[Syphor]

Hey all,
I'm using apache 2.x and I've set up my DocumentRoot as my home directory (/Users/syphor) and I have setup .htaccess so only I can access this directory, which in turn will only allow me to access the site.

I have set my httpd.conf file like this:

Code:
<Directory "/Users/syphor">
        AuthUserFile /Users/syphor/.passwd
        AuthGroupFile /dev/null
        AuthName "Restricted Area"
        AuthType Basic
        
        require user matheos
</Directory>

I was wondering if there is any way of making additional users with different doucment roots, something like this:

Code:
require user matheos
if login=failed then redirect to www.apple.com
require user nick
if login=failed then redirect to www.apple.com

Has anyone got any ideas about how to implement this?

[sandsl]

You might get a reply in a more suitable forum, Networking perhaps.

[Mithras]

First of all, is that actually working for you? The files in the Documents and Library subfolders should NOT be readable by all users, and hence not be readable by the Apache 'www' user.

Two ideas:

1. Run several instances of Apache, one as each user. (i.e. change httpd.conf to run not as 'www' but as syphor, matheos, nick, etc.) Each one would need to run on its own port.

That way you can read (and write to) all those documents.

You should consider implementing SSL, though, since as of now your password --and your files-- are sent in cleartext. It's trivial for anyone on the same network as your remote machine - a school, workplace, or internet cafe - to intercept your password and your files.

2. If for some reason you've granted Apache access to your Documents folders, then just use Virtual Hosts to set up several virtual servers, each with a different DocumentRoot.

A little googling will find you nice tutorials on virtual hosts.

good luck!