From: Justin Erenkrantz Date: Mon, 7 Oct 2002 08:46:31 +0000 (+0000) Subject: Update the docs to fully reflect the aaa changes by linking in the new X-Git-Tag: 2.0.44~357 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=e23f2cf9931a6e5358c92b76ef6d3ab9f648cb17;p=apache Update the docs to fully reflect the aaa changes by linking in the new modules and removing the deleted ones; renaming mod_auth_anon->mod_authn_anon, and mod_access->mod_authz_host. All docs to the old modules are now deleted. Translations were kept with their old modules. (Can't read Japanese.) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97123 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/core.html.en b/docs/manual/mod/core.html.en index f02469c7a8..4472834f9b 100644 --- a/docs/manual/mod/core.html.en +++ b/docs/manual/mod/core.html.en @@ -147,11 +147,11 @@ response without an explicit character setAuthDBMGroupFile, - AuthDBMUserFile, - AuthGroupFile, + Allow use of the authorization directives (AuthDBMGroupFile, + AuthDBMUserFile, + AuthGroupFile, AuthName, - AuthType, AuthUserFile, Require, etc.). + AuthType, AuthUserFile, Require, etc.).
FileInfo
diff --git a/docs/manual/mod/core.xml b/docs/manual/mod/core.xml index 641c373298..8fb5c4ac08 100644 --- a/docs/manual/mod/core.xml +++ b/docs/manual/mod/core.xml @@ -177,12 +177,12 @@ response without an explicit character set
Allow use of the authorization directives (AuthDBMGroupFile, - AuthDBMUserFile, - AuthGroupFile, + module="mod_authn_dbm">AuthDBMGroupFile, + AuthDBMUserFile, + AuthGroupFile, AuthName, AuthType, AuthUserFile, AuthUserFile, Require, etc.).
FileInfo
diff --git a/docs/manual/mod/directives.html.en b/docs/manual/mod/directives.html.en index 8320fc36b7..bf88689afc 100644 --- a/docs/manual/mod/directives.html.en +++ b/docs/manual/mod/directives.html.en @@ -40,21 +40,21 @@
  • AddType
  • Alias
  • AliasMatch
  • -
  • Allow
  • +
  • Allow
  • AllowCONNECT
  • AllowOverride
  • -
  • Anonymous
  • -
  • Anonymous_Authoritative
  • -
  • Anonymous_LogEmail
  • -
  • Anonymous_MustGiveEmail
  • -
  • Anonymous_NoUserID
  • -
  • Anonymous_VerifyEmail
  • +
  • Anonymous
  • +
  • Anonymous_Authoritative
  • +
  • Anonymous_LogEmail
  • +
  • Anonymous_MustGiveEmail
  • +
  • Anonymous_NoUserID
  • +
  • Anonymous_VerifyEmail
  • AssignUserId
  • -
  • AuthAuthoritative
  • -
  • AuthDBMAuthoritative
  • -
  • AuthDBMGroupFile
  • -
  • AuthDBMType
  • -
  • AuthDBMUserFile
  • +
  • AuthBasicAuthoritative
  • +
  • AuthBasicProvider
  • +
  • AuthDBMGroupFile
  • +
  • AuthDBMType
  • +
  • AuthDBMUserFile
  • AuthDigestAlgorithm
  • AuthDigestDomain
  • AuthDigestFile
  • @@ -63,7 +63,7 @@
  • AuthDigestNonceFormat
  • AuthDigestNonceLifetime
  • AuthDigestQop
  • -
  • AuthGroupFile
  • +
  • AuthGroupFile
  • AuthLDAPAuthoritative
  • AuthLDAPBindDN
  • AuthLDAPBindPassword
  • @@ -78,7 +78,10 @@
  • AuthLDAPUrl
  • AuthName
  • AuthType
  • -
  • AuthUserFile
  • +
  • AuthUserFile
  • +
  • AuthzDBMAuthoritative
  • +
  • AuthzDBMType
  • +
  • AuthzGroupFileAuthoritative
  • BrowserMatch
  • BrowserMatchNoCase
  • CacheDefaultExpire
  • @@ -118,7 +121,7 @@
  • DeflateFilterNote
  • DeflateMemLevel
  • DeflateWindowSize
  • -
  • Deny
  • +
  • Deny
  • <Directory>
  • DirectoryIndex
  • <DirectoryMatch>
  • @@ -204,7 +207,7 @@
  • NoProxy
  • NumServers
  • Options
  • -
  • Order
  • +
  • Order
  • PassEnv
  • PidFile
  • ProtocolEcho
  • diff --git a/docs/manual/mod/index.html.en b/docs/manual/mod/index.html.en index 1b63d5d557..148fa3fd53 100644 --- a/docs/manual/mod/index.html.en +++ b/docs/manual/mod/index.html.en @@ -18,15 +18,14 @@ more than one multi-processing module (MPM)
    m NT.
    perchild
    Multi-Processing Module allowing for daemon processes serving requests to be assigned a variety of different userids
    prefork
    Implements a non-threaded, pre-forking web server
    worker
    Multi-Processing Module implementing a hybrid - multi-threaded multi-process web server
    top

    Other Modules

    mod_access
    Provides access control based on client hostname, IP -address, or other characteristics of the client request.
    mod_actions
    This module provides for executing CGI scripts based on + multi-threaded multi-process web server
    top

    Other Modules

    mod_actions
    This module provides for executing CGI scripts based on media type or request method.
    mod_alias
    Provides for mapping different parts of the host filesystem in the document tree and for URL redirection
    mod_asis
    Sends files that contain their own -HTTP headers
    mod_auth
    User authentication using text files
    mod_auth_anon
    Allows "anonymous" user access to authenticated - areas
    mod_auth_dbm
    Provides for user authentication using DBM - files
    mod_auth_digest
    User authentication using MD5 +HTTP headers
    mod_auth_basic
    Basic authentication
    mod_auth_digest
    User authentication using MD5 Digest Authentication.
    mod_auth_ldap
    Allows an LDAP directory to be used to store the database -for HTTP Basic authentication.
    mod_autoindex
    Generates directory indexes, +for HTTP Basic authentication.
    mod_authn_anon
    Allows "anonymous" user access to authenticated + areas
    mod_authn_dbm
    User authentication using DBM files
    mod_authn_file
    User authentication using text files
    mod_authz_dbm
    Group authorization using DBM files
    mod_authz_groupfile
    Group authorization using plaintext files
    mod_authz_host
    Group authorizations based on host (name or IP +address)
    mod_autoindex
    Generates directory indexes, automatically, similar to the Unix ls command or the Win32 dir shell command
    mod_cache
    Content cache keyed to URIs.
    mod_cern_meta
    CERN httpd metafile semantics
    mod_cgi
    Execution of CGI scripts
    mod_cgid
    Execution of CGI scripts using an external CGI daemon
    mod_charset_lite
    Specify character set translation or recoding
    mod_dav
    Distributed Authoring and Versioning diff --git a/docs/manual/mod/mod_auth.html.en b/docs/manual/mod/mod_auth.html.en deleted file mode 100644 index 6c9058b264..0000000000 --- a/docs/manual/mod/mod_auth.html.en +++ /dev/null @@ -1,142 +0,0 @@ - - -mod_auth - Apache HTTP Server
    <-

    Apache Module mod_auth

    Description: - User authentication using text files
    Status: - Base
    Module Identifier: - auth_module
    Source File: - mod_auth.c

    Summary

    - -

    This module allows the use of HTTP Basic Authentication to - restrict access by looking up users in plain text password and - group files. Similar functionality and greater scalability is - provided by mod_auth_dbm. HTTP Digest - Authentication is provided by - mod_auth_digest.

    - -
    top

    AuthAuthoritative Directive

    Description: - Sets whether authorization and authentication are -passed to lower level modules
    Syntax: - AuthAuthoritative on|off
    Default: - AuthAuthoritative on
    Context: - directory, .htaccess
    Override: - AuthConfig
    Status: - Base
    Module: - mod_auth
    -
    This information has not been updated for Apache 2.0, which - uses a different system for module ordering.
    - -

    Setting the AuthAuthoritative directive - explicitly to 'off' allows for both - authentication and authorization to be passed on to lower level - modules (as defined in the Configuration and - modules.c files) if there is no - userID or rule matching the supplied - userID. If there is a userID and/or rule specified; the usual - password and access checks will be applied and a failure will give - an Authorization Required reply.

    - -

    So if a userID appears in the database of more than one module; - or if a valid Require - directive applies to more than one module; then the first module - will verify the credentials; and no access is passed on; - regardless of the AuthAuthoritative setting.

    - -

    A common use for this is in conjunction with one of the - database modules; such as mod_auth_dbm, - mod_auth_msql, and mod_auth_anon. - These modules supply the bulk of the user credential checking; but - a few (administrator) related accesses fall through to a lower - level with a well protected AuthUserFile.

    - -

    By default; control is not passed on; and an unknown userID or - rule will result in an Authorization Required reply. Not setting - it thus keeps the system secure; and forces an NCSA compliant - behaviour.

    - -

    Security

    Do consider the implications of - allowing a user to allow fall-through in his .htaccess file; and - verify that this is really what you want; Generally it is easier - to just secure a single .htpasswd file, than it is to secure a - database such as mSQL. Make sure that the AuthUserFile and the AuthGroupFile are stored outside the - document tree of the web-server; do not put them in the - directory that they protect. Otherwise, clients will be able to - download the AuthUserFile - and the AuthGroupFile. -
    -
    top

    AuthGroupFile Directive

    Description: - Sets the name of a text file containing the list -of user groups for authentication
    Syntax: - AuthGroupFile file-path
    Context: - directory, .htaccess
    Override: - AuthConfig
    Status: - Base
    Module: - mod_auth
    -

    The AuthGroupFile directive sets the - name of a textual file containing the list of user groups for user - authentication. File-path is the path to the group - file. If it is not absolute (i.e., if it doesn't begin - with a slash), it is treated as relative to the ServerRoot.

    - -

    Each line of the group file contains a groupname followed by a - colon, followed by the member usernames separated by spaces. - Example:

    - -

    mygroup: bob joe anne

    - -

    Note that searching large text files is very - inefficient; AuthDBMGroupFile should be used - instead.

    - -

    Security

    -

    Make sure that the AuthGroupFile is - stored outside the document tree of the web-server; do not - put it in the directory that it protects. Otherwise, clients will - be able to download the AuthGroupFile.

    -
    -
    top

    AuthUserFile Directive

    Description: - Sets the name of a text file containing the list of users and -passwords for authentication
    Syntax: - AuthUserFile file-path
    Context: - directory, .htaccess
    Override: - AuthConfig
    Status: - Base
    Module: - mod_auth
    -

    The AuthUserFile directive sets the name - of a textual file containing the list of users and passwords for - user authentication. File-path is the path to the user - file. If it is not absolute (i.e., if it doesn't begin - with a slash), it is treated as relative to the ServerRoot.

    - -

    Each line of the user file contains a username followed by - a colon, followed by the crypt() encrypted - password. The behavior of multiple occurrences of the same user is - undefined.

    - -

    The utility htpasswd - which is installed as part of the binary distribution, or which - can be found in src/support, is used to maintain - this password file. See the man page for more - details. In short:

    - -

    Create a password file 'Filename' with 'username' as the - initial ID. It will prompt for the password:

    -

    htpasswd -c Filename username

    - -

    Add or modify 'username2' in the password file 'Filename':

    -

    htpasswd Filename username2

    - -

    Note that searching large text files is very - inefficient; AuthDBMUserFile should be used - instead.

    - -

    Security

    -

    Make sure that the AuthUserFile is - stored outside the document tree of the web-server; do not - put it in the directory that it protects. Otherwise, clients will - be able to download the AuthUserFile.

    -
    -
    \ No newline at end of file diff --git a/docs/manual/mod/mod_auth.html.ja.jis b/docs/manual/mod/mod_auth.html.ja.jis deleted file mode 100644 index 78f9544031..0000000000 --- a/docs/manual/mod/mod_auth.html.ja.jis +++ /dev/null @@ -1,163 +0,0 @@ - - -mod_auth - Apache HTTP $B%5!<%P(B
    <-

    Apache $B%b%8%e!<%k(B mod_auth

    $B@bL@(B: - $B%F%-%9%H%U%!%$%k$rMQ$$$?%f!<%6G'>Z(B
    $B%9%F!<%?%9(B: - Base
    $B%b%8%e!<%k<1JL;R(B: - auth_module
    $B%=!<%9%U%!%$(B$B%k(B: - mod_auth.c

    $B35MW(B

    - -

    $B%W%l%$%s%F%-%9%H$N%Q%9%o!<%I%U%!%$%k$H%0%k!<%W%U%!%$%k$r8!::$7(B$B$F(B - $B%f!<%6$rC5$9$3$H$G!"(BHTTP $B4pK\G'>Z$G%"%/%;%9@)8B(B$B$G$-$k$h$&$K$7$^$9!#(B - $B;w$?$h$&$J5!G=$G!"$b$C$HBg$-$J%9%1!<%i%S%j%F%#$r;}$C$?$b$N$O!"(B - mod_auth_dbm $B$GDs6!$5$l$F$$$^$9!#(B - $B$^$?!"(BHTTP $B%@%$%8%'%9%HG'>Z$O(B mod_auth_digest - $B$GDs6!$5$l$F$$$^$9!#(B

    - -
    top

    AuthAuthoritative $B%G%#%l%/%F%#%V(B

    $B@bL@(B: - $BG'>Z$H>5G'%W%m%;%9$r!"(B -$B$h$jDc$$%l%Y%k$N%b%8%e!<%k$K0\9T$5$;$k$+$I$&$+$r@_Dj(B$B$9$k(B
    $B9=J8(B: - AuthAuthoritative on|off
    $B%G%U%)%k%H(B: - AuthAuthoritative on
    $B%3%s%F%-%9%H(B: - $B%G%#%l%/%H%j(B, .htaccess
    $B>e=q$-(B: - AuthConfig
    $B%9%F!<%?%9(B: - Base
    $B%b%8%e!<%k(B: - mod_auth
    - -
    $B5-:\$5$l$F$$$k>pJs$O!"L$$@(B Apache 2.0 $B8~$1$K%"%C%W%G!<%H$5$l$F$$$^$;$s!#(B -Apache 2.0 $B$G$O!"%b%8%e!<%k$N=g=x$E$1$K0[$J$k;EAH$_$r;H$C$F$$$^$9!#(B
    - -

    AuthAuthoritative - $B%G%#%l%/%F%#%V$GL@<(E*$K(B 'off'$B$K@_Dj$9$k$H!"(B - $BM?$($i$l$?G'>Z%f!<%6(B ID $B$KBP$7$F(B$B%f!<%6(B ID $B$,$J$$(B - $B$^$?$O(B$B%k!<%k$,$J$$(B$B>l9g$K!"(B - $BG'>Z$H>5G'$NN>J}$N%W%m%;%9$,!"(B - $B$h$jDc$$%l%Y%k$N%b%8%e!<%k(B (Configuration $B$H(B - modules.c $B%U%!%$%k$GDj5A(B) $B$K0\9T$9$k$h$&$K$G$-$^$9!#(B - $B%f!<%6(B ID $B$,$"$k!"$+$D$^$?$O!"%k!<%k$,;XDj$5$l$F$$$k>l9g$O!"(B - $BDL>o$N%Q%9%o!<%I$H%"%/%;%9%A%'%C%/$,E,MQ$5$l$F!"(B - $BG'>Z$K<:GT$9$k$H!V(B Authorization Required $B!W1~Ez$,JV$5$l$^$9!#(B

    - -

    $B$G$9$+$i!"Fs$D0J>e$N%b%8%e!<%k$N%G!<%?%Y!<%9$GF10l$N(B - $B%f!<%6(B ID $B$,8=$o$l$?$j!"(B - $B$^$?$O!"@5$7$$(B Require - $B%G%#%l%/%F%#%V$,Fs$D0J>e$N%b%8%e!<%k$G8=$o$l$?$j$7$?>l9g$O!"(B - $B0l$DL\$N%b%8%e!<%k$,G'Dj$r9T$C$F!"(BAuthAuthoritative $B@_Dj$K4X$o$i$:!"(B - $B%"%/%;%9$O0\9T$7$^$;$s!#(B

    - -

    $B0lHLE*$J;HMQK!$O!"(Bmod_auth_dbm, - mod_auth_msql, mod_auth_anon - $B$H$$$C$?%G!<%?%Y!<%9%b%8%e!<%k$N0l$D$HAH$_9g$o$;$k$3$H$G$9!#(B - $B$3$l$i$N%b%8%e!<%k$OB?$/$N%f!<%6;q3J8!::$rDs6!$7$F$/$l$^$9!#(B - $B$7$+$7!">/?t$N(B ($B4IM}AuthUserFile - $B$GNI$/J]8n$5$l$?!"$h$jDc%l%Y%k$K0\9T$9$k$h$&$K$7$^$9!#(B

    - -

    $B%G%U%)%k%H$G$O!"@)8f$O0\9T$7$^$;$s!#$=$7$F!"L$CN$N%f!<%6(B ID $B$d(B - $B%k!<%k$,$"$C$F$b!V(BAuthorization Required$B!W1~Ez$,JV$5$l$^$9!#(B - $B$G$9$+$i!"$3$N%G%#%l%/%F%#%V@_Dj$7$J$$$3$H$G%7%9%F%`$N0BA4$r0];}$G$-$F!"$^$?!"(B - NCSA $B=`5r$N5sF0$r6/@)$G$-$^$9!#(B

    - -

    $B%;%-%e%j%F%#(B

    $B%f!<%6$,<+J,<+?H$G:n@.$7$?(B - .htaccess $B%U%!%$%k$GG'>Z$G$-$k$h$&$K$9$k$3$H$N1F6A$r(B - $B9MN8$KF~$l$F$*$$$F$/$@$5$$!#$=$7$F!"(B - $B$=$l$,K\Ev$K4uK>$N5sF0$G$"$k$+$I$&$+$r8!F$$7$F$/$@$5$$!#(B - $B0lHLE*$K8@$C$F!"(BmSQL $B$H$$$C$?%G!<%?%Y!<%9$N%;%-%e%j%F%#J]8n$h$j$b!"(B - $BC1=c$K0l$D$N%U%!%$%k(B .htpasswd $B$N%;%-%e%j%F%#$rJ]8n$9$kJ}$,MF0W$G$9!#(B - AuthUserFile $B$H(B - AuthGroupFile $B$O!"(B - $B%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$KJ]4I$9$k(B - $B$h$&$K$7$F$/$@$5$$!#J]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B - $BCV$+$J$$$G2<$5$$(B$B!#$=$&$7$J$$$H(B - AuthUserFile $B$H(B - AuthGroupFile - $B$O%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B
    -
    top

    AuthGroupFile $B%G%#%l%/%F%#%V(B

    $B@bL@(B: - $BG'>Z$K;HMQ$9$k%f!<%6%0%k!<%W$N0lMw$,3JG<$5$l$F$$$k!"(B -$B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$9$k(B
    $B9=J8(B: - AuthGroupFile file-path
    $B%3%s%F%-%9%H(B: - $B%G%#%l%/%H%j(B, .htaccess
    $B>e=q$-(B: - AuthConfig
    $B%9%F!<%?%9(B: - Base
    $B%b%8%e!<%k(B: - mod_auth
    -

    AuthGroupFile $B%G%#%l%/%F%#%V$O!"(B - $BG'>Z$K;HMQ$9$k%f!<%6%0%k!<%W$N0lMw$,3JG<$5$l$F$$$k!"(B - $B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$7$^$9!#(B - file-path $B$O%0%k!<%W%U%!%$%k$X(B$B$N%Q%9$G$9!#(B - $B$b$7@dBP%Q%9$G$J$1$l$P(B - ($B$D$^$j(B $B%9%i%C%7%e$G;O$^$i$J$$%Q%9$G$"$l$P(B) - $B!"(BServerRoot - $B$+$i$NAjBP%Q%9$H$7$F07$o$l$^$9!#(B

    - -

    $B%0%k!<%W%U%!%$%k3F9T$O!"%0%k!<%WL>!"%3%m%s!"$=$7$F(B - $B%9%Z!<%96h@Z$j$G$=$N%a%s%P!<$N%f!<%6L>$r5-=R$7$^$9!#(B - $BNc$($P(B:

    - -

    mygroup: bob joe anne

    - -

    $BBg$-$J%U%!%$%k$rC5:w$9$k$N$O!"(B$BHs>o$K(B$B8zN($,0-$$$H$$$&E@$K(B - $BCm0U$7$F$/$@$5$$!#$=$N$h$&$J>l9g$O!"(B - AuthDBMGroupFile - $B$rBe$o$j$K;H$&$Y$-$G$7$g$&!#(B

    - -

    $B%;%-%e%j%F%#(B

    -

    AuthGroupFile $B$O!"(B - $B%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$K(B - $BJ]4I$9$k$h$&$K$7$F$/$@$5$$!#(B - $BJ]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B$BCV$+$J$$$G2<$5$$(B$B!#(B - $B$=$&$7$J$$$H(B AuthGroupFile $B$O(B - $B%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B

    -
    -
    top

    AuthUserFile $B%G%#%l%/%F%#%V(B

    $B@bL@(B: - $BG'>Z$K;HMQ$9$k%f!<%6$H%Q%9%o!<%I$N0lMw$,3JG<$5$l$F$$$k!"(B -$B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$9$k(B
    $B9=J8(B: - AuthUserFile file-path
    $B%3%s%F%-%9%H(B: - $B%G%#%l%/%H%j(B, .htaccess
    $B>e=q$-(B: - AuthConfig
    $B%9%F!<%?%9(B: - Base
    $B%b%8%e!<%k(B: - mod_auth
    -

    AuthUserFile $B%G%#%l%/%F%#%V$O!"(B - $B%f!<%6G'>Z$N$?$a$N%f!<%6$H%Q%9%o!<%I$N0lMw$r3JG<$7$?(B - $B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$7$^$9!#(Bfile-path - $B$O%f!<%6%U%!%$%k$X$N%Q%9$G$9!#(B - $B$b$7@dBP%Q%9$G$J$1$l$P(B - ($B$D$^$j(B $B%9%i%C%7%e$G;O$^$i$J$$%Q%9$G$"$l$P(B) - $B!"(BServerRoot - $B$+$i$NAjBP%Q%9$H$7$F07$o$l$^$9!#(B

    - -

    $B%f!<%6%U%!%$%k$N3F9T$K$O!"%f!<%6L>!"%3%m%s!"(B - crypt() $B$G0E9f2=$7$?%Q%9%o!<%I$r5-=R$7$^$9!#(B - $BF10l%f!<%6$,J#?t2sEPO?$5$l$?;~$N5sF0$ODj5A$5$l$F$$$^$;$s!#(B

    - -

    $B%P%$%J%jG[I[$N0lIt$H$7$F%$%s%9%H!<%k$5$l$k$+!"(B - $B$"$k$$$O(B src/support $B$K$"$k(B - htpasswd - $B%f!<%F%#%j%F%#$G!"$3$N%Q%9%o!<%I%U%!%$%k$r%a%$%s%F%J%s%9$7$^$9!#(B - $B>\:Y$O(B man $B%Z!<%8$r$4MwD:$/$H$7$F!"4JC1$K$O(B:

    - -

    $B=i4|(B ID username $B$G!"(BFilename - $B$H$$$&%Q%9%o!<%I%U%!%$%k$r@8@.$7$^$9!#(B - $B -

    htpasswd -c Filename username

    - -

    $B%Q%9%o!<%I%U%!%$%k(B Filename $B$K!"(Busername2 - $B$rDI2C$7$?$j=$@5$7$?$j$7$^$9(B:

    -

    htpasswd Filename username2

    - -

    ($BLuCm(B: $BHs>o$KB?$/$N%f!<%6$rEPO?$9$k$HBg$-$J%U%!%$%k$K$J$j$^$9$,(B) - $BBg$-$J%F%-%9%H%U%!%$%k$r8!:w$9$k$N$O(B$BHs>o$K(B$B8zN($,0-$$(B - $B$H$$$&$3$H$KCm0U$7$F$/$@$5$$!#$=$N$h$&$JI,MW$N$"$k;~$O!"(B - AuthDBMUserFile - $B$rBe$o$j$K;H$C$F$/$@$5$$!#(B

    - -

    $B%;%-%e%j%F%#(B

    -

    AuthUserFile - $B$O!"%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$KJ]4I$9$k$h$&$K$7$F$/$@$5$$!#(B - $BJ]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B$BCV$+$J$$$G2<$5$$(B$B!#(B - $B$=$&$7$J$$$H(B AuthUserFile $B$O(B - $B%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B

    - -
    \ No newline at end of file diff --git a/docs/manual/mod/mod_auth.xml b/docs/manual/mod/mod_auth.xml deleted file mode 100644 index ac68b00d90..0000000000 --- a/docs/manual/mod/mod_auth.xml +++ /dev/null @@ -1,171 +0,0 @@ - - - - - -mod_auth -User authentication using text files -Base -mod_auth.c -auth_module - - - -

    This module allows the use of HTTP Basic Authentication to - restrict access by looking up users in plain text password and - group files. Similar functionality and greater scalability is - provided by mod_auth_dbm. HTTP Digest - Authentication is provided by - mod_auth_digest.

    - -
    -Require -Satisfy -AuthName -AuthType - - -AuthGroupFile -Sets the name of a text file containing the list -of user groups for authentication -AuthGroupFile file-path -directory.htaccess - -AuthConfig - - -

    The AuthGroupFile directive sets the - name of a textual file containing the list of user groups for user - authentication. File-path is the path to the group - file. If it is not absolute (i.e., if it doesn't begin - with a slash), it is treated as relative to the ServerRoot.

    - -

    Each line of the group file contains a groupname followed by a - colon, followed by the member usernames separated by spaces. - Example:

    - - mygroup: bob joe anne - -

    Note that searching large text files is very - inefficient; AuthDBMGroupFile should be used - instead.

    - - Security -

    Make sure that the AuthGroupFile is - stored outside the document tree of the web-server; do not - put it in the directory that it protects. Otherwise, clients will - be able to download the AuthGroupFile.

    -
    -
    -
    - - -AuthUserFile -Sets the name of a text file containing the list of users and -passwords for authentication -AuthUserFile file-path -directory.htaccess - -AuthConfig - - -

    The AuthUserFile directive sets the name - of a textual file containing the list of users and passwords for - user authentication. File-path is the path to the user - file. If it is not absolute (i.e., if it doesn't begin - with a slash), it is treated as relative to the ServerRoot.

    - -

    Each line of the user file contains a username followed by - a colon, followed by the crypt() encrypted - password. The behavior of multiple occurrences of the same user is - undefined.

    - -

    The utility htpasswd - which is installed as part of the binary distribution, or which - can be found in src/support, is used to maintain - this password file. See the man page for more - details. In short:

    - -

    Create a password file 'Filename' with 'username' as the - initial ID. It will prompt for the password:

    - htpasswd -c Filename username - -

    Add or modify 'username2' in the password file 'Filename':

    - htpasswd Filename username2 - -

    Note that searching large text files is very - inefficient; AuthDBMUserFile should be used - instead.

    - - Security -

    Make sure that the AuthUserFile is - stored outside the document tree of the web-server; do not - put it in the directory that it protects. Otherwise, clients will - be able to download the AuthUserFile.

    -
    -
    -
    - - -AuthAuthoritative -Sets whether authorization and authentication are -passed to lower level modules -AuthAuthoritative on|off -AuthAuthoritative on -directory.htaccess - -AuthConfig - - - This information has not been updated for Apache 2.0, which - uses a different system for module ordering. - -

    Setting the AuthAuthoritative directive - explicitly to 'off' allows for both - authentication and authorization to be passed on to lower level - modules (as defined in the Configuration and - modules.c files) if there is no - userID or rule matching the supplied - userID. If there is a userID and/or rule specified; the usual - password and access checks will be applied and a failure will give - an Authorization Required reply.

    - -

    So if a userID appears in the database of more than one module; - or if a valid Require - directive applies to more than one module; then the first module - will verify the credentials; and no access is passed on; - regardless of the AuthAuthoritative setting.

    - -

    A common use for this is in conjunction with one of the - database modules; such as mod_auth_dbm, - mod_auth_msql, and mod_auth_anon. - These modules supply the bulk of the user credential checking; but - a few (administrator) related accesses fall through to a lower - level with a well protected AuthUserFile.

    - -

    By default; control is not passed on; and an unknown userID or - rule will result in an Authorization Required reply. Not setting - it thus keeps the system secure; and forces an NCSA compliant - behaviour.

    - - Security Do consider the implications of - allowing a user to allow fall-through in his .htaccess file; and - verify that this is really what you want; Generally it is easier - to just secure a single .htpasswd file, than it is to secure a - database such as mSQL. Make sure that the AuthUserFile and the AuthGroupFile are stored outside the - document tree of the web-server; do not put them in the - directory that they protect. Otherwise, clients will be able to - download the AuthUserFile - and the AuthGroupFile. - -
    -
    - -
    diff --git a/docs/manual/mod/mod_auth.xml.ja b/docs/manual/mod/mod_auth.xml.ja deleted file mode 100644 index 0f1e4ea0c8..0000000000 --- a/docs/manual/mod/mod_auth.xml.ja +++ /dev/null @@ -1,186 +0,0 @@ - - - - - - -mod_auth -$B%F%-%9%H%U%!%$%k$rMQ$$$?%f!<%6G'>Z(B -Base -mod_auth.c -auth_module - - - -

    $B%W%l%$%s%F%-%9%H$N%Q%9%o!<%I%U%!%$%k$H%0%k!<%W%U%!%$%k$r8!::$7$F(B - $B%f!<%6$rC5$9$3$H$G!"(BHTTP $B4pK\G'>Z$G%"%/%;%9@)8B$G$-$k$h$&$K$7$^$9!#(B - $B;w$?$h$&$J5!G=$G!"$b$C$HBg$-$J%9%1!<%i%S%j%F%#$r;}$C$?$b$N$O!"(B - mod_auth_dbm $B$GDs6!$5$l$F$$$^$9!#(B - $B$^$?!"(BHTTP $B%@%$%8%'%9%HG'>Z$O(B mod_auth_digest - $B$GDs6!$5$l$F$$$^$9!#(B

    - -
    -Require -Satisfy -AuthName -AuthType - - -AuthGroupFile -$BG'>Z$K;HMQ$9$k%f!<%6%0%k!<%W$N0lMw$,3JG<$5$l$F$$$k!"(B -$B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$9$k(B -AuthGroupFile file-path -$B%G%#%l%/%H%j(B.htaccess - -AuthConfig - - -

    AuthGroupFile $B%G%#%l%/%F%#%V$O!"(B - $BG'>Z$K;HMQ$9$k%f!<%6%0%k!<%W$N0lMw$,3JG<$5$l$F$$$k!"(B - $B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$7$^$9!#(B - file-path $B$O%0%k!<%W%U%!%$%k$X$N%Q%9$G$9!#(B - $B$b$7@dBP%Q%9$G$J$1$l$P(B - ($B$D$^$j(B $B%9%i%C%7%e$G;O$^$i$J$$%Q%9$G$"$l$P(B) - $B!"(BServerRoot - $B$+$i$NAjBP%Q%9$H$7$F07$o$l$^$9!#(B

    - -

    $B%0%k!<%W%U%!%$%k3F9T$O!"%0%k!<%WL>!"%3%m%s!"$=$7$F(B - $B%9%Z!<%96h@Z$j$G$=$N%a%s%P!<$N%f!<%6L>$r5-=R$7$^$9!#(B - $BNc$($P(B:

    - -mygroup: bob joe anne - -

    $BBg$-$J%U%!%$%k$rC5:w$9$k$N$O!"(B$BHs>o$K(B$B8zN($,0-$$$H$$$&E@$K(B - $BCm0U$7$F$/$@$5$$!#$=$N$h$&$J>l9g$O!"(B - AuthDBMGroupFile - $B$rBe$o$j$K;H$&$Y$-$G$7$g$&!#(B

    - -$B%;%-%e%j%F%#(B -

    AuthGroupFile $B$O!"(B - $B%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$K(B - $BJ]4I$9$k$h$&$K$7$F$/$@$5$$!#(B - $BJ]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B$BCV$+$J$$$G2<$5$$(B$B!#(B - $B$=$&$7$J$$$H(B AuthGroupFile $B$O(B - $B%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B

    -
    -
    -
    - - -AuthUserFile -$BG'>Z$K;HMQ$9$k%f!<%6$H%Q%9%o!<%I$N0lMw$,3JG<$5$l$F$$$k!"(B -$B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$9$k(B -AuthUserFile file-path -$B%G%#%l%/%H%j(B.htaccess - -AuthConfig - - -

    AuthUserFile $B%G%#%l%/%F%#%V$O!"(B - $B%f!<%6G'>Z$N$?$a$N%f!<%6$H%Q%9%o!<%I$N0lMw$r3JG<$7$?(B - $B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$7$^$9!#(Bfile-path - $B$O%f!<%6%U%!%$%k$X$N%Q%9$G$9!#(B - $B$b$7@dBP%Q%9$G$J$1$l$P(B - ($B$D$^$j(B $B%9%i%C%7%e$G;O$^$i$J$$%Q%9$G$"$l$P(B) - $B!"(BServerRoot - $B$+$i$NAjBP%Q%9$H$7$F07$o$l$^$9!#(B

    - -

    $B%f!<%6%U%!%$%k$N3F9T$K$O!"%f!<%6L>!"%3%m%s!"(B - crypt() $B$G0E9f2=$7$?%Q%9%o!<%I$r5-=R$7$^$9!#(B - $BF10l%f!<%6$,J#?t2sEPO?$5$l$?;~$N5sF0$ODj5A$5$l$F$$$^$;$s!#(B

    - -

    $B%P%$%J%jG[I[$N0lIt$H$7$F%$%s%9%H!<%k$5$l$k$+!"(B - $B$"$k$$$O(B src/support $B$K$"$k(B - htpasswd - $B%f!<%F%#%j%F%#$G!"$3$N%Q%9%o!<%I%U%!%$%k$r%a%$%s%F%J%s%9$7$^$9!#(B - $B>\:Y$O(B man $B%Z!<%8$r$4MwD:$/$H$7$F!"4JC1$K$O(B:

    - -

    $B=i4|(B ID username $B$G!"(BFilename - $B$H$$$&%Q%9%o!<%I%U%!%$%k$r@8@.$7$^$9!#(B - $B -htpasswd -c Filename username - -

    $B%Q%9%o!<%I%U%!%$%k(B Filename $B$K!"(Busername2 - $B$rDI2C$7$?$j=$@5$7$?$j$7$^$9(B:

    -htpasswd Filename username2 - -

    ($BLuCm(B: $BHs>o$KB?$/$N%f!<%6$rEPO?$9$k$HBg$-$J%U%!%$%k$K$J$j$^$9$,(B) - $BBg$-$J%F%-%9%H%U%!%$%k$r8!:w$9$k$N$O(B$BHs>o$K(B$B8zN($,0-$$(B - $B$H$$$&$3$H$KCm0U$7$F$/$@$5$$!#$=$N$h$&$JI,MW$N$"$k;~$O!"(B - AuthDBMUserFile - $B$rBe$o$j$K;H$C$F$/$@$5$$!#(B

    - -$B%;%-%e%j%F%#(B -

    AuthUserFile - $B$O!"%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$KJ]4I$9$k$h$&$K$7$F$/$@$5$$!#(B - $BJ]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B$BCV$+$J$$$G2<$5$$(B$B!#(B - $B$=$&$7$J$$$H(B AuthUserFile $B$O(B - $B%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B

    - -
    -
    - - -AuthAuthoritative -$BG'>Z$H>5G'%W%m%;%9$r!"(B -$B$h$jDc$$%l%Y%k$N%b%8%e!<%k$K0\9T$5$;$k$+$I$&$+$r@_Dj$9$k(B -AuthAuthoritative on|off -AuthAuthoritative on -$B%G%#%l%/%H%j(B.htaccess - -AuthConfig - - - -$B5-:\$5$l$F$$$k>pJs$O!"L$$@(B Apache 2.0 $B8~$1$K%"%C%W%G!<%H$5$l$F$$$^$;$s!#(B -Apache 2.0 $B$G$O!"%b%8%e!<%k$N=g=x$E$1$K0[$J$k;EAH$_$r;H$C$F$$$^$9!#(B - -

    AuthAuthoritative - $B%G%#%l%/%F%#%V$GL@<(E*$K(B 'off'$B$K@_Dj$9$k$H!"(B - $BM?$($i$l$?G'>Z%f!<%6(B ID $B$KBP$7$F(B$B%f!<%6(B ID $B$,$J$$(B - $B$^$?$O(B$B%k!<%k$,$J$$(B$B>l9g$K!"(B - $BG'>Z$H>5G'$NN>J}$N%W%m%;%9$,!"(B - $B$h$jDc$$%l%Y%k$N%b%8%e!<%k(B (Configuration $B$H(B - modules.c $B%U%!%$%k$GDj5A(B) $B$K0\9T$9$k$h$&$K$G$-$^$9!#(B - $B%f!<%6(B ID $B$,$"$k!"$+$D$^$?$O!"%k!<%k$,;XDj$5$l$F$$$k>l9g$O!"(B - $BDL>o$N%Q%9%o!<%I$H%"%/%;%9%A%'%C%/$,E,MQ$5$l$F!"(B - $BG'>Z$K<:GT$9$k$H!V(B Authorization Required $B!W1~Ez$,JV$5$l$^$9!#(B

    - -

    $B$G$9$+$i!"Fs$D0J>e$N%b%8%e!<%k$N%G!<%?%Y!<%9$GF10l$N(B - $B%f!<%6(B ID $B$,8=$o$l$?$j!"(B - $B$^$?$O!"@5$7$$(B Require - $B%G%#%l%/%F%#%V$,Fs$D0J>e$N%b%8%e!<%k$G8=$o$l$?$j$7$?>l9g$O!"(B - $B0l$DL\$N%b%8%e!<%k$,G'Dj$r9T$C$F!"(BAuthAuthoritative $B@_Dj$K4X$o$i$:!"(B - $B%"%/%;%9$O0\9T$7$^$;$s!#(B

    - -

    $B0lHLE*$J;HMQK!$O!"(Bmod_auth_dbm, - mod_auth_msql, mod_auth_anon - $B$H$$$C$?%G!<%?%Y!<%9%b%8%e!<%k$N0l$D$HAH$_9g$o$;$k$3$H$G$9!#(B - $B$3$l$i$N%b%8%e!<%k$OB?$/$N%f!<%6;q3J8!::$rDs6!$7$F$/$l$^$9!#(B - $B$7$+$7!">/?t$N(B ($B4IM}AuthUserFile - $B$GNI$/J]8n$5$l$?!"$h$jDc%l%Y%k$K0\9T$9$k$h$&$K$7$^$9!#(B

    - -

    $B%G%U%)%k%H$G$O!"@)8f$O0\9T$7$^$;$s!#$=$7$F!"L$CN$N%f!<%6(B ID $B$d(B - $B%k!<%k$,$"$C$F$b!V(BAuthorization Required$B!W1~Ez$,JV$5$l$^$9!#(B - $B$G$9$+$i!"$3$N%G%#%l%/%F%#%V@_Dj$7$J$$$3$H$G%7%9%F%`$N0BA4$r0];}$G$-$F!"$^$?!"(B - NCSA $B=`5r$N5sF0$r6/@)$G$-$^$9!#(B

    - - $B%;%-%e%j%F%#(B $B%f!<%6$,<+J,<+?H$G:n@.$7$?(B - .htaccess $B%U%!%$%k$GG'>Z$G$-$k$h$&$K$9$k$3$H$N1F6A$r(B - $B9MN8$KF~$l$F$*$$$F$/$@$5$$!#$=$7$F!"(B - $B$=$l$,K\Ev$K4uK>$N5sF0$G$"$k$+$I$&$+$r8!F$$7$F$/$@$5$$!#(B - $B0lHLE*$K8@$C$F!"(BmSQL $B$H$$$C$?%G!<%?%Y!<%9$N%;%-%e%j%F%#J]8n$h$j$b!"(B - $BC1=c$K0l$D$N%U%!%$%k(B .htpasswd $B$N%;%-%e%j%F%#$rJ]8n$9$kJ}$,MF0W$G$9!#(B - AuthUserFile $B$H(B - AuthGroupFile $B$O!"(B - $B%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$KJ]4I$9$k(B - $B$h$&$K$7$F$/$@$5$$!#J]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B - $BCV$+$J$$$G2<$5$$(B$B!#$=$&$7$J$$$H(B - AuthUserFile $B$H(B - AuthGroupFile - $B$O%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B -
    -
    - -
    diff --git a/docs/manual/mod/mod_auth_basic.html.en b/docs/manual/mod/mod_auth_basic.html.en index dd794fa69f..ab5d358ad1 100644 --- a/docs/manual/mod/mod_auth_basic.html.en +++ b/docs/manual/mod/mod_auth_basic.html.en @@ -9,7 +9,7 @@ BaseModule Identifier: auth_basic_moduleSource File: mod_auth_basic.cCompatibility: - Available in Apache 2.0.42 and later

    Summary

    + Available in Apache 2.0.44 and later

    Summary

    This module allows the use of HTTP Basic Authentication to restrict access by looking up users in the given providers. diff --git a/docs/manual/mod/mod_auth_basic.xml b/docs/manual/mod/mod_auth_basic.xml index 03a6735a32..0d0ab8dbe2 100644 --- a/docs/manual/mod/mod_auth_basic.xml +++ b/docs/manual/mod/mod_auth_basic.xml @@ -8,7 +8,7 @@ Base mod_auth_basic.c auth_basic_module -Available in Apache 2.0.42 and later +Available in Apache 2.0.44 and later

    diff --git a/docs/manual/mod/mod_auth_basic.xml.ja b/docs/manual/mod/mod_auth_basic.xml.ja index 42df7b5499..0f1e4ea0c8 100644 --- a/docs/manual/mod/mod_auth_basic.xml.ja +++ b/docs/manual/mod/mod_auth_basic.xml.ja @@ -2,62 +2,140 @@ - -mod_auth_basic -$B4pK\G'>Z(B + +mod_auth +$B%F%-%9%H%U%!%$%k$rMQ$$$?%f!<%6G'>Z(B Base -mod_auth_basic.c -auth_basic_module -Apache 2.0.42 $B0J9_(B +mod_auth.c +auth_module -

    $BM?$($i$l$?%W%m%P%$%@(B ($BLuCm(B: $BG'>Z$G$N>H2q$r9T$&Ld$$9g$o$;@h(B) - $B$G%f!<%6$r8!:w$7!"(BHTTP $B4pK\G'>Z$G%"%/%;%9@)8B$G$-$k$h$&$K$J$j$^$9!#(B - HTTP $B%@%$%8%'%9%HG'>Z$K$D$$$F$O(B mod_auth_digest - $B$GDs6!$5$l$^$9!#(B

    +

    $B%W%l%$%s%F%-%9%H$N%Q%9%o!<%I%U%!%$%k$H%0%k!<%W%U%!%$%k$r8!::$7$F(B + $B%f!<%6$rC5$9$3$H$G!"(BHTTP $B4pK\G'>Z$G%"%/%;%9@)8B$G$-$k$h$&$K$7$^$9!#(B + $B;w$?$h$&$J5!G=$G!"$b$C$HBg$-$J%9%1!<%i%S%j%F%#$r;}$C$?$b$N$O!"(B + mod_auth_dbm $B$GDs6!$5$l$F$$$^$9!#(B + $B$^$?!"(BHTTP $B%@%$%8%'%9%HG'>Z$O(B mod_auth_digest + $B$GDs6!$5$l$F$$$^$9!#(B

    +Require +Satisfy AuthName AuthType -AuthBasicProvider -$B$3$N0LCV$KBP$9$kG'>Z%W%m%P%$%@$r@_Dj$7$^$9!#(B -AuthBasicProvider provider-name - - $B%G%#%l%/%H%j(B - $B%m%1!<%7%g%s(B - .htaccess +AuthGroupFile +$BG'>Z$K;HMQ$9$k%f!<%6%0%k!<%W$N0lMw$,3JG<$5$l$F$$$k!"(B +$B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$9$k(B +AuthGroupFile file-path +$B%G%#%l%/%H%j(B.htaccess AuthConfig -

    AuthBasicProvider $B%G%#%l%/%F%#%V$G!"(B - $B$3$N0LCV$KBP$9$k%f!<%6G'>Z$KMQ$$$i$l$kG'>Z%W%m%P%$%@$r@_Dj$7$^$9!#(B

    +

    AuthGroupFile $B%G%#%l%/%F%#%V$O!"(B + $BG'>Z$K;HMQ$9$k%f!<%6%0%k!<%W$N0lMw$,3JG<$5$l$F$$$k!"(B + $B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$7$^$9!#(B + file-path $B$O%0%k!<%W%U%!%$%k$X$N%Q%9$G$9!#(B + $B$b$7@dBP%Q%9$G$J$1$l$P(B + ($B$D$^$j(B $B%9%i%C%7%e$G;O$^$i$J$$%Q%9$G$"$l$P(B) + $B!"(BServerRoot + $B$+$i$NAjBP%Q%9$H$7$F07$o$l$^$9!#(B

    -

    $BG'>Z%W%m%P%$%@$K$D$$$F$O(B - mod_authn_dbm, mod_authn_file - $B$r$4Mw2<$5$$!#(B

    +

    $B%0%k!<%W%U%!%$%k3F9T$O!"%0%k!<%WL>!"%3%m%s!"$=$7$F(B + $B%9%Z!<%96h@Z$j$G$=$N%a%s%P!<$N%f!<%6L>$r5-=R$7$^$9!#(B + $BNc$($P(B:

    + +mygroup: bob joe anne + +

    $BBg$-$J%U%!%$%k$rC5:w$9$k$N$O!"(B$BHs>o$K(B$B8zN($,0-$$$H$$$&E@$K(B + $BCm0U$7$F$/$@$5$$!#$=$N$h$&$J>l9g$O!"(B + AuthDBMGroupFile + $B$rBe$o$j$K;H$&$Y$-$G$7$g$&!#(B

    + +$B%;%-%e%j%F%#(B +

    AuthGroupFile $B$O!"(B + $B%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$K(B + $BJ]4I$9$k$h$&$K$7$F$/$@$5$$!#(B + $BJ]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B$BCV$+$J$$$G2<$5$$(B$B!#(B + $B$=$&$7$J$$$H(B AuthGroupFile $B$O(B + $B%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B

    +
    +
    +
    + + +AuthUserFile +$BG'>Z$K;HMQ$9$k%f!<%6$H%Q%9%o!<%I$N0lMw$,3JG<$5$l$F$$$k!"(B +$B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$9$k(B +AuthUserFile file-path +$B%G%#%l%/%H%j(B.htaccess + +AuthConfig + + +

    AuthUserFile $B%G%#%l%/%F%#%V$O!"(B + $B%f!<%6G'>Z$N$?$a$N%f!<%6$H%Q%9%o!<%I$N0lMw$r3JG<$7$?(B + $B%F%-%9%H%U%!%$%k$NL>A0$r@_Dj$7$^$9!#(Bfile-path + $B$O%f!<%6%U%!%$%k$X$N%Q%9$G$9!#(B + $B$b$7@dBP%Q%9$G$J$1$l$P(B + ($B$D$^$j(B $B%9%i%C%7%e$G;O$^$i$J$$%Q%9$G$"$l$P(B) + $B!"(BServerRoot + $B$+$i$NAjBP%Q%9$H$7$F07$o$l$^$9!#(B

    + +

    $B%f!<%6%U%!%$%k$N3F9T$K$O!"%f!<%6L>!"%3%m%s!"(B + crypt() $B$G0E9f2=$7$?%Q%9%o!<%I$r5-=R$7$^$9!#(B + $BF10l%f!<%6$,J#?t2sEPO?$5$l$?;~$N5sF0$ODj5A$5$l$F$$$^$;$s!#(B

    + +

    $B%P%$%J%jG[I[$N0lIt$H$7$F%$%s%9%H!<%k$5$l$k$+!"(B + $B$"$k$$$O(B src/support $B$K$"$k(B + htpasswd + $B%f!<%F%#%j%F%#$G!"$3$N%Q%9%o!<%I%U%!%$%k$r%a%$%s%F%J%s%9$7$^$9!#(B + $B>\:Y$O(B man $B%Z!<%8$r$4MwD:$/$H$7$F!"4JC1$K$O(B:

    + +

    $B=i4|(B ID username $B$G!"(BFilename + $B$H$$$&%Q%9%o!<%I%U%!%$%k$r@8@.$7$^$9!#(B + $B +htpasswd -c Filename username + +

    $B%Q%9%o!<%I%U%!%$%k(B Filename $B$K!"(Busername2 + $B$rDI2C$7$?$j=$@5$7$?$j$7$^$9(B:

    +htpasswd Filename username2 + +

    ($BLuCm(B: $BHs>o$KB?$/$N%f!<%6$rEPO?$9$k$HBg$-$J%U%!%$%k$K$J$j$^$9$,(B) + $BBg$-$J%F%-%9%H%U%!%$%k$r8!:w$9$k$N$O(B$BHs>o$K(B$B8zN($,0-$$(B + $B$H$$$&$3$H$KCm0U$7$F$/$@$5$$!#$=$N$h$&$JI,MW$N$"$k;~$O!"(B + AuthDBMUserFile + $B$rBe$o$j$K;H$C$F$/$@$5$$!#(B

    + +$B%;%-%e%j%F%#(B +

    AuthUserFile + $B$O!"%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$KJ]4I$9$k$h$&$K$7$F$/$@$5$$!#(B + $BJ]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B$BCV$+$J$$$G2<$5$$(B$B!#(B + $B$=$&$7$J$$$H(B AuthUserFile $B$O(B + $B%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B

    -AuthBasicAuthoritative -$BG'>Z$H>5G'$r!"$h$jDc$$%l%Y%k$N%b%8%e!<%k$K0\9T$5$;$k$+$r(B -$B@_Dj$7$^$9!#(B -AuthBasicAuthoritative on|off -AuthBasicAuthoritative on - - $B%G%#%l%/%H%j(B - .htaccess +AuthAuthoritative +$BG'>Z$H>5G'%W%m%;%9$r!"(B +$B$h$jDc$$%l%Y%k$N%b%8%e!<%k$K0\9T$5$;$k$+$I$&$+$r@_Dj$9$k(B +AuthAuthoritative on|off +AuthAuthoritative on +$B%G%#%l%/%H%j(B.htaccess AuthConfig -

    AuthBasicAuthoritative + +$B5-:\$5$l$F$$$k>pJs$O!"L$$@(B Apache 2.0 $B8~$1$K%"%C%W%G!<%H$5$l$F$$$^$;$s!#(B +Apache 2.0 $B$G$O!"%b%8%e!<%k$N=g=x$E$1$K0[$J$k;EAH$_$r;H$C$F$$$^$9!#(B + +

    AuthAuthoritative $B%G%#%l%/%F%#%V$GL@<(E*$K(B 'off'$B$K@_Dj$9$k$H!"(B $BM?$($i$l$?G'>Z%f!<%6(B ID $B$KBP$7$F(B$B%f!<%6(B ID $B$,$J$$(B $B$^$?$O(B$B%k!<%k$,$J$$(B$B>l9g$K!"(B @@ -75,11 +153,33 @@ $B0l$DL\$N%b%8%e!<%k$,G'Dj$r9T$C$F!"(BAuthAuthoritative $B@_Dj$K4X$o$i$:!"(B $B%"%/%;%9$O0\9T$7$^$;$s!#(B

    +

    $B0lHLE*$J;HMQK!$O!"(Bmod_auth_dbm, + mod_auth_msql, mod_auth_anon + $B$H$$$C$?%G!<%?%Y!<%9%b%8%e!<%k$N0l$D$HAH$_9g$o$;$k$3$H$G$9!#(B + $B$3$l$i$N%b%8%e!<%k$OB?$/$N%f!<%6;q3J8!::$rDs6!$7$F$/$l$^$9!#(B + $B$7$+$7!">/?t$N(B ($B4IM}AuthUserFile + $B$GNI$/J]8n$5$l$?!"$h$jDc%l%Y%k$K0\9T$9$k$h$&$K$7$^$9!#(B

    +

    $B%G%U%)%k%H$G$O!"@)8f$O0\9T$7$^$;$s!#$=$7$F!"L$CN$N%f!<%6(B ID $B$d(B - $B%k!<%k$,$"$C$F$b!V(B Authorization Required $B!W1~Ez$,JV$5$l$^$9!#(B + $B%k!<%k$,$"$C$F$b!V(BAuthorization Required$B!W1~Ez$,JV$5$l$^$9!#(B $B$G$9$+$i!"$3$N%G%#%l%/%F%#%V@_Dj$7$J$$$3$H$G%7%9%F%`$N0BA4$r0];}$G$-$F!"$^$?!"(B NCSA $B=`5r$N5sF0$r6/@)$G$-$^$9!#(B

    + $B%;%-%e%j%F%#(B $B%f!<%6$,<+J,<+?H$G:n@.$7$?(B + .htaccess $B%U%!%$%k$GG'>Z$G$-$k$h$&$K$9$k$3$H$N1F6A$r(B + $B9MN8$KF~$l$F$*$$$F$/$@$5$$!#$=$7$F!"(B + $B$=$l$,K\Ev$K4uK>$N5sF0$G$"$k$+$I$&$+$r8!F$$7$F$/$@$5$$!#(B + $B0lHLE*$K8@$C$F!"(BmSQL $B$H$$$C$?%G!<%?%Y!<%9$N%;%-%e%j%F%#J]8n$h$j$b!"(B + $BC1=c$K0l$D$N%U%!%$%k(B .htpasswd $B$N%;%-%e%j%F%#$rJ]8n$9$kJ}$,MF0W$G$9!#(B + AuthUserFile $B$H(B + AuthGroupFile $B$O!"(B + $B%&%'%V%5!<%P$N%I%-%e%a%s%H%D%j!<$N30B&$KJ]4I$9$k(B + $B$h$&$K$7$F$/$@$5$$!#J]8n$7$h$&$H$7$F$$$k%G%#%l%/%H%j0J2<$K$O!"(B + $BCV$+$J$$$G2<$5$$(B$B!#$=$&$7$J$$$H(B + AuthUserFile $B$H(B + AuthGroupFile + $B$O%@%&%s%m!<%I$G$-$F$7$^$$$^$9!#(B
    diff --git a/docs/manual/mod/mod_auth_dbm.html.en b/docs/manual/mod/mod_auth_dbm.html.en deleted file mode 100644 index 7ea5c8028f..0000000000 --- a/docs/manual/mod/mod_auth_dbm.html.en +++ /dev/null @@ -1,167 +0,0 @@ - - -mod_auth_dbm - Apache HTTP Server
    <-

    Apache Module mod_auth_dbm

    Description: - Provides for user authentication using DBM - files
    Status: - Extension
    Module Identifier: - auth_dbm_module
    Source File: - mod_auth_dbm.c

    Summary

    -

    This module provides for HTTP Basic Authentication, where - the usernames and passwords are stored in DBM type database - files. It is an alternative to the plain text password files - provided by mod_auth.

    -
    top

    AuthDBMAuthoritative Directive

    Description: - Sets whether authentication and authorization will be -passwed on to lower level modules
    Syntax: - AuthDBMAuthoritative on|off
    Default: - AuthDBMAuthoritative on
    Context: - directory, .htaccess
    Override: - AuthConfig
    Status: - Extension
    Module: - mod_auth_dbm
    - -
    This information has not been updated to take into account the -new module ordering techniques in Apache 2.0
    - -

    Setting the AuthDBMAuthoritative - directive explicitly to 'off' allows for both - authentication and authorization to be passed on to lower level - modules (as defined in the Configuration and - modules.c file if there is no userID - or rule matching the supplied userID. If there is - a userID and/or rule specified; the usual password and access - checks will be applied and a failure will give an Authorization - Required reply.

    - -

    So if a userID appears in the database of more than one module; - or if a valid Require - directive applies to more than one module; then the first module - will verify the credentials; and no access is passed on; - regardless of the AuthAuthoritative setting.

    - -

    A common use for this is in conjunction with one of the - basic auth modules; such as mod_auth. Whereas this - DBM module supplies the bulk of the user credential checking; a - few (administrator) related accesses fall through to a lower - level with a well protected .htpasswd file.

    - -

    By default, control is not passed on and an unknown userID - or rule will result in an Authorization Required reply. Not - setting it thus keeps the system secure and forces an NCSA - compliant behaviour.

    - -

    Security: Do consider the implications of allowing a user to - allow fall-through in his .htaccess file; and verify that this - is really what you want; Generally it is easier to just secure - a single .htpasswd file, than it is to secure a database which - might have more access interfaces.

    -
    top

    AuthDBMGroupFile Directive

    Description: - Sets the name of the database file containing the list -of user groups for authentication
    Syntax: - AuthDBMGroupFile file-path
    Context: - directory, .htaccess
    Override: - AuthConfig
    Status: - Extension
    Module: - mod_auth_dbm
    -

    The AuthDBMGroupFile directive sets the - name of a DBM file containing the list of user groups for user - authentication. File-path is the absolute path to the - group file.

    - -

    The group file is keyed on the username. The value for a - user is a comma-separated list of the groups to which the users - belongs. There must be no whitespace within the value, and it - must never contain any colons.

    - -

    Security: make sure that the - AuthDBMGroupFile is stored outside the - document tree of the web-server; do not put it in the - directory that it protects. Otherwise, clients will be able to - download the AuthDBMGroupFile unless - otherwise protected.

    - -

    Combining Group and Password DBM files: In some cases it is - easier to manage a single database which contains both the - password and group details for each user. This simplifies any - support programs that need to be written: they now only have to - deal with writing to and locking a single DBM file. This can be - accomplished by first setting the group and password files to - point to the same DBM:

    - -

    -AuthDBMGroupFile /www/userbase
    -AuthDBMUserFile /www/userbase -

    - -

    The key for the single DBM is the username. The value consists - of

    - -

    Unix Crypt-ed Password : List of Groups [ : (ignored) - ]

    - -

    The password section contains the Unix crypt() - password as before. This is followed by a colon and the comma - separated list of groups. Other data may optionally be left in the - DBM file after another colon; it is ignored by the authentication - module. This is what www.telescope.org uses for its combined - password and group database.

    -
    top

    AuthDBMType Directive

    Description: - Sets the type of database file that is used to -store passwords
    Syntax: - AuthDBMType default|SDBM|GDBM|NDBM|DB
    Default: - AuthDBMType default
    Context: - directory, .htaccess
    Override: - AuthConfig
    Status: - Extension
    Module: - mod_auth_dbm
    Compatibility: - Available in version 2.0.30 and later.
    - -

    Sets the type of database file that is used to store the passwords. -The default database type is determined at compile time. The -availability of other types of database files also depends on -compile-time settings.

    - -

    It is crucial that whatever program you use to create your password -files is configured to use the same type of database.

    -
    top

    AuthDBMUserFile Directive

    Description: - Sets thename of a database file containing the list of users and -passwords for authentication
    Syntax: - AuthDBMUserFile file-path
    Context: - directory, .htaccess
    Override: - AuthConfig
    Status: - Extension
    Module: - mod_auth_dbm
    -

    The AuthDBMUserFile directive sets the - name of a DBM file containing the list of users and passwords for - user authentication. File-path is the absolute path to - the user file.

    - -

    The user file is keyed on the username. The value for a user is - the crypt() encrypted password, optionally followed - by a colon and arbitrary data. The colon and the data following it - will be ignored by the server.

    - -

    Security: make sure that the - AuthDBMUserFile is stored outside the - document tree of the web-server; do not put it in the - directory that it protects. Otherwise, clients will be able to - download the AuthDBMUserFile.

    - -

    Important compatibility note: The implementation of - "dbmopen" in the apache modules reads the string length of the - hashed values from the DBM data structures, rather than relying - upon the string being NULL-appended. Some applications, such as - the Netscape web server, rely upon the string being - NULL-appended, so if you are having trouble using DBM files - interchangeably between applications this may be a part of the - problem.

    - -

    A perl script called - dbmmanage is included with - Apache. This program can be used to create and update DBM - format password files for use with this module.

    -
    \ No newline at end of file diff --git a/docs/manual/mod/mod_auth_dbm.xml b/docs/manual/mod/mod_auth_dbm.xml deleted file mode 100644 index 64ed0696bb..0000000000 --- a/docs/manual/mod/mod_auth_dbm.xml +++ /dev/null @@ -1,195 +0,0 @@ - - - - - -mod_auth_dbm -Provides for user authentication using DBM - files -Extension -mod_auth_dbm.c -auth_dbm_module - - -

    This module provides for HTTP Basic Authentication, where - the usernames and passwords are stored in DBM type database - files. It is an alternative to the plain text password files - provided by mod_auth.

    -
    - -AuthName -AuthType -Require -Satisfy - - -AuthDBMGroupFile -Sets the name of the database file containing the list -of user groups for authentication -AuthDBMGroupFile file-path -directory.htaccess - -AuthConfig - - -

    The AuthDBMGroupFile directive sets the - name of a DBM file containing the list of user groups for user - authentication. File-path is the absolute path to the - group file.

    - -

    The group file is keyed on the username. The value for a - user is a comma-separated list of the groups to which the users - belongs. There must be no whitespace within the value, and it - must never contain any colons.

    - -

    Security: make sure that the - AuthDBMGroupFile is stored outside the - document tree of the web-server; do not put it in the - directory that it protects. Otherwise, clients will be able to - download the AuthDBMGroupFile unless - otherwise protected.

    - -

    Combining Group and Password DBM files: In some cases it is - easier to manage a single database which contains both the - password and group details for each user. This simplifies any - support programs that need to be written: they now only have to - deal with writing to and locking a single DBM file. This can be - accomplished by first setting the group and password files to - point to the same DBM:

    - - -AuthDBMGroupFile /www/userbase
    -AuthDBMUserFile /www/userbase -
    - -

    The key for the single DBM is the username. The value consists - of

    - -Unix Crypt-ed Password : List of Groups [ : (ignored) - ] - -

    The password section contains the Unix crypt() - password as before. This is followed by a colon and the comma - separated list of groups. Other data may optionally be left in the - DBM file after another colon; it is ignored by the authentication - module. This is what www.telescope.org uses for its combined - password and group database.

    -
    -
    - - -AuthDBMUserFile -Sets thename of a database file containing the list of users and -passwords for authentication -AuthDBMUserFile file-path -directory.htaccess - -AuthConfig - - -

    The AuthDBMUserFile directive sets the - name of a DBM file containing the list of users and passwords for - user authentication. File-path is the absolute path to - the user file.

    - -

    The user file is keyed on the username. The value for a user is - the crypt() encrypted password, optionally followed - by a colon and arbitrary data. The colon and the data following it - will be ignored by the server.

    - -

    Security: make sure that the - AuthDBMUserFile is stored outside the - document tree of the web-server; do not put it in the - directory that it protects. Otherwise, clients will be able to - download the AuthDBMUserFile.

    - -

    Important compatibility note: The implementation of - "dbmopen" in the apache modules reads the string length of the - hashed values from the DBM data structures, rather than relying - upon the string being NULL-appended. Some applications, such as - the Netscape web server, rely upon the string being - NULL-appended, so if you are having trouble using DBM files - interchangeably between applications this may be a part of the - problem.

    - -

    A perl script called - dbmmanage is included with - Apache. This program can be used to create and update DBM - format password files for use with this module.

    -
    -
    - - -AuthDBMType -Sets the type of database file that is used to -store passwords -AuthDBMType default|SDBM|GDBM|NDBM|DB -AuthDBMType default -directory.htaccess - -AuthConfig -Available in version 2.0.30 and later. - - - -

    Sets the type of database file that is used to store the passwords. -The default database type is determined at compile time. The -availability of other types of database files also depends on -compile-time settings.

    - -

    It is crucial that whatever program you use to create your password -files is configured to use the same type of database.

    -
    -
    - - -AuthDBMAuthoritative -Sets whether authentication and authorization will be -passwed on to lower level modules -AuthDBMAuthoritative on|off -AuthDBMAuthoritative on -directory.htaccess - -AuthConfig - - - -This information has not been updated to take into account the -new module ordering techniques in Apache 2.0 - -

    Setting the AuthDBMAuthoritative - directive explicitly to 'off' allows for both - authentication and authorization to be passed on to lower level - modules (as defined in the Configuration and - modules.c file if there is no userID - or rule matching the supplied userID. If there is - a userID and/or rule specified; the usual password and access - checks will be applied and a failure will give an Authorization - Required reply.

    - -

    So if a userID appears in the database of more than one module; - or if a valid Require - directive applies to more than one module; then the first module - will verify the credentials; and no access is passed on; - regardless of the AuthAuthoritative setting.

    - -

    A common use for this is in conjunction with one of the - basic auth modules; such as mod_auth. Whereas this - DBM module supplies the bulk of the user credential checking; a - few (administrator) related accesses fall through to a lower - level with a well protected .htpasswd file.

    - -

    By default, control is not passed on and an unknown userID - or rule will result in an Authorization Required reply. Not - setting it thus keeps the system secure and forces an NCSA - compliant behaviour.

    - -

    Security: Do consider the implications of allowing a user to - allow fall-through in his .htaccess file; and verify that this - is really what you want; Generally it is easier to just secure - a single .htpasswd file, than it is to secure a database which - might have more access interfaces.

    -
    -
    - -
    \ No newline at end of file diff --git a/docs/manual/mod/mod_auth_anon.html.en b/docs/manual/mod/mod_authn_anon.html.en similarity index 86% rename from docs/manual/mod/mod_auth_anon.html.en rename to docs/manual/mod/mod_authn_anon.html.en index 5505efaf1b..0203fff343 100644 --- a/docs/manual/mod/mod_auth_anon.html.en +++ b/docs/manual/mod/mod_authn_anon.html.en @@ -4,12 +4,13 @@ XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX This file is generated from xml source: DO NOT EDIT XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX - -->mod_auth_anon - Apache HTTP Server
    <-

    Apache Module mod_auth_anon

    Description: + -->mod_authn_anon - Apache HTTP Server
    <-

    Apache Module mod_authn_anon

    Description: Allows "anonymous" user access to authenticated areas
    Status: Extension
    Module Identifier: - auth_anon_module
    Source File: - mod_auth_anon.c

    Summary

    +
    authn_anon_module
    Source File: + mod_authn_anon.c
    Compatibility: + Available in Apache 2.0.44 and later

    Summary

    This module does access control in a manner similar to anonymous-ftp sites; i.e. have a 'magic' user id 'anonymous' and the email address as a password. These email @@ -81,7 +82,7 @@ password verificationSynt directory, .htaccessOverride: AuthConfigStatus: ExtensionModule: - mod_auth_anon + mod_authn_anon

    A list of one or more 'magic' userIDs which are allowed access without password verification. The userIDs are space separated. It is possible to use the ' and " quotes to allow a @@ -107,7 +108,7 @@ to other methodsSyntax: directory, .htaccessOverride: AuthConfigStatus: ExtensionModule: - mod_auth_anon + mod_authn_anon

    When set 'on', there is no fall-through to other authorization methods. So if a userID does not match the values specified in the Anonymous directive, @@ -125,7 +126,7 @@ error logSyntax: directory, .htaccessOverride: AuthConfigStatus: ExtensionModule: - mod_auth_anon + mod_authn_anon

    When set on, the default, the 'password' entered (which hopefully contains a sensible email address) is logged in the error log.

    @@ -136,7 +137,7 @@ error logSyntax: directory, .htaccessOverride: AuthConfigStatus: ExtensionModule: - mod_auth_anon + mod_authn_anon

    Specifies whether the user must specify an email address as the password. This prohibits blank passwords.

    top

    Anonymous_NoUserID Directive

    Description: @@ -146,7 +147,7 @@ error log
    Syntax: directory, .htaccess
    Override: AuthConfig
    Status: Extension
    Module: - mod_auth_anon
    + mod_authn_anon

    When set on, users can leave the userID (and perhaps the password field) empty. This can be very convenient for MS-Explorer users who can just hit return or click directly on the @@ -159,7 +160,7 @@ formatted email addressSy directory, .htaccessOverride: AuthConfigStatus: ExtensionModule: - mod_auth_anon + mod_authn_anon

    When set on the 'password' entered is checked for at least one '@' and a '.' to encourage users to enter valid email addresses (see the above Auth_LogEmail).

    diff --git a/docs/manual/mod/mod_auth_anon.xml b/docs/manual/mod/mod_authn_anon.xml similarity index 95% rename from docs/manual/mod/mod_auth_anon.xml rename to docs/manual/mod/mod_authn_anon.xml index 59d88e9ded..e127f32a96 100644 --- a/docs/manual/mod/mod_auth_anon.xml +++ b/docs/manual/mod/mod_authn_anon.xml @@ -3,12 +3,13 @@ -mod_auth_anon +mod_authn_anon Allows "anonymous" user access to authenticated areas Extension -mod_auth_anon.c -auth_anon_module +mod_authn_anon.c +authn_anon_module +Available in Apache 2.0.44 and later

    This module does access control in a manner similar to @@ -122,7 +123,7 @@ to other methods

    When set 'on', there is no fall-through to other authorization methods. So if a userID does not match the values specified in the - Anonymous directive, + Anonymous directive, access is denied.

    Be sure you know what you are doing when you decide to @@ -195,8 +196,8 @@ formatted email address

    When set on the 'password' entered is checked for at least one '@' and a '.' to encourage users to enter valid email addresses (see the above Auth_LogEmail).

    + module="mod_authn_anon">Auth_LogEmail).

    - \ No newline at end of file + diff --git a/docs/manual/mod/mod_authn_dbm.html.en b/docs/manual/mod/mod_authn_dbm.html.en index 0ef60d652a..3528423b89 100644 --- a/docs/manual/mod/mod_authn_dbm.html.en +++ b/docs/manual/mod/mod_authn_dbm.html.en @@ -9,7 +9,7 @@ ExtensionModule Identifier: authn_dbm_moduleSource File: mod_authn_dbm.cCompatibility: - Available in Apache 2.0.42 and later

    Summary

    + Available in Apache 2.0.44 and later

    Summary

    This module provides authentication front-ends such as mod_auth_digest and mod_auth_basic to authenticate users by looking up users in plain text password files. diff --git a/docs/manual/mod/mod_authn_dbm.xml b/docs/manual/mod/mod_authn_dbm.xml index 85307b225a..0351fb6940 100644 --- a/docs/manual/mod/mod_authn_dbm.xml +++ b/docs/manual/mod/mod_authn_dbm.xml @@ -8,7 +8,7 @@ Extension mod_authn_dbm.c authn_dbm_module -Available in Apache 2.0.42 and later +Available in Apache 2.0.44 and later

    This module provides authentication front-ends such as diff --git a/docs/manual/mod/mod_authn_file.html.en b/docs/manual/mod/mod_authn_file.html.en index 1e49444ba0..d915f0c62b 100644 --- a/docs/manual/mod/mod_authn_file.html.en +++ b/docs/manual/mod/mod_authn_file.html.en @@ -9,7 +9,7 @@ BaseModule Identifier: authn_file_moduleSource File: mod_authn_file.cCompatibility: - Available in Apache 2.0.42 and later

    Summary

    + Available in Apache 2.0.44 and later

    Summary

    This module provides authentication front-ends such as mod_auth_digest and mod_auth_basic diff --git a/docs/manual/mod/mod_authn_file.xml b/docs/manual/mod/mod_authn_file.xml index d3b534ea8c..c4297c3f4e 100644 --- a/docs/manual/mod/mod_authn_file.xml +++ b/docs/manual/mod/mod_authn_file.xml @@ -8,7 +8,7 @@ Base mod_authn_file.c authn_file_module -Available in Apache 2.0.42 and later +Available in Apache 2.0.44 and later

    diff --git a/docs/manual/mod/mod_authz_dbm.html.en b/docs/manual/mod/mod_authz_dbm.html.en index 4e8e4bea28..b6368d5ab9 100644 --- a/docs/manual/mod/mod_authz_dbm.html.en +++ b/docs/manual/mod/mod_authz_dbm.html.en @@ -9,7 +9,7 @@ ExtensionModule Identifier: authz_dbm_moduleSource File: mod_authz_dbm.cCompatibility: - Available in Apache 2.0.42 and later

    Summary

    + Available in Apache 2.0.44 and later

    Summary

    This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site by group membership. Similar functionality is diff --git a/docs/manual/mod/mod_authz_dbm.xml b/docs/manual/mod/mod_authz_dbm.xml index 624f71619d..3f149002b6 100644 --- a/docs/manual/mod/mod_authz_dbm.xml +++ b/docs/manual/mod/mod_authz_dbm.xml @@ -8,7 +8,7 @@ Extension mod_authz_dbm.c authz_dbm_module -Available in Apache 2.0.42 and later +Available in Apache 2.0.44 and later

    This module provides authorization capabilities so that diff --git a/docs/manual/mod/mod_authz_groupfile.html.en b/docs/manual/mod/mod_authz_groupfile.html.en index f9cbe56867..7485e52c27 100644 --- a/docs/manual/mod/mod_authz_groupfile.html.en +++ b/docs/manual/mod/mod_authz_groupfile.html.en @@ -9,7 +9,7 @@ ExtensionModule Identifier: authz_groupfile_moduleSource File: mod_authz_groupfile.cCompatibility: - Available in Apache 2.0.42 and later

    Summary

    + Available in Apache 2.0.44 and later

    Summary

    This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site by group membership. Similar functionality is diff --git a/docs/manual/mod/mod_authz_groupfile.xml b/docs/manual/mod/mod_authz_groupfile.xml index 0753de7257..ec5404965e 100644 --- a/docs/manual/mod/mod_authz_groupfile.xml +++ b/docs/manual/mod/mod_authz_groupfile.xml @@ -8,7 +8,7 @@ Extension mod_authz_groupfile.c authz_groupfile_module -Available in Apache 2.0.42 and later +Available in Apache 2.0.44 and later

    This module provides authorization capabilities so that diff --git a/docs/manual/mod/mod_authz_host.html.en b/docs/manual/mod/mod_authz_host.html.en new file mode 100644 index 0000000000..ab17321549 --- /dev/null +++ b/docs/manual/mod/mod_authz_host.html.en @@ -0,0 +1,252 @@ + + +mod_authz_host - Apache HTTP Server

    <-

    Apache Module mod_authz_host

    Description: + Group authorizations based on host (name or IP +address)
    Status: + Base
    Module Identifier: + authz_host_module
    Source File: + mod_authz_host.c
    Compatibility: + Available in Apache 2.0.44 and later

    Summary

    +

    The directives provided by mod_authz_host are used in <Directory>, <Files>, and <Location> sections as well as + .htaccess + files to control access to particular parts of the server. Access + can be controlled based on the client hostname, IP address, or + other characteristics of the client request, as captured in environment variables. The Allow and Deny directives are used to + specify which clients are or are not allowed access to the server, + while the Order + directive sets the default access state, and configures how the + Allow and Deny directives interact with each + other.

    + +

    Both host-based access restrictions and password-based + authentication may be implemented simultaneously. In that case, + the Satisfy directive is used + to determine how the two sets of restrictions interact.

    + +

    In general, access restriction directives apply to all + access methods (GET, PUT, + POST, etc). This is the desired behavior in most + cases. However, it is possible to restrict some methods, while + leaving other methods unrestricted, by enclosing the directives + in a <Limit> section.

    +

    Directives

    See also

    top

    Allow Directive

    Description: + Controls which hosts can access an area of the +server
    Syntax: + Allow from + all|host|env=env-variable + [host|env=env-variable] ...
    Context: + directory, .htaccess
    Override: + Limit
    Status: + Base
    Module: + mod_authz_host
    + +

    The Allow directive affects which hosts can + access an area of the server. Access can be controlled by + hostname, IP Address, IP Address range, or by other + characteristics of the client request captured in environment + variables.

    + +

    The first argument to this directive is always + from. The subsequent arguments can take three + different forms. If Allow from all is specified, then + all hosts are allowed access, subject to the configuration of the + Deny and Order directives as discussed + below. To allow only particular hosts or groups of hosts to access + the server, the host can be specified in any of the + following formats:

    + +
    +
    A (partial) domain-name
    + +
    Example: Allow from apache.org
    + Hosts whose names match, or end in, this string are allowed + access. Only complete components are matched, so the above + example will match foo.apache.org but it will + not match fooapache.org. This configuration will + cause the server to perform a reverse DNS lookup on the + client IP address, regardless of the setting of the HostnameLookups + directive.
    + +
    A full IP address
    + +
    Example: Allow from 10.1.2.3
    + An IP address of a host allowed access
    + +
    A partial IP address
    + +
    Example: Allow from 10.1
    + The first 1 to 3 bytes of an IP address, for subnet + restriction.
    + +
    A network/netmask pair
    + +
    Example: Allow from + 10.1.0.0/255.255.0.0
    + A network a.b.c.d, and a netmask w.x.y.z. For more + fine-grained subnet restriction.
    + +
    A network/nnn CIDR specification
    + +
    Example: Allow from 10.1.0.0/16
    + Similar to the previous case, except the netmask consists of + nnn high-order 1 bits.
    +
    + +

    Note that the last three examples above match exactly the + same set of hosts.

    + +

    IPv6 addresses and IPv6 subnets can be specified as shown + below:

    + +

    + Allow from fe80::a00:20ff:fea7:ccea
    + Allow from fe80::a00:20ff:fea7:ccea/10 +

    + +

    The third format of the arguments to the + Allow directive allows access to the server + to be controlled based on the existence of an environment variable. When Allow from + env=env-variable is specified, then the request is + allowed access if the environment variable env-variable + exists. The server provides the ability to set environment + variables in a flexible way based on characteristics of the client + request using the directives provided by + mod_setenvif. Therefore, this directive can be + used to allow access based on such factors as the clients + User-Agent (browser type), Referer, or + other HTTP request header fields.

    + +

    Example:

    + +SetEnvIf User-Agent ^KnockKnock/2.0 let_me_in
    +<Directory /docroot>
    +   Order Deny,Allow
    +   Deny from all
    +   Allow from env=let_me_in
    +</Directory> +

    + +

    In this case, browsers with a user-agent string beginning + with KnockKnock/2.0 will be allowed access, and all + others will be denied.

    +
    top

    Deny Directive

    Description: + Controls which hosts are denied access to the +server
    Syntax: + Deny from + all|host|env=env-variable + [host|env=env-variable] ...
    Context: + directory, .htaccess
    Override: + Limit
    Status: + Base
    Module: + mod_authz_host
    +

    This directive allows access to the server to be restricted + based on hostname, IP address, or environment variables. The + arguments for the Deny directive are + identical to the arguments for the Allow directive.

    +
    top

    Order Directive

    Description: + Controls the default access state and the order in which +Allow and Deny are +evaluated.
    Syntax: + Order ordering
    Default: + Order Deny,Allow
    Context: + directory, .htaccess
    Override: + Limit
    Status: + Base
    Module: + mod_authz_host
    + +

    The Order directive controls the default + access state and the order in which Allow and Deny directives are evaluated. + Ordering is one of

    + +
    +
    Deny,Allow
    + +
    The Deny directives + are evaluated before the Allow directives. Access is + allowed by default. Any client which does not match a + Deny directive or does + match an Allow + directive will be allowed access to the server.
    + +
    Allow,Deny
    + +
    The Allow + directives are evaluated before the Deny directives. Access is denied + by default. Any client which does not match an Allow directive or does match a + Deny directive will be + denied access to the server.
    + +
    Mutual-failure
    + +
    Only those hosts which appear on the Allow list and do not appear on + the Deny list are + granted access. This ordering has the same effect as Order + Allow,Deny and is deprecated in favor of that + configuration.
    +
    + +

    Keywords may only be separated by a comma; no whitespace is + allowed between them. Note that in all cases every Allow and Deny statement is evaluated.

    + +

    In the following example, all hosts in the apache.org domain + are allowed access; all other hosts are denied access.

    + +

    + Order Deny,Allow
    + Deny from all
    + Allow from apache.org
    +

    + +

    In the next example, all hosts in the apache.org domain are + allowed access, except for the hosts which are in the + foo.apache.org subdomain, who are denied access. All hosts not + in the apache.org domain are denied access because the default + state is to deny access to the server.

    + +

    + Order Allow,Deny
    + Allow from apache.org
    + Deny from foo.apache.org
    +

    + +

    On the other hand, if the Order in the last + example is changed to Deny,Allow, all hosts will + be allowed access. This happens because, regardless of the + actual ordering of the directives in the configuration file, + the Allow from apache.org will be evaluated last + and will override the Deny from foo.apache.org. + All hosts not in the apache.org domain will also + be allowed access because the default state will change to + allow.

    + +

    The presence of an Order directive can affect + access to a part of the server even in the absence of accompanying + Allow and Deny directives because of its effect + on the default access state. For example,

    + +

    + <Directory /www>
    +   Order Allow,Deny
    + </Directory> +

    + +

    will deny all access to the /www directory + because the default access state will be set to + deny.

    + +

    The Order directive controls the order of access + directive processing only within each phase of the server's + configuration processing. This implies, for example, that an + Allow or Deny directive occurring in a + <Location> section will + always be evaluated after an Allow or Deny directive occurring in a + <Directory> section or + .htaccess file, regardless of the setting of the + Order directive. For details on the merging + of configuration sections, see the documentation on How Directory, Location and Files sections + work.

    +
    \ No newline at end of file diff --git a/docs/manual/mod/mod_access.xml b/docs/manual/mod/mod_authz_host.xml similarity index 81% rename from docs/manual/mod/mod_access.xml rename to docs/manual/mod/mod_authz_host.xml index 0607d181da..e302718f90 100644 --- a/docs/manual/mod/mod_access.xml +++ b/docs/manual/mod/mod_authz_host.xml @@ -3,17 +3,18 @@ -mod_access +mod_authz_host -Provides access control based on client hostname, IP -address, or other characteristics of the client request. +Group authorizations based on host (name or IP +address) Base -mod_access.c -access_module +mod_authz_host.c +authz_host_module +Available in Apache 2.0.44 and later -

    The directives provided by mod_access are used in The directives provided by mod_authz_host are used in Directory, Files, and Location sections as well as @@ -22,13 +23,13 @@ address, or other characteristics of the client request. can be controlled based on the client hostname, IP address, or other characteristics of the client request, as captured in environment variables. The Allow and Deny directives are used to + module="mod_authz_host">Allow and Deny directives are used to specify which clients are or are not allowed access to the server, - while the Order + while the Order directive sets the default access state, and configures how the - Allow and Deny directives interact with each + Allow and Deny directives interact with each other.

    Both host-based access restrictions and password-based @@ -71,8 +72,8 @@ server from. The subsequent arguments can take three different forms. If Allow from all is specified, then all hosts are allowed access, subject to the configuration of the - Deny and Order directives as discussed + Deny and Order directives as discussed below. To allow only particular hosts or groups of hosts to access the server, the host can be specified in any of the following formats:

    @@ -176,7 +177,7 @@ server based on hostname, IP address, or environment variables. The arguments for the Deny directive are identical to the arguments for the Allow directive.

    + module="mod_authz_host">Allow directive.

    @@ -199,36 +200,36 @@ evaluated.

    The Order directive controls the default access state and the order in which Allow and Deny directives are evaluated. + module="mod_authz_host">Allow and Deny directives are evaluated. Ordering is one of

    Deny,Allow
    -
    The Deny directives +
    The Deny directives are evaluated before the Allow directives. Access is + module="mod_authz_host">Allow directives. Access is allowed by default. Any client which does not match a - Deny directive or does - match an Allow + Deny directive or does + match an Allow directive will be allowed access to the server.
    Allow,Deny
    -
    The Allow +
    The Allow directives are evaluated before the Deny directives. Access is denied + module="mod_authz_host">Deny directives. Access is denied by default. Any client which does not match an Allow directive or does match a - Deny directive will be + module="mod_authz_host">Allow directive or does match a + Deny directive will be denied access to the server.
    Mutual-failure
    Only those hosts which appear on the Allow list and do not appear on - the Deny list are + module="mod_authz_host">Allow list and do not appear on + the Deny list are granted access. This ordering has the same effect as Order Allow,Deny and is deprecated in favor of that configuration.
    @@ -236,8 +237,8 @@ evaluated.

    Keywords may only be separated by a comma; no whitespace is allowed between them. Note that in all cases every Allow and Deny statement is evaluated.

    + module="mod_authz_host">Allow and Deny statement is evaluated.

    In the following example, all hosts in the apache.org domain are allowed access; all other hosts are denied access.

    @@ -272,8 +273,8 @@ evaluated.

    The presence of an Order directive can affect access to a part of the server even in the absence of accompanying - Allow and Deny directives because of its effect + Allow and Deny directives because of its effect on the default access state. For example,

    @@ -289,12 +290,12 @@ evaluated.

    The Order directive controls the order of access directive processing only within each phase of the server's configuration processing. This implies, for example, that an - Allow or Deny directive occurring in a + Allow or Deny directive occurring in a Location section will always be evaluated after an Allow or Deny directive occurring in a + module="mod_authz_host">Allow or Deny directive occurring in a Directory section or .htaccess file, regardless of the setting of the Order directive. For details on the merging diff --git a/docs/manual/mod/mod_access.xml.ja b/docs/manual/mod/mod_authz_host.xml.ja similarity index 100% rename from docs/manual/mod/mod_access.xml.ja rename to docs/manual/mod/mod_authz_host.xml.ja diff --git a/docs/manual/mod/mod_info.html.en b/docs/manual/mod/mod_info.html.en index a4c650e069..aa133979e1 100644 --- a/docs/manual/mod/mod_info.html.en +++ b/docs/manual/mod/mod_info.html.en @@ -69,8 +69,8 @@ hostStatus: the module module-name. Example:

    -AddModuleInfo mod_auth.c 'See <A \
    - HREF="http://www.apache.org/docs/mod/mod_auth.html">\
    - http://www.apache.org/docs/mod/mod_auth.html</A>' +AddModuleInfo mod_authn_file.c 'See <A \
    + HREF="http://www.apache.org/docs-2.0/mod/mod_authn_file.html">\
    + http://www.apache.org/docs-2.0/mod/mod_authn_file.html</A>'

    \ No newline at end of file diff --git a/docs/manual/mod/mod_info.xml b/docs/manual/mod/mod_info.xml index 977434150f..9e8d644079 100644 --- a/docs/manual/mod/mod_info.xml +++ b/docs/manual/mod/mod_info.xml @@ -74,9 +74,9 @@ host the module module-name. Example:

    -AddModuleInfo mod_auth.c 'See <A \
    - HREF="http://www.apache.org/docs/mod/mod_auth.html">\
    - http://www.apache.org/docs/mod/mod_auth.html</A>' +AddModuleInfo mod_authn_file.c 'See <A \
    + HREF="http://www.apache.org/docs-2.0/mod/mod_authn_file.html">\
    + http://www.apache.org/docs-2.0/mod/mod_authn_file.html</A>'
    diff --git a/docs/manual/mod/quickreference.html.en b/docs/manual/mod/quickreference.html.en index d6dd489de7..e83e9c63d2 100644 --- a/docs/manual/mod/quickreference.html.en +++ b/docs/manual/mod/quickreference.html.en @@ -89,7 +89,7 @@ onto the specified content type AliasMatch regex file-path|directory-pathsvBMaps URLs to filesystem locations using regular expressions - Allow from + Allow from all|host|env=env-variable [host|env=env-variable] ...dhBControls which hosts can access an area of the server @@ -98,26 +98,25 @@ the proxy AllowOverride All|None|directive-type [directive-type] ... All dCTypes of directives that are allowed in .htaccess files -Anonymous user [user] ...dhESpecifies userIDs that areallowed access without +Anonymous user [user] ...dhESpecifies userIDs that areallowed access without password verification -Anonymous_Authoritative on|off off dhEConfigures if authorization will fall-through +Anonymous_Authoritative on|off off dhEConfigures if authorization will fall-through to other methods -Anonymous_LogEmail on|off on dhESets whether the password entered will be logged in the +Anonymous_LogEmail on|off on dhESets whether the password entered will be logged in the error log -Anonymous_MustGiveEmail on|off on dhESpecifies whether blank passwords are allowed -Anonymous_NoUserID on|off off dhESets whether the userID field may be empty -Anonymous_VerifyEmail on|off off dhESets whether to check the password field for a correctly +Anonymous_MustGiveEmail on|off on dhESpecifies whether blank passwords are allowed +Anonymous_NoUserID on|off off dhESets whether the userID field may be empty +Anonymous_VerifyEmail on|off off dhESets whether to check the password field for a correctly formatted email address AssignUserID user_id group_idvM- -AuthAuthoritative on|off on dhBSets whether authorization and authentication are +AuthBasicAuthoritative on|off on dhBSets whether authorization and authentication are passed to lower level modules -AuthDBMAuthoritative on|off on dhESets whether authentication and authorization will be -passwed on to lower level modules -AuthDBMGroupFile file-pathdhESets the name of the database file containing the list +AuthBasicProvider provider-namedhBSets the authentication provider(s) for this location +AuthDBMGroupFile file-pathdhESets the name of the database file containing the list of user groups for authentication -AuthDBMType default|SDBM|GDBM|NDBM|DB default dhESets the type of database file that is used to +AuthDBMType default|SDBM|GDBM|NDBM|DB default dhESets the type of database file that is used to store passwords -AuthDBMUserFile file-pathdhESets thename of a database file containing the list of users and +AuthDBMUserFile file-pathdhESets the name of a database file containing the list of users and passwords for authentication AuthDigestAlgorithm MD5|MD5-sess MD5 dhXSelects the algorithm used to calculate the challenge and response hases in digest authentication @@ -133,7 +132,7 @@ server AuthDigestNonceLifetime seconds 300 dhXHow long the server nonce is valid AuthDigestQop none|auth|auth-int [auth|auth-int] auth dhXDetermines the quality-of-protection to use in digest authentication -AuthGroupFile file-pathdhBSets the name of a text file containing the list +AuthGroupFile file-pathdhESets the name of a text file containing the list of user groups for authentication AuthLDAPAuthoritative on|off on dhXPrevent other authentication modules from authenticating the user if this one fails @@ -153,455 +152,459 @@ environment variable AuthName auth-domaindhCAuthorization realm for use in HTTP authentication AuthType Basic|DigestdhCType of user authentication -AuthUserFile file-pathdhBSets the name of a text file containing the list of users and +AuthUserFile file-pathdhBSets the name of a text file containing the list of users and passwords for authentication -BrowserMatch regex [!]env-variable[=value] -[[!]env-variable[=value]] ...svdhBSets environment variables conditional on HTTP User-Agent +AuthzDBMAuthoritative on|off on dhESets whether authorization will be passed on to lower level modules +AuthzDBMType default|SDBM|GDBM|NDBM|DB default dhESets the type of database file that is used to +store passwords +AuthzGroupFileAuthoritative on|off on dhESets whether authorization will be passed on to lower level modules +BrowserMatch regex [!]env-variable[=value] +[[!]env-variable[=value]] ...svdhBSets environment variables conditional on HTTP User-Agent -BrowserMatchNoCase regex [!]env-variable[=value] - [[!]env-variable[=value]] ...svdhBSets environment variables conditional on User-Agent without +BrowserMatchNoCase regex [!]env-variable[=value] + [[!]env-variable[=value]] ...svdhBSets environment variables conditional on User-Agent without respect to case -CacheDefaultExpire seconds 3600 (one hour) sX- -CacheDisable cache_type url-stringsXDisable caching of specified URLs by specified storage manager -CacheEnable cache_type url-stringsXEnable caching specified URLs in a specified storage manager -CacheFile - file-path [file-path] ...sX- -CacheForceCompletion Percentage 60 sXPercentage of download to arrive for the cache to force complete transfer -CacheIgnoreCacheControlsXIgnore requests from the client for uncached content -CacheIgnoreNoLastModsXIgnore responses where there is no Last Modified Header -CacheLastModifiedFactor float 0.1 sXThe factor used to estimate the Expires date from the LastModified date -CacheMaxExpire seconds 86400 (one day) sXThe maximum time in seconds to cache a document -CacheMaxStreamingBuffer size_in_bytes 0 sXMaximum amount of a streamed response to buffer in memory before declaring the response uncacheable -CacheNegotiatedDocs on|off off svBAllows content-negotiated documents to be +CacheDefaultExpire seconds 3600 (one hour) sX- +CacheDisable cache_type url-stringsXDisable caching of specified URLs by specified storage manager +CacheEnable cache_type url-stringsXEnable caching specified URLs in a specified storage manager +CacheFile + file-path [file-path] ...sX- +CacheForceCompletion Percentage 60 sXPercentage of download to arrive for the cache to force complete transfer +CacheIgnoreCacheControlsXIgnore requests from the client for uncached content +CacheIgnoreNoLastModsXIgnore responses where there is no Last Modified Header +CacheLastModifiedFactor float 0.1 sXThe factor used to estimate the Expires date from the LastModified date +CacheMaxExpire seconds 86400 (one day) sXThe maximum time in seconds to cache a document +CacheMaxStreamingBuffer size_in_bytes 0 sXMaximum amount of a streamed response to buffer in memory before declaring the response uncacheable +CacheNegotiatedDocs on|off off svBAllows content-negotiated documents to be cached by proxy servers -CGIMapExtension cgi-path .extensiondhCTechnique for locating the interpreter for CGI +CGIMapExtension cgi-path .extensiondhCTechnique for locating the interpreter for CGI scripts -CharsetDefault charsetsvdhXCharset to translate into -CharsetOptions option [option] ... DebugLevel=0 -NoImp +svdhXConfigures charset tranlation behavior -CharsetSourceEnc charsetsvdhXSource charset of files -CheckSpelling on|off Off svdhEEnables the spelling +CharsetDefault charsetsvdhXCharset to translate into +CharsetOptions option [option] ... DebugLevel=0 +NoImp +svdhXConfigures charset tranlation behavior +CharsetSourceEnc charsetsvdhXSource charset of files +CheckSpelling on|off Off svdhEEnables the spelling module -ChildPerUserID user_id -group_id child_idsM- -ContentDigest on|off off svdhCEnables the generation of Content-MD5 HTTP Response +ChildPerUserID user_id +group_id child_idsM- +ContentDigest on|off off svdhCEnables the generation of Content-MD5 HTTP Response headers -CookieDomain domainsvdhEThe domain to which the tracking cookie applies -CookieExpires expiry-periodsvdhEExpiry time for the tracking cookie -CookieLog filenamesBSets filename for the logging of cookies -CookieName token Apache svdhEName of the tracking cookie -CookieStyle - Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhEFormat of the cookie header field -CookieTracking on|off off svdhEEnables tracking cookie -CoreDumpDirectory directorysMDirectory where Apache attempts to +CookieDomain domainsvdhEThe domain to which the tracking cookie applies +CookieExpires expiry-periodsvdhEExpiry time for the tracking cookie +CookieLog filenamesBSets filename for the logging of cookies +CookieName token Apache svdhEName of the tracking cookie +CookieStyle + Netscape|Cookie|Cookie2|RFC2109|RFC2965 Netscape svdhEFormat of the cookie header field +CookieTracking on|off off svdhEEnables tracking cookie +CoreDumpDirectory directorysMDirectory where Apache attempts to switch before dumping core -CustomLog +CustomLog file|pipe format|nickname - [env=[!]environment-variable]sBSets filename and format of log file -Dav on|off off dEEnable WebDAV HTTP methods -DavDepthInfinity on|off off dEAllow PROPFIND, Depth: Infinity requests -DavLockDB file-pathsvELocation of the DAV lock database -DavMinTimeout seconds 0 dEMinimum amount of time the server holds a lock on + [env=[!]environment-variable]sBSets filename and format of log file +Dav on|off off dEEnable WebDAV HTTP methods +DavDepthInfinity on|off off dEAllow PROPFIND, Depth: Infinity requests +DavLockDB file-pathsvELocation of the DAV lock database +DavMinTimeout seconds 0 dEMinimum amount of time the server holds a lock on a DAV resource -DefaultIcon url-pathsvdhBIcon to display for files when no specific icon is +DefaultIcon url-pathsvdhBIcon to display for files when no specific icon is configured -DefaultLanguage - MIME-langsvdhBSets all files in the given scope to the +DefaultLanguage + MIME-langsvdhBSets all files in the given scope to the specified language -DefaultType MIME-type text/plain svdhCMIME content-type that will be sent if the +DefaultType MIME-type text/plain svdhCMIME content-type that will be sent if the server cannot determine a type in any other way -DeflateBufferSize value 8096 svEFragment size to be compressed at one time by zlib -DeflateFilterNote notenamesvEPlaces the compression ratio in a note for logging -DeflateMemLevel value 9 svEHow much memory should be used by zlib for compression -DeflateWindowSize value 15 svEZlib compression window size - Deny from +DeflateBufferSize value 8096 svEFragment size to be compressed at one time by zlib +DeflateFilterNote notenamesvEPlaces the compression ratio in a note for logging +DeflateMemLevel value 9 svEHow much memory should be used by zlib for compression +DeflateWindowSize value 15 svEZlib compression window size + Deny from all|host|env=env-variable - [host|env=env-variable] ...dhBControls which hosts are denied access to the + [host|env=env-variable] ...dhBControls which hosts are denied access to the server -<Directory directory-path> -... </Directory>svCEnclose a group of directives that apply only to the +<Directory directory-path> +... </Directory>svCEnclose a group of directives that apply only to the named file-system directory and sub-directories -DirectoryIndex - local-url [local-url] ... index.html svdhBList of resources to look for when the client requests +DirectoryIndex + local-url [local-url] ... index.html svdhBList of resources to look for when the client requests a directory -<DirectoryMatch regex> -... </Directory>svCEnclose directives that apply to +<DirectoryMatch regex> +... </Directory>svCEnclose directives that apply to file-system directories matching a regular expression and their subdirectories -DocumentRoot directory-path /usr/local/apache/h +svCDirectory that forms the main document tree visible +DocumentRoot directory-path /usr/local/apache/h +svCDirectory that forms the main document tree visible from the web -EnableMMAP on|off on svdhCUse memory-mapping to read files during delivery -ErrorDocument error-code documentsvdhCWhat the server will return to the client +EnableMMAP on|off on svdhCUse memory-mapping to read files during delivery +ErrorDocument error-code documentsvdhCWhat the server will return to the client in case of an error - ErrorLog file-path|syslog[:facility] logs/error_log (Uni +svCLocation where the server will log errors -ExamplesvdhXDemonstration directive to illustrate the Apache module + ErrorLog file-path|syslog[:facility] logs/error_log (Uni +svCLocation where the server will log errors +ExamplesvdhXDemonstration directive to illustrate the Apache module API -ExpiresActive On|OffsvdhEEnables generation of Expires headers -ExpiresByType - MIME-type <code>secondssvdhEValue of the Expires header configured +ExpiresActive On|OffsvdhEEnables generation of Expires headers +ExpiresByType + MIME-type <code>secondssvdhEValue of the Expires header configured by MIME type -ExpiresDefault <code>secondssvdhEDefault algorithm for calculating expiration time -ExtendedStatus On|Off Off sBKeep track of extended status information for each +ExpiresDefault <code>secondssvdhEDefault algorithm for calculating expiration time +ExtendedStatus On|Off Off sBKeep track of extended status information for each request -ExtFilterDefine filtername parameterssX- -ExtFilterOptions - option [option] ... DebugLevel=0 NoLogS +dX- -FileETag component ... INode MTime Size svdhCFile attributes used to create the ETag +ExtFilterDefine filtername parameterssX- +ExtFilterOptions + option [option] ... DebugLevel=0 NoLogS +dX- +FileETag component ... INode MTime Size svdhCFile attributes used to create the ETag HTTP response header -<Files filename> ... </Files>svdhCContains directives that apply to matched +<Files filename> ... </Files>svdhCContains directives that apply to matched filenames -<FilesMatch regex> ... </FilesMatch>svdhCContains directives that apply to regular-expression matched +<FilesMatch regex> ... </FilesMatch>svdhCContains directives that apply to regular-expression matched filenames -ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhBAction to take if a single acceptable document is not +ForceLanguagePriority None|Prefer|Fallback [Prefer|Fallback] Prefer svdhBAction to take if a single acceptable document is not found -ForceType MIME-typedhCForces all matching files to be served with the specified +ForceType MIME-typedhCForces all matching files to be served with the specified MIME content-type -Group unix-group #-1 svMGroup under which the server will answer +Group unix-group #-1 svMGroup under which the server will answer requests -Header set|append|add|unset|echo header -[value]svdhEConfigure HTTP response headers -HeaderName filenamesvdhBName of the file that will be inserted at the top +Header set|append|add|unset|echo header +[value]svdhEConfigure HTTP response headers +HeaderName filenamesvdhBName of the file that will be inserted at the top of the index listing -HostnameLookups on|off|double off svdCEnables DNS lookups on client IP addresses -IdentityCheck on|off off svdCEnables logging of the RFC1413 identity of the remote +HostnameLookups on|off|double off svdCEnables DNS lookups on client IP addresses +IdentityCheck on|off off svdCEnables logging of the RFC1413 identity of the remote user -<IfDefine [!]parameter-name> ... - </IfDefine>svdhCEncloses directives that will be processed only +<IfDefine [!]parameter-name> ... + </IfDefine>svdhCEncloses directives that will be processed only if a test is true at startup -<IfModule [!]module-name> ... - </IfModule>svdhCEncloses directives that are processed conditional on the +<IfModule [!]module-name> ... + </IfModule>svdhCEncloses directives that are processed conditional on the presence of absence of a specific module -ImapBase map|referer|URL http://servername/ svdhBDefault base for imagemap files -ImapDefault error|nocontent|map|referer|URL nocontent svdhBDefault action when an imagemap is called with coordinates +ImapBase map|referer|URL http://servername/ svdhBDefault base for imagemap files +ImapDefault error|nocontent|map|referer|URL nocontent svdhBDefault action when an imagemap is called with coordinates that are not explicitly mapped -ImapMenu - none|formatted|semiformatted|unformattedsvdhBAction if no coordinates are given when calling +ImapMenu + none|formatted|semiformatted|unformattedsvdhBAction if no coordinates are given when calling an imagemap -Include file-path|directory-pathsvdCIncludes other configuration files from within +Include file-path|directory-pathsvdCIncludes other configuration files from within the server configuration files -IndexIgnore file [file] ...svdhBAdds to the list of files to hide when listing +IndexIgnore file [file] ...svdhBAdds to the list of files to hide when listing a directory -IndexOptions [+|-]option [[+|-]option] ...svdhBVarious configuration settings for directory +IndexOptions [+|-]option [[+|-]option] ...svdhBVarious configuration settings for directory indexing -IndexOrderDefault -Ascending|Descending Name|Date|Size|Description Ascending Name svdhBSets the default ordering of the directory index -ISAPIAppendLogToErrors on|off off svdhBRecord HSE_APPEND_LOG_PARAMETER requests from ISAPI +IndexOrderDefault +Ascending|Descending Name|Date|Size|Description Ascending Name svdhBSets the default ordering of the directory index +ISAPIAppendLogToErrors on|off off svdhBRecord HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the error log -ISAPIAppendLogToQuery on|off on svdhBRecord HSE_APPEND_LOG_PARAMETER requests from ISAPI +ISAPIAppendLogToQuery on|off on svdhBRecord HSE_APPEND_LOG_PARAMETER requests from ISAPI extensions to the query field -ISAPICacheFile file-path [file-path] ...svBISAPI .dll files to be loaded at startup -ISAPIFakeAsync on|off off svdhBFake asynchronous support for isapi callbacks -ISAPILogNotSupported on|off off svdhBLog unsupported feature requests from ISAPI +ISAPICacheFile file-path [file-path] ...svBISAPI .dll files to be loaded at startup +ISAPIFakeAsync on|off off svdhBFake asynchronous support for isapi callbacks +ISAPILogNotSupported on|off off svdhBLog unsupported feature requests from ISAPI extensions -ISAPIReadAheadBuffer size 49152 sdhBSize of the Read Ahead Buffer sent to ISAPI +ISAPIReadAheadBuffer size 49152 sdhBSize of the Read Ahead Buffer sent to ISAPI extensions -KeepAlive on|off On svCEnables HTTP persistent connections -KeepAliveTimeout seconds 15 svCAmount of time the server will wait for subsequent +KeepAlive on|off On svCEnables HTTP persistent connections +KeepAliveTimeout seconds 15 svCAmount of time the server will wait for subsequent requests on a persistent connection -LanguagePriority MIME-lang [MIME-lang] ...svdhBThe precendence of language variants for cases where +LanguagePriority MIME-lang [MIME-lang] ...svdhBThe precendence of language variants for cases where the client does not express a preference -LDAPCacheEntries number 1024 sXMaximum number of entires in the primary LDAP cache -LDAPCacheTTL seconds 600 sXTime that cached items remain valid -LDAPCertDBPath directory-pathsXDirectory containing certificates for SSL support -LDAPOpCacheEntries number 1024 sXNumber of entries used to cache LDAP compare +LDAPCacheEntries number 1024 sXMaximum number of entires in the primary LDAP cache +LDAPCacheTTL seconds 600 sXTime that cached items remain valid +LDAPCertDBPath directory-pathsXDirectory containing certificates for SSL support +LDAPOpCacheEntries number 1024 sXNumber of entries used to cache LDAP compare operations -LDAPOpCacheTTL seconds 600 sXTime that entries in the operation cache remain +LDAPOpCacheTTL seconds 600 sXTime that entries in the operation cache remain valid -LDAPSharedCacheSize bytes 102400 sXSize in bytes of the shared-memory cache -<Limit method [method] ... > ... - </Limit>svdhCRestrict enclosed access controls to only certain HTTP +LDAPSharedCacheSize bytes 102400 sXSize in bytes of the shared-memory cache +<Limit method [method] ... > ... + </Limit>svdhCRestrict enclosed access controls to only certain HTTP methods -<LimitExcept method [method] ... > ... - </LimitExcept>svdhCRestrict access controls to all HTTP methods +<LimitExcept method [method] ... > ... + </LimitExcept>svdhCRestrict access controls to all HTTP methods except the named ones -LimitRequestBody bytes 0 svdhCRestricts the total size of the HTTP request body sent +LimitRequestBody bytes 0 svdhCRestricts the total size of the HTTP request body sent from the client -LimitRequestFields number 100 sCLimits the number of HTTP request header fields that +LimitRequestFields number 100 sCLimits the number of HTTP request header fields that will be accepted from the client -LimitRequestFieldsize bytessCLimits the size of the HTTP request header allowed from the +LimitRequestFieldsize bytessCLimits the size of the HTTP request header allowed from the client -LimitRequestLine bytes 8190 sCLimit the size of the HTTP request line that will be accepted +LimitRequestLine bytes 8190 sCLimit the size of the HTTP request line that will be accepted from the client -LimitXMLRequestBody number 1000000 svdhCLimits the size of an XML-based request body -Listen [IP-address:]portnumbersMIP addresses and ports that the server +LimitXMLRequestBody number 1000000 svdhCLimits the size of an XML-based request body +Listen [IP-address:]portnumbersMIP addresses and ports that the server listens to -ListenBacklog backlogsMMaximum length of the queue of pending connections -LoadFile filename [filename] ...sELink in the named object file or library -LoadModule module filenamesELinks in the object file or library, and adds to the list +ListenBacklog backlogsMMaximum length of the queue of pending connections +LoadFile filename [filename] ...sELink in the named object file or library +LoadModule module filenamesELinks in the object file or library, and adds to the list of active modules -<Location - URL-path|URL> ... </Location>svCApplies the enclosed directives only to matching +<Location + URL-path|URL> ... </Location>svCApplies the enclosed directives only to matching URLs -<LocationMatch - regex> ... </Location>svCApplies the enclosed directives only to regular-expression +<LocationMatch + regex> ... </Location>svCApplies the enclosed directives only to regular-expression matching URLs -LockFile filename logs/accept.lock sMLocation of the accept serialization lock file -LogFormat - format|nickname [nickname] "%h %l %u %t \"%r\" +sBDescribes a format for use in a log file -LogLevel level warn svCControls the verbosity of the ErrorLog -MaxClients numbersMMaximum number of child processes that will be created +LockFile filename logs/accept.lock sMLocation of the accept serialization lock file +LogFormat + format|nickname [nickname] "%h %l %u %t \"%r\" +sBDescribes a format for use in a log file +LogLevel level warn svCControls the verbosity of the ErrorLog +MaxClients numbersMMaximum number of child processes that will be created to serve requests -MaxKeepAliveRequests number 100 svCNumber of requests allowed on a persistent +MaxKeepAliveRequests number 100 svCNumber of requests allowed on a persistent connection -MaxMemFree numbersMMaximum amount of memory that the main allocator is allowed +MaxMemFree numbersMMaximum amount of memory that the main allocator is allowed to hold without calling free() -MaxRequestsPerChild number 10000 sMLimit on the number of requests that an individual child server +MaxRequestsPerChild number 10000 sMLimit on the number of requests that an individual child server will handle during its life -MaxSpareServers number
    10 sMMaximum number of idle child server processes -MaxSpareThreads numbersMMaximum number of idle threads -MaxThreads number 250 sM- -MaxThreadsPerChild number 64 sMMaximum number of threads per child process -MetaDir directory .web svdhEName of the directory to find CERN-style meta information +MaxSpareServers number
    10 sMMaximum number of idle child server processes +MaxSpareThreads numbersMMaximum number of idle threads +MaxThreads number 250 sM- +MaxThreadsPerChild number 64 sMMaximum number of threads per child process +MetaDir directory .web svdhEName of the directory to find CERN-style meta information files -MetaFiles on|off off svdhEActivates CERN meta-file processing -MetaSuffix suffix .meta svdhEFile name suffix for the file containg CERN-style +MetaFiles on|off off svdhEActivates CERN meta-file processing +MetaSuffix suffix .meta svdhEFile name suffix for the file containg CERN-style meta information -MimeMagicFile file-pathsvEEnable MIME-type determination based on file contents +MimeMagicFile file-pathsvEEnable MIME-type determination based on file contents using the specified magic file -MinSpareServers number 5 sMMinimum number of idle child server processes -MinSpareServers numbersMMinimum number of idle threads available to handle request +MinSpareServers number 5 sMMinimum number of idle child server processes +MinSpareServers numbersMMinimum number of idle threads available to handle request spikes -MMapFile file-path [file-path] ...sX- -ModMimeUsePathInfo On|OffsvdhBTells mod_mime to treat path_info components as part of the filename -MultiviewsMatch - [NegotiatedOnly] [Handlers] [Filters] [Any]svdhBThe types of files that will be included when +MMapFile file-path [file-path] ...sX- +ModMimeUsePathInfo On|OffsvdhBTells mod_mime to treat path_info components as part of the filename +MultiviewsMatch + [NegotiatedOnly] [Handlers] [Filters] [Any]svdhBThe types of files that will be included when searching for a matching file with MultiViews -NameVirtualHost addr[:port]sCDesignates an IP address for name-virtual +NameVirtualHost addr[:port]sCDesignates an IP address for name-virtual hosting -NoProxy host [host] ...svEHosts, domains, or networks that will be connected +NoProxy host [host] ...svEHosts, domains, or networks that will be connected to directly -NumServers number 2 sMTotal number of children alive at the same time -Options - [+|-]option [[+|-]option] ... All svdhCConfigures what features are available in a particular +NumServers number 2 sMTotal number of children alive at the same time +Options + [+|-]option [[+|-]option] ... All svdhCConfigures what features are available in a particular directory - Order ordering Deny,Allow dhBControls the default access state and the order in which + Order ordering Deny,Allow dhBControls the default access state and the order in which Allow and Deny are evaluated. -PassEnv - env-variable [env-variable] ...svdhBPasses environment variables from the shell -PidFile filename logs/httpd.pid sMFile where the server records the process ID +PassEnv + env-variable [env-variable] ...svdhBPasses environment variables from the shell +PidFile filename logs/httpd.pid sMFile where the server records the process ID of the daemon -ProtocolEcho On|OffsvXTurn the echo server on or off -<Proxy wildcard-url> ...</Proxy>svEContainer for directives applied to proxied +ProtocolEcho On|OffsvXTurn the echo server on or off +<Proxy wildcard-url> ...</Proxy>svEContainer for directives applied to proxied resources -ProxyBlock *|word|host|domain -[word|host|domain] ...svEWords, hosts, or domains that are banned from being +ProxyBlock *|word|host|domain +[word|host|domain] ...svEWords, hosts, or domains that are banned from being proxied -ProxyDomain DomainsvEDefault domain name for proxied requests -ProxyErrorOverride On|Off Off svEOverride error pages for proxied content -ProxyIOBufferSize bytessvEIO buffer size for outgoing HTTP and FTP +ProxyDomain DomainsvEDefault domain name for proxied requests +ProxyErrorOverride On|Off Off svEOverride error pages for proxied content +ProxyIOBufferSize bytessvEIO buffer size for outgoing HTTP and FTP connections -<Proxy regex> ...</Proxy>svEContainer for directives applied to regular-expression-matched +<Proxy regex> ...</Proxy>svEContainer for directives applied to regular-expression-matched proxied resources -ProxyMaxForwards number 10 svEMaximium number of proxies that a request can be forwarded +ProxyMaxForwards number 10 svEMaximium number of proxies that a request can be forwarded through -ProxyPass [path] !|urlsvEMaps remote servers into the local server +ProxyPass [path] !|urlsvEMaps remote servers into the local server URL-space -ProxyPassReverse [path] urlsvEAdjusts the URL in HTTP response headers sent from +ProxyPassReverse [path] urlsvEAdjusts the URL in HTTP response headers sent from a reverse proxied server -ProxyPreserveHost on|off Off svEUse incoming Host HTTP request header for +ProxyPreserveHost on|off Off svEUse incoming Host HTTP request header for proxy request -ProxyReceiveBufferSize bytessvENetwork buffer size for outgoing HTTP and FTP +ProxyReceiveBufferSize bytessvENetwork buffer size for outgoing HTTP and FTP connections -ProxyRemote match remote-serversvERemote proxy used to handle certain requests -ProxyRemote regex remote-serversvERemote proxy used to handle requests +ProxyRemote match remote-serversvERemote proxy used to handle certain requests +ProxyRemote regex remote-serversvERemote proxy used to handle requests matched by regular expressions -ProxyRequests on|off Off svEEnables forward (standard) proxy requests -ProxyTimeout seconds 300 svENetwork timeout for proxied requests -ProxyVia on|off|full|block off svEInformation provided in the Via HTTP response +ProxyRequests on|off Off svEEnables forward (standard) proxy requests +ProxyTimeout seconds 300 svENetwork timeout for proxied requests +ProxyVia on|off|full|block off svEInformation provided in the Via HTTP response header for proxied requests -ReadmeName filenamesvdhBName of the file that will be inserted at the end +ReadmeName filenamesvdhBName of the file that will be inserted at the end of the index listing -Redirect [status] URL-path URLsvdhBSends an external redirect asking the client to fetch +Redirect [status] URL-path URLsvdhBSends an external redirect asking the client to fetch a different URL -RedirectMatch [status] regex URLsvdhBSends an external redirect based on a regular expression match +RedirectMatch [status] regex URLsvdhBSends an external redirect based on a regular expression match of the current URL -RedirectPermanent URL-path URLsvdhBSends an external permanent redirect asking the client to fetch +RedirectPermanent URL-path URLsvdhBSends an external permanent redirect asking the client to fetch a different URL -RedirectTemp URL-path URLsvdhBSends an external temporary redirect asking the client to fetch +RedirectTemp URL-path URLsvdhBSends an external temporary redirect asking the client to fetch a different URL -RemoveCharset - extension [extension] ...vdhBRemoves any character set associations for a set of file +RemoveCharset + extension [extension] ...vdhBRemoves any character set associations for a set of file extensions -RemoveEncoding - extension [extension] ...vdhBRemoves any content encoding associations for a set of file +RemoveEncoding + extension [extension] ...vdhBRemoves any content encoding associations for a set of file extensions -RemoveHandler - extension [extension] ...vdhBRemoves any handler associations for a set of file +RemoveHandler + extension [extension] ...vdhBRemoves any handler associations for a set of file extensions -RemoveInputFilter - extension [extension] ...vdhBRemoves any input filter associations for a set of file +RemoveInputFilter + extension [extension] ...vdhBRemoves any input filter associations for a set of file extensions -RemoveLanguage - extension [extension] ...vdhBRemoves any language associations for a set of file +RemoveLanguage + extension [extension] ...vdhBRemoves any language associations for a set of file extensions -RemoveOutputFilter - extension [extension] ...vdhBRemoves any output filter associations for a set of file +RemoveOutputFilter + extension [extension] ...vdhBRemoves any output filter associations for a set of file extensions -RemoveType - extension [extension] ...vdhBRemoves any content type associations for a set of file +RemoveType + extension [extension] ...vdhBRemoves any content type associations for a set of file extensions -RequestHeader set|append|add|unset header -[value]svdhEConfigure HTTP request headers -Require entity-name [entity-name] ...dhCSelects which authenticated users can access +RequestHeader set|append|add|unset header +[value]svdhEConfigure HTTP request headers +Require entity-name [entity-name] ...dhCSelects which authenticated users can access a resource -RewriteBase URL-pathdhESets the base URL for per-directory rewrites - RewriteCond - TestString CondPatternsvdhEDefines a condition under which rewriting will take place +RewriteBase URL-pathdhESets the base URL for per-directory rewrites + RewriteCond + TestString CondPatternsvdhEDefines a condition under which rewriting will take place -RewriteEngine on|off off svdhEEnables or disables runtime rewriting engine -RewriteLock file-pathsESets the name of the lock file used for RewriteMap +RewriteEngine on|off off svdhEEnables or disables runtime rewriting engine +RewriteLock file-pathsESets the name of the lock file used for RewriteMap synchronization -RewriteLog file-pathsvESets the name of the file used for logging rewrite engine +RewriteLog file-pathsvESets the name of the file used for logging rewrite engine processing -RewriteLogLevel LevelsvESets the verbosity of the log file used by the rewrite +RewriteLogLevel LevelsvESets the verbosity of the log file used by the rewrite engine -RewriteMap MapName MapType:MapSource -svEDefines a mapping function for key-lookup -RewriteOptions OptionssvdhESets some special options for the rewrite engine -RewriteRule - Pattern SubstitutionsvdhEDefines rules for the rewriting engine -RLimitCPU number|max [number|max]svdhCLimits the CPU consumption of processes launched +RewriteMap MapName MapType:MapSource +svEDefines a mapping function for key-lookup +RewriteOptions OptionssvdhESets some special options for the rewrite engine +RewriteRule + Pattern SubstitutionsvdhEDefines rules for the rewriting engine +RLimitCPU number|max [number|max]svdhCLimits the CPU consumption of processes launched by Apache children -RLimitMEM number|max [number|max]svdhCLimits the memory consumption of processes launched +RLimitMEM number|max [number|max]svdhCLimits the memory consumption of processes launched by Apache children -RLimitNPROC number|max [number|max]svdhCLimits the number of processes that can be launched by +RLimitNPROC number|max [number|max]svdhCLimits the number of processes that can be launched by processes launched by Apache children -Satisfy any|all all dhCInteraction between host-level access control and +Satisfy any|all all dhCInteraction between host-level access control and user authentication -ScoreBoardFile file-path logs/apache_status sMLocation of the file used to store coordination data for +ScoreBoardFile file-path logs/apache_status sMLocation of the file used to store coordination data for the child processes - Script method cgi-scriptsvdBActivates a CGI script for a particular request + Script method cgi-scriptsvdBActivates a CGI script for a particular request method. -ScriptAlias -URL-path file-path|directory-pathsvBMaps a URL to a filesystem location and designates the +ScriptAlias +URL-path file-path|directory-pathsvBMaps a URL to a filesystem location and designates the target as a CGI script -ScriptAliasMatch -regex file-path|directory-pathsvBMaps a URL to a filesystem location using a regular expression +ScriptAliasMatch +regex file-path|directory-pathsvBMaps a URL to a filesystem location using a regular expression and designates the target as a CGI script -ScriptInterpreterSource registry|script script svdhCTechnique for locating the interpreter for CGI +ScriptInterpreterSource registry|script script svdhCTechnique for locating the interpreter for CGI scripts -ScriptLog file-pathsvBLocation of the CGI script error logfile -ScriptLogBuffer bytes 1024 svBMaximum amount of PUT or POST requests that will be recorded +ScriptLog file-pathsvBLocation of the CGI script error logfile +ScriptLogBuffer bytes 1024 svBMaximum amount of PUT or POST requests that will be recorded in the scriptlog -ScriptLogLength bytes 10385760 svBSize limit of the CGI script logfile -ScriptSock file-path logs/cgisock svB- -SendBufferSize bytessMTCP buffer size -ServerAdmin email-addresssvCEmail address that the server includes in error +ScriptLogLength bytes 10385760 svBSize limit of the CGI script logfile +ScriptSock file-path logs/cgisock svB- +SendBufferSize bytessMTCP buffer size +ServerAdmin email-addresssvCEmail address that the server includes in error messages sent to the client -ServerAlias hostname [hostname] ...vCAlternate names for a host used when matching requests +ServerAlias hostname [hostname] ...vCAlternate names for a host used when matching requests to name-virtual hosts -ServerLimit number 256 (prefork), Serv +sMUpper limit on configurable number of processes -ServerName fully-qualified-domain-name[:port]svCHostname and port that the server uses to identify +ServerLimit number 256 (prefork), Serv +sMUpper limit on configurable number of processes +ServerName fully-qualified-domain-name[:port]svCHostname and port that the server uses to identify itself -ServerPath URL-pathvCLegacy URL pathname for a name-virtual host that +ServerPath URL-pathvCLegacy URL pathname for a name-virtual host that is accessed by an incompatible browser -ServerRoot directory-path /usr/local/apache sCBase directory for the server installation -ServerSignature On|Off|EMail Off svdhCConfigures the footer on server-generated documents -ServerTokens Major|Minor|Minimal|ProductOnly|OS|Full Full sCConfigures the Server HTTP response header -SetEnv env-variable valuesvdhBSets environment variables -SetEnvIf attribute +ServerRoot directory-path /usr/local/apache sCBase directory for the server installation +ServerSignature On|Off|EMail Off svdhCConfigures the footer on server-generated documents +ServerTokens Major|Minor|Minimal|ProductOnly|OS|Full Full sCConfigures the Server HTTP response header +SetEnv env-variable valuesvdhBSets environment variables +SetEnvIf attribute regex [!]env-variable[=value] - [[!]env-variable[=value]] ...svdhBSets environment variables based on attributes of the request + [[!]env-variable[=value]] ...svdhBSets environment variables based on attributes of the request -SetEnvIfNoCase attribute regex +SetEnvIfNoCase attribute regex [!]env-variable[=value] - [[!]env-variable[=value]] ...svdhBSets environment variables based on attributes of the request + [[!]env-variable[=value]] ...svdhBSets environment variables based on attributes of the request without respect to case -SetHandler handler-namesvdhCForces all matching files to be processed by a +SetHandler handler-namesvdhCForces all matching files to be processed by a handler -SetInputFilter filter[;filter...]svdhCSets the filters that will process client requests and POST +SetInputFilter filter[;filter...]svdhCSets the filters that will process client requests and POST input -SetOutputFilter filter[;filter...]svdhCSets the filters that will process responses from the +SetOutputFilter filter[;filter...]svdhCSets the filters that will process responses from the server -SSIEndTag tag "-->" svBString that ends an include element -SSIErrorMsg message -"[an error occurre +svdhBError message displayed when there is an SSI error -SSIStartTag tag "<!--" svBString that starts an include element -SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +svdhBConfigures the format in which date strings are +SSIEndTag tag "-->" svBString that ends an include element +SSIErrorMsg message +"[an error occurre +svdhBError message displayed when there is an SSI error +SSIStartTag tag "<!--" svBString that starts an include element +SSITimeFormat formatstring "%A, %d-%b-%Y %H:%M +svdhBConfigures the format in which date strings are displayed -SSIUndefinedEcho tag "<!-- undef -->" svBString displayed when +SSIUndefinedEcho tag "<!-- undef -->" svBString displayed when an unset variable is echoed -SSLCACertificateFile file-pathsvEFile of concatenated PEM-encoded CA Certificates +SSLCACertificateFile file-pathsvEFile of concatenated PEM-encoded CA Certificates for Client Auth -SSLCACertificatePath directory-pathsvEDirectory of PEM-encoded CA Certificates for +SSLCACertificatePath directory-pathsvEDirectory of PEM-encoded CA Certificates for Client Auth -SSLCARevocationFile file-pathsvEFile of concatenated PEM-encoded CA CRLs for +SSLCARevocationFile file-pathsvEFile of concatenated PEM-encoded CA CRLs for Client Auth -SSLCARevocationPath directory-pathsvEDirectory of PEM-encoded CA CRLs for +SSLCARevocationPath directory-pathsvEDirectory of PEM-encoded CA CRLs for Client Auth -SSLCertificateChainFile file-pathsvEFile of PEM-encoded Server CA Certificates -SSLCertificateFile file-pathsvEServer PEM-encoded X.509 Certificate file -SSLCertificateKeyFile file-pathsvEServer PEM-encoded Private Key file -SSLCipherSuite cipher-spec ALL:!ADH:RC4+RSA:+H +svdhECipher Suite available for negotiation in SSL +SSLCertificateChainFile file-pathsvEFile of PEM-encoded Server CA Certificates +SSLCertificateFile file-pathsvEServer PEM-encoded X.509 Certificate file +SSLCertificateKeyFile file-pathsvEServer PEM-encoded Private Key file +SSLCipherSuite cipher-spec ALL:!ADH:RC4+RSA:+H +svdhECipher Suite available for negotiation in SSL handshake -SSLEngine on|off off svESSL Engine Operation Switch -SSLMutex type none sESemaphore for internal mutual exclusion of +SSLEngine on|off off svESSL Engine Operation Switch +SSLMutex type none sESemaphore for internal mutual exclusion of operations -SSLOptions [+|-]option ...svdhEConfigure various SSL engine run-time options -SSLPassPhraseDialog type builtin sEType of pass phrase dialog for encrypted private +SSLOptions [+|-]option ...svdhEConfigure various SSL engine run-time options +SSLPassPhraseDialog type builtin sEType of pass phrase dialog for encrypted private keys -SSLProtocol [+|-]protocol ... all svEConfigure usable SSL protocol flavors -SSLProxyCACertificateFile file-pathsvEFile of concatenated PEM-encoded CA Certificates +SSLProtocol [+|-]protocol ... all svEConfigure usable SSL protocol flavors +SSLProxyCACertificateFile file-pathsvEFile of concatenated PEM-encoded CA Certificates for Remote Server Auth -SSLProxyCACertificatePath directory-pathsvEDirectory of PEM-encoded CA Certificates for +SSLProxyCACertificatePath directory-pathsvEDirectory of PEM-encoded CA Certificates for Remote Server Auth -SSLProxyCARevocationFile file-pathsvEFile of concatenated PEM-encoded CA CRLs for +SSLProxyCARevocationFile file-pathsvEFile of concatenated PEM-encoded CA CRLs for Remote Server Auth -SSLProxyCARevocationPath directory-pathsvEDirectory of PEM-encoded CA CRLs for +SSLProxyCARevocationPath directory-pathsvEDirectory of PEM-encoded CA CRLs for Remote Server Auth -SSLProxyCipherSuite cipher-spec ALL:!ADH:RC4+RSA:+H +svdhECipher Suite available for negotiation in SSL +SSLProxyCipherSuite cipher-spec ALL:!ADH:RC4+RSA:+H +svdhECipher Suite available for negotiation in SSL proxy handshake -SSLProxyEngine on|off off svESSL Proxy Engine Operation Switch -SSLProxyMachineCertificateFile filenamesEFile of concatenated PEM-encoded CA certificates for proxy server client certificates -SSLProxyMachineCertificatePath directorysEDirectory of PEM-encoded CA certificates for proxy server client certificates -SSLProxyProtocol [+|-]protocol ... all svEConfigure usable SSL protocol flavors for proxy usage -SSLProxyVerify level none svdhEType of remote server Certificate verification -SSLVerifyDepth numbersvdhEMaximum depth of CA Certificates in Remote Server +SSLProxyEngine on|off off svESSL Proxy Engine Operation Switch +SSLProxyMachineCertificateFile filenamesEFile of concatenated PEM-encoded CA certificates for proxy server client certificates +SSLProxyMachineCertificatePath directorysEDirectory of PEM-encoded CA certificates for proxy server client certificates +SSLProxyProtocol [+|-]protocol ... all svEConfigure usable SSL protocol flavors for proxy usage +SSLProxyVerify level none svdhEType of remote server Certificate verification +SSLVerifyDepth numbersvdhEMaximum depth of CA Certificates in Remote Server Certificate verification -SSLRandomSeed context source -[bytes]sEPseudo Random Number Generator (PRNG) seeding +SSLRandomSeed context source +[bytes]sEPseudo Random Number Generator (PRNG) seeding source -SSLRequire expressiondhEAllow access only when an arbitrarily complex +SSLRequire expressiondhEAllow access only when an arbitrarily complex boolean expression is true -SSLRequireSSLdhEDeny access when SSL is not used for the +SSLRequireSSLdhEDeny access when SSL is not used for the HTTP request -SSLSessionCache type none sEType of the global/inter-process SSL Session +SSLSessionCache type none sEType of the global/inter-process SSL Session Cache -SSLSessionCacheTimeout seconds 300 svENumber of seconds before an SSL session expires +SSLSessionCacheTimeout seconds 300 svENumber of seconds before an SSL session expires in the Session Cache -SSLVerifyClient level none svdhEType of Client Certificate verification -SSLVerifyDepth number 1 svdhEMaximum depth of CA Certificates in Client +SSLVerifyClient level none svdhEType of Client Certificate verification +SSLVerifyDepth number 1 svdhEMaximum depth of CA Certificates in Client Certificate verification -StartServers number 5 sMNumber of child server processes created at startup -StartThreads numbersMNubmer of threads created on startup -SuexecUserGroup User GroupsvEUser and group permissions for CGI programs -ThreadLimit numbersMSets the upper limit on the configurable number of threads +StartServers number 5 sMNumber of child server processes created at startup +StartThreads numbersMNubmer of threads created on startup +SuexecUserGroup User GroupsvEUser and group permissions for CGI programs +ThreadLimit numbersMSets the upper limit on the configurable number of threads per child process -ThreadsPerChild numbersMNumber of threads created by each child process -ThreadStackSize number 65536 sM- -TimeOut number 300 sCAmount of time the server will wait for +ThreadsPerChild numbersMNumber of threads created by each child process +ThreadStackSize number 65536 sM- +TimeOut number 300 sCAmount of time the server will wait for certain events before failing a request -TransferLog file|pipesBSpecifly location of a log file -TypesConfig file-path conf/mime.types sBThe location of the mime.types file -UnsetEnv env-variable [env-variable] ...svdhBRemoves variables from the environment -UseCanonicalName on|off|dns on svdCConfigures how the server determines its own name and +TransferLog file|pipesBSpecifly location of a log file +TypesConfig file-path conf/mime.types sBThe location of the mime.types file +UnsetEnv env-variable [env-variable] ...svdhBRemoves variables from the environment +UseCanonicalName on|off|dns on svdCConfigures how the server determines its own name and port -User unix-userid #-1 svMThe userid under which the server will answer +User unix-userid #-1 svMThe userid under which the server will answer requests -UserDir directory-filename public_html sBLocation of the user-specific directories -VirtualDocumentRoot interpolated-directory|none none svEDynamically configure the location of the document root +UserDir directory-filename public_html sBLocation of the user-specific directories +VirtualDocumentRoot interpolated-directory|none none svEDynamically configure the location of the document root for a given virtual host -VirtualDocumentRootIP interpolated-directory|none none svEDynamically configure the location of the document root +VirtualDocumentRootIP interpolated-directory|none none svEDynamically configure the location of the document root for a given virtual host -<VirtualHost +<VirtualHost addr[:port] [addr[:port]] - ...> ... </VirtualHost>sCContains directives that apply only to a specific + ...> ... </VirtualHost>sCContains directives that apply only to a specific hostname or IP address -VirtualScriptAlias interpolated-directory|none none svEDynamically configure the location of the CGI directory for +VirtualScriptAlias interpolated-directory|none none svEDynamically configure the location of the CGI directory for a given virtual host -VirtualScriptAliasIP interpolated-directory|none none svEDynamically configure the location of the cgi directory for +VirtualScriptAliasIP interpolated-directory|none none svEDynamically configure the location of the cgi directory for a given virtual host -XBitHack on|off|full off svdhBParse SSI directives in files with the execute +XBitHack on|off|full off svdhBParse SSI directives in files with the execute bit set
    \ No newline at end of file diff --git a/docs/manual/sitemap.html.en b/docs/manual/sitemap.html.en index 32a8455b56..e2be859efb 100644 --- a/docs/manual/sitemap.html.en +++ b/docs/manual/sitemap.html.en @@ -88,15 +88,18 @@ Server on HPUX
  • Apache MPM perchild
  • Apache MPM prefork
  • Apache MPM worker
  • -
  • Apache Module mod_access
  • Apache Module mod_actions
  • Apache Module mod_alias
  • Apache Module mod_asis
  • -
  • Apache Module mod_auth
  • -
  • Apache Module mod_auth_anon
  • -
  • Apache Module mod_auth_dbm
  • +
  • Apache Module mod_auth_basic
  • Apache Module mod_auth_digest
  • Apache Module mod_auth_ldap
  • +
  • Apache Module mod_authn_anon
  • +
  • Apache Module mod_authn_dbm
  • +
  • Apache Module mod_authn_file
  • +
  • Apache Module mod_authz_dbm
  • +
  • Apache Module mod_authz_groupfile
  • +
  • Apache Module mod_authz_host
  • Apache Module mod_autoindex
  • Apache Module mod_cache
  • Apache Module mod_cern_meta
  • diff --git a/docs/manual/sitemap.xml b/docs/manual/sitemap.xml index 9fc652b488..ce4243b4ad 100644 --- a/docs/manual/sitemap.xml +++ b/docs/manual/sitemap.xml @@ -125,14 +125,17 @@ Server on HPUX Directive Quick-Reference core.xml - mod_access.xml mod_actions.xml mod_alias.xml mod_asis.xml - mod_auth.xml - mod_auth_anon.xml - mod_auth_dbm.xml + mod_auth_basic.xml mod_auth_digest.xml + mod_authn_anon.xml + mod_authn_dbm.xml + mod_authn_file.xml + mod_authz_dbm.xml + mod_authz_groupfile.xml + mod_authz_host.xml mod_auth_ldap.xml mod_autoindex.xml mod_cache.xml diff --git a/docs/manual/upgrading.html.en b/docs/manual/upgrading.html.en index a5b5af0f72..fd485146d7 100644 --- a/docs/manual/upgrading.html.en +++ b/docs/manual/upgrading.html.en @@ -4,13 +4,13 @@ XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX This file is generated from xml source: DO NOT EDIT XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX - -->Upgrading to 2.0 from 1.3 - Apache HTTP Server
    <-

    Upgrading to 2.0 from 1.3

    + -->Upgrading to 2.0 from 1.3 - Apache HTTP Server
    <-

    Upgrading to 2.0 from 1.3

    In order to assist folks upgrading, we maintain a document describing information critical to existing Apache users. These are intended to be brief notes, and you should be able to find more information in either the New Features document, or in the src/CHANGES file.

    -
    top
    top

    Compile-Time Configuration Changes

    -
    top
    top

    Run-Time Configuration Changes

      @@ -46,19 +46,19 @@ implemented as a filter may no longer accept requests with PATH_INFO. Filters such as INCLUDES are implemented on top of the core handler, and therefore reject requests with - PATH_INFO. You can use the AcceptPathInfo directive to + PATH_INFO. You can use the AcceptPathInfo directive to force the core handler to accept requests with PATH_INFO and thereby restore the ability to use PATH_INFO in server-side includes. -
    • The CacheNegotiatedDocs +
    • The CacheNegotiatedDocs directive now takes the argument on or off. Existing instances of CacheNegotiatedDocs should be replaced with CacheNegotiatedDocs on.
    • - The ErrorDocument + The ErrorDocument directive no longer uses a quote at the beginning of the argument to indicate a text message. Instead, you should enclose the message in double quotes. For example, existing @@ -80,7 +80,7 @@
    • The AccessConfig and ResourceConfig directives no longer exist. Existing instances of these directives can be replaced with - the Include + the Include directive which has equivalent functionality. If you were making use of the default values of these directives without including them in the configuration files, you may need to @@ -95,13 +95,13 @@
    • The BindAddress and Port directives no longer exist. Equivalent functionality is provided with the more flexible - Listen + Listen directive.
    • Another use of the Port directive in Apache-1.3 was setting the port number to be used in self-referential URL's. The Apache-2.0 equivalent is - the new ServerName + the new ServerName syntax: it has been changed to allow specifying both the hostname and the port number for self-referential URL's in one directive.
    • @@ -115,8 +115,8 @@ provided the AgentLog, RefererLog and RefererIgnore directives have been removed. Agent and referer logs are still available using the - CustomLog - directive of mod_log_config. + CustomLog + directive of mod_log_config.
    • The AddModule and ClearModuleList directives no longer exist. @@ -127,10 +127,10 @@
    • The FancyIndexing directive has been removed. The same functionality is available through the - FancyIndexing option to the IndexOptions + FancyIndexing option to the IndexOptions directive.
    -
    top
    top

    Misc Changes

      @@ -139,11 +139,11 @@ configuration has been replaced by -t -D DUMP_VHOSTS. -
    • The module mod_auth_digest, which was +
    • The module mod_auth_digest, which was experimental in Apache 1.3, is now a standard module.
    • The mod_mmap_static module, which was experimental in - Apache 1.3, has been replaced with mod_file_cache.
    • + Apache 1.3, has been replaced with mod_file_cache.
    • The distribution has been completely reorganized so that it no longer contains an independent src @@ -152,7 +152,7 @@ compiled server should be directed to a separate directory.
    -
    top
    top

    Third Party Modules

    Extensive changes were made to the server API in Apache 2.0. @@ -160,4 +160,4 @@ not work in Apache 2.0 without modification. Details are provided in the developer documentation.

    -
    \ No newline at end of file +
    \ No newline at end of file