diff --git a/docs/manual/expr.html.en b/docs/manual/expr.html.en index d1dc8682f6..3411bc83d2 100644 --- a/docs/manual/expr.html.en +++ b/docs/manual/expr.html.en @@ -46,7 +46,7 @@
  • Other
  • Comparison with SSLRequire
  • Version History
    • -

    See also

    +

    See also

    top

    Grammar in Backus-Naur Form notation

    @@ -447,9 +447,17 @@ listfunction ::= listfuncname "(" word ")" unescape Unescape %hex encoded string, leaving encoded slashes alone; return empty string if %00 is found -file +base64 + Encode the string using base64 encoding +unbase64 + Decode base64 encoded string, return truncated string if 0x00 is + found +sha1 + Hash the string using SHA1, then encode the hash with base64 + encoding +file Read contents from a fileyes -filesize +filesize Return size of a file (or 0 if file does not exist or is not regular file)yes diff --git a/docs/manual/expr.xml.fr b/docs/manual/expr.xml.fr index a24bf22a5d..808496581f 100644 --- a/docs/manual/expr.xml.fr +++ b/docs/manual/expr.xml.fr @@ -1,7 +1,7 @@ - + diff --git a/docs/manual/mod/directives.html.en b/docs/manual/mod/directives.html.en index f92892887c..fd43dd70bd 100644 --- a/docs/manual/mod/directives.html.en +++ b/docs/manual/mod/directives.html.en @@ -83,6 +83,7 @@
  • Anonymous_VerifyEmail
  • AsyncRequestWorkerFactor
  • AuthBasicAuthoritative
    • +
  • AuthBasicFake
  • AuthBasicProvider
  • AuthDBDUserPWQuery
  • AuthDBDUserRealmQuery
    • diff --git a/docs/manual/mod/mod_auth_basic.html.en b/docs/manual/mod/mod_auth_basic.html.en index 2199ff41c1..58942fe9bb 100644 --- a/docs/manual/mod/mod_auth_basic.html.en +++ b/docs/manual/mod/mod_auth_basic.html.en @@ -46,6 +46,7 @@

    Directives

    See also

    @@ -81,6 +82,62 @@ lower level modules directive. When using such modules, the order of processing is determined in the modules' source code and is not configurable.

    +
    +
    top
    +

    AuthBasicFake Directive

    + + + + + + + + +
    Description:Fake basic authentication using the given expressions for +username and password
    Syntax:AuthBasicFake username password
    Default:none
    Context:directory, .htaccess
    Override:AuthConfig
    Status:Base
    Module:mod_auth_basic
    +

    The username and password specified are combined into an + Authorization header, which is passed to the server or service + behind the webserver. Both the username and password fields are + interpreted using the expression parser, + which allows both the username and password to be set based on + request parameters.

    + +

    In this example, we pass a fixed username and password to a + backend server.

    + +

    Fixed Example

    +<Location /demo>
+    AuthBasicFake demo demopass
+</Location>
+
    +
    + +

    In this example, we pass the email address extracted from a client + certificate, extending the functionality of the FakeBasicAuth option + within the SSLOptions + directive. Like the FakeBasicAuth option, the password is set to the + fixed string "password".

    + +

    Certificate Example

    +<Location /secure>
+    AuthBasicFake %{SSL_CLIENT_S_DN_Email} password
+</Location>
+
    +
    + +

    Extending the above example, we generate a password by hashing the + email address with a fixed passphrase, and passing the hash to the + backend server. This can be used to gate into legacy systems that do + not support client certificates.

    + +

    Password Example

    +<Location /secure>
+    AuthBasicFake %{SSL_CLIENT_S_DN_Email} %{sha1:passphrase-%{SSL_CLIENT_S_DN_Email}}
+</Location>
+
    +
    + +
    top

    AuthBasicProvider Directive

    diff --git a/docs/manual/mod/mod_auth_basic.xml.ja b/docs/manual/mod/mod_auth_basic.xml.ja index c1616bf4c4..406fc9bd75 100644 --- a/docs/manual/mod/mod_auth_basic.xml.ja +++ b/docs/manual/mod/mod_auth_basic.xml.ja @@ -1,7 +1,7 @@ - + +