[Xitami] web based admin problem?

Russel Olinger xitami@lists.xitami.org
Tue, 5 Mar 2002 17:29:05 -0800


This is a multi-part message in MIME format.

------=_NextPart_000_131C_01C1C46B.402313F0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

What am I doing wrong here?

I just posted my server live and I am hosting 8 different Vitual =
Domains.  I want each domain to have the ability to administer itself =
and nothing else.  However, when I go to the /admin for each domain they =
all have full access to all admin privelages to ALL domains.  Big =
security problem, obviously.

In "security" for each domain it asks:
    Password file: domain.aut  "DEFINE"
    web-based browser admin:  Yes___ No__
    SUPER USER Password: _______________ "gives FULL ACCESS to ALL =
SERVICES" ;


Whats the difference between these three settings?  I can't seem to make =
the correlation properly.  I thought "allowing web-based browser admin" =
with a password local to that domain would allow the admin to enter ONLY =
that domain - however, the admin has FULL ACCESS to the rest of the =
server.  Oviously, I don't want to define the SUPER USER password for =
each domain, that one is obvious - or so I thought.

Again, what am I doing wrong?  Thanx

------=_NextPart_000_131C_01C1C46B.402313F0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.3315.2870" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>What am I doing wrong =
here?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I just posted my server live and I am =
hosting 8=20
different Vitual Domains.&nbsp; I want each domain to have the ability =
to=20
administer itself and nothing else.&nbsp; However, when I go to the =
/admin for=20
each domain&nbsp;they all have full access to all admin privelages to =
ALL=20
domains.&nbsp; Big security problem, obviously.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>In "security" for each domain it =
asks:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; Password file:=20
<U>domain.aut</U>&nbsp; "DEFINE"</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; web-based browser =
admin:&nbsp;=20
Yes___ No__</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; SUPER USER Password: =

_______________ "gives FULL ACCESS to ALL SERVICES" ;</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT><FONT face=3DArial =
size=3D2>Whats the difference=20
between these three settings?&nbsp; I can't seem to make the correlation =

properly.&nbsp; I thought "allowing web-based browser admin" with a =
password=20
local to that domain would allow the admin to enter ONLY that domain - =
however,=20
the admin has FULL ACCESS to the rest of the server.&nbsp; Oviously, I =
don't=20
want to define the SUPER USER password for each domain, that one is =
obvious - or=20
so I thought.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Again, what am I doing wrong?&nbsp;=20
Thanx</FONT></DIV></BODY></HTML>

------=_NextPart_000_131C_01C1C46B.402313F0--