mod_auth_dbm.html revision 3d76f0e292da6a107829fbe83f98b8c0985c6ddb
<!--%hypertext -->
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML>
<HEAD>
<TITLE>Apache module mod_auth_dbm</TITLE>
</HEAD>
<BODY>
<!--/%hypertext -->
<H1>Module mod_auth_dbm</h1>
is not compiled in by default. It provides for user authentication using
<!--%hypertext -->
<menu>
<li><A HREF="#authdbmgroupfile">AuthDBMGroupFile</A>
<li><A HREF="#authdbmuserfile">AuthDBMUserFile</A>
</menu>
<hr>
<!--/%hypertext -->
<A name="authdbmgroupfile"><h2>AuthDbmGroupFile</h2></A>
<!--%plaintext <?INDEX {\tt AuthDbmGroupFile} directive> -->
<strong>Syntax:</strong> AuthGroupFile <em>filename</em><br>
<Strong>Context:</strong> directory, .htaccess<br>
<Strong>Override:</strong> AuthConfig<br>
<strong>Status:</strong> Extension<br>
<strong>Module:</strong> mod_auth_dbm<p>
The AuthDBMGroupFile directive sets the name of a DBM file containing the list
of user groups for user authentication. <em>Filename</em> is the absolute path
to the group file.<p>
The group file is keyed on the username. The value for a user is a
comma-separated list of the groups to which the users belongs. There must
be no whitespace within the value, and it must never contain any colons.<p>
Security: make sure that the AuthDBMGroupFile is stored outside the
document tree of the webserver; do <em>not</em> put it in the directory that
it protects. Otherwise, clients will be able to download the
AuthDBMGroupFile.<p>
<A HREF="#authdbmuserfile">AuthDBMUserFile</A>.<p><hr>
<A name="authdbmuserfile"><h2>AuthDBMUserFile</h2></A>
<!--%plaintext <?INDEX {\tt AuthDBMUserFile} directive> -->
<strong>Syntax:</strong> AuthDBMUserFile <em>filename</em><br>
<Strong>Context:</strong> directory, .htaccess<br>
<Strong>Override:</strong> AuthConfig<br>
<strong>Status:</strong> Extension<br>
<strong>Module:</strong> mod_auth_dbm<p>
The AuthDBMUserFile directive sets the name of a DBM file containing the list
of users and passwords for user authentication. <em>Filename</em> is the
absolute path to the user file.<p>
The user file is keyed on the username. The value for a user is the crypt()
encrypted password, optionally followed by a colon and arbitrary data.
The colon and the data following it will be ignored by the server.<p>
Security: make sure that the AuthDBMUserFile is stored outside the
document tree of the webserver; do <em>not</em> put it in the directory that
it protects. Otherwise, clients will be able to download the
AuthDBMUserFile.<p>
<A HREF="#authdbmgroupfile">AuthDBMGroupFile</A>.<p>
<!--%hypertext -->
<hr>
</BODY>
</HTML>
<!--/%hypertext -->