Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a private network with many servers and web based services running on it. There is no application level authentication. I would like to expose many of the servers to the internet, but I want to proxy it behind nginx with nginx providing authentication. HttpAuthBasicModule is not sufficient, I would like to use scrypt for password digests, rate limit logins, and log the login attempts.

I am formidable with Python, but I am lost with C. Any advise?

share|improve this question
    
Advice: Instead of getting stuck on the idea of using a certain tool, decide what you actually need to do, then find (or create, if necessary) the right tool to accomplish what you want. –  Michael Hampton Jul 20 '12 at 0:32
    
Good observation, I'll try implementing it with twisted. –  Jacob Stoner Jul 20 '12 at 2:43
add comment

1 Answer

up vote 0 down vote accepted

Probably, the http_auth_request module is suitable for your task. Repo. Docs.

For rate limiting login attempts you can easily utilize nginx limit req module. For custom log: nginx log module. All these modules would be suitable for you in combination with the location directive.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.