Allegedly, on or about 21 December 2016, Aero Maxx D sent:
> Is it possible to password protect folders/address with system account
> usernames and passwords?
> 
> I thought it would be a mod_auth_* package/module but I can't figure
> out just which one it is from the documentation.

You might want to give a more concrete example of what you're trying to
do.

You can always use the same usernames and passwords that people use, by
entering the same details into Apache configuration control files, but I
suspect you're hoping that Apache can simply read whatever the OS is
doing, directly.  That sound like the kind of thing that PAM was meant
for.

However, here's the thing:  Once people start transmitting unencrypted
usernames and passwords across a network (HTTP logins, FTP, POP, IMAP,
SMTP authentications, etc.), they're very easy to capture and abuse.
I'd be inclined to use different passwords, or learn about HTTPS (as
well as enforcing encryption on any other protocols you're allowing
people to use - such as the mail services I just mentioned).

Though HTTPS advice comes with a proviso that the original [basic] way
of authenticating with Apache sends such authentication data before
making the HTTPS connection.  I've not looked into whether that has
changed, but that's why most secure websites get you to enter your
details into a form on a secure page, rather than using the browser's
own username and password GUI.

-- 
[tim@localhost ~]$ uname -rsvp
Linux 3.9.10-100.fc17.x86_64 #1 SMP Sun Jul 14 01:31:27 UTC 2013 x86_64

Boilerplate:  All mail to my mailbox is automatically deleted, there is
no point trying to privately email me, I only get to see the messages
posted to the mailing list.

George Orwell's '1984' was supposed to be a warning against tyranny, not
a set of instructions for supposedly democratic governments.


_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Reply via email to