On Thu, Apr 12, 2001 at 11:10:06PM +0200, Peter Jones wrote:
> Hi,
> 
> I have got mod_ssl working using the default certificate, but I would
> like to have user authentication rather than the current certificate.
> All I get when I logon https://localhost is "do you trust this
> certificate", when I say yes I am in.
> 
> How do I set that up?

Not completely sure what you're asking, but it sounds like you want
to set up some basic user authentication. In the <VirtualHost> where
you're secure (e.g., <VirtualHost _default_:443>), set up your
per-directory (or per-host, I guess) authentication:

  <Directory /usr/local/apache/htdocs/some_private_dir>
    # Require the correct netblock AND basic auth
    Satisfy              all

    # Network Access Control
    Order                allow,deny
    Allow                from 10.1.0.0/16

    # HTTP Basic Authentication
    AuthType             basic
    AuthName             "My Private Directory"
    AuthUserFile         conf/passwd_file_i_made_with_htpasswd.txt
    Require              valid-user
  </Directory>

If you don't need network control too, just remove the 'Satisfy',
'Order', and 'Allow' directives.

HTH,

Scott
-- 
Scott Wiersdorf
<mailto: [EMAIL PROTECTED]>
<http://www.MotorCities.com/>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to