radzio » 16. June 2010 09:46

I know what ACL is but realms.. hm, you mean domains? If so, there are VirtualHosts where you can apply different settings. But that doesn't mean ACL.
Radzio
 
Posts: 81
Joined: 05. June 2010 12:26

Re: Realms on XAMPP

Postby Atcold » 16. June 2010 13:12

Radzio wrote:I know what ACL is but realms.. hm, you mean domains? If so, there are VirtualHosts where you can apply different settings. But that doesn't mean ACL.

Resources (URLs) in a web server are collected into realms ("protection spaces"). All resources into a specific realm have the same ACL. A realm is made by name, resources, ACL and authentication mode (FORM, HTTP BASIC, ..., NO AUTHENTICATION). Domain is a forbidden world.. because you can speak about a e-mail domain, a dns domain or others domains but things have also their right name.. :D
Atcold
 
Posts: 3
Joined: 12. April 2010 00:49

Re: Realms on XAMPP

Postby JonB » 16. June 2010 13:13

ACL's are actually somewhat an OS filesystem issue NOT a webserver issue. Windows support for ACL's is different than *nix. Vista and Windows 7 can read *nix ACL's, prior versions of Windows can't. Windows uses both a different authentication method and a different rights system. Note that CHMOD, and the concepts of users and groups ownership and rights on files and folders are all *nix specific. These exist across all variants of *nix specific file systems, and apply to the entire file structure, not only the web exposed parts. The 'type' of access is governed by the filesystem model.

Authentication realms (proper term) generally refer to connections. Think of it in terms of the OSI model - its a Level 5 (Sessions) matter. Can you make a connection to the desired resource? (not "what can I do when I get there?")

Apache's direct support for authentication realms comes from 'basic authentication' (tokens).

Here's a piece about enabling Apache server for an authentication realm:

http://www.whoopis.com/howtos/apache-auth.html

I'll tell you (so you know in advance) the Windows versions of Apache (like XAMPP) do not support the hashing of the passwords in the password files, its stored in plaintext. The reason is that the encryption method is OS specific, and the Windows OS doesn't provide a comparable system call/function. There are several projects that have GUI versions for this, like DirectoryPass (very clean and lite).


There are more advanced methods, but they are generally programmatic.

Good Luck with your class/project.
8)
User avatar
JonB
AF Moderator
 
Posts: 3210
Joined: 12. April 2010 16:41
Location: Land of the Blazing Sun
Operating System: Windows XP/7 - Fedora 15 1.7.7


Return to XAMPP for Windows

Who is online

Users browsing this forum: No registered users and 84 guests