mod_auth_dbm.html revision 65a1588701f9e5d0f62261d0da85733a23edc92f
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China<html xmlns="http://www.w3.org/1999/xhtml">
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <meta name="generator" content="HTML Tidy, see www.w3.org" />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <title>Apache module mod_auth_dbm</title>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <!-- Background white, links blue (unvisited), navy (visited), red (active) -->
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <body bgcolor="#FFFFFF" text="#000000" link="#0000FF"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China vlink="#000080" alink="#FF0000">
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <!--#include virtual="header.html" -->
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <h1 align="CENTER">Module mod_auth_dbm</h1>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>This module provides for user authentication using DBM
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p><a href="module-dict.html#Status"
a56d24ea912a4459d5c9470f9acbc39a73339568Mark Johnson rel="Help"><strong>Status:</strong></a> Extension<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Module Identifier:</strong></a>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China auth_dbm_module</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <h2>Summary</h2>
6d0043d8d3eb6aec4dcd2a08b6f9ec812da10113Robert Mustacchi <p>This module provides for HTTP Basic Authentication, where
6d0043d8d3eb6aec4dcd2a08b6f9ec812da10113Robert Mustacchi the usernames and passwords are stored in DBM type database
6d0043d8d3eb6aec4dcd2a08b6f9ec812da10113Robert Mustacchi files. It is an alternative to the plain text password files
6d0043d8d3eb6aec4dcd2a08b6f9ec812da10113Robert Mustacchi provided by <a href="mod_auth.html">mod_auth</a>.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <h2>Directives</h2>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <li><a href="#authdbmgroupfile">AuthDBMGroupFile</a></li>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <li><a href="#authdbmuserfile">AuthDBMUserFile</a></li>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <li><a href="#authdbmtype">AuthDBMType</a></li>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="#authdbmauthoritative">AuthDBMAuthoritative</a></li>
6d0043d8d3eb6aec4dcd2a08b6f9ec812da10113Robert Mustacchi <p>See also: <a href="core.html#satisfy">Satisfy</a> and <a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="core.html#require">Require</a>.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <h2><a id="authdbmgroupfile"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China name="authdbmgroupfile">AuthDBMGroupFile</a></h2>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <!--%plaintext <?INDEX {\tt AuthDBMGroupFile} directive> -->
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Syntax"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Syntax:</strong></a> AuthDBMGroupFile
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <em>file-path</em><br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Context"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Context:</strong></a> directory,
5ee6ac27d4fd4c9412183aa8cc1143f36ae04a8cRichard Lowe .htaccess<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Override"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Override:</strong></a> AuthConfig<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Status"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Status:</strong></a> Extension<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Module"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Module:</strong></a> mod_auth_dbm
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>The AuthDBMGroupFile directive sets the name of a DBM file
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China containing the list of user groups for user authentication.
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <em>File-path</em> is the absolute path to the group file.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>The group file is keyed on the username. The value for a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China user is a comma-separated list of the groups to which the users
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China belongs. There must be no whitespace within the value, and it
91e187871f25f5f4cebb89ca6783e31ac6e8a540lucy wang - Sun Microsystems - Beijing China must never contain any colons.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>Security: make sure that the AuthDBMGroupFile is stored
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China outside the document tree of the web-server; do <em>not</em>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China put it in the directory that it protects. Otherwise, clients
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China will be able to download the AuthDBMGroupFile unless otherwise
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>Combining Group and Password DBM files: In some cases it is
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China easier to manage a single database which contains both the
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China password and group details for each user. This simplifies any
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China support programs that need to be written: they now only have to
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China deal with writing to and locking a single DBM file. This can be
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China accomplished by first setting the group and password files to
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China point to the same DBM:</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <code>AuthDBMGroupFile /www/userbase<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China AuthDBMUserFile /www/userbase</code>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China The key for the single DBM is the username. The value consists
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <code>Unix Crypt-ed Password : List of Groups [ : (ignored)
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China The password section contains the Unix crypt() password as
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China before. This is followed by a colon and the comma separated
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China list of groups. Other data may optionally be left in the DBM
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China file after another colon; it is ignored by the authentication
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China module. This is what www.telescope.org uses for its combined
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China password and group database.
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>See also <a href="core.html#authname">AuthName</a>, <a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="core.html#authtype">AuthType</a> and <a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="#authdbmuserfile">AuthDBMUserFile</a>.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <h2><a id="authdbmuserfile"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China name="authdbmuserfile">AuthDBMUserFile</a></h2>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <!--%plaintext <?INDEX {\tt AuthDBMUserFile} directive> -->
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Syntax"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Syntax:</strong></a> AuthDBMUserFile
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <em>file-path</em><br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Context"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Context:</strong></a> directory,
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China .htaccess<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Override"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Override:</strong></a> AuthConfig<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Status"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Status:</strong></a> Extension<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Module"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Module:</strong></a> mod_auth_dbm
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>The AuthDBMUserFile directive sets the name of a DBM file
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China containing the list of users and passwords for user
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China authentication. <em>File-path</em> is the absolute path to the
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>The user file is keyed on the username. The value for a user
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China is the crypt() encrypted password, optionally followed by a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China colon and arbitrary data. The colon and the data following it
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China will be ignored by the server.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>Security: make sure that the AuthDBMUserFile is stored
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China outside the document tree of the web-server; do <em>not</em>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China put it in the directory that it protects. Otherwise, clients
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China will be able to download the AuthDBMUserFile.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>Important compatibility note: The implementation of
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China "dbmopen" in the apache modules reads the string length of the
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China hashed values from the DBM data structures, rather than relying
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China upon the string being NULL-appended. Some applications, such as
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China the Netscape web server, rely upon the string being
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China NULL-appended, so if you are having trouble using DBM files
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China interchangeably between applications this may be a part of the
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>A perl script called
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="/programs/dbmmanage.html">dbmmanage</a> is included with
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China Apache. This program can be used to create and update DBM
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China format password files for use with this module.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China See also <a href="core.html#authname">AuthName</a>, <a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="core.html#authtype">AuthType</a> and <a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="#authdbmgroupfile">AuthDBMGroupFile</a>.
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <h2><a id="authdbmtype"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China name="authdbmtype">AuthDBMType</a></h2>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p><a href="directive-dict.html#Syntax"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Syntax:</strong></a> AuthDBMType
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China default|SDBM|GDBM|DB<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Default"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Default:</strong></a>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <code>AuthDBMType default</code><br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Context"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Context:</strong></a> directory,
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China .htaccess<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Override"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Override:</strong></a> AuthConfig<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Status"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Status:</strong></a> Extension<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Module"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Module:</strong></a> mod_auth_dbm<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Compatibility"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Compatibility:</strong></a>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China Available in version 2.0.30 and later.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China<p>Sets the type of database file that is used to store the passwords.
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing ChinaThe default database type is determined at compile time. The
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing Chinaavailability of other types of database files also depends on
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing Chinacompile-time settings.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China<p>It is crucial that whatever program you use to create your password
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing Chinafiles is configured to use the same type of database.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <h2><a id="authdbmauthoritative"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China name="authdbmauthoritative">AuthDBMAuthoritative</a></h2>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <!--%plaintext <?INDEX {\tt AuthDBMAuthoritative} directive> -->
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Syntax"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Syntax:</strong></a> AuthDBMAuthoritative
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Default"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Default:</strong></a>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Context"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Context:</strong></a> directory,
6d0043d8d3eb6aec4dcd2a08b6f9ec812da10113Robert Mustacchi .htaccess<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Override"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Override:</strong></a> AuthConfig<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Status"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Status:</strong></a> Extension<br />
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <a href="directive-dict.html#Module"
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China rel="Help"><strong>Module:</strong></a> mod_auth_dbm
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>Setting the AuthDBMAuthoritative directive explicitly to
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <strong>'off'</strong> allows for both authentication and
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China authorization to be passed on to lower level modules (as
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China defined in the <code>Configuration</code> and
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <code>modules.c</code> file if there is <strong>no
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China userID</strong> or <strong>rule</strong> matching the supplied
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China userID. If there is a userID and/or rule specified; the usual
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China password and access checks will be applied and a failure will
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China give an Authorization Required reply.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>So if a userID appears in the database of more than one
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China module; or if a valid <code>Require</code> directive applies to
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China more than one module; then the first module will verify the
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China credentials; and no access is passed on; regardless of the
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China AuthAuthoritative setting.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>A common use for this is in conjunction with one of the
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China basic auth modules; such as <a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="mod_auth.html"><code>mod_auth.c</code></a>. Whereas this
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China DBM module supplies the bulk of the user credential checking; a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China few (administrator) related accesses fall through to a lower
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China level with a well protected .htpasswd file.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>By default, control is not passed on and an unknown userID
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China or rule will result in an Authorization Required reply. Not
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China setting it thus keeps the system secure and forces an NCSA
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China compliant behaviour.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>Security: Do consider the implications of allowing a user to
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China allow fall-through in his .htaccess file; and verify that this
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China is really what you want; Generally it is easier to just secure
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China a single .htpasswd file, than it is to secure a database which
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China might have more access interfaces.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p>See also <a href="core.html#authname">AuthName</a>, <a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="core.html#authtype">AuthType</a> and <a
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China href="#authdbmgroupfile">AuthDBMGroupFile</a>.</p>
04b6cca3fef9f6205a9aa479c48d196116193dd9lucy wang - Sun Microsystems - Beijing China <p><!--#include virtual="footer.html" -->