[Network Security Course Experiment]: Access Control

table of Contents

 

Experiment name: Access control        

1. The purpose of the experiment

2. Experimental environment

3. Experimental content and experimental requirements

4. Experimental process and analysis

1. Windows file permission access control

2. Access control under Apache service

5. Summary of experimental results


Experiment name: Access control             

1. The purpose of the experiment

Understand the access control permission settings and applications

Understand the creation of an access control list under the Apache server

2. Experimental environment

2 virtual machines

Windows 2008 server

Linux Centos7

3. Experimental content and experimental requirements

On the windows 2008 system, create 2 new users, give them different permissions to the test folder, and verify in turn

Set up apache service on linux system, write html homepage, modify its configuration file, set access control list, and visit this page to verify

4. Experimental process and analysis

1. Windows file permission access control

Create two new users

Create a new test folder in E drive

Set full control permissions for the administrator user

Test1 user read permission

Test2 user denied access

Under the current administrator user, we can have full control permissions such as reading and writing to the test folder

Log off the account and log in with the test1 account

It can be seen that the test1 user can enter the test folder and access and read it, but when we create a file, we tell us that you do not have write permission

We then use the test2 user to log in to the system

When we double-click to open the folder, it prompts no permission

 

2. Access control under Apache service

Check if the httpd service is open

service httpd status

Edit an html page of index.html

Change configuration file

View the local ip

Successful visit

Access control

Modify the configuration file

Create effective access users

Restart the httpd service

Service httpd restart

Use the browser to re-visit the webpage and ask for the account password

Authentication is successful

5. Summary of experimental results

In this experiment, we first created three unused users through win2008, and created a test file, giving them different permissions, and logging in different users to access the file in turn, subject to different permissions, and learned the basic way of Windows access control. Next, set up the apache service on centos7, modify its configuration file, set the access control list, and use the browser to access its page, and authentication is required.

 

Guess you like

Origin blog.csdn.net/weixin_43252204/article/details/106563949