Authentication, Authorization and Access Control

+Apache > HTTP Server > Documentation > Version 2.2 > How-To / Tutorials

Authentication and Authorization

Available Languages: en | fr | @@ -32,6 +32,9 @@ someone is who they claim they are. Authorization is any process by which someone is allowed to be where they want to go, or to have information that they want to have.

+ +

For general access control, see the Access + Control How-To.

Related Modules and Directives
Introduction

Authentication type (see the - AuthType directive) + AuthType directive)
- mod_auth_basic
- mod_auth_digest
Authentication provider +
Authentication provider (see the + AuthBasicProvider and + AuthDigestProvider directives) +
- mod_authn_alias
- mod_authn_anon
- mod_authn_dbd
- mod_authn_dbm
- mod_authn_default
- mod_authn_file
- mod_authnz_ldap
- mod_authn_socache
Authorization (see the - Require directive) + Require directive)
- mod_authnz_ldap
- mod_authz_dbd
- mod_authz_dbm
- mod_authz_default
- mod_authz_groupfile
- mod_authz_host
- mod_authz_owner
- mod_authz_user
@@ -144,6 +150,13 @@ module from each group.
structure of your server, in order to know where some files are kept. This should not be terribly difficult, and I'll try to make this clear when we come to that point.
+ +
You will also need to make sure that the modules + mod_authn_core and mod_authz_core + have either been built into the httpd binary or loaded by the + httpd.conf configuration file. Both of these modules provide core + directives and functionality that are critical to the configuration + and use of authentication and authorization in the web server.

Getting it working

@@ -205,7 +218,7 @@ module from each group.

# (Following line optional)
AuthBasicProvider file
AuthUserFile /usr/local/apache/passwd/passwords
- Require user rbowen +Require user rbowen

Let's examine each of those directives individually. The AuthType directive selects @@ -219,7 +232,7 @@ module from each group.

AuthType Digest. This method is implemented by mod_auth_digest and is much more secure. Most recent browsers support Digest authentication.

The AuthName directive sets +

The AuthName directive sets the Realm to be used in the authentication. The realm serves two major functions. First, the client often presents this information to the user as part of the password dialog box. Second, it is used by the @@ -254,7 +267,7 @@ module from each group.

party modules in the Apache Modules Database.

Finally, the Require +

Finally, the Require directive provides the authorization part of the process by setting the user that is allowed to access this region of the server. In the next section, we discuss various ways to use the @@ -333,7 +346,7 @@ person in AuthBasicProvider file
AuthUserFile /usr/local/apache/passwd/passwords
AuthGroupFile /usr/local/apache/passwd/groups
- Require group GroupName +Require group GroupName

Now, anyone that is listed in the group GroupName, @@ -399,7 +412,7 @@ person in AuthBasicProvider dbm
AuthDBMUserFile /www/passwords/passwd.dbm
Require valid-user
- </Directory> +</Directory>

Other options are available. Consult the Modified: httpd/httpd/branches/2.2.x/docs/manual/howto/auth.html.fr URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/docs/manual/howto/auth.html.fr?rev=1363760&r1=1363759&r2=1363760&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/howto/auth.html.fr (original) +++ httpd/httpd/branches/2.2.x/docs/manual/howto/auth.html.fr Fri Jul 20 12:55:21 2012 @@ -27,6 +27,8 @@ ko | tr

L'authentification est un processus qui vous permet de vérifier qu'une personne est bien celle qu'elle prétend être. L'autorisation Modified: httpd/httpd/branches/2.2.x/docs/manual/howto/auth.html.tr.utf8 URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/docs/manual/howto/auth.html.tr.utf8?rev=1363760&r1=1363759&r2=1363760&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/howto/auth.html.tr.utf8 [utf-8] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/howto/auth.html.tr.utf8 [utf-8] Fri Jul 20 12:55:21 2012 @@ -27,6 +27,7 @@ ko | tr

Kimlik Doğrulama istediğiniz kişileri teyid etme işlemidir. Yetkilendirme ise kişilerin nereye gireceklerine ve hangi bilgiye Modified: httpd/httpd/branches/2.2.x/docs/manual/howto/auth.xml.fr URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/docs/manual/howto/auth.xml.fr?rev=1363760&r1=1363759&r2=1363760&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/howto/auth.xml.fr (original) +++ httpd/httpd/branches/2.2.x/docs/manual/howto/auth.xml.fr Fri Jul 20 12:55:21 2012 @@ -1,7 +1,7 @@ - + Modified: httpd/httpd/branches/2.2.x/docs/manual/howto/auth.xml.ja URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/docs/manual/howto/auth.xml.ja?rev=1363760&r1=1363759&r2=1363760&view=diff ============================================================================== --- httpd/httpd/branches/2.2.x/docs/manual/howto/auth.xml.ja [utf-8] (original) +++ httpd/httpd/branches/2.2.x/docs/manual/howto/auth.xml.ja [utf-8] Fri Jul 20 12:55:21 2012 @@ -1,7 +1,7 @@ - + + + + +