From: Ken Coar Date: Tue, 16 Dec 1997 20:57:38 +0000 (+0000) Subject: Correct some misstatements about the Auth*File directives; X-Git-Tag: APACHE_1_3b5~42 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dfb1f0fb923dc25424ca1742bee8a41b435ecb4d;p=thirdparty%2Fapache%2Fhttpd.git Correct some misstatements about the Auth*File directives; they're ServerRoot-relative if not absolute. PR: 1511 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@79709 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/mod_auth.html b/docs/manual/mod/mod_auth.html index bfb47a795aa..c2db0344d13 100644 --- a/docs/manual/mod/mod_auth.html +++ b/docs/manual/mod/mod_auth.html @@ -38,12 +38,14 @@ textual files. Module: mod_auth

The AuthGroupFile directive sets the name of a textual file containing the list -of user groups for user authentication. Filename is the absolute path -to the group file.

+of user groups for user authentication. Filename is the path +to the group file. If it is not absolute (i.e., if it +doesn't begin with a slash), it is treated as relative to the ServerRoot. +

Each line of the group file contains a groupname followed by a colon, followed by the member usernames separated by spaces. Example:

mygroup: bob joe anne
-Note that searching large groups files is very inefficient; +Note that searching large text files is very inefficient; AuthDBMGroupFile should be used instead.

@@ -65,13 +67,17 @@ See also AuthName, The AuthUserFile directive sets the name of a textual file containing the list of users and passwords for user -authentication. Filename is the absolute path to the user -file.

Each line of the user file file contains a username followed +authentication. Filename is the path to the user +file. If it is not absolute (i.e., if it doesn't begin with a +slash), it is treated as relative to the ServerRoot. +

Each line of the user file file contains a username followed by a colon, followed by the crypt() encrypted password. The behavior -of multiple occurrences of the same user is undefined.

Note that -searching user groups files is inefficient; AuthDBMUserFile should be -used instead.

+of multiple occurrences of the same user is undefined. +

Note that +searching large text files is very inefficient; +AuthDBMUserFile should be +used instead. +

Security: make sure that the AuthUserFile is stored outside the document tree of the web-server; do not put it in the directory that