From dbce50ce8734bcaf5e1366136025af01a9fcfd09 Mon Sep 17 00:00:00 2001
From: Rich Bowen mod_authn_file
. If authentication is unsuccessful,
the user will be redirected to the form login page.
AuthFormProvider file -AuthUserFile "conf/passwd" -AuthType form -AuthName realm -AuthFormLoginRequiredLocation "http://example.com/login.html" -Session On -SessionCookieName session path=/ -SessionCryptoPassphrase secret+
<Location "/admin"> + AuthFormProvider file + AuthUserFile "conf/passwd" + AuthType form + AuthName "/admin" + AuthFormLoginRequiredLocation "http://example.com/login.html" + + Session On + SessionCookieName session path=/ + + Require valid-user +</Location>
The directive AuthType
will enable
@@ -125,13 +129,17 @@ SessionCryptoPassphrase secret
AuthUserFile
specify that usernames
and passwords should be checked against the chosen file.
The directives Session
,
- SessionCookieName
and
- SessionCryptoPassphrase
create an
- encrypted session stored within an HTTP cookie on the browser. For more information
+
The directives Session
and
+ SessionCookieName
+ session stored within an HTTP cookie on the browser. For more information
on the different options for configuring a session, read the documentation for
mod_session
.
You can optionally add a
+ SessionCryptoPassphrase
to
+ create an encrypted session cookie. This required the additional
+ module mod_session_crypto
be loaded.
In the simple example above, a URL has been protected by
mod_auth_form
, but the user has yet to be given an opportunity to
enter their username and password. Options for doing so include providing a
@@ -168,10 +176,9 @@ SessionCryptoPassphrase secret
AuthFormProvider file
AuthUserFile "conf/passwd"
AuthType form
- AuthName realm
+ AuthName /admin
Session On
SessionCookieName session path=/
- SessionCryptoPassphrase secret
</Location>
The error document page should contain a login form with an empty action property, @@ -316,8 +322,7 @@ SessionCryptoPassphrase secret AuthName realm AuthFormLogoutLocation "http://example.com/loggedout.html" Session On -SessionCookieName session path=/ -SessionCryptoPassphrase secret +SessionCookieName session path=/
Note that logging a user out does not delete the session; it merely removes @@ -332,8 +337,7 @@ SessionCryptoPassphrase secret AuthFormLogoutLocation "http://example.com/loggedout.html" Session On SessionMaxAge 1 -SessionCookieName session path=/ -SessionCryptoPassphrase secret +SessionCookieName session path=/
diff --git a/docs/manual/mod/mod_auth_form.html.fr b/docs/manual/mod/mod_auth_form.html.fr index f3b318f85d..f86a873c89 100644 --- a/docs/manual/mod/mod_auth_form.html.fr +++ b/docs/manual/mod/mod_auth_form.html.fr @@ -29,6 +29,8 @@ +Description: | Authentification à l'aide d'un formulaire |
---|---|
Statut: | Base |
Identificateur de Module: | auth_form_module |