Setting Passwords

Basic Authentication

Built-in to the web server -- doesn't require scripts or programs
Implements rules for granting and denying access according to:
- The IP address or domain name of the client
- The user's ID or group membership
- More...

Files are protected on a directory-wide basis

The presence of a file named .htaccess in a directory causes all the files in that directory to be password-protected.

A typical .htaccess file:


            AuthUserFile /auth/passwd

            AuthGroupFile /auth/group

            AuthName "Project Team Only"

            AuthType Basic

            <LIMIT GET POST PUT>

            require group ourteam

            </LIMIT>

If you don't need to define groups:


            AuthUserFile /auth/passwd

            AuthName "Project Team Only"

            AuthType Basic

            <LIMIT GET POST PUT>

            require valid-user

            </LIMIT>

Lab
Create a directory named `C:\web\project` Create an `index.html` file in it. View the page in your browser. Create a `.htaccess` file in it (contents as above) Attempt to reload the page; observe the basic authentication challenge.

Users and Groups

The Apache software includes utilities for defining user and group IDs.

Lab

Create a directory named C:\auth
Create a passwd file by running this command:

htpasswd -c C:\auth\passwd arnold
Create a file named C:\auth\group containing:

ourteam:arnold
Reload the team web page, enter the password, observe that the page is now delivered.

Setting Passwords

Basic Authentication

Users and Groups

Documentation