An example .htaccess file and a simple Python CGI script that uses SSL client certificates with a specified group membership to return files in a local directory.

If you put these files in a directory served by Apache (and Apache is configured with the correct CSAIL server certificate and allows .htaccess overrides), you can use get.py as a secure way to get files in that directory.

Files in /afs/csail/group/cgs/www/data/ are served at https://groups.csail.mit.edu/cgs/ by TIG (update: and now also at http://cgs.csail.mit.edu as our main group site).

Access to files in the slides subdirectory is done by using get.py, for instance:

https://groups.csail.mit.edu/cgs/slides/get.py?file=20150311_Matt.pdf

Remember to lock down AFS so that other users can't see the files. You need to have permissions for a group to write there (cgs for us) and for the web server to read the directory (www in CSAIL). As a reference:

groups2014:/afs/csail/group/cgs/www/data/slides$ fs la
 Access list for . is
 Normal rights:
   cgs rlidwk
   cgs-admin rlidwka
   www rl