deploying safe server wide scripts

Hi

We’re using virtualmin for a lot of sites, and there are a few things I like to keep server wide. Currently I have phpmyadmin for example aliased so people can easily get to that.

However, I’d like to add a file manager to that setup. Safely.

Is there any way I can either setup one that requires you to write in your password through a htaccess setup (and suexec is set up correctly), or maybe a good ftp based file manager where people can just write in their passwords?

Howdy,

While it’s not exactly “pretty”, there is a file manager built into Webmin… would that by chance do what you’re after? It meets the “safely” requirement, since users would have to first log into Webmin in order to access it.

Otherwise, it sounds like you’re asking for a file manager that can authenticate against system users.

I don’t know of one off the top of my head, though there could certainly be some out there.

Another alternative is to use Apache’s mod_auth_pam module, which would allow you to setup authentication within a .htaccess file against system users. You can read about it here:

http://pam.sourceforge.net/mod_auth_pam/

Some distros have that available as a package… that includes Ubuntu, for example:

http://packages.ubuntu.com/maverick/libapache2-mod-auth-pam

I hope that helps :slight_smile:

-Eric