Chris Africa wrote:
We have some PHP web sites set up to authenticate users via Cosign using the AuthGroupFile and Require group directives, with groups and users defined in an .htaccess fileI'm setting up a new site that will have 1000+ users over time. I understand that the single .htaccess file is not the best way to do authentication with a large group of users. What methods are other admins out there using to authenticate large groups of users?As background, we run a single server running Apache 2.x, Cosign 2.x, MySQL 5.x on Mac OSX Server 10.5.2. We previously used the Zope application server which handled our authentication/authorization for us, so this is new territory for me.
Hi Chris, There's a decent overview of the various common approaches here: http://www.yolinux.com/TUTORIALS/LinuxTutorialApacheAddingLoginSiteProtection.htmlLDAP would be my own preferred most-scalable approach, although getting it up and running is not for the faint of heart. For 1000+ users probably using MySQL is the most straightforward approach that will work Just Fine.
cheers, Eric --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|