Changeset 1777

Show
Ignore:
Timestamp:
08/12/08 08:44:40 (3 months ago)
Author:
taher
Message:

--

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • cherokee/trunk/doc/TOC.txt

    r1776 r1777  
    5050  Embedding Cherokee  <9>       link:cookbook_embedding_cherokee.html[] 
    5151  Managing logs       <5>       link:cookbook_managing_logs.html[] <rotations and cherokee-tweak?> 
    52   Authentication      [8] <3>   link:cookbook_authentication.html[
     52  Authentication      [8] <3>   link:cookbook_authentication.html[Authentication
    5353  SSL/TLS, certs      [13]<6>   link:cookbook_ssl.html[] 
    5454  Setting up PHP      <4>       link:cookbook_php.html[] 
     
    8282    - link:modules_loggers_w3c.html[w3c] 
    8383  . link:modules_validators.html[Validators] 
     84    - link:modules_validators_plain.html[Plain] 
     85    - link:modules_validators_htpasswd.html[htpasswd] 
     86    - link:modules_validators_htdigest.html[htdigest] 
    8487////// 
    85     - htdigest           [7.2]  link:modules_validators_htdigest.html[htdigest] 
    86     - htpasswd           [7.1]  link:modules_validators_htpasswd.html[htpasswd] 
    8788    - ldap               [7.1]  link:modules_validators_ldap.html[LDAP] 
    8889    - mysql              [7.3]  link:modules_validators_mysql.html[MySQL] 
     90////// 
    8991    - link:modules_validators_pam.html[PAM] 
    90     - plain              [7.5]  link:modules_validators_plain.html[Plain] 
    91 ////// 
    9292 
    9393********************************* 
  • cherokee/trunk/doc/modules_validators_htdigest.txt

    r1647 r1777  
    1 Htdigest Validator 
    2 ~~~~~~~~~~~~~~~~~~ 
     1Validator: Htdigest 
     2~~~~~~~~~~~~~~~~~~~ 
    33 
    4 The htdigest validator can use a flat-file generated by the Apache link:http://httpd.apache.org/docs/2.0/programs/htdigest.html[htdigest] 
     4The htdigest validator can use a flat-file generated by the Apache 
     5link:http://httpd.apache.org/docs/2.0/programs/htdigest.html[htdigest] 
    56command. 
    67 
     
    910 
    1011[grid="rows"] 
    11 ``~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
     12`~~~~~~~~~~~~~~~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
    1213Parameter                 , Description 
    1314~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
     
    2324^^^^^^^ 
    2425 
     26Here is an example of what could be reflected in the 
     27link:dev_cherokee.conf.html[cherokee.conf] configuration file after 
     28setting up this authentication mechanism. Refer to the 
     29link:cookbook_authentication.html[Authentication] recipe for a full 
     30hands-on approach. 
     31 
    2532---- 
    26 vserver!default!directory!/secret/! 
     33vserver!10!rule!500!auth = htdigest 
     34vserver!10!rule!500!auth!methods = basic 
     35vserver!10!rule!500!auth!passwdfile = /var/www/passwd.htdigest 
     36vserver!10!rule!500!auth!realm = secret 
     37vserver!10!rule!500!match = directory 
     38vserver!10!rule!500!match!directory = /auth 
     39vserver!10!rule!500!match!final = 0 
     40vserver!10!rule!500!only_secure = 0 
    2741---- 
    28  
    29  
  • cherokee/trunk/doc/modules_validators_htpasswd.txt

    r1647 r1777  
    22~~~~~~~~~~~~~~~~~~ 
    33 
    4 This validator uses htpasswd files, which are very common on Apache web sever environments.  
    5 It stores one line per entry with the user name and a hash of the password. 
     4This validator uses htpasswd files, which are very common on Apache 
     5web sever environments. It stores one line per entry with the user 
     6name and a hash of the password. 
    67 
    78Cherokee supports the following hash algorithms: 
     
    1112    * Apache MD5 
    1213    * SHA1 
    13     * crypt.  
     14    * crypt. 
    1415 
    15 The htpasswd validator can use a flat-file generated by the Apache  
    16 link:http://httpd.apache.org/docs/2.0/programs/htpasswd.html[htpasswd]  
     16The htpasswd validator can use a flat-file generated by the Apache 
     17link:http://httpd.apache.org/docs/2.0/programs/htpasswd.html[htpasswd] 
    1718command. 
    1819 
     
    2122 
    2223[grid="rows"] 
    23 ``~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
     24`~~~~~~~~~~~~~~~~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
    2425Parameter                 , Description 
    2526~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
     
    3435Example 
    3536^^^^^^^ 
     37 
     38Here is an example of what could be reflected in the 
     39link:dev_cherokee.conf.html[cherokee.conf] configuration file after 
     40setting up this authentication mechanism. Refer to the 
     41link:cookbook_authentication.html[Authentication] recipe for a full 
     42hands-on approach. 
     43 
    3644---- 
    37     vserver!default!directory!/secret/! 
     45vserver!10!rule!500!auth = htpasswd 
     46vserver!10!rule!500!auth!methods = basic 
     47vserver!10!rule!500!auth!passwdfile = /var/www/passwd.htpasswd 
     48vserver!10!rule!500!auth!realm = secret 
     49vserver!10!rule!500!match = directory 
     50vserver!10!rule!500!match!directory = /auth 
     51vserver!10!rule!500!match!final = 0 
     52vserver!10!rule!500!only_secure = 0 
    3853---- 
    39  
  • cherokee/trunk/doc/modules_validators_ldap.txt

    r1724 r1777  
    1 LDAP Validator 
    2 ~~~~~~~~~~~~~~ 
     1Validator: LDAP 
     2~~~~~~~~~~~~~~~ 
    33The LDAP validator allows you to authenticate a user using the 
    44Lightweight Directory Access Protocol v3. 
     
    88 
    99[grid="rows"] 
    10 ``~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
    11 Parameter             , Description 
     10`~~~~~~~~~~~~~~~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
     11Parameter       ,      Description 
    1212~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
    13 __server__            , Name of the host providing the LDAP service. 
    14 __port__              , Optional. Port number of the LDAP service. \ 
     13__server__      ,      Name of the host providing the LDAP service. 
     14__port__        ,      Optional. Port number of the LDAP service. \ 
    1515                        Default: __389__. 
    16 __binddn__            , Optional. Bind Distinguished Name (`user`). If none \ 
     16__binddn__      ,      Optional. Bind Distinguished Name (`user`). If none \ 
    1717                        is provided and anonymous bind will be attempted. 
    18 __bindpw__            , Bind Password (`password`). 
    19 __basedn__            , Base Distinguished Name. 
    20 __filter__            , A filter that defines the conditions that must be  \ 
     18__bindpw__      ,      Bind Password (`password`). 
     19__basedn__      ,      Base Distinguished Name. 
     20__filter__      ,      A filter that defines the conditions that must be  \ 
    2121                        fulfilled in order for the search to match a given \ 
    2222                        entry. 
    23 __tls__               , Optional. Enable the use of TLS based integrity. \ 
     23__tls__         ,      Optional. Enable the use of TLS based integrity. \ 
    2424                        Defaults to __0__. 
    25 __ca_file__           , Optional. It's the CA filename. Must be provided  \ 
    26                         if TLS is enabled.  
     25__ca_file__     ,      Optional. It's the CA filename. Must be provided  \ 
     26                        if TLS is enabled. 
    2727~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
    2828 
  • cherokee/trunk/doc/modules_validators_pam.txt

    r1776 r1777  
    1 Pam Validator 
    2 ~~~~~~~~~~~~~ 
     1Validator: PAM 
     2~~~~~~~~~~~~~~ 
    33 
    44The pam validator uses the *Pluggable Authentication Module* to validate the 
     
    2828vserver!10!rule!500!auth!methods = basic 
    2929vserver!10!rule!500!auth!realm = secret 
     30vserver!10!rule!500!match = directory 
     31vserver!10!rule!500!match!directory = /auth 
     32vserver!10!rule!500!match!final = 0 
     33vserver!10!rule!500!only_secure = 0 
    3034---- 
  • cherokee/trunk/doc/modules_validators_plain.txt

    r1647 r1777  
    1 Plain Validator 
    2 ~~~~~~~~~~~~~~~ 
     1Validator: Plain 
     2~~~~~~~~~~~~~~~~ 
    33 
    44The plain validator uses a flat-file to authenticate users. 
     
    1414 
    1515[grid="rows"] 
    16 ``~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
    17 Parameter                 , Description 
     16`~~~~~~~~~~~~~~~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
     17Parameter       ,          Description 
    1818~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
    19 __passwdfile__            , Required. The location of the user/pass file. 
     19__passwdfile__  ,          Required. The location of the user/pass file. 
    2020~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
    2121 
     
    2828^^^^^^^ 
    2929 
     30Here is an example of what could be reflected in the 
     31link:dev_cherokee.conf.html[cherokee.conf] configuration file after 
     32setting up this authentication mechanism. Refer to the 
     33link:cookbook_authentication.html[Authentication] recipe for a full 
     34hands-on approach. 
     35 
    3036---- 
    31     vserver!default!directory!/secret/! 
     37vserver!10!rule!500!auth = plain 
     38vserver!10!rule!500!auth!methods = basic 
     39vserver!10!rule!500!auth!passwdfile = /var/www/passwd.plain 
     40vserver!10!rule!500!auth!realm = secret 
     41vserver!10!rule!500!match = directory 
     42vserver!10!rule!500!match!directory = /auth 
     43vserver!10!rule!500!match!final = 0 
     44vserver!10!rule!500!only_secure = 0 
    3245---- 
    3346 
    34 The directory secret requieres a valid login/password pair from the /var/passwordsweb. They can authenticate with Basic or the Digest methos.  
    35 You can place the password file outside the web tree, in this way, remote users won't be able to fetch the list. 
     47The parameter that specifies the file containing the pairs 
     48'user:password' is mandatory. `Plain` authentication can use both 
     49`Basic` and `Digest` schemes. 
     50 
     51You can and should place the password file outside the web tree to 
     52prevent remote users from accessing the list. 
    3653 
    3754image::media/images/admin_validators_plain.png[Validator Plain] 
     55 
     56This could be the contents of the the file `/var/www/passwd` specified 
     57in this example: 
     58 
     59**** 
     60testuser:testpassword 
     61cherokee:webserver 
     62**** 
     63 
     64This would only allow access to the users `cherokee` and `testuser`.