From: Rich Bowen mod_authn_file. If authentication is unsuccessful,
the user will be redirected to the form login page.
AuthFormProvider file -AuthUserFile "conf/passwd" -AuthType form -AuthName realm -AuthFormLoginRequiredLocation "http://example.com/login.html" -Session On -SessionCookieName session path=/ -SessionCryptoPassphrase secret+
<Location "/admin"> + AuthFormProvider file + AuthUserFile "conf/passwd" + AuthType form + AuthName "/admin" + AuthFormLoginRequiredLocation "http://example.com/login.html" + + Session On + SessionCookieName session path=/ + + Require valid-user +</Location>
The directive AuthType will enable
@@ -125,13 +129,17 @@ SessionCryptoPassphrase secret
AuthUserFile specify that usernames
and passwords should be checked against the chosen file.
The directives Session,
- SessionCookieName and
- SessionCryptoPassphrase create an
- encrypted session stored within an HTTP cookie on the browser. For more information
+
The directives Session and
+ SessionCookieName
+ session stored within an HTTP cookie on the browser. For more information
on the different options for configuring a session, read the documentation for
mod_session.
You can optionally add a
+ SessionCryptoPassphrase to
+ create an encrypted session cookie. This required the additional
+ module mod_session_crypto be loaded.
In the simple example above, a URL has been protected by
mod_auth_form, but the user has yet to be given an opportunity to
enter their username and password. Options for doing so include providing a
@@ -168,10 +176,9 @@ SessionCryptoPassphrase secret
AuthFormProvider file
AuthUserFile "conf/passwd"
AuthType form
- AuthName realm
+ AuthName /admin
Session On
SessionCookieName session path=/
- SessionCryptoPassphrase secret
</Location>
The error document page should contain a login form with an empty action property, @@ -316,8 +322,7 @@ SessionCryptoPassphrase secret AuthName realm AuthFormLogoutLocation "http://example.com/loggedout.html" Session On -SessionCookieName session path=/ -SessionCryptoPassphrase secret +SessionCookieName session path=/
Note that logging a user out does not delete the session; it merely removes @@ -332,8 +337,7 @@ SessionCryptoPassphrase secret AuthFormLogoutLocation "http://example.com/loggedout.html" Session On SessionMaxAge 1 -SessionCookieName session path=/ -SessionCryptoPassphrase secret +SessionCookieName session path=/
diff --git a/docs/manual/mod/mod_auth_form.html.fr b/docs/manual/mod/mod_auth_form.html.fr index f3b318f85d8..f86a873c89e 100644 --- a/docs/manual/mod/mod_auth_form.html.fr +++ b/docs/manual/mod/mod_auth_form.html.fr @@ -29,6 +29,8 @@ +| Description: | Authentification à l'aide d'un formulaire |
|---|---|
| Statut: | Base |
| Identificateur de Module: | auth_form_module |