Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: local policy)
Message-ID: <48330CD9.3060105@boboco.ie>
Date: Tue, 20 May 2008 19:39:37 +0200
From: Eric Bowman <ebowman@boboco.ie>
User-Agent: Thunderbird 2.0.0.14 (X11/20080421)
MIME-Version: 1.0
To: users@httpd.apache.org
References: 
 <42C2C3449D71044F9203DE5513B5E74503E1CA@prcex01.pinerivercapital.local>
 <882D50F5-D2CD-4041-BCE7-5E953826CDB8@umich.edu>
In-Reply-To: <882D50F5-D2CD-4041-BCE7-5E953826CDB8@umich.edu>
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] authenticating 1K+ users

Chris Africa wrote:
> We have some PHP web sites set up to authenticate users via Cosign 
> using the AuthGroupFile and Require group directives, with groups and 
> users defined in an .htaccess file
>
> I'm setting up a new site that will have 1000+ users over time. I 
> understand that the single .htaccess file is not the best way to do 
> authentication with a large group of users. What methods are other 
> admins out there using to authenticate large groups of users?
>
> As background, we run a single server running Apache 2.x, Cosign 2.x, 
> MySQL 5.x on Mac OSX Server 10.5.2. We previously used the Zope 
> application server which handled our authentication/authorization for 
> us, so this is new territory for me.
>

Hi Chris,

There's a decent overview of the various common approaches here:

http://www.yolinux.com/TUTORIALS/LinuxTutorialApacheAddingLoginSiteProtection.html

LDAP would be my own preferred most-scalable approach, although getting 
it up and running is not for the faint of heart. For 1000+ users 
probably using MySQL is the most straightforward approach that will work 
Just Fine.

cheers,
Eric

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org