mod_auth_digest.xml.ko revision c3b15b58dae68a44f0e37e9b52fa3abea2cf2b23
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<!DOCTYPE modulesynopsis SYSTEM "/style/modulesynopsis.dtd">
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<?xml-stylesheet type="text/xsl" href="/style/manual.ko.xsl"?>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<!-- English Revision: 105989:600245 (outdated) -->
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd Licensed to the Apache Software Foundation (ASF) under one or more
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd contributor license agreements. See the NOTICE file distributed with
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd this work for additional information regarding copyright ownership.
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd The ASF licenses this file to You under the Apache License, Version 2.0
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen (the "License"); you may not use this file except in compliance with
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen the License. You may obtain a copy of the License at
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd Unless required by applicable law or agreed to in writing, software
d229f940abfb2490dee17979e9a5ff31b7012eb5rbowen distributed under the License is distributed on an "AS IS" BASIS,
3f08db06526d6901aa08c110b5bc7dde6bc39905nd WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd See the License for the specific language governing permissions and
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd limitations under the License.
1c8f2418892d98febb00a06b9a4f45f8bcfd80a3nd<description>MD5 Digest Authentication�� ����� ���������.</description>
4b575a6b6704b516f22d65a3ad35696d7b9ba372rpluem <p>�� ����� HTTP Digest Authentication�� �����Ѵ�.
4b575a6b6704b516f22d65a3ad35696d7b9ba372rpluem ���� ���� ��Ʈ�� ��ġ�� ���� �������� ����̴�.</p>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<seealso><directive module="core">AuthName</directive></seealso>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<seealso><directive module="core">AuthType</directive></seealso>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<seealso><directive module="core">Require</directive></seealso>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<seealso><directive module="core">Satisfy</directive></seealso>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<section id="using"><title>Digest Authentication ����ϱ�</title>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <p>MD5 Digest authentication�� �ſ� ���� ����� �� �ִ�.
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd module="mod_auth_basic">AuthBasicProvider</directive> ���
4b5981e276e93df97c34e4da05ca5cf8bbd937dand module="mod_auth_digest">AuthDigestProvider</directive>��
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ����Ͽ� ������ ������ ������ �� �ִ�. ���� �ּ��� ��ȣ�Ϸ���
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ����Ͽ� ����� (����)������ ���� �� �ִ�.</p>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <Location /private/><br />
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd AuthType Digest<br />
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd AuthName "private area"<br />
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd AuthDigestDomain /private/ http://mirror.my.dom/private2/<br />
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd AuthDigestProvider file<br />
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd Require valid-user<br />
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd </Location>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd </example>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <p>Digest authentication�� Basic authentication���� ��
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ����������, ������ �����ؾ� �Ѵ�. 2002�� 11�� ���� digest
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd authentication�� �����ϴ� ������� <a
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd href="http://konqueror.kde.org/">Konqueror</a>, (Windows����
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ���ǹ��ڿ��� �Բ� ����ϸ� �ȵ����� - �ذ����� �Ʒ� "<a
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd href="#msie">MS Internet Explorer ���� �ذ��ϱ�</a>"�� ���)
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd Mac OS X�� Windows�� <a
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd href="http://www.microsoft.com/windows/ie/">MS Internet
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd Explorer</a>, <a href="http://www.mozilla.org">Mozilla</a>,
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <a href="http://channels.netscape.com/ns/browsers/download.jsp"
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd >Netscape</a> ���� 7, <a href="http://www.opera.com/">Opera</a>,
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <a href="http://www.apple.com/safari/">Safari</a> ���� �ִ�.
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <a href="http://lynx.isc.org/">lynx</a>�� digest authentication��
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd basic authentication ��ŭ �θ� �������� �ʾұ���� ���
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ����ڰ� �����ϴ� ������ ����ϴ� ��쿡�� ����ؾ�
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<section id="msie"><title>MS Internet Explorer ���� �ذ��ϱ�</title>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <p>���� Windows�� Internet Explorer�� Digest authentication
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ó���ϴ� ������ �ִ�. ��� ������� �� ������ �ذ��� ��
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd �����ϴٸ� ���� ������ �ذ�å�̴�.
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <p>��, ����ġ 2.0.51���� <code>AuthDigestEnableQueryStringHack</code>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ȯ�溯���� �����Ͽ� ������ �ذ��Ѵ�. ��û��
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ����ġ�� MSIE ���� ���ذ� ��ġ�� ���ϰ� ��û URI�� digest
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ���� �����Ѵ�. �� ����� ������ ���� ����Ѵ�.</p>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd <example><title>MSIE���� Digest Authentication ����ϱ�:</title>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd </example>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ����϶�.</p>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<directivesynopsis>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<description>�� ��ġ�� ���� ���������ڸ� �����Ѵ�</description>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<syntax>AuthDigestProvider On|Off|<var>provider-name</var>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<contextlist><context>directory</context><context>.htaccess</context>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd</contextlist>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ��ġ���� ����ڸ� ������ �����ڸ� �����Ѵ�. ����
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd �����ڸ� �����ϱ���� ������ �� ����� �ִ��� Ȯ���ؾ�
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ���ư���.</p>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd</directivesynopsis>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<directivesynopsis>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<description>digest authentication�� �����
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd��ȣ����(quality-of-protection)�� �����Ѵ�.</description>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<syntax>AuthDigestQop none|auth|auth-int [auth|auth-int]</syntax>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd<contextlist><context>directory</context><context>.htaccess</context>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd</contextlist>
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd �����ʴ�) ������ RFC-2069 digest �˰?���� ����Ѵ�.
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd �� �ִ�. �� ��� ������� � ���� ������� �����Ѵ�.
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ������ ��� ���������� challenge�� �������� �ʴ´ٸ�
d474d8ef01ec5c2a09341cd148851ed383c3287crbowen</directivesynopsis>
0d0ba3a410038e179b695446bb149cce6264e0abnd<directivesynopsis>
0d0ba3a410038e179b695446bb149cce6264e0abnd<syntax>AuthDigestNonceLifetime <var>seconds</var></syntax>
727872d18412fc021f03969b8641810d8896820bhumbedooh<contextlist><context>directory</context><context>.htaccess</context>
0d0ba3a410038e179b695446bb149cce6264e0abnd</contextlist>
0d0ba3a410038e179b695446bb149cce6264e0abnd ���� nonce�� ��ȿ�� �Ⱓ�� �����Ѵ�. Ŭ���̾�Ʈ�� �����
0d0ba3a410038e179b695446bb149cce6264e0abnd nonce�� ������ ������ �����ϸ� ������ <code>stale=true</code>��
727872d18412fc021f03969b8641810d8896820bhumbedooh �Բ� 401�� ��ȯ�Ѵ�. <var>seconds</var>�� 0���� ũ�� nonce��
0d0ba3a410038e179b695446bb149cce6264e0abnd ��ȿ�� �Ⱓ�� �����Ѵ�. �Ƹ��� 10 �ʺ��� �۰� �����ϸ� �ȵȴ�.
30471a4650391f57975f60bbb6e4a90be7b284bfhumbedooh �ʴ´�. <!-- ���� �������� �ʾ���: <var>seconds</var>��
5effc8b39fae5cd169d17f342bfc265705840014rbowen 0�̸� Ŭ���̾�Ʈ�� ��Ȯ�� �ѹ� nonce�� ����� �� �ִ�.
d229f940abfb2490dee17979e9a5ff31b7012eb5rbowen �ѹ� ����� �� �ִ� nonce�� �����(replay attack)��
0d0ba3a410038e179b695446bb149cce6264e0abnd ���� �� ������ ������ ����������, ������ ��û���� �����ؼ�
7fec19672a491661b2fe4b29f685bc7f4efa64d4nd �����ų� ���� ������ ���ÿ� �� ���� �� ������ �����
7fec19672a491661b2fe4b29f685bc7f4efa64d4nd ������ �� ������ �����϶�. ������� nonce�� �̹� ����Ͽ�����
7fec19672a491661b2fe4b29f685bc7f4efa64d4nd ���� �˾Ƴ� �� ������ ��û�� �����ؼ� ������, ù��°
97a3ecc40b65d5f8e865bbe0b1c9325d8c016e34nd ��û�� �����ϰ� 401 ������ ���� ���� ��û�� �ٽ� ������
<code>mod_auth_digest.c</code>�� <code>get_userpw_hash()</code>