<?xml version='1.0' encoding='iso-2022-jp' ?>

<!DOCTYPE manualpage SYSTEM "/style/manualpage.dtd">

<?xml-stylesheet type="text/xsl" href="/style/manual.ja.xsl"?>

<manualpage metafile="auth.xml.meta">

<parentdocument href="./">How-To / $B%A%e!<%H%j%"%k(B</parentdocument>

<title>$BG'>Z!">5G'!"%"%/%;%9@)8f(B</title>

<summary>

<p>$B!VG'>Z!W$H$O!"C/$+$,<+J,$OC/$G$"$k$+$r<gD%$7$?>l9g$K!"(B

$B$=$l$r3NG'$9$k$?$a$NA42aDx$r;X$7$^$9!#!V>5G'!W$H$O!"(B

$BC/$+$,9T$-$?$$>l=j$K9T$1$k$h$&$K!"$"$k$$$OM_$7$$>pJs$r(B

<section id="related"><title>$B4XO"$9$k%b%8%e!<%k$H%G%#%l%/%F%#%V(B</title>

<related>

<modulelist>

<module>mod_auth_basic</module>

<module>mod_authn_file</module>

<module>mod_authz_groupfile</module>

<module>mod_authz_host</module>

</modulelist>

<directivelist>

<directive module="mod_authz_host">Allow</directive>

<directive module="mod_authz_groupfile">AuthGroupFile</directive>

<directive module="core">AuthName</directive>

<directive module="core">AuthType</directive>

<directive module="mod_authn_file">AuthUserFile</directive>

<directive module="mod_authz_host">Deny</directive>

<directive module="core">Options</directive>

<directive module="core">Require</directive>

</directivelist>

</related>

</section>

<section id="introduction"><title>$B$O$8$a$K(B</title>

<p>$B$b$75!L)$N>pJs$d!"$4$/$4$/>/?t%0%k!<%W$N?M8~$1$N>pJs$r(B

$B%&%'%V%5%$%H$KCV$/$N$G$"$l$P!"$3$NJ8=q$K=q$+$l$F$$$k(B

$B%F%/%K%C%/$r;H$&$3$H$G!"$=$N%Z!<%8$r8+$F$$$k?M$?$A$,(B

$BK>$_$N?M$?$A$G$"$k$3$H$r3N<B$K$G$-$k$G$7$g$&!#(B</p>

<p>$B$3$NJ8=q$G$O!"B?$/$N?M$,:NMQ$9$k$G$"$m$&!"(B

$B%&%'%V%5%$%H$N0lItJ,$rJ]8n$9$k!V0lHLE*$J!W(B

$BJ}K!$K$D$$$F%+%P!<$7$F$$$^$9!#(B</p>

</section>

<section id="theprerequisites"><title>$B=`Hw(B</title>

<p>$B$3$NJ8=q$G<h$j07$o$l$k%G%#%l%/%F%#%V$O!"(B

$B%;%/%7%g%sCf(B) $B$+!"$"$k$$$O%G%#%l%/%H%jKh$N@_Dj%U%!%$%k(B

<p><code>.htaccess</code> $B%U%!%$%k$rMQ$$$k$N$G$"$l$P!"(B

$B%G%#%l%/%F%#%V$G$O!"%G%#%l%/%H%jKh$N@_Dj%U%!%$%kCf$KCV$/$3$H$N$G$-$k(B

$B%G%#%l%/%F%#%V$r!"$b$7$"$l$P!";XDj$7$^$9!#(B</p>

<p>$BG'>Z$K$D$$$FOC$r?J$a$F$$$k$N$G!"<!$N$h$&$J(B

<directive module="core">AllowOverride</directive>

$B%G%#%l%/%F%#%V$,I,MW$K$J$k$G$7$g$&!#(B</p>

<example>

AllowOverride AuthConfig

</example>

<p>$B$=$&$G$J$/!"%a%$%s%5!<%P@_Dj%U%!%$%k$NCf$K(B

$BD>@\CV$/$N$G$"$l$P!"EvA3$J$,$i$=$N%U%!%$%k$X$N=q$-9~$_(B

$B8"8B$r;}$C$F$$$J$1$l$P$J$i$J$$$G$7$g$&!#(B</p>

<p>$B$^$?!"$I$N%U%!%$%k$,$I$3$KJ]B8$5$l$F$$$k$+CN$k$?$a$K!"(B

$B%5!<%P$N%G%#%l%/%H%j9=B$$K$D$$$F>/$7CN$C$F$*$/(B

$BI,MW$,$"$k$G$7$g$&!#(B

$B$3$l$O$=$s$J$KFq$7$/$J$$$N$G!"$3$NJ8=qCf$G(B

$B%G%#%l%/%H%j9=B$$K$D$$$FCN$C$F$*$/I,MW$,$"$k>lLL$G$O!"(B

$BL@$i$+$K$J$k$h$&$K$7$^$9!#(B</p>

</section>

<section id="gettingitworking"><title>$BF0:n$5$;$k(B</title>

<p>$B$G$O!"%5!<%P>e$N$"$k%G%#%l%/%H%j$r%Q%9%o!<%I$GJ]8n$9$k(B

$B4pK\<j=g$r<($7$^$9!#(B</p>

<p>$B%Q%9%o!<%I%U%!%$%k$r:n$kI,MW$,$"$j$^$9!#(B

$B$3$N%U%!%$%k$O!"%&%'%V$+$i%"%/%;%9$G$-$k>l=j$K(B

$B3NG'$N$?$a$K$b$&0lEYF~NO$9$k$h$&$KMW5a$7$F$-$^$9!#(B</p>

<example>

# htpasswd -c /usr/local/apache/passwd/passwords rbowen<br />

New password: mypassword<br />

Re-type new password: mypassword<br />

Adding password for user rbowen

</example>

<p>$B$b$7(B <program>htpasswd</program> $B$,%Q%9$NCf$KF~$C$F$$$J$$>l9g$O!"(B

$B$b$A$m$s!"<B9T$9$k$?$a$K%W%m%0%i%`$^$G$N%U%k%Q%9$r(B

$B%?%$%W$9$kI,MW$,$"$j$^$9!#;d$N%5!<%P$G$"$l$P!"(B

<p>$B<!$K!"%5!<%P$,%Q%9%o!<%I$rMW5a$9$k$h$&$K@_Dj$7$F!"(B

$B$I$N%f!<%6$,%"%/%;%9$r5v$5$l$F$$$k$+$r%5!<%P$KCN$i$;$J$1$l$P(B

$B$J$j$^$;$s!#(B <code>httpd.conf</code> $B$rJT=8$9$k$+(B

<code>.htaccess</code> $B%U%!%$%k$r;HMQ$9$k$+$G(B

$B@_Dj$7$^$9!#Nc$($P!"%G%#%l%/%H%j(B

<code>/usr/local/apache/htdocs/secret</code>

$B$rJ]8n$7$?$$>l9g$O!"(B

<code>/usr/local/apache/htdocs/secret/.htaccess</code>

$B$+(B httpd.conf $BCf$N(B &lt;Directory

/usr/local/apache/apache/htdocs/secret&gt; $B%;%/%7%g%s$K(B

$BG[CV$7$F!"<!$N%G%#%l%/%F%#%V$r;H$&$3$H$,$G$-$^$9!#(B</p>

<example>

AuthType Basic<br />

AuthName "Restricted Files"<br />

AuthUserFile /usr/local/apache/passwd/passwords<br />

Require user rbowen

</example>

<p>$B8D!9$N%G%#%l%/%F%#%V$K$D$$$F8+$F$_$^$7$g$&!#(B

<directive module="core">AuthType</directive>

$B%G%#%l%/%F%#%V$O$I$&$$$&G'>ZJ}K!$G%f!<%6$NG'>Z$r9T$&$+$r(B

Basic $BG'>Z$O%/%i%$%"%s%H$+$i%5!<%P$X!"(B

$B%Q%9%o!<%I$r0E9f2=$;$:$KAw$j$^$9!#$G$9$+$i!"(B

$B$3$NJ}K!$OFC$K5!L)@-$N9b$$%G!<%?$KBP$7$F$OMQ$$$k$Y$-$G$O(B

$B$"$j$^$;$s!#(B Apache $B$G$O$b$&0l$DJL$NG'>ZJ}K!(B:

<code>AuthType Digest</code> $B$r%5%]!<%H$7$F$$$^$9!#(B

$B$3$NJ}K!$O(B <module>mod_auth_digest</module>

$B$G<BAu$5$l$F$$$F!"$b$C$H0BA4$G$9!#(B

$B$4$/$4$/:G6a$N%/%i%$%"%s%H$7$+(B Digest

$BG'>Z$r%5%]!<%H$7$F$$$J$$$h$&$G$9!#(B</p>

$B%G%#%l%/%F%#%V$G$O!"G'>Z$K;H$&(B <dfn>Realm</dfn> ($BLuCm(B: $BNN0h(B)

$B$r@_Dj$7$^$9!#(BRealm $B$OBg$-$/J,$1$FFs$D$N5!G=$rDs6!$7$^$9!#(B

$B0l$DL\$O!"%/%i%$%"%s%H$,%Q%9%o!<%I%@%$%"%m%0%\%C%/%9$N(B

$B0lIt$H$7$F%f!<%6$K$3$N>pJs$r$h$/Ds<($9$k!"$H$$$&$b$N$G$9!#(B

$BFs$DL\$K$O!"%/%i%$%"%s%H$,M?$($i$l$?G'>ZNN0h$KBP$7$F$I$N%Q%9%o!<%I$r(B

$B0lEYG'>Z$5$l$l$P!"F10l%5!<%P>e$G(B <code>"Restricted Files"</code>

Realm $B$H$7$F%^!<%/$5$l$?$I$s$JNN0h$G$b!"%/%i%$%"%s%H$O(B

$B<+F0E*$KF1$8%Q%9%o!<%I$r;H$*$&$H;n$_$^$9!#(B

$B$3$N$*$+$2$G!"J#?t$N@)8BNN0h$KF1$8(B realm $B$r6&M-$5$;$F!"(B

$B%f!<%6$,%Q%9%o!<%I$r2?EY$bMW5a$5$l$k;vBV$r(B

$BKI$0$3$H$,$G$-$^$9!#$b$A$m$s!"%;%-%e%j%F%#>e$NM}M3$+$i!"(B

$B%5!<%P$N%[%9%HL>$,JQ$o$l$P$$$D$G$bI,$:!"(B

$B%/%i%$%"%s%H$O:F$S%Q%9%o!<%I$r?R$M$kI,MW$,$"$j$^$9!#(B</p>

$B%f!<%6?t$,B?$$>l9g$O!"%j%/%(%9%HKh$N%f!<%6$NG'>Z$N$?$a$N(B

$B%W%l!<%s%F%-%9%H$NC5:w$,Hs>o$KCY$/$J$k$3$H$,$"$j$^$9!#(B

Apache $B$G$O%f!<%6>pJs$r9bB.$J%G!<%?%Y!<%9%U%!%$%k$K(B

$BJ]4I$9$k$3$H$b$G$-$^$9!#(B

<module>mod_authn_dbm</module> $B%b%8%e!<%k$,(B

<directive module="mod_authn_dbm">AuthDBMUserFile</directive>

$B%G%#%l%/%F%#%V$rDs6!$7$^$9!#$3$l$i$N%U%!%$%k$O(B <program >dbmmanage</program>

$B%W%m%0%i%`$G:n@.$7$?$jA`:n$7$?$j$G$-$^$9!#(B

<a href="http://modules.apache.org/">Apache

$B%b%8%e!<%k%G!<%?%Y!<%9(B</a>$BCf$K$"$k%5!<%I%Q!<%F%#!<@=$N(B

$B%b%8%e!<%k$G!"$=$NB>B?$/$N%?%$%W$NG'>Z%*%W%7%g%s$,(B

$BMxMQ2DG=$G$9!#(B</p>

<p>$B:G8e$K!"(B<directive module="core">Require</directive>

$B%G%#%l%/%F%#%V$,!"%5!<%P$N$3$NNN0h$K%"%/%;%9$G$-$k%f!<%6$r(B

$B;XDj$9$k$3$H$K$h$C$F!"%W%m%;%9$N>5G'ItJ,$rDs6!$7$^$9!#(B

$B<!$N%;%/%7%g%s$G$O!"(B<directive module="core">Require</directive>

<p>$B>e5-$N%G%#%l%/%F%#%V$O!"$?$@0l?M(B ($B6qBNE*$K$O%f!<%6L>(B

<code>rbowen</code> $B$NC/$+(B) $B$,%G%#%l%/%H%j$K(B

$BF~$l$k$h$&$K$7$^$9!#B?$/$N>l9g$O!"J#?t$N?M$,(B

$BF~$l$k$h$&$K$7$?$$$G$7$g$&!#$3$3$G(B

<directive module="mod_authz_groupfile">AuthGroupFile</directive>

$B$NEP>l$G$9!#(B</p>

<p>$B$b$7J#?t$N?M$,F~$l$k$h$&$K$7$?$$$N$G$"$l$P!"(B

$B%0%k!<%W$KB0$9$k%f!<%6$N0lMw$NF~$C$F$$$k!"%0%k!<%WL>$N$D$$$?(B

$B%0%k!<%W%U%!%$%k$r:n$kI,MW$,$"$j$^$9!#$3$N%U%!%$%k$N(B

$B=q<0$O$-$o$a$FC1=c$G!"$*9%$_$N%(%G%#%?$G@8@.$G$-$^$9!#(B

$B%U%!%$%k$NCf?H$O<!$N$h$&$J$b$N$G$9!#(B</p>

<example>

GroupName: rbowen dpitts sungo rshersey

</example>

<p>$B0l9T$K%9%Z!<%96h@Z$j$G!"%0%k!<%W$K=jB0$9$k%a%s%P!<$N(B

<p>$B4{$KB8:_$9$k%Q%9%o!<%I%U%!%$%k$K%f!<%6$r2C$($k>l9g$O!"(B

$B<!$N$h$&$K%?%$%W$7$F$/$@$5$$!#(B</p>

<example>

htpasswd /usr/local/apache/passwd/passwords dpitts

</example>

<p>$B0JA0$HF1$81~Ez$,JV$5$l$^$9$,!"?7$7$$%U%!%$%k$r(B

$B:n$k$N$G$O$J$/!"4{$K$"$k%U%!%$%k$KDI2C$5$l$F$$$^$9!#(B

($B?7$7$$%Q%9%o!<%I%U%!%$%k$r:n$k$K$O(B <code>-c</code>

$B$r;H$$$^$9!#(B)</p>

<p>$B$3$3$G<!$N$h$&$K$7$F(B <code>.htaccess</code> $B%U%!%$%k$r(B

$B=$@5$9$kI,MW$,$"$j$^$9!#(B</p>

<example>

AuthType Basic<br />

AuthName "By Invitation Only"<br />

AuthUserFile /usr/local/apache/passwd/passwords<br />

AuthGroupFile /usr/local/apache/passwd/groups<br />

Require group GroupName

</example>

<p>$B$3$l$G!"%0%k!<%W(B <code>GroupName</code> $B$K%j%9%H$5$l$F$$$F!"(B

<code>password</code> $B%U%!%$%k$K%(%s%H%j$,$"$k?M$O!"(B

$B@5$7$$%Q%9%o!<%I$r%?%$%W$9$l$PF~$k$3$H$,$G$-$k$G$7$g$&!#(B</p>

<p>$B$b$C$HFCDj$;$:$KJ#?t$N%f!<%6$,F~$l$k$h$&$K$9$k!"(B

$B$b$&0l$D$NJ}K!$,$"$j$^$9!#%0%k!<%W%U%!%$%k$r:n$k$N$G$O$J$/!"(B

$B<!$N%G%#%l%/%F%#%V$r;H$($P$G$-$^$9!#(B</p>

<example>

Require valid-user

</example>

<p><code>require user rbowen</code> $B9T$G$J$/!">e5-$r;H$&$H!"(B

$B%Q%9%o!<%I%U%!%$%k$K%j%9%H$5$l$F$$$k?M$G$"$l$PC/$G$b(B

$BC1$K%Q%9%o!<%I%U%!%$%k$r%0%k!<%WKh$KJ,$1$F$*$/$3$H$G!"(B

$B%0%k!<%W$N$h$&$J?6$kIq$$$r$5$;$k$3$H$b$G$-$^$9!#(B

$B$3$N%"%W%m!<%A$NMxE@$O!"(BApache $B$OFs$D$G$O$J$/!"(B

$B$?$@0l$D$N%U%!%$%k$@$1$r8!::$9$l$P$h$$$H$$$&E@$G$9!#(B

$B7gE@$O!"$?$/$5$s$N%Q%9%o!<%I%U%!%$%k$r4IM}$7$F!"$=$NCf$+$i(B

<directive module="mod_authn_file">AuthUserFile</directive>

$B%G%#%l%/%F%#%V$K@5$7$$%U%!%$%k$r;2>H$5$;$J$1$l$P$J$i$J$$E@$G$9!#(B</p>

</section>

<section id="possibleproblems"><title>$B5/$3$j$($kLdBj(B</title>

<p>Basic $BG'>Z$,;XDj$5$l$F$$$k>l9g$O!"(B

$B%5!<%P$K%I%-%e%a%s%H$r%j%/%(%9%H$9$kEY$K(B

$B%f!<%6L>$H%Q%9%o!<%I$r8!::$7$J$1$l$P$J$j$^$;$s!#(B

$B$3$l$OF1$8%Z!<%8!"%Z!<%8$K$"$kA4$F$N2hA|$r(B

$B%j%m!<%I$9$k>l9g$G$"$C$F$b3:Ev$7$^$9(B

($B$b$72hA|$bJ]8n$5$l$?%G%#%l%/%H%j$+$iMh$k$N$G$"$l$P(B) $B!#(B

$BM=A[$5$l$kDL$j!"$3$l$OF0:n$rB?>/CY$/$7$^$9!#(B

$BCY$/$J$kDxEY$O%Q%9%o!<%I%U%!%$%k$NBg$-$5$HHfNc$7$^$9$,!"(B

$B$3$l$O!"%U%!%$%k$r3+$$$F$"$J$?$NL>A0$rH/8+$9$k$^$G(B

$B$=$7$F!"%Z!<%8$,%m!<%I$5$l$kEY$K$3$l$r9T$o$J$1$l$P(B

$B$J$j$^$;$s!#(B</p>

<p>$B7kO@$H$7$F$O!"0l$D$N%Q%9%o!<%I%U%!%$%k$KCV$/$3$H$N$G$-$k(B

$B%f!<%6?t$K$O<B<AE*$J8B3&$,$"$j$^$9!#(B

$B$3$N8B3&$O%5!<%P%^%7%s$N@-G=$K0MB8$7$FJQ$o$j$^$9$,!"(B

$B?tI4$N%(%s%H%j$r1[$($?$"$?$j$+$iB.EYDc2<$,8+$i$l$k$HM=4|$5$l$F$$$^$9!#(B

$B$=$N;~$OB>$NG'>ZJ}K!$r9MN8$KF~$l$?J}$,NI$$$G$7$g$&!#(B</p>

</section>

<section id="whatotherneatstuffcanido"><title>$B$b$C$H9*$_$K@)8f$G$-$J$$(B

?</title>

<p>$B%f!<%6L>$H%Q%9%o!<%I$K$h$kG'>Z$OG'>Z$N0l$D$NJ}K!$K2a$.$^$;$s!#(B

$B$7$P$7$PC/$G$"$k$+$H$$$&$3$H$H$O0c$&2?$+$K4p$E$$$F!"(B

$BF~$l$k$h$&$K$7$?$/$J$k$3$H$b$"$k$G$7$g$&!#(B

$BNc$($P$=$N?M$,$I$3$+$iMh$F$$$k$+$H$$$C$?$3$H$G$9!#(B</p>

<p><directive module="mod_authz_host">Allow</directive> $B$H(B

<directive module="mod_authz_host">Deny</directive>

$B%G%#%l%/%F%#%V$r;H$C$F!"%I%-%e%a%s%H$rMW5a$7$F$-$?%^%7%s$N(B

$B%[%9%HL>$d%[%9%H%"%I%l%9$K4p$E$$$F5v2DIT5v2D$r@)8f$G$-$^$9!#(B

<directive module="mod_authz_host">Order</directive>

$B%G%#%l%/%F%#%V$O$3$NFs$D$HO"7H$7$FF0:n$7!"(BApache

$B$K$I$N=gHV$G%U%#%k%?$rE,MQ$9$k$+$rCN$i$;$^$9!#(B</p>

<p>$B$3$l$i$N%G%#%l%/%F%#%V$N;H$$J}$O<!$N$h$&$K$J$j$^$9!#(B</p>

<example>

Allow from <var>address</var>

</example>

<p>$B$3$3$G!"(B<var>address</var> $B$O(B IP $B%"%I%l%9(B

($B$^$?$O(B IP $B%"%I%l%9$N0lIt(B)$B!"$"$k$$$O40A4=$>~%I%a%$%sL>(B

($B$^$?$O%I%a%$%sL>$N0lIt(B) $B$G$9!#(B

$BI,MW$G$"$l$PJ#?t$N%"%I%l%9$d%I%a%$%sL>$r;XDj$G$-$^$9!#(B</p>

<p>$BNc$($P!"$b$7C/$+$,7G<(HD$r967b$7$F$$$F!"(B

$B$=$N?M$rJD$a=P$7$?$$$N$G$"$l$P!"(B

<p>$B$3$N%"%I%l%9$+$iMh$k?M$O!"$3$N%G%#%l%/%F%#%V$NHO0OFb$N(B

$B%"%I%l%9$NBe$o$j$K%^%7%sL>$,$"$l$P!"$=$l$r;H$($^$9!#(B</p>

<example>

Deny from <var>host.example.com</var>

</example>

<p>$B%I%a%$%sA4BN$+$i$N%"%/%;%9$rKI$.$?$1$l$P!"(B

$BC1$K%"%I%l%9$d%I%a%$%sL>$N0lIt$r;XDj$9$k$3$H$,$G$-$^$9!#(B</p>

<example>

Deny from <var>192.101.205</var><br />

Deny from <var>cyberthugs.com</var> <var>moreidiots.com</var><br />

Deny from ke

</example>

<p><directive module="mod_authz_host">Order</directive> $B$r;H$&$3$H$G!"(B

<directive module="mod_authz_host">Deny</directive> $B$H(B

<directive module="mod_authz_host">Allow</directive> $B$NAH$_9g$o$;$G(B

$BF~$C$F$bNI$$%0%k!<%W$,K\Ev$K3N<B$K8BDj$G$-$F$$$k$h$&$K$G$-$^$9!#(B</p>

<example>

Order deny,allow<br />

Deny from all<br />

Allow from <var>dev.example.com</var>

</example>

<p><directive module="mod_authz_host">Allow</directive>

$B%G%#%l%/%F%#%V$rC1=c$KNs5s$9$k$N$G$OK>$_$NF0:n$r$7$J$$$G$7$g$&!#(B

$B$J$<$J$i!"A4$F$N?M$,F~$l$k$H$$$&$3$H$K2C$($F!"(B

$B;XDj$7$?%[%9%H$+$i$N?M$,F~$l$k$h$&$K$9$k$+$i$G$9!#(B

$B$d$j$?$$$3$H$O!";XDj$7$??M$?$A(B<em>$B$@$1(B</em>$B$,F~$l$k$h$&$K(B