Re: Apache Authentication with System Accounts?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Allegedly, on or about 21 December 2016, Aero Maxx D sent:
> Is it possible to password protect folders/address with system account
> usernames and passwords?
> 
> I thought it would be a mod_auth_* package/module but I can't figure
> out just which one it is from the documentation.

You might want to give a more concrete example of what you're trying to
do.

You can always use the same usernames and passwords that people use, by
entering the same details into Apache configuration control files, but I
suspect you're hoping that Apache can simply read whatever the OS is
doing, directly.  That sound like the kind of thing that PAM was meant
for.

However, here's the thing:  Once people start transmitting unencrypted
usernames and passwords across a network (HTTP logins, FTP, POP, IMAP,
SMTP authentications, etc.), they're very easy to capture and abuse.
I'd be inclined to use different passwords, or learn about HTTPS (as
well as enforcing encryption on any other protocols you're allowing
people to use - such as the mail services I just mentioned).

Though HTTPS advice comes with a proviso that the original [basic] way
of authenticating with Apache sends such authentication data before
making the HTTPS connection.  I've not looked into whether that has
changed, but that's why most secure websites get you to enter your
details into a form on a secure page, rather than using the browser's
own username and password GUI.

-- 
[tim@localhost ~]$ uname -rsvp
Linux 3.9.10-100.fc17.x86_64 #1 SMP Sun Jul 14 01:31:27 UTC 2013 x86_64

Boilerplate:  All mail to my mailbox is automatically deleted, there is
no point trying to privately email me, I only get to see the messages
posted to the mailing list.

George Orwell's '1984' was supposed to be a warning against tyranny, not
a set of instructions for supposedly democratic governments.


_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]
  Powered by Linux