Authentication: Groups: Difference between revisions
m
Reverted edits by Upazixorys (Talk); changed back to last version by Ric
Upazixorys (talk | contribs) No edit summary |
m (Reverted edits by Upazixorys (Talk); changed back to last version by Ric) |
||
| Line 1: | Line 1: | ||
{{Uc nav Authentication}} | {{Uc nav Authentication}} | ||
'''Authentication Groups''' | '''Authentication Groups''' | ||
| Line 9: | Line 8: | ||
The above is a little contrived but gives four grounps '''ceo''', '''directors''', '''managers''' and '''admins'''. For this example I will use the password list from the introduction page: | The above is a little contrived but gives four grounps '''ceo''', '''directors''', '''managers''' and '''admins'''. For this example I will use the password list from the introduction page: | ||
<pre> | |||
root:root | root:root | ||
John:john123 | John:john123 | ||
| Line 17: | Line 16: | ||
Dawn:dawn123 | Dawn:dawn123 | ||
Ruth Smith:ruth123 | Ruth Smith:ruth123 | ||
</pre> | |||
Single member groups are useful because it avoids hard coding specific names in the htaccess file. | Single member groups are useful because it avoids hard coding specific names in the htaccess file. | ||
{|cellspacing= | {|cellspacing="4" cellpadding="4" | ||
|-valign= | |-valign="top" style="background:#f5f5f5;" | ||
|'''ceo'''||'''directors'''||'''managers'''||'''admins''' | |'''ceo'''||'''directors'''||'''managers'''||'''admins''' | ||
|-valign= | |-valign="top" style="background:#f5f5f5;" | ||
|John:john123||Dave Smith:dave123||Mike:mike123||root:root | |John:john123||Dave Smith:dave123||Mike:mike123||root:root | ||
|-valign= | |-valign="top" style="background:#f5f5f5;" | ||
|& | | ||Ruth Smith:ruth123||Jane:jane123|| | ||
|-valign= | |-valign="top" style="background:#f5f5f5;" | ||
|& | | || ||Dawn:dawn123|| | ||
|} | |} | ||
'''''Note 1'':''' Delete the first entry '''root:root''' (everyone knows this) I use it only for testing | '''''Note 1'':''' Delete the first entry '''root:root''' (everyone knows this) I use it only for testing | ||
| Line 41: | Line 40: | ||
Add the following groups: | Add the following groups: | ||
<pre> | |||
ceo:John | ceo:John | ||
directors: | directors:"Dave Smith" "Ruth Smith" | ||
managers:Mike Jane Dawn | managers:Mike Jane Dawn | ||
admin:root | admin:root | ||
</pre> | |||
'''''Note 1'':''' Enclose names with spaces in quotes. | '''''Note 1'':''' Enclose names with spaces in quotes. | ||
| Line 58: | Line 57: | ||
The '''require''' line changes to Require group: | The '''require''' line changes to Require group: | ||
'''Require group | '''Require group "group name 1" "group name 2''' | ||
Modified .htaccess files are shown below: | Modified .htaccess files are shown below: | ||
| Line 64: | Line 63: | ||
==== John ==== | ==== John ==== | ||
* Edit file as shown UniServer\udrive\www\john\'''.htaccess''' | * Edit file as shown UniServer\udrive\www\john\'''.htaccess''' | ||
<pre> | |||
SSLOptions +StrictRequire | SSLOptions +StrictRequire | ||
SSLRequireSSL | SSLRequireSSL | ||
SSLRequire %{HTTP_HOST} eq | SSLRequire %{HTTP_HOST} eq "localhost" | ||
ErrorDocument 403 https://localhost/john/ | ErrorDocument 403 https://localhost/john/ | ||
AuthName | AuthName "Uniform Server - Server Access" | ||
AuthType Basic | AuthType Basic | ||
AuthUserFile /htpasswd/www/.htpasswd | AuthUserFile /htpasswd/www/.htpasswd | ||
AuthGroupFile /htpasswd/www/.htgroup | AuthGroupFile /htpasswd/www/.htgroup | ||
Require group ceo | Require group ceo | ||
</pre> | |||
'''''[[#top | Top]]''''' | '''''[[#top | Top]]''''' | ||
| Line 81: | Line 80: | ||
==== Dave Smith ==== | ==== Dave Smith ==== | ||
* Edit file as shown UniServer\udrive\www\dave_smith\'''.htaccess''' | * Edit file as shown UniServer\udrive\www\dave_smith\'''.htaccess''' | ||
<pre> | |||
SSLOptions +StrictRequire | SSLOptions +StrictRequire | ||
SSLRequireSSL | SSLRequireSSL | ||
SSLRequire %{HTTP_HOST} eq | SSLRequire %{HTTP_HOST} eq "localhost" | ||
ErrorDocument 403 https://localhost/dave_smith/ | ErrorDocument 403 https://localhost/dave_smith/ | ||
AuthName | AuthName "Uniform Server - Server Access" | ||
AuthType Basic | AuthType Basic | ||
AuthUserFile /htpasswd/www/.htpasswd | AuthUserFile /htpasswd/www/.htpasswd | ||
AuthGroupFile /htpasswd/www/.htgroup | AuthGroupFile /htpasswd/www/.htgroup | ||
Require group ceo directors | Require group ceo directors | ||
</pre> | |||
'''''[[#top | Top]]''''' | '''''[[#top | Top]]''''' | ||
| Line 98: | Line 97: | ||
==== Dawn ==== | ==== Dawn ==== | ||
* Edit file as shown UniServer\udrive\www\dawn\'''.htaccess''' | * Edit file as shown UniServer\udrive\www\dawn\'''.htaccess''' | ||
<pre> | |||
SSLOptions +StrictRequire | SSLOptions +StrictRequire | ||
SSLRequireSSL | SSLRequireSSL | ||
SSLRequire %{HTTP_HOST} eq | SSLRequire %{HTTP_HOST} eq "localhost" | ||
ErrorDocument 403 https://localhost/dawn/ | ErrorDocument 403 https://localhost/dawn/ | ||
AuthName | AuthName "Uniform Server - Server Access" | ||
AuthType Basic | AuthType Basic | ||
AuthUserFile /htpasswd/www/.htpasswd | AuthUserFile /htpasswd/www/.htpasswd | ||
AuthGroupFile /htpasswd/www/.htgroup | AuthGroupFile /htpasswd/www/.htgroup | ||
Require group managers | Require group managers | ||
</pre> | |||
'''''[[#top | Top]]''''' | '''''[[#top | Top]]''''' | ||
| Line 115: | Line 114: | ||
==== Ruth Smith ==== | ==== Ruth Smith ==== | ||
* Edit file as shown UniServer\udrive\www\ruth_smith'''.htaccess''' | * Edit file as shown UniServer\udrive\www\ruth_smith'''.htaccess''' | ||
<pre> | |||
SSLOptions +StrictRequire | SSLOptions +StrictRequire | ||
SSLRequireSSL | SSLRequireSSL | ||
SSLRequire %{HTTP_HOST} eq | SSLRequire %{HTTP_HOST} eq "localhost" | ||
ErrorDocument 403 https://localhost/ruth_smith/ | ErrorDocument 403 https://localhost/ruth_smith/ | ||
AuthName | AuthName "Uniform Server - Server Access" | ||
AuthType Basic | AuthType Basic | ||
AuthUserFile /htpasswd/www/.htpasswd | AuthUserFile /htpasswd/www/.htpasswd | ||
AuthGroupFile /htpasswd/www/.htgroup | AuthGroupFile /htpasswd/www/.htgroup | ||
Require group ceo directors | Require group ceo directors | ||
</pre> | |||
'''''[[#top | Top]]''''' | '''''[[#top | Top]]''''' | ||
| Line 133: | Line 132: | ||
If you moved the servers see [[4.0-Mona: Multi-Servers | Multi-Servers]] remember to add the correct port numbers. | If you moved the servers see [[4.0-Mona: Multi-Servers | Multi-Servers]] remember to add the correct port numbers. | ||
* This line: '''SSLRequire %{HTTP_HOST} eq | * This line: '''SSLRequire %{HTTP_HOST} eq "localhost"''' is checking the incoming request if a mismatch occurs an infinite redirection loop is set up. | ||
* Suppose the server was moved to ports Apache 81 Apache SSL 444 the '''.htaccess''' file for Dave Smith looks like this: | * Suppose the server was moved to ports Apache 81 Apache SSL 444 the '''.htaccess''' file for Dave Smith looks like this: | ||
<pre> | |||
SSLOptions +StrictRequire | SSLOptions +StrictRequire | ||
SSLRequireSSL | SSLRequireSSL | ||
SSLRequire %{HTTP_HOST} eq | SSLRequire %{HTTP_HOST} eq "localhost:444" | ||
ErrorDocument 403 https://localhost:444/dave_smith/ | ErrorDocument 403 https://localhost:444/dave_smith/ | ||
AuthName | AuthName "Uniform Server - Server Access" | ||
AuthType Basic | AuthType Basic | ||
AuthUserFile /htpasswd/www/.htpasswd | AuthUserFile /htpasswd/www/.htpasswd | ||
AuthGroupFile /htpasswd/www/.htgroup | AuthGroupFile /htpasswd/www/.htgroup | ||
Require group ceo directors | Require group ceo directors | ||
</pre> | |||
* To access the folder type the following ''' | * To access the folder type the following '''<nowiki>http://localhoat:81</nowiki>''' into a browser | ||
'''''Note'':''' The above applies to all the '''.htaccess''' files. | '''''Note'':''' The above applies to all the '''.htaccess''' files. | ||
| Line 159: | Line 158: | ||
Add the root admin to the groups as shown: | Add the root admin to the groups as shown: | ||
<pre> | |||
ceo:John root | ceo:John root | ||
directors: | directors:"Dave Smith" "Ruth Smith" root | ||
managers:Mike Jane Dawn root | managers:Mike Jane Dawn root | ||
admin:root | admin:root | ||
</pre> | |||
Restart the browser log in to any user, use name/password root root. | Restart the browser log in to any user, use name/password root root. | ||