Mini Servers: Apache 2.2.9 Portable - Authentication: Difference between revisions

{{Uc nav mini servers}}

[[Image:Uc_mini_1a.gif|Apache 2.2.9 Portable - Authentication|right]]'''Mini Server 3 using Apache 2.2.9 Core'''

# Start the server using a drive parameter for example: '''server_start.bat z''' this forces the server to use drive z

=== Change server default port ===

:*  ServerName localhost:8080

If port already in use try any value above 2000

Add the directive '''AllowOverride All''' to the root folder. This directive means all Apache directives can be overridden or added.  

   AllowOverride All

   Order allow,deny  

   Allow from all  

'''''Note'':''' I have not added this directive to the main directory because putting it in the web root gives a slight speed advantage.

This file along with a similarly named password file shall not be viewable to restrict Internet user access add the following file restrictions.  

AccessFileName .htaccess

     Order allow,deny

     Deny from all

'''''Note'':''' The password file will not be accessible since it is located outside of the root folder www. In this situation the above code is belt and braces however third party scripts may be using password files within the root folder hence keep the code as is.

Basic authentication is dependent on three modules add the following directives to the modules section in httpd.conf.

LoadModule auth_basic_module modules/mod_auth_basic.so

LoadModule authn_file_module modules/mod_authn_file.so

LoadModule authz_user_module modules/mod_authz_user.so

The directives on their own are of little use unless you copy the three modules to folder *\udrive\usr\local\apache2\modules hence the reason for downloading a [[Mini Servers: Support and download#Apache| full copy of Apache]] allows you to pick the modules you require.     

For security this file must be located outside of the server web root (folder www). Uniform server uses the following folder:

You can change this to suite your own requirements I will stick with this only because it keeps commoality between the mini servers and Uniform Server 3.5-Apollo.

Edit the file '''.htpasswd''' and add the following name:password pair:

root:root

'''''Note'':''' Name may include spaces the password shall be something long and random e.g:

Edit the file to look like this:

AuthType Basic

AuthUserFile /htpasswd/www/.htpasswd

Require valid-user

Note: '''AuthName''' the text between quotes will be displayed in the browser popup box

'''''[[#top | Top]]'''''

=== Testing ===

You will be challenged for a name and password enter '''root''' and '''root''' to display the index page.

Before moving onto mod rewrite edit the .htacces file to look like

#AuthType Basic

#AuthUserFile /htpasswd/www/.htpasswd

#Require valid-user

with the lines commented out authentication is disabled.

== How to add mod rewrite ==

Mod rewrite has no dependencies add the following line to the modules section in httpd.conf.

LoadModule rewrite_module modules/mod_rewrite.so

The directive instructs Apache to load mod rewrite when the server is restarted. Remember to copy the module '''mod_rewrite.so''' from the full download into folder *\udrive\usr\local\apache2\modules. Mod rewrite is extremely powerful and weights in at only 57K.

'''''Tip'':''' When adding modules check the downloaded full package httpd.conf configuration file it lists the correct order for all modules.     

# =================================================  

# Modules  

   HostnameLookups Off  

   ServerTokens Prod  

   PidFile /usr/local/apache2/logs/httpd.pid  

   DirectoryIndex index.html index.htm

# =================================================  

   MaxKeepAliveRequests 100  

   KeepAliveTimeout 15  

   ThreadsPerChild 64

   MaxRequestsPerChild  0

# =================================================  

# Access control  

# =================================================  

   Options None  

   AllowOverride None  

   Order deny,allow  

   Deny from all  

   AllowOverride All

   Order allow,deny  

   Allow from all  

AccessFileName .htaccess

# files from being viewed by Web clients.

     Order allow,deny

     Deny from all

# =================================================  

# MIME encoding  

# =================================================  

   LogLevel warn  

# =================================================  

'''''[[#top | Top]]'''''

=== Download ===

'''''Note'':''' Check out the mini server's [[Mini Servers: Support and download|support and download page]] detailing how to obtain full binaries for Apache, PHP and Perl.

# Start the server by double clicking on '''server_start.bat''' (automatically detects free drive letter creates new virtual drive and runs the server.)  

# Start a web browser.

# An index page is displayed, check out the secure areas by clicking links '''secure1''' or''' secure2'''.

# Stop the server by double clicking on '''server_stop.bat'''

Folder '''secure1''' is protected by the the following .htaccess file:

      

AuthType Basic

AuthUserFile /htpasswd/www/.htpasswd

RewriteCond %{REMOTE_user} ^Mike$

RewriteRule (.*) /secure/Mike.html [R,L]

'''''[[#top | Top]]'''''

Folder '''secure2''' is protected by the the following htaccess file:

AuthType Basic

AuthUserFile /htpasswd/www/.htpasswd

RewriteCond %{REMOTE_user} ^Ruth\ Smith$

RewriteRule  ^(.*) secure2/mpg3/$1 [R,L]

'''''[[#top | Top]]'''''