Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to use the system passwd file for accessing a protected web page with Apache on Linux? Setting up multiple password files for shell access, Apache and Samba is a pain. If there is a mod for that, it would be handy to know.

share|improve this question
add comment

4 Answers

up vote 3 down vote accepted

mod_auth_external (http://code.google.com/p/mod-auth-external/) can be configured to auth against /etc/shadow

share|improve this answer
    
This is made of WIN. You're running another daemon as root, but it should be simple enough to be sure there's no security problems with it. –  David Pashley Aug 14 '09 at 5:53
add comment

mod_auth_pam

mod_auth_pam is the standard method on most UNIX systems and apache.

Example:

Configure PAM

Here’s what the /etc/pam.d/httpd looks like (could be different on your distro)

auth required pam_unix.so
auth required pam_unix.so
account required pam_unix.so

Configure Apache

AuthPAM_Enabled on
AllowOverride None
AuthName "secure area"
AuthType "basic"
share|improve this answer
    
How does this work without putting www-data in the shadow group? –  David Pashley Aug 14 '09 at 5:50
1  
Oh, it doesn't. FAIL. –  David Pashley Aug 14 '09 at 5:51
add comment

Here's a link to a module that works with mod_perl to do exactly what you're asking: Apache-AuthenPasswd-0.12

share|improve this answer
add comment

Is it possible---yes. However, I'm not sure that this is a really good idea from a security standpoint. I thought that there is a lot of information out there saying not to directly link the system passwd information as an authentication source.

Another possibility (with a lot of effort and planning) is to implement LDAP.

share|improve this answer
    
I would still like to know how to implement LDAP. It seems more difficult than it should be. –  casualcoder Feb 18 '12 at 23:26
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.