Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 355 / 532

Chapter 14, Controlling Access to Your Server 355
Access Control Examples
Figure 14.8 Restricting access to a file type—in this case, to files with the .cgi extension
10.
Click Submit and save and apply your changes.
In this example, both continue boxes are checked. This means that if a request
for a file comes in, the server will first look at the ACL for the file type, and then
it will continue to look for another ACL that matches (for example, am ACL on
the URI or the path). The server checks ACLs in this order:
1.
Pathcheck functions in
obj.conf
. For example, these could be wildcard
patterns for files or directories. The entry in the ACL file would appear as
follows:
acl “*.cgi”;
2.
URIs. For example, a path relative to the document root. The entry in the
ACL file would appear as follows:
acl “uri=/my_directory”;
3.
Pathnames. For example, an absolute path to a file or directory. The entry
in the ACL file would appear as follows:
acl “path=d:\netscape\suitespot\docroot1\sales/”;
The entry in the
generated.https-
serverid
.acl
file for this example
looks like this:
acl "*.cgi";
allow (read,execute,list,info)
user = "anyone";
allow (all)
group = "programmers";