From owner-freebsd-questions@FreeBSD.ORG Thu May 31 17:15:40 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 2FA2A16A468 for ; Thu, 31 May 2007 17:15:40 +0000 (UTC) (envelope-from agus.262@gmail.com) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.178]) by mx1.freebsd.org (Postfix) with ESMTP id C921A13C43E for ; Thu, 31 May 2007 17:15:39 +0000 (UTC) (envelope-from agus.262@gmail.com) Received: by py-out-1112.google.com with SMTP id a29so438843pyi for ; Thu, 31 May 2007 10:15:39 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=gKQ5gWBSoZ9Mp6kEmjZ4rP7yeC9spDrOpLA49520GFSKOYt15VdPj87h14SWRlWQVkE2xGRtwPNaZcI9bqDfQ7roV9OvwAV6/qA3pcIff7taAm+Ax3gHxP4RA6S0b69Z5cXz0vygKvsL1QB2IgKvxJUZRFOwN7CI5r37crlHyLM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=keMq8HX8RyY+LMUF7+L4kAhNdnIQFTh9bQzrMLSl7YptYNSuHcZz9+Y93RP+Pkwtdsr6QmBloP7bw4htXUnEgRkRkNhI20G5yPJkpwkDXvd68CKv9dhFDFTphCrHWyqTOy7b8gPabwWlnUnxXar2KkcJZopWzhpI1O09QbwTZ68= Received: by 10.64.199.8 with SMTP id w8mr1489022qbf.1180631738730; Thu, 31 May 2007 10:15:38 -0700 (PDT) Received: by 10.65.204.15 with HTTP; Thu, 31 May 2007 10:15:38 -0700 (PDT) Message-ID: Date: Thu, 31 May 2007 14:15:38 -0300 From: Agus To: "Jonathan Horne" In-Reply-To: <200705301926.45017.freebsd@dfwlp.com> MIME-Version: 1.0 References: <465DE3DA.7040504@vindaloo.com> <200705301926.45017.freebsd@dfwlp.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-questions Subject: Re: NFS and apache... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 May 2007 17:15:40 -0000 2007/5/30, Jonathan Horne : > > On Wednesday 30 May 2007 17:45:42 Agus wrote: > > 2007/5/30, Christopher Hilton : > > > Erik Norgaard wrote: > > > >> How can i do this? I am trying but im getting permission > > > >> denied...while trying to create a file... > > > > > > > > NFS is insecure (No File Security) since there is no authentication. > > > > You get access with the user id of your current user. > > > > > > I didn't want to touch the security problems with this as I assumed > that > > > the original poster knows about them. Just the same I'm assuming > that > > > webserver:/etc/exports has a line like: > > > > > > /usr/local/www/data/mysite -maproot=nobody:nogroup 192.168.233.17 > > > > > > which would tighten down the mount to just the one machine. As a > > > developer, without even looking at security I think that direct access > > > to the webroot tree is a bad idea. However I'm giving the original > > > poster the benefit of the doubt. Perhaps he's just trying to learn > HTML > > > and PHP. > > > > > > [snip] > > > > > > > One security measure is implemented though: root user on client is > > > > treated as nobody on the server. There is an option you can add to > the > > > > exports file (forgot which), to override this see the exports > manpage. > > > > > > > >> Also if you have a different solution for updating the site..they > are > > > >> welcome.. > > > > > > > > Unless you have problems with diskspace, why not just use rsync? Do > it > > > > manually and you get time to correct blunders before they become > > > > public, or do it as a cronjob. > > > > > > rsync > > > scp, > > > dav, > > > *** cvs *** > > > > > > When I work on a website I tend to start with the site directory in > cvs > > > to protect me from the damage caused by fat fingers. I'm an old C > > > programmer and CVS and Make are tools that I'm used to so I usually > add > > > a really simple make file to the web tree... > > > > > > ***** Typical Makefile for web project ***** > > > -- cut from here -- > > > > > > update: > > > cvs -PAd . > > > > > > MYWEBUSER = www > > > MYHOST = webserver.example.com > > > MYWEBROOT = /usr/local/www/data/webserver.example.com/ > > > > > > publish: > > > rsync -auv ./ $(MYWEBUSER)@$(MYHOST):$(MYWEBROOT) > > > > > > -- to here -- > > > > > > Then running: > > > > > > $ make update > > > > > > on the webserver from within the webtree will refresh the site from > the > > > latest copy in CVS. In my opinion this is the best way because with a > > > little CVS knowledge you can back out any mistakes. This is also nice > > > since it only depends on the ability for both your development machine > > > and webserver to be able to reach the cvs server. A final nicety is > that > > > there are CVS clients for FreeBSD, Windows, and Mac OS X. On the > > > downside you do have to setup a cvs server. > > > > > > Add a little magic with ssh-keygen and the command: > > > > > > $ make publish > > > > > > will push the current state of the web project, N.B. whatever it may > be, > > > onto the webserver. This is a lower overhead way of publishing that > has > > > the danger of no fallback position in case something is screwed up. > > > Honestly I think that the publish tag is better used for testing than > > > production but not every is willing to go to the overhead of using > > > revision control (CVS, SVN, what have you) on this stuff. > > > > > > -- Chris > > > > > > -- > > > __o "All I was doing was trying to get home from > work." > > > _`\<,_ -Rosa Parks > > > ___(*)/_(*)___________________________________________________________ > > > Christopher Sean Hilton > > > pgp key: D0957A2D/f5 30 0a e1 55 76 9b 1f 47 0b 07 e9 75 0e > 14 > > > > Great.....thanks a lot guys....you've been very kind..... > > I will begin reading about rsync and CVS then....it also seems a lot > more > > interesting than NFS.... > > > > Thanks again... > > Greetz > > _______________________________________________ > > freebsd-questions@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to > > "freebsd-questions-unsubscribe@freebsd.org" > > im a kde user, and i like to access my web server via sftp using the > konqueror > file manager. just open your home, open another tab, put in > sftp://yourserver in the address bar... and drag and drop the files where > they go! > -- > Jonathan Horne > http://dfwlpiki.dfwlp.org > freebsd@dfwlp.com > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > Great....that should be easy..jaja....thanks....very simple and practical.... great tip, greetz