logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Apache User Creation
Author
sandeep_1105



Joined: 26 Mar 2012
Posts: 1

PostPosted: Mon 26 Mar '12 22:37    Post subject: Apache User Creation Reply with quote

Dear Members,

I am very new to Apache, so please don't mind if my questions are very Basic.

I have recently Installed a Bug Tracking tool called Bugzilla on a 64 Bit Windows 2008 R2 Server which needs a Webserver which is Apache.

Since Apache does not provide 64 Bit Installer for Windows, I downloaded the 64 Bit Binaries Zip file from the following link:

http://www.blackdot.be/?inc=apache/binaries


I have a lot of questions on how we can configure Apache as everything should be done manually(As Installer does not exists for 64 Bit).

The documentation of the tool which I installed says the following about Apache:

Code:
By default Apache installs itself to run as the SYSTEM account. For security reasons it's better the reconfigure the service to run as an Apache user. Create a user that is a member of no groups, and reconfigure the Apache2 service to run as that account.


My questions are:

1. How does one create a Apache User/Password.
2. How to Create a User which is a Member of No Group.
3. How to Configure Apache to Run as the New User created.
4. How to give read/Write Privileges to the newly created Apache User.


My Apache is working fine now without any problems but this only works internally not externally (Internally Means the Machine on which i installed Apache, Externally Means trying to access Apache from outside). For Security reasons I have to create a dedicated Apache User which I am not sure how we can do it on Windows. There is no option for me to Upload my httpd.conf file in this forum so could not do it.

It would be great if you can Provide your Suggestions.

Thanks
Sandeep
Back to top
rhossis



Joined: 30 Mar 2011
Posts: 9

PostPosted: Wed 28 Mar '12 8:44    Post subject: Reply with quote

Hi Sandeep,

I believe the following links should help on running apache on its on user, with managed rights be okay but are not specific to 2008R2. I hope they lead you in the right direction. Do inform me if you get a link for 2008R2

http://people.apache.org/~sctemme/ApconUS2008/hardening.pdf
http://itadmin.creative.auckland.ac.nz/faq/network/fileservers/Windows/securitySettings/
http://www.modsecurity.org/blog/archives/2006/06/jailing_apache.html

Regards,
Rhossis
Back to top


Reply to topic   Topic: Apache User Creation View previous topic :: View next topic
Post new topic   Forum Index -> Apache