[users@httpd] strategies for authentication/authorization in a virtual hosting environment

[Chris Stromsoe <cb...@cts.ucla.edu>]

I'd like to be able offer basic authentication, with per-vhost user and 
group files.  All user access to the filesystem is via ftp, chrooted to a 
"home" directory, that lives inside a multi-level set of hashed 
subdirectories.

There doesn't appear to be any way using the included mod_auth* modules to 
provide authentication and authorization access without also providing 
details about the underlying filesystem.

I'm looking for any strategies that don't involve providing the full 
filesystem path to use in a .htaccess file.  Before I go trying to 
reinvent the wheel, are there any out of tree modules that provide a 
mapping interface, similar to mod_vhost_alias, for AuthUserFile and 
AuthGroupFile?


-Chris

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] strategies for authentication/authorization in a virtual hosting environment

[Matus UHLAR - fantomas <uh...@fantomas.sk>]

On 19.02.08 08:10, Chris Stromsoe wrote:
> I'd like to be able offer basic authentication, with per-vhost user and 
> group files.  All user access to the filesystem is via ftp, chrooted to a 
> "home" directory, that lives inside a multi-level set of hashed 
> subdirectories.

We have the same conditions on our servers

> There doesn't appear to be any way using the included mod_auth* modules to 
> provide authentication and authorization access without also providing 
> details about the underlying filesystem.
> 
> I'm looking for any strategies that don't involve providing the full 
> filesystem path to use in a .htaccess file.  Before I go trying to 
> reinvent the wheel, are there any out of tree modules that provide a 
> mapping interface, similar to mod_vhost_alias, for AuthUserFile and 
> AuthGroupFile?

http://issues.apache.org/bugzilla/show_bug.cgi?id=25469

I reopened the bug and set it for apache 2.2

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError #98652: Operation completed successfully.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org