WebDav + lighttpd (SSL) + bookmarks sync (SyncPlaces)

Ìîæíî ëè êàê-íèáóäü çàìàóíòèòü WebDAV ðåñóðñ ñ èíòåðíåòà íà wl500gp?

È âñ¸ òàêè, âîçìîæíî ëè?

ïðèñîåäèíÿþñü ê âîïðîñó

Ïîñòàâèòü fuse
Ñêîìïèëèòü http://savannah.nongnu.org/projects/davfs2 èëè http://noedler.de/projekte/wdfs/
È ñî âñåé ýòîé ôèãí¸é ïîïûòàòüñÿ âçëåòåòü

à lighttpd êòî íèòü çíàåò êàê ñêîíôèãóðèðîâàòü ïîä WEB DAV ?
âðîäå êàê îí ïîääåðæèâàåò ýòîò ïðîòîêîë, íî âî âñåõ ñòàòüÿõ êîòîðûå ÿ íàøåë íóæíî óñòàíîâèòü ãàëî÷êó ïðè óñòàíîâêå. À êàê ðó÷êàìè ñêîíôèãóðèðîâàòü ?

Quote:

---

Originally Posted by elected

à lighttpd êòî íèòü çíàåò êàê ñêîíôèãóðèðîâàòü ïîä WEB DAV ?
âðîäå êàê îí ïîääåðæèâàåò ýòîò ïðîòîêîë, íî âî âñåõ ñòàòüÿõ êîòîðûå ÿ íàøåë íóæíî óñòàíîâèòü ãàëî÷êó ïðè óñòàíîâêå. À êàê ðó÷êàìè ñêîíôèãóðèðîâàòü ?

---

http://redmine.lighttpd.net/projects...Docs:ModWebDAV

Ãîòîâîå ðåøåíèå äëÿ çàùèù¸ííîãî õðàíåíèÿ è ñèíõðîíèçàöèè çàêëàäîê è ïàðîëåé Firefox íå íà ÷óæîì ñåðâåðå, à ó ñåáÿ íà ðîóòåðå â çàøèôðîâàííîì âèäå.
Âûáîð êîíêðåòíîãî íàáîðà ñïîñîáîâ çàùèòû/øèôðîâàíèÿ â ïðèíöèïå íå îáñóæäàåòñÿ, õîëèâàðüòå â äðóãîì ìåñòå.

Íà ÏÊ ñòàâèì èç äîïîëíåíèé Firefox 3,4 äîïîëíåíèå SyncPlaces (òåêóùåå 4.2.0).

Äëÿ îáåñïå÷åíèÿ ðåàëüíîé áåçîïàñíîñòè, çàùèòèòü íóæíî:
1. õðàíèëèùå íà ðîóòåðå (ëîæèì òóäà òîëüêî óæå ïîøèôðîâàííûé íà ÏÊ êîíòåíò, â SyncPlaces âûáèðàåì AES 192-áèò, øèôðîâàòü jSON)
2. äîñòóï ê ðîóòåðó è êàíàë ñâÿçè ðîóòåð - ÏÊ (mod_auth + SSL - ñïðàøèâàòü ïàðîëü, è ïîñêîëüêó ïàðîëü âñå ðàâíî ïåðåäà¸òñÿ â îòêðûòîì âèäå - äåëàòü ýòî òîëüêî ÷åðåç òóííåëü SSL)
3. õðàíèëèùå íà ÏÊ - ïàðîëü ïðîãðàììà SyncPlaces õðàíèò â îáùåì õðàíèëèùå ïàðîëåé Firefox, ïîýòîìó ëèáî âûáèðàåì Firefox Portable è ïîìåùàåì åãî öåëèêîì â çàøèôðîâàííûé êîíòåéíåð ëèáî øèôðóåì âåñü ÏÊ (TrueCrypt íàïðèìåð), ëèáî èñïîëüçóåì äðóãèå ñïîñîáû çàùèòû õðàíèëèùà ïàðîëåé Firefox.

Óñòàíîâêà lighttpd: http://wl500g.info/showpost.php?p=97393&postcount=166
Áóäåì ñ÷èòàòü, ÷òî óæå ñòîèò, ïðåäâàðèòåëüíî íàñòðîåííûé äëÿ rtorrent. Íàøà êîíôèãóðàöèÿ íèêàê íå áóäåò ìåøàòü óæå òåêóùåìó êîíòåíòó âåá áðàóçåðà.
Êðàòêî ïî àâòîðèçàöèè è SSL, ðåäàêòèðóåì lighttpd.conf, ó êîãî óæå íàñòðîåíî, ìîæíî ïðîïóñòèòü:

íóæíî äîïîëíèòåëüíî âêëþ÷èòü ìîäóëè:

Code:

---

server.modules              = (
                                "mod_access",
                                "mod_auth",

---

Äëÿ SSL ñòàâèì openssl è ïðàâèì â lighttpd.conf:

Code:

---

#### SSL engine
ssl.engine                = "enable"
ssl.pemfile                = "/opt/etc/lighttpd/lighttpd.pem"

---

Äëÿ àâòîðèçàöèè ïðàâèì â lighttpd.conf:

Code:

---

#### auth module
## read authentication.txt for more info
auth.backend              = "htdigest"
auth.backend.htdigest.userfile = "/opt/etc/lighttpd/.passwd"
auth.require = ( "/" =>
  (
      "method"  => "digest",
      "realm"  => "remote_webui", #çàãîëîâîê îêíà çàïðîñà ïàðîëÿ
      "require" => "valid-user"
    )
)

---

Ãåíåðèðóåì ïàðîëü äëÿ ïîëüçîâàòåëÿ username:

Code:

---

htdigest -c /opt/etc/lighttpd/.passwd remote_webui username

---

Ãåíåðèðóåì SSL ñåðòèôèêàò äëÿ íàøåãî âåá-ñåðâåðà:

Code:

---

openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days 3650 -nodes

---

Ïðîâåðÿåì, ïî àäðåñó https://ip_íàøåãî_ðîóòåðà áðàóçåð äîëæåí óâèäåòü ñàìîâûäàííûé ñåðòèôèêàò, åñëè âû åãî íå ïîäïèñàëè èçâåñòíûì, òî äîáàâüòå â ðàçðåø¸ííûå èñêëþ÷åíèÿ äëÿ áðàóçåðà.
Âåá-ñåðâåð äîëæåí ñïðîñèòü ïàðîëü, è ïóñòèòü âàñ ê ñîäåðæèìîìó êàê è ðàíüøå.

Òåïåðü ïðàâèì lighttpd.conf ñîáñòâåííî äëÿ îáåñïå÷åíèÿ ðàáîòû ìåõàíèçìà DAV:
âêëþ÷àåì ìîäóëü

Code:

---

server.modules              = (
                                "mod_webdav",

---

îòëàâëèâàåì â àäðåñíîé ñòðîêå /dav/ è âêëþ÷àåì äëÿ ýòîé ïàïêè WebDAV ñ ïðàâîì çàïèñè

Code:

---

#for DAV
$HTTP["url"] =~ "^/dav($|/)" {
    webdav.activate = "enable"
    webdav.is-readonly = "disable"
}

---

 ýòîé ñòðî÷êå óêàçàòü ìàêñèìàëüíûé ðàçìåð çàïðîñà (ôàéëû ñèíõðîíèçàöèè çàêëàäîê áûâàþò íåìàëåíüêèå)

Code:

---

server.max-request-size=1024000

---

Äëÿ îòëàäêè îøèáîê êîíôèãóðàöèè âðåìåííî íóæíî:

Code:

---

server.errorlog            = "/opt/var/log/lighttpd/error.log"
## enable debugging
debug.log-request-header  = "enable"
debug.log-response-header  = "enable"
debug.log-request-handling = "enable"
debug.log-file-not-found  = "enable"

---

Ñîçäà¸ì â êîðíå êàòàëîãà âåá-ñåðâåðà ïàïêó /dav/ è äà¸ì ïðàâà çàïèñè ïðîöåññó âåá-ñåðâåðà â íå¸. Ìîæíî âêëþ÷èòü âèðòóàëüíûå õîñòû è/èëè ðàçìåñòèòü ïàïêó â äðóãîì ìåñòå, íóæíî òîëüêî ïåðåïèñàòü ïðàâèëî $HTTP["url"] =~ "^/dav($|/)" ïî ñâîåìó âêóñó.

Íàñòðàèâàåì SyncPlaces:
1. ïðåäâàðèòåëüíî ñîõðàíÿåì âñå çàêëàäêè, íà âñÿêèé ñëó÷àé
2. óñòàíàâëèâàåì ïðîòîêîë https, óêàçûâàåì àäðåñ ñåðâåðà âìåñòå ñ ïîðòîì
3. òèï äàííûõ äëÿ ñèíõðîíèçàöèè JSON, ïóòü /dav/syncplaces.json, åñëè ðåøàåì ñîõðàíÿòü ïàðîëè, òî äîïèñûâàåì îòäåëüíî ïóòü /dav/passwords.json - îäíèì ñëîâîì ïóòü íàäî óêàçûâàåòü îòíîñèòåëüíî êîðíåâîé ïàïêè âåáñåðâåðà(âèðòóàëõîñòà).
4. Ñòàâèì ãàëî÷êè: "áåçîïàñíàÿ" ïåðåñûëêà (ïîä áåçîïàñíîé èìååòñÿ ââèäó àëãîðèòì àêêóðàòíîãî ðàçðåøåíèÿ êîíôëèêòîâ ñèíõðîíèçàöèè äàííûõ), øèôðîâàòü äàííûå, àëãîðèòì AES 192-bit, íèêàêèõ workarounds íå íàäî, âñ¸ äîëæíî ðàáîòàòü â ïîëíîì îáú¸ìå
5. Çàïóñêàåì îòïðàâêó çàêëàäîê - â ïàïêå /êîðåíü_âåá_ñåðâåðà/dav/ äîëæåí ïîÿâèòñÿ syncplaces.json, passwords.json è èõ SHA1 õåøè.
 ñëó÷àå ïðîáëåì ñìîòðèì åððîð-ëîã, îí ó íàñ äåòàëüíûé, îáû÷íî ëèáî ïðîìàõíóëèñü ñ ïóòÿìè ïàïîê ëèáî íåò äîñòóïà íà çàïèñü\÷òåíèå ãäå ëèáî
Ïàðîëü äëÿ äîñòóïà ê ðîóòåðó äîïîëíåíèå áåð¸ò èç îáùåé áàçû ïàðîëåé Firefox, SSL ñåðòèôèêàò äîëæåí áûòü â ðàçðåøàþùèõ èñêëþ÷åíèÿõ áðàóçåðà
6. Ïîñëå îòëàäêè íå çàáûâàåì îòêëþ÷èòü, ÷òîáû íå ìóñîðèòü

Code:

---

## enable debugging
#debug.log-request-header  = "enable"
#debug.log-response-header  = "enable"
#debug.log-request-handling = "enable"
#debug.log-file-not-found  = "enable"

---

Äëÿ ñîòíè çàêëàäîê ñèíõðîíèçàöèÿ ïî ëîêàëêå, äàæå ïðè ñèëüíî çàãðóæåííîì ðîóòåðå äîëæíà ïðîèñõîäèòü çà ñåêóíäó.
P.S. Ïðîøèâêà Îëåãà 1.9.2.7-d

À ïî÷åìó íåëüçÿ èõ õðàíèòü ó ñåáÿ íà êîìïå â çàøèôðîâàíîì âèäå íó + åù¸ êî âñåìó çàáåêàïèòü êóäà íèáóäü ,ïîìîåìó ïðîùå ÷åì ýòè ïëÿñêè ñ áóáíîì âîêðóã ðîóòåðà. Èëè ìîæåò ÿ ÷åãî íå äîãîíÿþ ???

Ðå÷ü èä¸ò î ñèíõðîíèçàöèè çàêëàäîê è ïàðîëåé ìåæäó íåñêîëüêèìè êîìïüþòåðàìè: íàïðèìåð êîìïüþòåð äîìà, íà ðàáîòå è íîóòáóê. Íå äåëàòü æå èìïîðò/ýêñïîðò ìåæäó 3ìÿ êîìïüþòåðàìè êàæäûé ðàç âðó÷íóþ ;)
À ðîóòåð âñåãäà îíëàéí

Òåïåðü ïîíÿòíî . Ñïàñèáî !!!

Ñïàñèáî çà ðåöåïò! Íàñòðîèë xmarks ëîêàëüíî è òåïåðü ìîÿ ïàðàíîéÿ ÷óâñòâóåò ñåáÿ ÷óòü ñïîêîéíåå :)
Ïàðó ìîìåíòîâ õîòåë äîáàâèòü ÷åãî ìíå íå õâàòèëî èäÿ ïî Âàøåé èíñòðóêöèè
1. ïîñëå óñòàíîâîê ïàêåòîâ íå íàøåë htdigest, îòêîïàë â ïàêåòå àïà÷à
2. htdigest òðåáóåò óñòàíîâêè apr-util
3. mod_webdav äëÿ ðàáîòû òðåáóåò sqlite,èíà÷å âûäàåò ëåâóþ îøèáêó çàãðóçêè ìîäóëÿ

http://www.wl500g.info/showthread.php?t=26744

Åùå äîáàâëþ ÷òî ó ìåíÿ çàâàëèëñÿ ñåðâåð
èççà

Code:

---

(fdevent.c.41) event-handler linux-sysepoll failed, try to set server.event-handler = "poll" or "select"

---

ïîêà þçàþ poll

haccker, åù¸ ðàç ñïàñèáî çà çàìå÷àòåëüíûé ïîñò.

SyncPlaces â íîâîé âåðñèè íàó÷èëñÿ ñæèìàòü ïåðåäàâàåìûå ôàéëû, ïîýòîìó íàñòðîéêó server.max-request-size=1024000, íà ìîé âçãëÿä, òåïåðü ìîæíî èñêëþ÷èòü. Ê ïðèìåðó, ïðè ñèíõðîíèçàöèè äâóõñòà çàêëàäîê â /dav ñîçäà¸òñÿ ôàéë ðàçìåðî 13 êèëîáàéò.

Ê èñïîëüçîâàíèþ ñîáñòâåííîãî ñåðâèñà ñèíõðîíèçàöèè ìåíÿ ïîäòîëêíóëî íîâîå ñîãëàøåíèå îá óñëóãàõ Google, êîòîðûé òåïåðü ñëåäèò çà êàæäûì ìîèì äâèæåíèåì òåïåðü îôèöèàëüíî, äàæå â chromium.

Quote:

---

Originally Posted by pretoreani

Åùå äîáàâëþ ÷òî ó ìåíÿ çàâàëèëñÿ ñåðâåð
èççà

Code:

---

(fdevent.c.41) event-handler linux-sysepoll failed, try to set server.event-handler = "poll" or "select"

---

---

 íîâîì ðåïîçèòîðèè ïðîáëåì ñ epoll íåò, âñ¸ ðàáîòàåò.

Çäðàâñòâóéòå. Ñêàæèòå åñòü ó êîãî óòèëèòà htdigest èç apache ïàêåòîâ? Â íîâîì ðåïîçèòîðèè íå íàøåë. Ìîæåò êòî òî ñêîìïèëèðîâàë óæå äëÿ ñåáÿ. Ïîäåëèòåñü à òî íå ìîãó âûïîëíèòü êîìàíäó

Code:

---

htdigest -c /opt/etc/lighttpd/.passwd remote_webui username

---