2019

On 28 Aug 2019, at 08:50, Vincent Medina <vmedina@apcn.net> =wrote:

Not sure what I am =doing wrong but nothing I have tried is restricting dir access=E2=80=A6 =Frustration setting in.

 

From: Stuart Tremain [mailto:webdna@plsoftware.com.au] 
Sent: Monday, August 26, 2019 =9:00 PM
To: WebDNA Talk List
Subject: Re: [WebDNA] Ubuntu and =WebDNA

 

Hi Vincent

 

You can do =it on three levels

 

1) virtual host config file

2) .htaccess file for each virtual host or individual =directories

3) globally

 

 

1) in the vhost config file - remove =Indexes from :

<Directory= /var/www/>

        &=nbsp;    Options =Indexes FollowSymLinks

        &=nbsp;    AllowOverride =None

        &=nbsp;    Require all =granted

</Directory>

 

 

2) add Options -Indexes to the .htaccess =file

 

 

3) https.conf file - remove Indexes from =:

<Directory =/var/www/>

        &=nbsp;   Options Indexes =FollowSymLinks

        &=nbsp;   AllowOverride =None

        &=nbsp;   Require all =granted

</Directory>

 

 

 

 

 

Kind regards

 

Stuart Tremain

Pharoah Lane Software

AUSTRALIA

webdna@plsoftware.com.au

 

 

 

 

 

On 27 Aug 2019, at =10:44, Vincent Medina <vmedina@apcn.net> wrote:

 

I just noticed that dir listings is =somehow still enabled. Does anyone know how to disable dir listings in =Ubuntu 18.x 

 

 

From: Vincent Medina [mailto:vmedina@apcn.net] 
Sent: Sunday, August 25, 2019 =10:50 PM
To: talk@webdna.us
Subject: [WebDNA] Ubuntu and =WebDNA

 

I got Ubuntu Server =18.04.3 LTS running with WebDNA Fast CGI Here are my notes (Got from the =Talk list, friends and various other sources) feel free to =critique=E2=80=A6.

 

This is not for a virtual host 

 

Use the directions on the =WebDNA site to install WebDNA with Apache

 

---------------------------------------------------------------=-----------

Side Note:

Upgrading to WebDNA Server =8.6.3 

 

Download the Zip 

Change ="mod_WebDNA_apache2.4.so" file name to "mod_webdna.so",

replace existing files =(mod_webdna.so,WebCatalog, WebDNAMonitor) with the new ones from the =zip

archive, made the =last two files executable, and reboot.

 

---------------------------------------------------------------=---------

 

Change the following:

 

sudo nano =/lib/systemd/system/apache2.service

sudo nano =/etc/systemd/system/multi-user.target.wants/apache2.service

 

Change 'PrivateTmp =3D =true'

to

 

PrivateTmp =3D false

 

on both files, then =reboot.

 

- FTP -

 

NOTE: Must use SFTP to =write

 

sudo apt-get install =vsftpd

sudo systemctl start =vsftpd

sudo systemctl =enable vsftpd

 

backup the original config =file:

 

sudo mv /etc/vsftpd.conf =/etc/vsftpd.conf.orig

 

create a new config file:

 

sudo nano =/etc/vsftpd.conf

 

c/p this into the config file:

 

listen=3DNO

listen_ipv6=3DYES

anonymous_enable=3DNO

local_enable=3DYES

write_enable=3DYES

local_umask=3D022

dirmessage_enable=3DYES

use_localtime=3DYES

xferlog_enable=3DYES

connect_from_port_20=3DYES

chroot_local_user=3DYES

secure_chroot_dir=3D/var/run/vsftpd/empty

pam_service_name=3Dvsftpd

rsa_cert_file=3D/etc/ssl/certs/ssl-cert-snakeoil.pem

rsa_private_key_file=3D/etc/ssl/private/ssl-cert-snakeoil.key

ssl_enable=3DNO

pasv_enable=3DYes

pasv_min_port=3D10000

pasv_max_port=3D10100

allow_writeable_chroot=3DYES

 

Now create a ftp =account

 

sudo useradd -m =ftpuser

sudo passwd =ftpuser  

 

Then add user to =www-data

 

sudo adduser ftpuser =www-data

 

Create a folder under =/var/www/html/<new folder>

 

give rights to the =www-data group

 

chgrp www-data <new folder>

chmod g+rwx  <new =folder>

 

Allow WebDNA to write to =db's

 

chgrp www-data =<dbfile>

chmod g+rwx <dbfile>

 

Other Stuff:

 

Remove dir browsing

In =/etc/apache2/apache2.conf

 

Look for <Directory /var/www/> and change it to:

 

<Directory =/var/www/>

    =Options FollowSymLinks

    Options -Indexes

</Directory>  

 

 

root level accesscd

sudo su -

 

 

--------------------------------------------------------- =This message is sent to you because you are subscribed to the mailing =list talk@webdna.us To unsubscribe, E-mail =to: talk-leave@webdna.us archives: http://www.webdna.us/page.dna?numero=3D55 Bug Reporting: support@webdna.us

--------------------------------------------------------- =This message is sent to you because you are subscribed to the mailing =list talk@webdna.us To unsubscribe, E-mail to: talk-leave@webdna.us archives: http://www.webdna.us/page.dna?numero=3D55 Bug Reporting: support@webdna.us