> 1.) Is there any documentation (ASCII, PS, PDF or other) about Mathopd's
> configuration ?
The sample config file contains every feature one could probably ever
need. People are working on some docs; I am trying to put this up sometime
bug unfortunately I am just too busy doing Other Things at the moment.
> 2.) I wish to use the HTTP access restriction like this:
>
> Control {
> Alias /protected
> Location /web/protected
> Realm "Protected Area"
> UserFile /web/htpasswd
> }
>
> Which set of tools I have to use to create the file "/web/htpasswd" and
> add/delete users ? What's meaning "Realm" ?
The 'Realm' keyword tells mathopd that it should not allow access
unless a user can authenticate with a name/password combination that is
in the UserFile.
The value of 'Realm' is what will be displayed in the authentication popup
dialog on the client. Other that that it has no function.
There are two ways to create userfiles.
The first, and easiest, way is to just enter username:password
combinations like this
foo:bar
flubrd:cubie
cricket:bradman
etc
You must make sure that the password file is not directly accessible via
the web. Also you should make sure that only the user running mathopd can
read this file.
The second way is to create a htpasswd file. This file has the same format
as the abovementioned userfile, except that passwords are encrypted with
the crypt() function. There is a common tool called 'htpasswd' that you
can use to create/edit this file. I believe this is shipped with apache.
If you are going to use encrypted passwords you must do two things
- make sure that mathopd can encrypt passwords. Mathopd 1.3 does
not link in crypt() by default I believe. You should inspect and
modify the Makefile before building Mathopd.
- in the control block that has the 'Realm' keyword, make sure that you
add the following construction
EncryptedUserFile On
otherwise mathopd will treat your userfile as having plaintext
passwords.
HTH
Cheers
Michiel
