View source for Coral: general access www

<div id="top" style="margin:0;padding: 0px 0px 0px 5px; color: #000; background-color: #FFFFEB; border: 1px solid darkslateblue;"><span id="top" style="margin:0;padding: 0px;font-size:12px">'''''Coral'' :'''&nbsp; [[Coral: general_intro|General]] | [[Coral: general change ports|Change Ports]] | [[Coral: general clear logs|Clear Logs]] | [[Coral: general access www|Root folder www - Access]] | [[Coral: general access ssl|Root folder ssl - Access]] | [[Coral: general access phpmyadmin|Root phpMyAdmin - Access]] </span></div>

{|style="margin-top:5px;"
|-valign="top"
|
<span style="margin-bottom:5px;font-size:25px;color: #31799F;">Root folder www - Access</span>

All public pages are served from root folder www (also known as htdocs in a Unix environment). By default this folder is locked down, only allowing local access. Opening up your server for public or intranet access and optionally restricting access using a name and password are described below.

__TOC__

|
{| cellpadding="0" cellspacing="0" style="margin-left:6px;margin-bottom:5px;padding-left:6px;padding-right:6px;font-size:11px;background-color: #FFFFEB;border: 1px solid darkslateblue;"
|-
|colspan="2" style="font-weight:bold;"| UniServer&nbsp;8-Coral
|-
|&nbsp;||[[Coral: Introduction|Home]]
|-
|&nbsp;||[[Coral: start_quick_start|Quick Start]]
|-
|<span style="font-size: 14px;">»</span>||[[Coral: general_intro|General]]
|-
|&nbsp;||[[Coral: apache intro|Apache]]
|-
|&nbsp;||[[Coral: mysql intro|MySQL]]
|-
|&nbsp;||[[Coral: php intro|PHP]]
|-
|&nbsp;||[[Coral: msmtp intro|MSMTP]]
|-
|&nbsp;||[[Coral: cron intro|CRON]]
|-
|&nbsp;||[[Coral: dtdns intro|DtDNS]]
|-
|&nbsp;||[[Coral: dbbackup intro|Db Backup]]
|-
|&nbsp;||[[Coral: perl intro|Perl]]
|-
|&nbsp;||[[Coral: index main|Main Index]]
|}
|}

==Overview==
<span style="padding:6px;background-color:#99FFFF"> '''UniController:''' Server Configuration > General > Root www - Change passwords and access</span>

{|
|-valign="top"
|
This menu is split into three sections as follows:

1) The top section allows you to change the access name and password; the defaults are set to root.
* Generally for a private server a single name and password are used.
* These are displayed and changeable using buttons A) B) D)
* Note: When using a list, only the first entry is displayed and directly changeable.
* Using a list of names and passwords requires that you directly edit the associated name-password configuration file. Use edit button E) to open the file in notepad. The Reload values button C) displays just the first entry in list.


2) Change state: enables or disables the use of a password to access root folder www. Default is disabled.


3) Access section: allows you to set who can gain access to root folder www. Default is local access only.

'''Note 1:''' Server access is controlled using an .htaccess file. This can be directly edited using Edit button K)<br />
'''Note 2:''' Apache does not require restarting all changes take effect immediately.<br />
'''Note 3:''' Test button L) opens the index page in the default browser allowing you to quickly test changes.<br />
'''Note 4:''' For detailed information see [[Coral: general access www|Root folder www access]]
	
|
[[Image:Coral_general_www_access.gif]]
|}

'''''[[#top | Top]]'''''
==Background information==

There are three ways of restricting access to documents: either by IP address, hostname or by asking for a username and password. The first two are very similar and can be used to restrict access on an intranet. The last option allows users to be restricted on an individual basis using a username and password before being allowed access. This process is commonly referred to as user authentication. The Uniform Server can restrict access using both IP address and user authentication.

Setting up user authentication requires two steps. First you create a file containing a list of usernames and passwords. Secondly you specify what resources are to be protected and which users are allowed to access them. Setting up IP address access requires only server configuration. Server configuration uses an '''.htaccess''' file located in the folder it is protecting (root folder www). This allows configuration to take immediate effect and does not require a server restart.


'''''[[#top | Top]]'''''
==Creating a password file==
A list of users and passwords needs to be created in a file. For security, this file must be located outside of the document root. The Uniform Server is pre-configured and uses file: UniServer\htpasswd\www\'''.htpasswd'''

{|
|-valign="top"
|
{|
|-valign="top"
|
The file contains a list of name and password pairs,<br />
each on a single line.<br />
The name and password are separated using a colon.<br />
A password file can consist of a single line.<br />
The default is '''root:root'''
|
<pre>
root:root
mike:fred123
john:xyz45
dave_smith:za123 
mike smith:good1234
</pre>
|}
'''Edit or change password'''

* A) Enter new name or edit existing one.
* B) Enter new password or edit existing one.
* D) Click '''change name password''' Note: This changes only the first entry in the list.

'''Add name/password pair to list'''

* E) Click '''Edit''' button. Opens file '''.htpasswd''' in notepad.
* Enter new '''name''' and '''password''' with format name:password
* Save file.
* Optionally click C) which refreshes first name/password displayed.
|
[[Image:Coral_general_www_access.gif]]
|}
'''Note:''' The menu provides a convenient way to enter names and passwords. You can edit the file UniServer\htpasswd\www\.htpasswd directly using an alternative text editor.

'''''[[#top | Top]]'''''
==Enable or disable name password access==
Server configuration uses an .htaccess file located in root folder UniServer\www. It is pre-configured for basic authentication, default is basic authentication disabled. Four lines (Apache directives) in this configuration file control authentication and are edited as follows: 

{|
|-valign="top"
|
'''Enable authentication'''
* G) Click radio button Password enabled
* Alternatively edit file UniServer\www\.htaccess and uncomment (remove #) four lines as shown:
<pre>
AuthName "Uniform Server - Server Access"
AuthType Basic
AuthUserFile ../../../htpasswd/www/.htpasswd
Require valid-user
</pre>

'''Disable authentication'''
* F) Click radio button Password disabled
* Alternatively edit file UniServer\www\.htaccess and comment (add #) to four lines as shown:
<pre>
#AuthName "Uniform Server - Server Access"
#AuthType Basic
#AuthUserFile ../../../htpasswd/www/.htpasswd
#Require valid-user
</pre>
|
&nbsp;&nbsp;
|
[[Image:Coral_general_www_access.gif]]
|}
'''Note:''' Menu provides a convenient way to enable or disable authentication.

'''''[[#top | Top]]'''''
==Change Access==
Server configuration uses an '''.htaccess''' file located in root folder UniServer\www. It is pre-configured to allow local access only. Four lines (Apache directives) control who can access to the server. These lines are edited as follows:

{|
|-valign="top"
|
'''Local Access'''
* '''H)''' Click radio button '''Local Access'''
* Alternatively edit file UniServer\www\'''.htaccess''' and uncomment (remove #) four lines as shown:
<pre>
Order Deny,Allow
Deny from all
Allow from 127.0.0.1
Allow from ::1
</pre>

'''Local and Intranet Access'''
* '''I)''' Click radio button '''Local and Intranet Access'''
* Alternatively edit file UniServer\www\'''.htaccess''' and uncomment (remove #) four lines as shown:
<pre>
Order Deny,Allow
Deny from all
Allow from 127.0.0.1 192.168
Allow from ::1
</pre>

'''Local, Intranet and Internet Access'''
* J) Click radio button '''Local, Intranet and Internet Access'''
* Alternatively edit file UniServer\www\'''.htaccess''' and comment (add #) to four lines as shown:
<pre>
#Order Deny,Allow
#Deny from all
#Allow from 127.0.0.1
#Allow from ::1
</pre>
|
&nbsp;&nbsp;
|
[[Image:Coral_general_www_access.gif]]

Deny from all. No one allowed access<br />
Allow from 127.0.0.1 192.168 Access is restricted to locahost and Intranet<br />
Allow from 127.0.0.1 Access is restricted to locahost (127.0.0.1) ipv4<br />
Allow from ::1 Access is restricted to locahost (::1) ipv6<br />
|}
'''Note:''' The menu provides a convenient way to change and restrict access.

'''''[[#top | Top]]'''''

----

[[Category: Uniform Server 8-Coral]]