SWAT

[SATOH Fumiyasu]

Donjuma Lee <dlee at cse.fau.edu> wrote:
>how about a SSL version of SWAT?

You can use a 'SSL wrapped' SWAT with TCP Wrapper and Apache-SSL
(or Apache + mod_ssl). Example is below (summary only :-).
But I have never tried this.

/etc/inetd.conf
---------------------------------------------------------------------
swat stream tcp nowait root /usr/sbin/tcpd /usr/local/samba/bin/swat
---------------------------------------------------------------------

/etc/hosts.allow
---------------------------------------------------------------------
swat: 127.0.0.1
---------------------------------------------------------------------

Actually you don't need TCP Wrapper unless doing access restriction
when someone connects with SWAT via noncrypted connection. 


Apache-SSL httpsd.conf (part of configuration)
---------------------------------------------------------------------
<VirtualHost swat.hogehoge.com>
    ServerName swat.hogehoge.com
    TransferLog /usr/local/apache/var/log/access.swat
    ErrorLog /usr/local/apache/var/log/error.swat
    SSLCertificateFile /usr/local/apache/etc/swat-cert.pem
    SSLCertificateKeyFile /usr/local/apache/etc/swat-key.pem
    ProxyPass / http://127.0.0:901/
</VirtualHost>
---------------------------------------------------------------------

To use 'ProxyPass' directive, build Apache with mod_proxy module.

-- >8 -- signature -- >8 --
FROM    : SATOH Fumiyasu <fumiya at cij.co.jp>
WEB     : http://www.bento.ad.jp/~fumiya/
WEB(LAN): http://kumasun.si.ykhm.cij.co.jp/
SAMBA   : http://samba.bento.ad.jp/