Apache based WebDAV Server with LDAP and SSL

Saqib Ali

<saqib@seagate.com>

Offshore XML/XHTML Development

Revision History
Revision v4.1.2	2003-10-17	Revised by: sa
Added the SSL performance tuning section.
Revision v4.1.1	2003-09-29	Revised by: sa
Updated the SSL section based on the feedback received from readers.
Revision v4.1.0	2003-09-02	Revised by: sa
Updated the SSL section based on the feedback received from readers.
Revision v4.0.2	2003-08-01	Revised by: sa
Minor updates to the Apache configure cmd line. /dev/random referenced in the SSL section.
Revision v4.0.1	2003-07-27	Revised by: sa
Added more information to the SSL section.
Revision v4.0	2003-06-29	Revised by: sa
Updated the HOWTO for Apache 2.0. Also the source is in XML

.This document is an HOWTO on installing a Apache based WebDAV server with LDAP for authentication and SSL encryption.

Table of Contents

1. Introduction

1.1. About this document
1.2. Contributions to the document
1.3. What is Apache?
1.4. What is WebDAV?
1.5. What is PHP?
1.6. What is mySQL?
1.7. What do we need?
1.8. Assumptions

2. Requirements

2.1. Basics
2.2. Apache 2.0.46
2.3. OpenSSL
2.4. iPlanet LDAP Library
2.5. mod_auth_ldap
2.6. mySQL DB Engine
2.7. PHP

3. Installation

3.1. Pre-requisites
3.2. mySQL
3.3. Apache 2.0
3.4. mod_auth_ldap
3.5. CERT DB for LDAPS://
3.6. PHP

4. Configuring and Setting up the WebDAV services

4.1. Modifications to the /usr/local/apache/conf/httpd.conf
4.2. Creating a directory for DAVLockDB
4.3. Enabling DAV
4.4. Create a Directory called DAVtest
4.5. Restart Apache
4.6. WebDAV server protocol compliance testing

5. WebDAV server management

5.1. Restricting access to DAV shares
5.2. Restricting write access to DAV shares

6. Implementing and using SSL to secure HTTP traffic

6.1. Introduction to SSL
6.2. Test Certificates
6.3. Certificates for Production use
6.4. How to generate a CSR
6.5. Installing Server Private Key, and Server Certificate
6.6. Removing passphrase from the RSA Private Key
6.7. SSL Performance Tuning

A. HTTP/HTTPS Benchmarking tools

B. Hardware based SSL encryption solutions

C. Certificate Authorities

Glossary of PKI Terms

		Next
		Introduction