mod_auth.c
file, and
is compiled in by default. It provides for user authentication using
textual files.
The AuthGroupFile directive sets the name of a textual file containing the list of user groups for user authentication. Filename is the absolute path to the group file.
Each line of the group file contains a groupname followed by a colon, followed by the member usernames separated by spaces. Example:
mygroup: bob joe anne
Note that searching large groups files is very inefficient;
AuthDBMGroupFile should
be used instead.Security: make sure that the AuthGroupFile is stored outside the document tree of the webserver; do not put it in the directory that it protects. Otherwise, clients will be able to download the AuthGroupFile.
See also AuthName, AuthType and AuthUserFile.
The AuthUserFile directive sets the name of a textual file containing the list of users and passwords for user authentication. Filename is the absolute path to the user file.
Each line of the user file file contains a username followed by a colon, followed by the crypt() encrypted password. The behaviour of multiple occurrences of the same user is undefined.
Note that searching user groups files is inefficient; AuthDBMUserFile should be used instead.
Security: make sure that the AuthUserFile is stored outside the document tree of the webserver; do not put it in the directory that it protects. Otherwise, clients will be able to download the AuthUserFile.
See also AuthName, AuthType and AuthGroupFile.