Apache HTTP Server Version 2.4
Apache HTTP Server Version 2.4
Available Languages: fr
| Description: | Core Authentication |
|---|---|
| Status: | Base |
| Module Identifier: | authn_core_module |
| Source File: | mod_authn_core.c |
| Compatibility: | Available in Apache 2.3 and later |
This module provides core authentication capabilities to allow or deny access to portions of the web site. mod_authn_core provides directives that are common to all authentication providers.
Extended authentication providers can be created within the configuration file and assigned an alias name. The alias providers can then be referenced through the directives AuthDigestProvider in the same way as a base authentication provider. Besides the ability to create and alias an extended provider, it also allows the same extended authentication provider to be reference by multiple locations.
This example checks for s in two different text files.
# Check here first
<AuthnProviderAlias file file1>
AuthFile "/www/conf/s1"
</AuthnProviderAlias>
# Then check here
<AuthnProviderAlias file file2>
AuthFile "/www/conf/s2"
</AuthnProviderAlias>
<Directory "/var/web/pages/secure">
AuthBasirovider file1 file2
AuthType Basic
AuthName "Protected Area"
Require valid-
</Directory>
The example below creates two different ldap authentication provider aliases based on the ldap provider. This allows a single authenticated location to be serviced by multiple ldap hosts:
<AuthnProviderAlias ldap ldap-alias1>
AuthLDAPBindDN cn=your,o=ctx
AuthLDAPBind your
AuthLDAPURL ldap://ldap.host/o=ctx
</AuthnProviderAlias>
<AuthnProviderAlias ldap ldap-other-alias>
AuthLDAPBindDN cn=yourother,o=dev
AuthLDAPBind yourother
AuthLDAPURL ldap://other.ldap.host/o=dev?cn
</AuthnProviderAlias>
Alias "/secure" "/webpages/secure"
<Directory "/webpages/secure">
AuthBasirovider ldap-other-alias ldap-alias1
AuthType Basic
AuthName "LDAP Protected Place"
Require valid-
# Note that Require ldap-* would not work here, since the
# AuthnProviderAlias does not provide the config to authorization providers
# that are implemented in the same module as the authentication provider.
</Directory>
| Description: | Authorization realm for use in HTTP authentication |
|---|---|
| Syntax: | AuthName auth-domain |
| Context: | directory, .htaccess |
| Override: | AuthConfig |
| Status: | Base |
| Module: | mod_authn_core |
This directive sets the name of the authorization realm for a directory. This realm is given to the client so that the knows which name and to send. AuthName takes a single argument; if the realm name contains spaces, it must be enclosed in quotation marks. It must be accompanied by AuthGroupFile to work.
For example:
AuthName "Top Secret"
The string provided for the AuthName is what will appear in the dialog provided by most browsers.
| Description: | Enclose a group of directives that represent an extension of a base authentication provider and referenced by the specified alias |
|---|---|
| Syntax: | <AuthnProviderAlias baseProvider Alias> ... </AuthnProviderAlias> |
| Context: | server config |
| Status: | Base |
| Module: | mod_authn_core |
<AuthnProviderAlias> and </AuthnProviderAlias> are used to enclose a group of authentication directives that can be referenced by the alias name using one of the directives AuthDigestProvider.
| Description: | Type of authentication |
|---|---|
| Syntax: | AuthType None|Basic|Digest|Form |
| Context: | directory, .htaccess |
| Override: | AuthConfig |
| Status: | Base |
| Module: | mod_authn_core |
This directive selects the type of authentication for a directory. The authentication types available are None, Basic (implemented by mod_auth_form).
To implement authentication, you must also use the mod_authz_.
The authentication type None disables authentication. When authentication is enabled, it is normally inherited by each subsequent configuration section, unless a different authentication type is specified. If no authentication is desired for a subsection of an authenticated section, the authentication type None may be used; in the following example, clients may access the /www/docs/public directory without authenticating:
<Directory "/www/docs">
AuthType Basic
AuthName Documents
AuthBasirovider file
AuthFile "/usr/local/apache/wd/s"
Require valid-
</Directory>
<Directory "/www/docs/public">
AuthType None
Require all granted
</Directory>
Available Languages: fr