From: Rich Bowen Date: Sat, 17 Nov 2012 02:40:25 +0000 (+0000) Subject: Remove a silly paragraph that recommends doing something stupid. X-Git-Tag: 2.4.4~430 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=261f44e9b7551329028c6a7860a2c3a0497b59b8;p=apache Remove a silly paragraph that recommends doing something stupid. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1410676 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/howto/auth.xml b/docs/manual/howto/auth.xml index b893f3f05a..2bb7677970 100644 --- a/docs/manual/howto/auth.xml +++ b/docs/manual/howto/auth.xml @@ -300,8 +300,9 @@ person in (It's the -c that makes it create a new password file).

-

Now, you need to modify your .htaccess file to - look like the following:

+

Now, you need to modify your .htaccess file or + Directory block + to look like the following:

AuthType Basic @@ -325,13 +326,7 @@ Require group GroupName

Using that rather than the Require user rbowen line will allow anyone in that is listed in the password file, - and who correctly enters their password. You can even emulate - the group behavior here, by just keeping a separate password - file for each group. The advantage of this approach is that - Apache only has to check one file, rather than two. The - disadvantage is that you have to maintain a bunch of password - files, and remember to reference the right one in the - AuthUserFile directive.

+ and who correctly enters their password.

Possible problems @@ -370,11 +365,13 @@ Require group GroupName <Directory /www/docs/private> + AuthName "Private" AuthType Basic AuthBasicProvider dbm AuthDBMUserFile /www/passwords/passwd.dbm Require valid-user + </Directory> @@ -393,12 +390,14 @@ Require group GroupName <Directory /www/docs/private> + AuthName "Private" AuthType Basic AuthBasicProvider file ldap AuthUserFile /usr/local/apache/passwd/passwords AuthLDAPURL ldap://ldaphost/o=yourorg Require valid-user + </Directory> @@ -417,6 +416,7 @@ Require group GroupName <Directory /www/docs/private> + AuthName "Private" AuthType Basic AuthBasicProvider file @@ -425,6 +425,7 @@ Require group GroupName AuthGroupFile /usr/local/apache/passwd/groups Require group GroupName Require ldap-group cn=mygroup,o=yourorg + </Directory>