Unity Migration Blog

I've made some changes to wds00 so that the web servers can securely deliver the WDS iso files.

Apache is now mapping /download/installation to the share "//wds00.unity.ad.ncsu.edu/wdsboot"

This share has been created, and given ntfs read rights for the group "ITD_Web Servers"

This allows apache to deliver the ISOs without granting excessive rights to \\wds00\distribution$ which has some private stuff on it that might be readable should the ntfs permission be assigned there.

For things that we want to download, please make an Apache alias for /download/whatever to a share where you keep the "whatever" files, and grant read rights in ntfs for the "ITD_Web Servers" group. This should prove much easier to secure that publishing all of DFS. :-)

Using mod_auth_sspi, WEB00 was configured with to serve the new pilot workstation installaion ISO file to certain authenticated users.

The ISO download page is HERE. The download page doesn't require authentication. The URL where the ISO file resides does. It is located HERE.

The ISO file actually resides on WDS00. I created an alias directly to this location rather than copying the ISO somewhere else because the ISO is generated automatically in this location. I will eventually link this into DFS.

The Apache conf file is called download-install-sspi.conf and resides in the conf.d directory on WEB00. This is what it looks like (Note: the greater than and less than signs were removed because the blog wouldn't allow them):

Alias /download/installation "//wds00.unity.ad.ncsu.edu/distribution$/boot"

IfModule !mod_auth_sspi.c
LoadModule sspi_auth_module modules/mod_auth_sspi.so
/IfModule

# Use SSL
RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^/download/installation/(.*) https://microsys.unity.ncsu.edu/download/installation/$1 [L,R]

IfModule mod_auth_sspi.c
Location /download/installation/
AuthName "the Unity Active Directory domain"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIOfferBasic On
SSPIOmitDomain On
# SSPIBasicPreferred
# SSPIUsernameCase lower
require group "UNITY\Domain local group name"
/Location
/IfModule