summaryrefslogtreecommitdiffhomepage
path: root/debian/README.Debian
diff options
context:
space:
mode:
authorRoland Stigge <stigge@antcom.de>2018-01-11 21:36:51 +0100
committerRoland Stigge <stigge@antcom.de>2018-01-11 21:36:51 +0100
commit732f6686bc94151591f7bae3401aac095076068e (patch)
tree2587690efbd1b32c080518ebf581e146aa4b3d55 /debian/README.Debian
parentb39ae2a8b4d2bddf054a45d52f9f52c0e971aaa1 (diff)
Prepared login page (WIP)
Diffstat (limited to 'debian/README.Debian')
-rw-r--r--debian/README.Debian23
1 files changed, 5 insertions, 18 deletions
diff --git a/debian/README.Debian b/debian/README.Debian
index 413b4e7..312d00c 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -65,12 +65,12 @@ WEBBOX_READONLY On|Off
Authentication
--------------
-There is currently no separate authentication implemented in webbox.
-Instead, the web browser's authentication can be used, e.g.
+Webbox internally uses HTTP Auth for Authentication. E.g., Apache can
+be configured like this:
<Directory "/usr/lib/webbox">
- # ...
+ ...
AuthType Basic
AuthName "Webbox"
@@ -78,19 +78,12 @@ Instead, the web browser's authentication can be used, e.g.
Require valid-user
</Directory>
- <Directory "/var/www/webbox">
- AuthType Basic
- AuthName "Webbox"
- AuthUserFile "/etc/apache2/sites-available/mysite.htpasswd"
- Require valid-user
- </Directory>
-
Add a login/password pair to the password file:
# htpasswd -c /etc/apache2/sites-available/mysite.htpasswd username
-Remember to secure both the static web server path and the fastcgi application
-paths in the browser, i.e. /usr/lib/webbox and /var/www/webbox
+Only the FastCGI application needs to secured. The static pages in
+/var/www/webbox should be accessible to the user for login purposes.
Example configuration for Apache
@@ -102,12 +95,6 @@ VirtualHost configuration:
# Define the URL of the webbox served by the Apache server:
# http://<servername>/testbox
Alias /testbox /var/www/webbox
- <Directory "/var/www/webbox">
- AuthType Basic
- AuthName "Webbox"
- AuthUserFile "/etc/apache2/sites-available/mysite.htpasswd"
- Require valid-user
- </Directory>
# Actual location of files to be served
FcgidInitialEnv WEBBOX_PATH /home/testbox