Red Hat DIRECTORY SERVER 2.0 - GATEWAY Manual de usuario descargar pdf (Pagina 80)

Chapter 10. Access control

Figure 10-8. The userid and password challenge

Note that the prompt contains the phrase “Restricted area”. That text comes directly

from the AuthName command. If we ﬁll in any valid userid and password from the

/etc/httpd/access/passwd ﬁle we can proceed.

Figure 10-9. Entering the userid and password

Next we will consider other policies. We will assume that we have created three ad-

ditional web userids: tom, dick and harry.

AuthType Basic

AuthName "Cheese lovers only"

AuthUserFile /etc/httpd/access/passwd

Require user tom dick

</Directory>

Figure 10-10. httpd.conf: Restricting access to /var/www/CHEESE/games to users

tom and dick.

The Require user tom dick statement replaces the “valid user” policy with a “one of

these users” policy.

If you plan to use certain collections of users repeatedly for access control this scheme

can be taken further and groups of users can be deﬁned. We can then specify that the

validated user be one of a series of groups.

First we must deﬁne our groups. We will create a groups ﬁle this time by hand be-

cause there are no tools analogous to htpasswd to manage the ﬁles for us.

stilton: tom rjd4

cheddar: tom dick

Figure 10-11. The /etc/httpd/access/group ﬁle

We can change from a user list to a group list by specifying which group ﬁle to use

and which groups are permitted access.

1 2 ... 75 76 77 78 79 80 81 82 83 84 85 ... 95 96

Sin comentarios

Red Hat DIRECTORY SERVER 2.0 - GATEWAY Manual de usuario Pagina 80