HP3000-L Archives

February 2003, Week 3

HP3000-L@RAVEN.UTC.EDU
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: Apache security on 3000, nothing to do with war or peace
From:
Andreas Schmidt <[log in to unmask]>
Reply To:
Andreas Schmidt <[log in to unmask]>
Date:
Mon, 17 Feb 2003 07:43:20 +0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (73 lines) 
Hi Howard,

use the .htaccess file and .htpasswd file, utilizing with
/APACHE/CURRENT/bin/htpasswd (the place I have for Apache/iX).

The .htaccess is required in each directory you wish to protect, and looks
like
AuthUserFile /APACHE/PUB/security/.htpasswd           <== the place where
the common password file resides
AuthGroupFile /dev/null                         <== in this case no group
protection
AuthName "Access to HP3000 Apache Test Area"    <== Name for the
(Windows-)password box
AuthType Basic                                  <==  see Apache
Documentation
<Limit GET>
require user as3223                             <== in this case, the only
user allowed.
</Limit>


The .htpasswd will loka alike
as3223:xxxxxxxxxxxx                             <== user allowed and
cryptic password, only maintained with the htpasswd
                                                  program

That works great for my purposes and is the same on Unix (of course!) under
Apache. Mor information can be found on http://www.apache.org

Best regards, Andreas Schmidt, CSC, Germany





                      "Hoxsie, Howard"
                      <Howard.Hoxsie           To:      [log in to unmask]
                      @nordstrom.com>          cc:
                      Sent by: HP-3000         Subject: [HP3000-L] Apache security on 3000,              nothing to
                      Systems                  do with war or peace
                      Discussion
                      <HP3000-L


                      02/17/03 01:06
                      AM
                      Please respond
                      to "Hoxsie,
                      Howard"






I'm trying to secure individual directories in htdocs, and down-th-road
other virtual websites on my 3000's, to specific users within our
organization, such as the finance group.  I'm a real neophyte to Apache and
POSIX and haven't had any luck setting up an "allow" file yet.  Can anyone
tell me if this is the appropriate course to follow or if there is a better
methodology that I don't know about?

Any help is greatly appreciated.

Howard Hoxsie
Nordstrom, Inc.

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2