From dfb1f0fb923dc25424ca1742bee8a41b435ecb4d Mon Sep 17 00:00:00 2001 From: Ken Coar Date: Tue, 16 Dec 1997 20:57:38 +0000 Subject: [PATCH] Correct some misstatements about the Auth*File directives; they're ServerRoot-relative if not absolute. PR: 1511 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@79709 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/mod_auth.html | 24 +++++++++++++++--------- 1 file changed, 15 insertions(+), 9 deletions(-) diff --git a/docs/manual/mod/mod_auth.html b/docs/manual/mod/mod_auth.html index bfb47a795a..c2db0344d1 100644 --- a/docs/manual/mod/mod_auth.html +++ b/docs/manual/mod/mod_auth.html @@ -38,12 +38,14 @@ textual files. Module: mod_auth

The AuthGroupFile directive sets the name of a textual file containing the list -of user groups for user authentication. Filename is the absolute path -to the group file.

+of user groups for user authentication. Filename is the path +to the group file. If it is not absolute (i.e., if it +doesn't begin with a slash), it is treated as relative to the ServerRoot. +

Each line of the group file contains a groupname followed by a colon, followed by the member usernames separated by spaces. Example:

mygroup: bob joe anne
-Note that searching large groups files is very inefficient; +Note that searching large text files is very inefficient; AuthDBMGroupFile should be used instead.

@@ -65,13 +67,17 @@ See also AuthName, The AuthUserFile directive sets the name of a textual file containing the list of users and passwords for user -authentication. Filename is the absolute path to the user -file.

Each line of the user file file contains a username followed +authentication. Filename is the path to the user +file. If it is not absolute (i.e., if it doesn't begin with a +slash), it is treated as relative to the ServerRoot. +

Each line of the user file file contains a username followed by a colon, followed by the crypt() encrypted password. The behavior -of multiple occurrences of the same user is undefined.

Note that -searching user groups files is inefficient; AuthDBMUserFile should be -used instead.

+of multiple occurrences of the same user is undefined. +

Note that +searching large text files is very inefficient; +AuthDBMUserFile should be +used instead. +

Security: make sure that the AuthUserFile is stored outside the document tree of the web-server; do not put it in the directory that -- 2.50.1