Questions tagged [mod-auth]
41 questions
1
vote
1 answer
Only Allow $_POST and $_GET and Deny All HTACCESS
I hope I didn't miss any question related to this while scanning the website. So I am completing a small project written in PHP. My core files are in a single directory (includes) where I want to prevent directory listing and user access. Deny from…

Rehmat
- 4,681
- 3
- 22
- 38
1
vote
1 answer
Apache setting mod_auth_ldap require settings per sub-directory
I would like to set up a primary directory that has one set of LDAP-based restrictions and then have various sub-directories use other restrictions, but only have the actual LDAP search done in the base directory. For example:
.htaccess per…

Anthony
- 36,459
- 25
- 97
- 163
1
vote
0 answers
.htaccess bind Apache server to ldap causes Internal server error 500
Using wamp server with apache 2.4.4
I have a directory that I want to protect with .htaccess file:
AuthBasicProvider ldap
AuthType Basic
AuthName "Authentication required "
AuthLDAPUrl…

mdzh
- 1,030
- 2
- 17
- 34
1
vote
2 answers
Apache basic authentication
I apologize before hand if this is an obvious question: can Apache 2.0 + SSL + basic authentication be trusted in order to secure a website? The way I see it, SSL creates a secure connection between the client and the server and thus any HTTP…

S.D
- 13
- 3
1
vote
1 answer
Mod_rewrite to a session-control "handler.php"?
I would like to rewrite all requests for http://models.example.com/* to http://models.example.com/handler.php?requested_url=*
Then, handler.php would check my $_SESSION variables to see if the user is logged in. If the user is logged in, then…

Mike Furlender
- 3,869
- 5
- 47
- 75
1
vote
1 answer
How to generate the right password format for Apache2 authentication in use with DBD and MySQL 5.1?
I want to authenticate users for a folder from a MySQL 5.1 database with AuthType Basic.
The passwords are stored in plain text (they are not really passwords, so doesn't matter).
The password format for apache however only allows for SHA1, MD5 on…

kissgyorgy
- 2,947
- 2
- 32
- 54
0
votes
1 answer
mod_auth_tkt - java implementation
Has anyone implemented a mod_auth_tkt cookie generation using Java?
I'm stuck on how to generate the iptstamp (can be done in PHP using the pack function) and hextimestamp in Java.
The algorithm for generating the cookie is below:
cookie := digest +…

DLJ
- 1
- 1
0
votes
1 answer
Can we use multiple application for Mod_auth_openidc, such that we can use different client ids in one apache
I am working on Mod_auth_openidc with okta integration, where we need to provide OIDCClientID, OIDCClientSecret in the apache configurations that is linked with OIDC app from okta but i want to use multiple application, i.e multiple client ids.
Any…

Rishav
- 1
0
votes
1 answer
Getting Apache 2.4 and mod_authn_dbd to work with a Wordpress user database
Has anybody managed to use a Wordpress wp_users table as input for apache's mod_authn_dbd ? This used to work for the apache 2.2 mod_auth_mysql, which had
Auth_MySQL_Encryption_Types PHPass PHP_MD5
but after a lot of searching, I still fail to…

user1703668
- 23
- 5
0
votes
1 answer
lighttpd password protecting URL webpage
I am trying to add some basic measures of security to the main webpage of my Raspberry Pi project hosted by lighttpd.
I have been looking into the mod_auth plugin and have tried a few things however I am having some issues getting the username and…

TheCodingBeefer
- 21
- 1
- 4
0
votes
1 answer
Dynamic callback URL with mod_auth_mellon pingfederate
We configured our SPA with mod_auth_mellon and the SP Initiated setup works well.
We now want to add the ability to dynamically route to SPA URL which initiated the SSO SAML call.
Below is the current flow
User opens the URL…

user1044173
- 33
- 1
- 7
0
votes
1 answer
mod_perl + mod_authn_dbd does not accept AuthDBDUserPWQuery
Introduction:
Our company uses dynamically generated vhosts via mod_perl to generate vhosts from our database. We basically have a table "domains" which is dynamically modified for our hundreds of customers and partners.
We have several kinds of…

Arthega Asdweri
- 13
- 1
- 4
0
votes
0 answers
Lighttpd mod-auth Bcrypt hash
I am working on making a homemade NAS and was implementing a download share feature using Lighttpd. I know how to use Apache, but since I was hosting the webserver on a small Raspbery Pi, I felt Lighttpd would be just more "lighter".
I have a…

D_Pain
- 7,123
- 1
- 11
- 12
0
votes
1 answer
Passing a session Cookie in Request for getting data from API
I am currently developing a web application that has separate API and Front end.
For production purpose, I wish to develop the web app locally while hosting the API on the remote server.
The issue is the API is behind a SAML authentication along…

Devyash Sanghai
- 33
- 7
0
votes
0 answers
Apache AuthBasicProvider : how to specify password format?
I am using the 'mod_auth_basic' and 'mod_authn_dbd' apache modules to authenticate users.
How can I specify the password format I want mod_auth_basic to use? I don't find this in the documentation.
(Available formats can be found there:…

Nicolas
- 1,812
- 3
- 19
- 43