Server Software

• apache_1.3.26   Apache Software Foundation
  http://httpd.apache.org/
• mod_ssl-2.8.9-1.3.26   Ralf S. Engelschall
  http://www.modssl.org/
• openssl-0.9.6e   The OpenSSL Project
  http://www.openssl.org/
• httpsd processes started (pre-forked) at boot
• document root is /dfs/web/public
• user/group directories referred to using ~username or ~groupname
• service at http://www.csupomona.edu/

DCE/DFS Integration

• mod_auth_dce-3.2   Cal Poly Pomona
  http://www.csupomona.edu/~henson/www/projects/mod_auth_dce/dist/
  
• httpsd process runs as user httpd with no DCE credentials
• when a browser requests a file readable or CGI executable by any_other, the httpsd process...
  1. delivers the file or executes the CGI
• when a browser requests a file not readable or CGI not executable by any_other, the httpsd process...
  1. requests authorization from the browser
  2. authenticates user and acquires DCE credentials
  3. delivers the file or executes the CGI, ACLs permitting
  4. releases DCE credentials
• DCE credential caching improves performance and reduces DCE server load