d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
e9458b1a7a19a63aa4c179f9ab20f4d50681c168Jens Elkner<html xmlns="http://www.w3.org/1999/xhtml" lang="fr" xml:lang="fr"><head>
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type" />
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder This file is generated from xml source: DO NOT EDIT
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder<title>mod_auth_digest - Serveur Apache HTTP Version 2.5</title>
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder<link href="/style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder<link href="/style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
99b26e2ab8ba89bc9a050c1524137eb6269e2753Christian Maeder<link href="/style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="/style/css/prettify.css" />
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder<script src="/style/scripts/prettify.min.js" type="text/javascript">
25da71ee832b729e33def344a68f59fe21ce9c07Eugen Kuksa<link href="/images/favicon.ico" rel="shortcut icon" /></head>
25da71ee832b729e33def344a68f59fe21ce9c07Eugen Kuksa<p class="menu"><a href="/mod/">Modules</a> | <a href="/mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="/glossary.html">Glossaire</a> | <a href="/sitemap.html">Plan du site</a></p>
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa<p class="apache">Serveur Apache HTTP Version 2.5</p>
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa<div class="up"><a href="./"><img title="<-" alt="<-" src="/images/left.gif" /></a></div>
8d11785bab797efec9c78e11c9c07e7a32b35e21Eugen Kuksa<a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">Serveur HTTP</a> > <a href="http://httpd.apache.org/docs/">Documentation</a> > <a href="../">Version 2.5</a> > <a href="./">Modules</a></div>
4811c997e10bcfbd8e0fdfb130c3368abd33bbcaEugen Kuksa<div id="preamble"><h1>Module Apache mod_auth_digest</h1>
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder<p><span>Langues Disponibles: </span><a href="/en/mod/mod_auth_digest.html" hreflang="en" rel="alternate" title="English"> en </a> |
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder<a href="/fr/mod/mod_auth_digest.html" title="Fran�ais"> fr </a> |
8d2321e17a34951fbd52f68e9f9f148f0890e471Christian Maeder<a href="/ko/mod/mod_auth_digest.html" hreflang="ko" rel="alternate" title="Korean"> ko </a></p>
99b26e2ab8ba89bc9a050c1524137eb6269e2753Christian Maeder<div class="outofdate">Cette traduction peut �tre p�rim�e. V�rifiez la version
986888e7f4d8ed681272a79c63f329ce8037063dcmaeder anglaise pour les changements r�cents.</div>
e5f71ad96ddbaafd3bf8ae0820df93e0db4b0527cmaeder<table class="module"><tr><th><a href="module-dict.html#Description">Description:</a></th><td>Authentification utilisateur utilisant les condens�s
eae0d62755147d991cc3e903f74f98ac31a7cd42Christian Maeder<tr><th><a href="module-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
8723ec450f2e7a024230467c0c28a3f154905483cmaeder<tr><th><a href="module-dict.html#ModuleIdentifier">Identificateur�de�Module:</a></th><td>auth_digest_module</td></tr>
8723ec450f2e7a024230467c0c28a3f154905483cmaeder<tr><th><a href="module-dict.html#SourceFile">Fichier�Source:</a></th><td>mod_auth_digest.c</td></tr></table>
eae0d62755147d991cc3e903f74f98ac31a7cd42Christian Maeder <p>Ce module impl�mente l'authentification HTTP bas�e sur les
d4263171d0ce2cbc390a7b44bff98e8b3c0f8ce7Christian Maeder condens�s MD5 (<a href="http://www.faqs.org/rfcs/rfc2617.html">RFC2617</a>), et
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder fournit une alternative � <code class="module"><a href="/mod/mod_auth_basic.html">mod_auth_basic</a></code> en
18b36f727b1d0be6ce1ec918de15f5c17da7b53fcmaeder ne transmettant plus le mot de passe en clair. Cependant, cela ne
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder suffit pas pour am�liorer la s�curit� de mani�re significative par
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder rapport � l'authentification basique. En outre, le stockage du mot
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder de passe sur le serveur est encore moins s�r dans le cas
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder d'une authentification � base de condens� que dans le cas d'une
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder authentification basique. C'est pourquoi l'utilisation de
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder l'authentification basique associ�e � un chiffrement de la connexion
945e82ed7877917f3ab1657f555e71991372546aChristian Maeder via <code class="module"><a href="/mod/mod_ssl.html">mod_ssl</a></code> constitue une bien meilleure
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder alternative.</p>
ef1c24c8229ade3ac872febebd18c181e32fb9c4Christian Maeder<li><img alt="" src="/images/down.gif" /> <a href="#using">Utilisation de l'authentification � base de
024703c9d1326c23e307c0b0d453ed3358e87fe4cmaeder<li><img alt="" src="/images/down.gif" /> <a href="#authdigestalgorithm">AuthDigestAlgorithm</a></li>
d97700a22b2585ece83b05f3fff945fdfd0c44b4Christian Maeder<li><img alt="" src="/images/down.gif" /> <a href="#authdigestdomain">AuthDigestDomain</a></li>
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder<li><img alt="" src="/images/down.gif" /> <a href="#authdigestnccheck">AuthDigestNcCheck</a></li>
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa<li><img alt="" src="/images/down.gif" /> <a href="#authdigestnonceformat">AuthDigestNonceFormat</a></li>
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa<li><img alt="" src="/images/down.gif" /> <a href="#authdigestnoncelifetime">AuthDigestNonceLifetime</a></li>
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa<li><img alt="" src="/images/down.gif" /> <a href="#authdigestprovider">AuthDigestProvider</a></li>
1d65a799298f6b1253d774c22f61029e6eb99cadcmaeder<li><img alt="" src="/images/down.gif" /> <a href="#authdigestqop">AuthDigestQop</a></li>
1d65a799298f6b1253d774c22f61029e6eb99cadcmaeder<li><img alt="" src="/images/down.gif" /> <a href="#authdigestshmemsize">AuthDigestShmemSize</a></li>
e42249ec61f50a83525db6e5fc9f5c4dd1b4cf5fcmaeder<li><code class="directive"><a href="/mod/mod_authn_core.html#authname">AuthName</a></code></li>
fd94a6f66ccb5cef99aa42069b61e4b8734dbd3fChristian Maeder<li><code class="directive"><a href="/mod/mod_authn_core.html#authtype">AuthType</a></code></li>
f674d7a58db3f991300a708f3799d80c369781f8Eugen Kuksa<li><code class="directive"><a href="/mod/mod_authz_core.html#require">Require</a></code></li>
fd94a6f66ccb5cef99aa42069b61e4b8734dbd3fChristian Maeder<li><a href="/howto/auth.html">Mode d'emploi de
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder</ul><ul class="seealso"><li><a href="#comments_section">Commentaires</a></li></ul></div>
e42249ec61f50a83525db6e5fc9f5c4dd1b4cf5fcmaeder<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
473f5af6e4803fbeecc814065952396f2501039bChristian Maeder<h2><a name="using" id="using">Utilisation de l'authentification � base de
e42249ec61f50a83525db6e5fc9f5c4dd1b4cf5fcmaeder <p>Pour utiliser l'authentification � base de condens�s MD5, vous
6a88f8edd881afaf4b865b01bfbb4faaf0e7a3c9Simon Ulbricht devez simplement remplacer <code>AuthType Basic</code> et <code class="directive"><a href="/mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code> respectivement
473f5af6e4803fbeecc814065952396f2501039bChristian Maeder par <code>AuthType Digest</code> et <code class="directive"><a href="#authdigestprovider">AuthDigestProvider</a></code> lorsque vous
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder configurez l'authentification, puis ajouter une directive <code class="directive"><a href="#authdigestdomain">AuthDigestDomain</a></code> contenant au
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa moins la(les) URI(s) racine(s) de la zone � prot�ger.</p>
734a5ebd38032798f0ab908e2d52862c71b2c127Simon Ulbricht <p>On peut cr�er les fichiers utilisateur appropri�s (au format
ea5ccb1c6e89486a54e1f4bd95840147e96093edChristian Maeder texte) � l'aide de l'outil <code class="program"><a href="/programs/htdigest.html">htdigest</a></code>.</p>
c99b0eb6632087d502dd4269599c5aa68a148eebSimon Ulbricht <div class="example"><h3>Exemple :</h3><pre class="prettyprint lang-config"><Location /private/>
b99c9606f2faafeabb3fa8c596992143a561c787Simon Ulbricht AuthType Digest
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa AuthName "private area"
df67ddf64192bfcae6ece65255ad796a17cbe532Christian Maeder AuthDigestDomain /private/ http://mirror.my.dom/private2/
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder AuthDigestProvider file
526e7f36639cb58e3c99a54bea082499a6b04a25Christian Maeder Require valid-user
473f5af6e4803fbeecc814065952396f2501039bChristian Maeder</Location></pre>
526e7f36639cb58e3c99a54bea082499a6b04a25Christian Maeder <p>L'authentification � base de condens� a �t� con�ue pour am�liorer
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa la s�curit� par rapport � l'authentification basique, mais il
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa s'av�re que ce but n'a pas �t� atteint. Un attaquant de type
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa "man-in-the-middle" peut facilement forcer le navigateur � revenir �
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder une authentification basique. M�me une oreille indiscr�te passive
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa peut retrouver le mot de passe par force brute avec les moyens
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa modernes, car l'algorithme de hashage utilis� par l'authentification
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder � base de condens� est trop rapide. Autre probl�me, le stockage des
dae8246f1f55b6a85e946fc1bfb6d32d556395f1Simon Ulbricht mots de passe sur le serveur n'est pas s�r. Le contenu d'un fichier
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder htdigest vol� peut �tre utilis� directement pour l'authentification
64f5f0a8c38d5b2ba33b09e02e92b0e3f812d6d0Eugen Kuksa � base de condens�. Il est donc fortement recommand� d'utiliser
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder <code class="module"><a href="/mod/mod_ssl.html">mod_ssl</a></code> pour chiffrer la connexion.</p>
6a6689ad6d4c70af2ce3389f39a50982f20fd939Christian Maeder <p><code class="module"><a href="/mod/mod_auth_digest.html">mod_auth_digest</a></code> ne fonctionne correctement que
f56cdf11927c31495bae642a9eb383212c90ba61Christian Maeder sur les plates-formes o� APR supporte la m�moire partag�e.</p>
df67ddf64192bfcae6ece65255ad796a17cbe532Christian Maeder<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
be1ce1c2b2819ef32743136c13101f1927375311Christian Maeder<div class="directive-section"><h2><a name="authdigestalgorithm" id="authdigestalgorithm">Directive</a> <a name="AuthDigestAlgorithm" id="AuthDigestAlgorithm">AuthDigestAlgorithm</a></h2>
f674d7a58db3f991300a708f3799d80c369781f8Eugen Kuksa<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>S�lectionne l'algorithme utilis� pour calculer les
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maedercondens�s du d�fit et de sa r�ponse</td></tr>
5896f38ba2934056542cb7cb3e6359e88a622547Christian Maeder<tr><th><a href="directive-dict.html#Syntax">Syntaxe:</a></th><td><code>AuthDigestAlgorithm MD5|MD5-sess</code></td></tr>
526e7f36639cb58e3c99a54bea082499a6b04a25Christian Maeder<tr><th><a href="directive-dict.html#Default">D�faut:</a></th><td><code>AuthDigestAlgorithm MD5</code></td></tr>
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder<tr><th><a href="directive-dict.html#Context">Contexte:</a></th><td>r�pertoire, .htaccess</td></tr>
526e7f36639cb58e3c99a54bea082499a6b04a25Christian Maeder<tr><th><a href="directive-dict.html#Override">AllowOverride:</a></th><td>AuthConfig</td></tr>
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder<tr><th><a href="directive-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_auth_digest</td></tr>
275698320a734a6fd647ea6a461d6ce38862da1dChristian Maeder <p>La directive <code class="directive">AuthDigestAlgorithm</code> permet de
703004db20b23870f080c4d9640729b19b7c2288Eugen Kuksa s�lectionner l'algorithme utilis� pour calculer les condens�s du
703004db20b23870f080c4d9640729b19b7c2288Eugen Kuksa d�fit et de sa r�ponse.</p>
5896f38ba2934056542cb7cb3e6359e88a622547Christian Maeder <code>MD5-sess</code> n'est pas encore correctement impl�ment�.
eca54dc24f2c59cc51645115347a89ba2b40de36cmaeder<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder<div class="directive-section"><h2><a name="authdigestdomain" id="authdigestdomain">Directive</a> <a name="AuthDigestDomain" id="AuthDigestDomain">AuthDigestDomain</a></h2>
18548c6cc2dff13bf9f5f08b3f6cde6ca914df1dChristian Maeder<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Les URIs qui se trouvent dans le m�me espace de protection
5fb6343a5a2b4bbc67bc83479c84a92d23d30edfChristian Maederconcernant l'authentification � base de condens�s</td></tr>
6a6689ad6d4c70af2ce3389f39a50982f20fd939Christian Maeder<tr><th><a href="directive-dict.html#Syntax">Syntaxe:</a></th><td><code>AuthDigestDomain <var>URI</var> [<var>URI</var>] ...</code></td></tr>
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder<tr><th><a href="directive-dict.html#Context">Contexte:</a></th><td>r�pertoire, .htaccess</td></tr>
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder<tr><th><a href="directive-dict.html#Override">AllowOverride:</a></th><td>AuthConfig</td></tr>
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder<tr><th><a href="directive-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_auth_digest</td></tr>
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder <p>La directive <code class="directive">AuthDigestDomain</code> vous permet
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder de sp�cifier un ou plusieurs URIs se trouvant dans le m�me
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder espace de protection (c'est � dire utilisant le m�me utilisateur/mot
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder de passe et se trouvant dans le m�me domaine). Les URIs sp�cifi�s
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder sont des pr�fixes ; le client doit savoir que tous les URIs situ�s
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder sous ces pr�fixes seront prot�g�s par le m�me utilisateur/mot de
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder passe. Les URIs peuvent �tre soit des URIs absolus (c'est � dire
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder avec protocole, nom serveur, port, etc...), soit des URIs
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder relatifs.</p>
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder <p>Cette directive doit toujours �tre pr�sente et contenir au moins
8723ec450f2e7a024230467c0c28a3f154905483cmaeder le(s) URI(s) racine(s) pour cet espace. Dans le cas contraire, le
8723ec450f2e7a024230467c0c28a3f154905483cmaeder client va envoyer un en-t�te d'autorisation avec <em>chaque
7b21830970250ca6369b0ae60f34c990f9a5c5bfTill Mossakowski requ�te</em> � destination de ce serveur. Outre une augmentation de
e99cb5db53054d96bb97c9b8b130bd249802450eTill Mossakowski la taille de la requ�te, les performances vont s'en trouver
83ce5f14d356cd62e98f4f674da7f11ea1869eb0Till Mossakowski affect�es si la directive <code class="directive"><a href="#authdigestnccheck">AuthDigestNcCheck</a></code> est d�finie �
8723ec450f2e7a024230467c0c28a3f154905483cmaeder <p>Les URIs sp�cifi�s peuvent aussi r�f�rencer diff�rents serveurs,
dfa31ad230c88a66a9722c2a5ab23fe82c33f014Eugen Kuksa auquel cas les clients (qui sont � m�me de le comprendre) vont
8723ec450f2e7a024230467c0c28a3f154905483cmaeder partager l'utilisateur/mot de passe entre plusieurs serveurs sans le
8723ec450f2e7a024230467c0c28a3f154905483cmaeder demander � l'utilisateur � chaque fois.</p>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<div class="directive-section"><h2><a name="authdigestnccheck" id="authdigestnccheck">Directive</a> <a name="AuthDigestNcCheck" id="AuthDigestNcCheck">AuthDigestNcCheck</a></h2>
d27b1887e61f1dc53d77c37f59dbf5019242a686Christian Maeder<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Active ou d�sactive la v�rification du nombre d'envois du
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksanombre � valeur unique (nonce) par le serveur</td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Syntax">Syntaxe:</a></th><td><code>AuthDigestNcCheck On|Off</code></td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Default">D�faut:</a></th><td><code>AuthDigestNcCheck Off</code></td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Context">Contexte:</a></th><td>configuration du serveur</td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_auth_digest</td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa Non encore impl�ment�.
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<div class="directive-section"><h2><a name="authdigestnonceformat" id="authdigestnonceformat">Directive</a> <a name="AuthDigestNonceFormat" id="AuthDigestNonceFormat">AuthDigestNonceFormat</a></h2>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>D�termine la mani�re dont le nombre � valeur unique du
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Syntax">Syntaxe:</a></th><td><code>AuthDigestNonceFormat <var>format</var></code></td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Context">Contexte:</a></th><td>r�pertoire, .htaccess</td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Override">AllowOverride:</a></th><td>AuthConfig</td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_auth_digest</td></tr>
5d3978bb76c33d08d6297f69f10bbc04721ee3a5cmaeder<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder<div class="directive-section"><h2><a name="authdigestnoncelifetime" id="authdigestnoncelifetime">Directive</a> <a name="AuthDigestNonceLifetime" id="AuthDigestNonceLifetime">AuthDigestNonceLifetime</a></h2>
1f0483f71bad0707f10293d0b4db4649aa93fb35Christian Maeder<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Dur�e de validit� du nombre � valeur unique du
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder<tr><th><a href="directive-dict.html#Syntax">Syntaxe:</a></th><td><code>AuthDigestNonceLifetime <var>secondes</var></code></td></tr>
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder<tr><th><a href="directive-dict.html#Default">D�faut:</a></th><td><code>AuthDigestNonceLifetime 300</code></td></tr>
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder<tr><th><a href="directive-dict.html#Context">Contexte:</a></th><td>r�pertoire, .htaccess</td></tr>
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder<tr><th><a href="directive-dict.html#Override">AllowOverride:</a></th><td>AuthConfig</td></tr>
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder<tr><th><a href="directive-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_auth_digest</td></tr>
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder <p>La directive <code class="directive">AuthDigestNonceLifetime</code>
26acf851cacd7a31bdc9b25a42af9949942fa7c6Christian Maeder permet de contr�ler la dur�e de validit� du nombre � valeur unique
293abe6af19382a456dbe612aef45054ef76832fcmaeder du serveur (nonce). Lorsque le client contacte le serveur en
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder utilisant un nonce dont la validit� a expir�, le serveur renvoie un
7b21830970250ca6369b0ae60f34c990f9a5c5bfTill Mossakowski <var>secondes</var> est sup�rieur � 0, il sp�cifie la dur�e de
e99cb5db53054d96bb97c9b8b130bd249802450eTill Mossakowski validit� du nonce ; il est en g�n�ral d�conseill� d'affecter � cet
8e3e7896a1818bb0521674cf4f10403e9f9911b3Till Mossakowski argument une valeur inf�rieure � 10 secondes. Si
e5f71ad96ddbaafd3bf8ae0820df93e0db4b0527cmaeder <var>secondes</var> est inf�rieur � 0, le nonce n'expire jamais.
5d93620c37abd9c665d3fe532d4852d62dff4233Christian Maeder<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder<div class="directive-section"><h2><a name="authdigestprovider" id="authdigestprovider">Directive</a> <a name="AuthDigestProvider" id="AuthDigestProvider">AuthDigestProvider</a></h2>
9f4902edfa3d477e42343e0ec357a2f93b1119d1Christian Maeder<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>D�finit le(s) fournisseurs(s) d'authentification pour la
5d93620c37abd9c665d3fe532d4852d62dff4233Christian Maeder<tr><th><a href="directive-dict.html#Syntax">Syntaxe:</a></th><td><code>AuthDigestProvider <var>nom fournisseur</var>
232c13ff6847a6f2bac7163392f80ab692cd7774Christian Maeder[<var>nom fournisseur</var>] ...</code></td></tr>
12882fa70d12d9b56cbd850ccb4b724feb3c62d5Christian Maeder<tr><th><a href="directive-dict.html#Default">D�faut:</a></th><td><code>AuthDigestProvider file</code></td></tr>
4bd27a2cb9efd5d8ff00b5cf823487403add724ecmaeder<tr><th><a href="directive-dict.html#Context">Contexte:</a></th><td>r�pertoire, .htaccess</td></tr>
5d93620c37abd9c665d3fe532d4852d62dff4233Christian Maeder<tr><th><a href="directive-dict.html#Override">AllowOverride:</a></th><td>AuthConfig</td></tr>
99b26e2ab8ba89bc9a050c1524137eb6269e2753Christian Maeder<tr><th><a href="directive-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_auth_digest</td></tr>
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder <p>La directive <code class="directive">AuthDigestProvider</code> permet de
c5b8b64377e24bcbf5cc108ca433cfbbd6235ba1Christian Maeder d�finir quel fournisseur d'authentification sera utilis� pour
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder authentifier les utilisateurs pour la zone du site web concern�e.
99b26e2ab8ba89bc9a050c1524137eb6269e2753Christian Maeder Assurez-vous que le module impl�mentant le fournisseur
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder d'authentification choisi soit bien pr�sent dans le serveur. Le
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder fournisseur par d�faut <code>file</code> est impl�ment� par le
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder module <code class="module"><a href="/mod/mod_authn_file.html">mod_authn_file</a></code>.</p>
4937a0e373f619dc520799923acec42db5da5eb3Eugen Kuksa <p>Voir <code class="module"><a href="/mod/mod_authn_dbm.html">mod_authn_dbm</a></code>,
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder <code class="module"><a href="/mod/mod_authn_file.html">mod_authn_file</a></code>, <code class="module"><a href="/mod/mod_authn_dbd.html">mod_authn_dbd</a></code> et
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder <code class="module"><a href="/mod/mod_authn_socache.html">mod_authn_socache</a></code>
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder pour la liste des fournisseurs disponibles.</p>
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder<div class="directive-section"><h2><a name="authdigestqop" id="authdigestqop">Directive</a> <a name="AuthDigestQop" id="AuthDigestQop">AuthDigestQop</a></h2>
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>D�termine le niveau de protection fourni par
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa<tr><th><a href="directive-dict.html#Syntax">Syntaxe:</a></th><td><code>AuthDigestQop none|auth|auth-int [auth|auth-int]</code></td></tr>
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa<tr><th><a href="directive-dict.html#Default">D�faut:</a></th><td><code>AuthDigestQop auth</code></td></tr>
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa<tr><th><a href="directive-dict.html#Context">Contexte:</a></th><td>r�pertoire, .htaccess</td></tr>
649fdc0d0502d62d160c150684356fef2c273484Eugen Kuksa<tr><th><a href="directive-dict.html#Override">AllowOverride:</a></th><td>AuthConfig</td></tr>
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa<tr><th><a href="directive-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_auth_digest</td></tr>
df24d7f0c79862ffd8189698645e201bf07a4d9cEugen Kuksa <p>La directive <code class="directive">AuthDigestQop</code> permet de
df24d7f0c79862ffd8189698645e201bf07a4d9cEugen Kuksa d�finir le <dfn>niveau de protection</dfn> fourni. <code>auth</code>
df24d7f0c79862ffd8189698645e201bf07a4d9cEugen Kuksa ne fournit que l'authentification (nom utilisateur/mot de passe) ;
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa <code>auth-int</code> fournit l'authentification plus un contr�le
feb9227bb5c49d5bea1a112500c3b3eba31abdfbcmaeder d'int�grit� (un condens� MD5 de l'entit� est aussi calcul� et
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder v�rifi�) ; avec <code>none</code>, le module va utiliser l'ancien
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder algorithme de condens�s RFC-2069 (qui n'effectue pas de contr�le
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder d'int�grit�). On peut sp�cifier � la fois <code>auth</code> et
fe495a0978e5aa70776103c37fb0eb2bd6abea69Eugen Kuksa <code>auth-int</code>, auquel cas c'est le navigateur qui va choisir
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa lequel des deux utiliser. <code>none</code> ne doit �tre utilis� que
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa dans le cas o� le navigateur ne serait pas � m�me (pour une raison
64f5f0a8c38d5b2ba33b09e02e92b0e3f812d6d0Eugen Kuksa ou pour une autre) de relever le d�fit qu'il recevrait si un autre
728bd6bf3eb21b95a5e83db746a3c6ab5e8a6de1Eugen Kuksa niveau de protection �tait d�fini.</p>
64f5f0a8c38d5b2ba33b09e02e92b0e3f812d6d0Eugen Kuksa <code>auth-int</code> n'est pas encore impl�ment�.
dfa31ad230c88a66a9722c2a5ab23fe82c33f014Eugen Kuksa<div class="top"><a href="#page-header"><img alt="top" src="/images/up.gif" /></a></div>
728bd6bf3eb21b95a5e83db746a3c6ab5e8a6de1Eugen Kuksa<div class="directive-section"><h2><a name="authdigestshmemsize" id="authdigestshmemsize">Directive</a> <a name="AuthDigestShmemSize" id="AuthDigestShmemSize">AuthDigestShmemSize</a></h2>
ab38e2fac740c4336afafbe0584053dc2e67002bEugen Kuksa<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>La quantit� de m�moire partag�e � allouer afin de conserver
d35249e8b76e34d3cbb6adf7d89e9111226a49d6Eugen Kuksa<tr><th><a href="directive-dict.html#Syntax">Syntaxe:</a></th><td><code>AuthDigestShmemSize <var>taille</var></code></td></tr>
d35249e8b76e34d3cbb6adf7d89e9111226a49d6Eugen Kuksa<tr><th><a href="directive-dict.html#Default">D�faut:</a></th><td><code>AuthDigestShmemSize 1000</code></td></tr>
d35249e8b76e34d3cbb6adf7d89e9111226a49d6Eugen Kuksa<tr><th><a href="directive-dict.html#Context">Contexte:</a></th><td>configuration du serveur</td></tr>
d35249e8b76e34d3cbb6adf7d89e9111226a49d6Eugen Kuksa<tr><th><a href="directive-dict.html#Status">Statut:</a></th><td>Extension</td></tr>
728bd6bf3eb21b95a5e83db746a3c6ab5e8a6de1Eugen Kuksa<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_auth_digest</td></tr>
728bd6bf3eb21b95a5e83db746a3c6ab5e8a6de1Eugen Kuksa <p>La directive <code class="directive">AuthDigestShmemSize</code> permet de
ab38e2fac740c4336afafbe0584053dc2e67002bEugen Kuksa d�finir la quantit� de m�moire partag�e � allouer au d�marrage du
d16243f2fd4825f598eee589b68e324e23eb469dEugen Kuksa serveur afin de conserver les informations � propos des clients.
ab38e2fac740c4336afafbe0584053dc2e67002bEugen Kuksa Notez que le segment de m�moire partag�e ne peut pas �tre d�fini �
ab38e2fac740c4336afafbe0584053dc2e67002bEugen Kuksa une taille inf�rieure � l'espace n�cessaire pour conserver les
ab38e2fac740c4336afafbe0584053dc2e67002bEugen Kuksa informations � propos d'<em>un</em> client. Cette valeur d�pend de
64f5f0a8c38d5b2ba33b09e02e92b0e3f812d6d0Eugen Kuksa votre syst�me. Si vous voulez en d�terminer la valeur exacte, vous
728bd6bf3eb21b95a5e83db746a3c6ab5e8a6de1Eugen Kuksa pouvez simplement d�finir <code class="directive">AuthDigestShmemSize</code>
abdc8c3bcf5b761e9bebf51e6ba2bce659d29512Eugen Kuksa � <code>0</code> et consulter le message d'erreur que renverra le
64f5f0a8c38d5b2ba33b09e02e92b0e3f812d6d0Eugen Kuksa serveur lorsqu'on essaiera de le d�marrer.</p>
64f5f0a8c38d5b2ba33b09e02e92b0e3f812d6d0Eugen Kuksa <p>L'argument <var>size</var> s'exprime par d�faut en octets, mais
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder vous pouvez suffixer le nombre par un <code>K</code> ou un
6f9d360a425bdae3bd15289388e64c14a85eca43cmaeder <code>M</code> pour sp�cifier respectivement des KiloOctets ou des
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaeder M�gaOctets. Par exemple, les directives qui suivent sont toutes
5586064a8b4b5328f37f9a7cf2aaf893ed099e67Eugen Kuksa �quivalentes :</p>
8723ec450f2e7a024230467c0c28a3f154905483cmaeder <pre class="prettyprint lang-config">AuthDigestShmemSize 1048576
8723ec450f2e7a024230467c0c28a3f154905483cmaederAuthDigestShmemSize 1024K
0a26144c20fa9cdcd05011ca5019cbac8e4afae0cmaederAuthDigestShmemSize 1M</pre>
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht<p><span>Langues Disponibles: </span><a href="/en/mod/mod_auth_digest.html" hreflang="en" rel="alternate" title="English"> en </a> |
8723ec450f2e7a024230467c0c28a3f154905483cmaeder<a href="/fr/mod/mod_auth_digest.html" title="Fran�ais"> fr </a> |
8723ec450f2e7a024230467c0c28a3f154905483cmaeder<a href="/ko/mod/mod_auth_digest.html" hreflang="ko" rel="alternate" title="Korean"> ko </a></p>
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht</div><div class="top"><a href="#page-header"><img src="/images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Commentaires</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
d35249e8b76e34d3cbb6adf7d89e9111226a49d6Eugen Kuksa<script type="text/javascript"><!--//--><![CDATA[//><!--
d35249e8b76e34d3cbb6adf7d89e9111226a49d6Eugen Kuksavar comments_shortname = 'httpd';
8723ec450f2e7a024230467c0c28a3f154905483cmaedervar comments_identifier = 'http://httpd.apache.org/docs/trunk/mod/mod_auth_digest.html';
7bb0a9e92bc7a6f868eaa0b9c3212c0af4f96b7fEugen Kuksa(function(w, d) {
7bb0a9e92bc7a6f868eaa0b9c3212c0af4f96b7fEugen Kuksa if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
0b144823976d79a34bff62f7f9ec032e80b8ce85Simon Ulbricht d.write('<div id="comments_thread"><\/div>');
8723ec450f2e7a024230467c0c28a3f154905483cmaeder var s = d.createElement('script');
5586064a8b4b5328f37f9a7cf2aaf893ed099e67Eugen Kuksa s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
5586064a8b4b5328f37f9a7cf2aaf893ed099e67Eugen Kuksa (d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
5586064a8b4b5328f37f9a7cf2aaf893ed099e67Eugen Kuksa d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht})(window, document);
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht<p class="apache">Copyright 2015 The Apache Software Foundation.<br />Autoris� sous <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
8723ec450f2e7a024230467c0c28a3f154905483cmaeder<p class="menu"><a href="/mod/">Modules</a> | <a href="/mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="/glossary.html">Glossaire</a> | <a href="/sitemap.html">Plan du site</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbrichtif (typeof(prettyPrint) !== 'undefined') {
1ab66a7e4234c760be9689b05ab4c34ce99dba23Simon Ulbricht prettyPrint();