asg07.htm

apache技术手册

<P>This is a simple way of interfacing Apache to any authentication system.

<BR>

<BR>

<A NAME="E69E70"></A>

<H4 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>Directives</B></FONT></CENTER></H4>

<BR>

<P>mod_auth_external adds four directives:

<BR>

<UL>

<LI>AddExternalAuth

<BR>

<BR>

<LI>AuthExternal

<BR>

<BR>

<LI>AddExternalGroup

<BR>

<BR>

<LI>GroupExternal

<BR>

<BR>

</UL>

<BR>

<A NAME="E70E31"></A>

<H5 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>AddExternalAuth</B></FONT></CENTER></H5>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Syntax:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

AddExternalAuth <I>token</I> <I>userAuthenticator</I></FONT>

</TABLE><P>Adding the AddExternalAuth directive to your httpd.conf file will register <I>userAuthenticator</I> under <I>token</I>. You can have multiple AddExternalAuth directives.

<BR>

<BR>

<A NAME="E70E32"></A>

<H5 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>AuthExternal</B></FONT></CENTER></H5>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Syntax:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

AuthExternal <I>token</I></FONT>

</TABLE><P>This directive is used inside a &lt;Limit&gt; section to specify the authenticator to use in this context. <I>token</I> gets matched to the AddExternalAuth directive, and the appropriate authenticator is launched:

<BR>

<PRE>

<FONT COLOR="#000080">&lt;Directory <I>somedir</I>&gt;

AuthName authentication realm description

AuthType Basic

AuthExternal <I>token</I>

&lt;Limit GET POST&gt;

 require valid-user

&lt;/Limit&gt;

&lt;/Directory&gt;</FONT></PRE>

<BR>

<A NAME="E70E33"></A>

<H5 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>AddExternalGroup</B></FONT></CENTER></H5>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Syntax:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

AddExternalGroup <I>token</I> <I>groupAuthenticator</I></FONT>

</TABLE><P>Adding the AddExternalAuth directive to your httpd.conf file will register <I>groupAuthenticator</I> under <I>token</I>. You can have multiple AddExternalGroup directives.

<BR>

<BR>

<A NAME="E70E34"></A>

<H5 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>ExternalGroup</B></FONT></CENTER></H5>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Syntax:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

ExternalGroup <I>token</I></FONT>

</TABLE><P>This directive is used inside a &lt;Limit&gt; section to specify the authenticator to use in this context. <I>token</I> gets matched to the AddExternalGroup directive, and the appropriate authenticator is launched:

<BR>

<PRE>

<FONT COLOR="#000080">&lt;Directory <I>somedir</I>&gt;

AuthName authentication realm description

AuthType Basic

ExternalGroup <I>token</I>

&lt;Limit GET POST&gt;

 require group groupA

&lt;/Limit&gt;

&lt;/Directory&gt;</FONT></PRE>

<BR>

<A NAME="E68E58"></A>

<H3 ALIGN=CENTER>

<CENTER>

<FONT SIZE=5 COLOR="#FF0000"><B>mod_auth_kerb</B></FONT></CENTER></H3>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Source:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

mod_auth_kerb.c

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Author:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

James E. Robinson, III

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Type:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Authentication

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Home:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

<A HREF="javascript:if(confirm('http://www2.ncsu.edu/ncsu/cc/rddc/projects/mod_auth_kerb/mod_auth_kerb.c  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www2.ncsu.edu/ncsu/cc/rddc/projects/mod_auth_kerb/mod_auth_kerb.c'" tppabs="http://www2.ncsu.edu/ncsu/cc/rddc/projects/mod_auth_kerb/mod_auth_kerb.c"> http://www2.ncsu.edu/ncsu/cc/rddc/projects/mod_auth_kerb/mod_auth_kerb.c</A></FONT>

</TABLE><P>mod_auth_kerb provides kerberos authentication to Apache. <I>Kerberos</I> is a network security system designed at MIT that guarantees that users and services are who they claim to be without the need to ask a user for his password whenever he requests access to additional services. If the user's browser does not support kerberos directly, mod_auth_kerb will authenticate the user based on the user ID and password supplied to the browser.

<BR>

<BR>

<A NAME="E69E71"></A>

<H4 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>Directives</B></FONT></CENTER></H4>

<BR>

<P>mod_auth_kerb provides the following directives:

<BR>

<UL>

<LI>AuthType

<BR>

<BR>

<LI>KrbAuthRealm

<BR>

<BR>

<LI>RedirectHttps

<BR>

<BR>

</UL>

<BR>

<A NAME="E70E35"></A>

<H5 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>AuthType</B></FONT></CENTER></H5>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Syntax:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

AuthType [KerberosV4] | [KerberosV5]</FONT>

</TABLE><P>This directive tells Apache and the browser which kerberos protocol to use when validating the user. This is the only directive necessary for the module to be functional.

<BR>

<BR>

<A NAME="E70E36"></A>

<H5 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>KrbAuthRealm</B></FONT></CENTER></H5>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Syntax:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

KrbAuthRealm <I>realm</I></FONT>

</TABLE><P>The KbrAuthRealm directive takes one argument: a string specifying the kerberos <I>realm</I> name that the server should use for authentication. For example, KrbAuthRealm MIT.EDU sets the authentication realm to MIT.EDU.

<BR>

<BR>

<A NAME="E70E37"></A>

<H5 ALIGN=CENTER>

<CENTER>

<FONT SIZE=4 COLOR="#FF0000"><B>RedirectHttps</B></FONT></CENTER></H5>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Syntax:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

RedirectHttps [On] | [Off]</FONT>

</TABLE><P>This directive tells Apache to redirect the user's request to an SSL Web server running on the same host, if the original request was not under SSL. This allows for increased security on browsers that do not support kerberos directly by preventing clear text passwords from being sent over the network.

<BR>

<BR>

<A NAME="E68E59"></A>

<H3 ALIGN=CENTER>

<CENTER>

<FONT SIZE=5 COLOR="#FF0000"><B>mod_fontxlate</B></FONT></CENTER></H3>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Source:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

mod_fontxlate.c and Apache server patches

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Author:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Warwick Heath

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Type:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Eastern European font conversion

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Home:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

<A HREF="javascript:if(confirm('http://www.rcc-irc.si/eng/fontxlate  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.rcc-irc.si/eng/fontxlate'" tppabs="http://www.rcc-irc.si/eng/fontxlate"> http://www.rcc-irc.si/eng/fontxlate</A></FONT>

</TABLE><P>mod_fontxlate is a configurable font-conversion module that determines if a request needs to be converted. Eastern European countries such as Slovenia use a variety of characters to represent local non-ASCII characters. Proper functioning of this module requires that Apache be patched. The advantage of this module is that it does its conversion very quickly.

<BR>

<P>For additional information, please refer to the documentation included in the module's source.

<BR>

<BR>

<A NAME="E68E60"></A>

<H3 ALIGN=CENTER>

<CENTER>

<FONT SIZE=5 COLOR="#FF0000"><B>mod_cntr</B></FONT></CENTER></H3>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Source:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

mod_cntr.c

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Author:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Brian Kolaci

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Type:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Page counter

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Home:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

<A HREF="javascript:if(confirm('ftp://ftp.galaxy.net/pub/bk/webcounter.tar.gz  \n\nThis file was not retrieved by Teleport Pro, because it did not meet the project\'s file type specifications.  \n\nDo you want to open it from the server?'))window.location='ftp://ftp.galaxy.net/pub/bk/webcounter.tar.gz'" tppabs="ftp://ftp.galaxy.net/pub/bk/webcounter.tar.gz"> ftp://ftp.galaxy.net/pub/bk/webcounter.tar.gz</A></FONT>

</TABLE><P>This module and ancillary CGI provide a transparent way of implementing Web counters. The module will keep track of the page access count on ASCII or DBM databases. Because the Web server keeps count of page access, there's no possible spoofing of the pages. To be counted, a page needs to be delivered. This module comes with several different number styles.

<BR>

<P>When the page counter databases have been set with the provided utilities, displaying the counter is very easy. On the Web page, you put an entry such as

<BR>

<BR>

<PRE>

<FONT COLOR="#000080">&lt;img src=&quot;/cgi-bin/count?type=<I>subdirectory</I> length=<I>numDigits</I>&quot;&gt;</FONT></PRE>

<P>where type specifies the subdirectory for the number type used and length is the number of digits to put in the output, including any padding.

<BR>

<BR>

<A NAME="E68E61"></A>

<H3 ALIGN=CENTER>

<CENTER>

<FONT SIZE=5 COLOR="#FF0000"><B>mod_sucgi</B></FONT></CENTER></H3>

<BR>



<TABLE  BORDERCOLOR=#000040 BORDER=1 CELLSPACING=2 WIDTH="80%" CELLPADDING=2 >

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Source:

</FONT>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

mod_sucgi.c

</FONT>

<TR>

<TD VALIGN=top  BGCOLOR=#80FFFF ><FONT COLOR=#000080>

Author:

</FONT>