From owner-freebsd-security Wed Jun 13 6:46:32 2001 Delivered-To: freebsd-security@freebsd.org Received: from imr2.ericy.com (imr2.ericy.com [12.34.240.68]) by hub.freebsd.org (Postfix) with ESMTP id 397AB37B405 for ; Wed, 13 Jun 2001 06:46:28 -0700 (PDT) (envelope-from Antoine.Beaupre@ericsson.ca) Received: from mr5.exu.ericsson.se (mr5att.ericy.com [138.85.92.13]) by imr2.ericy.com (8.11.3/8.11.3) with ESMTP id f5DDjS807450; Wed, 13 Jun 2001 08:45:28 -0500 (CDT) Received: from noah.lmc.ericsson.se (noah.lmc.ericsson.se [142.133.1.1]) by mr5.exu.ericsson.se (8.11.3/8.11.3) with ESMTP id f5DDjMb18939; Wed, 13 Jun 2001 08:45:22 -0500 (CDT) Received: from lmc35.lmc.ericsson.se (lmc35.lmc.ericsson.se [142.133.16.175]) by noah.lmc.ericsson.se (8.11.2/8.9.2) with ESMTP id f5DDjKG29732; Wed, 13 Jun 2001 09:45:21 -0400 (EDT) Received: by lmc35.lmc.ericsson.se with Internet Mail Service (5.5.2653.19) id ; Wed, 13 Jun 2001 09:45:19 -0400 Received: from lmc.ericsson.se (lmcpc100455.pc.lmc.ericsson.se [142.133.23.150]) by LMC37.lmc.ericsson.se with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id M6AW6PF1; Wed, 13 Jun 2001 09:44:28 -0400 From: "Antoine Beaupre (LMC)" To: Crist Clark Cc: Evren Yurtesen , Garrett Wollman , Jamie Norwood , freebsd-security@FreeBSD.ORG Message-ID: <3B276E3A.1000207@lmc.ericsson.se> Date: Wed, 13 Jun 2001 09:44:26 -0400 Organization: LMC, Ericsson Research Canada User-Agent: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:0.9.1) Gecko/20010607 X-Accept-Language: en,fr-CA,fr MIME-Version: 1.0 Subject: Re: HTTP and FTP References: <3B269FDD.B5323617@globalstar.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Crist Clark wrote: > Evren Yurtesen wrote: > >>I wonder if it is possible in HTTP to make users login to their home dirs >>automaticly and when they put files it goes in with their uid,gid and of >>course they will login with their own passwords? etc. =) >> > > It should not be terribly difficult. Actualy, there's mod_put that is a plugin module for apache to do something like that: http://hpwww.ec-lyon.fr/~vincent/apache/mod_put.html Please note, however, that there's not really a "login" session in http. HTTP == stateless, FTP == stateful, as said somewhere else. >>also what is the simplicity of that kind of setup compared with http >>server instead of using an ftp server? > [snipped discussion on implementation possibilities, see mod_put. :)] > And the > other issue is finding a HTTP client that will push POSTs how you want. Netscape 3.0, amaya. ;) Please see a dating article of Apache Week: http://www.apacheweek.com/features/put > The main limitation when considering HTTP versus FTP is to remember that > HTTP is stateless and FTP is not. There are other little things here and > there that HTTP cannot do that FTP can. I do not believe HTTP has a > mechanism to rename a file (without downloading, deleting, and uploading). Indeed, there isn't. Only GET/HEAD/OPTIONS/CONNECT/POST/PUT/DELETE, on top of my head. Anyways, HTTP cleint haven't evolve in this direction. The WWW is becoming more a TV then a publishing space, so what the heck. Honestly, who of these AOL jerks even *knows* what FTP *is*? Or "HTTP", for that matter! :) It's all "the web" or "the internet" for them. Just the same zappers... And the protocol has evolve to feed this direction. > Although it is easy enough to make your own implementation there is none > in HTTP itself (I could easily be wrong, I don't know RFC2616 by heart). It would be useless because no client will implement it. If someone mentions the J word, I hack a 125Mb jre into his head. ;) A. -- La sémantique est la gravité de l'abstraction. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message