1
0
mirror of https://github.com/apache/httpd.git synced 2025-05-28 13:41:30 +03:00
apache/docs/manual/howto/auth.xml.ja
Vincent Bray b70ad0c71d buildfluff
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@582396 13f79535-47bb-0310-9956-ffa450edef68
2007-10-05 21:23:38 +00:00

643 lines
29 KiB
XML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?xml version='1.0' encoding='iso-2022-jp' ?>
<!DOCTYPE manualpage SYSTEM "../style/manualpage.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.ja.xsl"?>
<!-- English Revision: 479777:582395 (outdated) -->
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
contributor license agreements. See the NOTICE file distributed with
this work for additional information regarding copyright ownership.
The ASF licenses this file to You under the Apache License, Version 2.0
(the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<manualpage metafile="auth.xml.meta">
<parentdocument href="./">How-To / $B%A%e!<%H%j%"%k(B</parentdocument>
<title>$BG'>Z!">5G'!"%"%/%;%9@)8f(B</title>
<summary>
<p>$B!VG'>Z!W$H$O!"C/$+$,<+J,$OC/$G$"$k$+$r<gD%$7$?>l9g$K!"(B
$B$=$l$r3NG'$9$k$?$a$NA42aDx$r;X$7$^$9!#!V>5G'!W$H$O!"(B
$BC/$+$,9T$-$?$$>l=j$K9T$1$k$h$&$K!"$"$k$$$OM_$7$$>pJs$r(B
$BF@$k$3$H$,$G$-$k$h$&$K$9$k$?$a$NA42aDx$r;X$7$^$9!#(B</p>
</summary>
<section id="related"><title>$B4XO"$9$k%b%8%e!<%k$H%G%#%l%/%F%#%V(B</title>
<p>$BG'>Z$H>5G'$N=hM}$K4XO"$9$k(B 3 $B<oN`$N%b%8%e!<%k$,$"$j$^$9!#(B
$B$=$l$>$l>/$J$/$H$b$R$H$D$:$DI,MW$G$9!#(B</p>
<ul>
<li>$BG'>Z$N%?%$%W(B (
<directive module="core">AuthType</directive> $B%G%#%l%/%F%#%V;2>H(B)
<ul>
<li><module>mod_auth_basic</module></li>
<li><module>mod_auth_digest</module></li>
</ul>
</li>
<li>$BG'>Z%W%m%P%$%@(B (
<directive module="mod_auth_basic">AuthBasicProvider</directive>,
<directive module="mod_auth_digest">AuthDigestProvider</directive> $B%G%#%l%/%F%#%V;2>H(B)
<ul>
<li><module>mod_authn_anon</module></li>
<li><module>mod_authn_dbd</module></li>
<li><module>mod_authn_dbm</module></li>
<li><module>mod_authn_default</module></li>
<li><module>mod_authn_file</module></li>
<li><module>mod_authnz_ldap</module></li>
</ul>
</li>
<li>$B>5G'(B (
<directive module="core">Require</directive> $B%G%#%l%/%F%#%V;2>H(B)
<ul>
<li><module>mod_authnz_ldap</module></li>
<li><module>mod_authz_dbm</module></li>
<li><module>mod_authz_dbm</module></li>
<li><module>mod_authz_default</module></li>
<li><module>mod_authz_groupfile</module></li>
<li><module>mod_authz_host</module></li>
<li><module>mod_authz_owner</module></li>
<li><module>mod_authz_user</module></li>
</ul>
</li>
</ul>
<p>$B$3$l$i$N%b%8%e!<%k$K2C$($F!"(B<module>mod_authn_core</module>
$B$H(B <module>mod_authz_core</module> $B$,$"$j$^$9!#(B
$B$3$N(B 2 $B$D$N%b%8%e!<%k$OG'>Z%b%8%e!<%k$K6&DL$J%3%"%G%#%l%/%F%#%V$r(B
$B<BAu$7$F$$$^$9!#(B</p>
<p><module>mod_authnz_ldap</module> $B$OG'>Z%W%m%P%$%@$H>5G'%W%m%P%$%@$N(B
$BN>J}$N5!G=$r;}$C$F$$$^$9!#(B
<module>mod_authz_host</module> $B$O%[%9%HL>!"(BIP $B%"%I%l%9$d(B
$B%j%/%(%9%H$NFCD'$K4p$E$$$?%"%/%;%9@)8f$r9T$$$^$9$,!"(B
$BG'>Z%W%m%P%$%@$N%7%9%F%`$N0lIt$G$O$"$j$^$;$s!#(B
mod_access $B$H$N8eJ}8_49@-$N$?$a!"(B
$B?7$7$$%b%8%e!<%k$N(B <module>mod_access_compat</module> $B$,$"$j$^$9!#(B</p>
<p>$BMM!9$J%"%/%;%9@)8f$N9T$J$$J}$K$D$$$F$O!"(B
<a href="access.html">$B%"%/%;%9@)8f(B</a>$B$NJ}K!$r$4Mw$/$@$5$$!#(B</p>
</section>
<section id="introduction"><title>$B$O$8$a$K(B</title>
<p>$B$b$75!L)$N>pJs$d!"$4$/$4$/>/?t%0%k!<%W$N?M8~$1$N>pJs$r(B
$B%&%'%V%5%$%H$KCV$/$N$G$"$l$P!"$3$NJ8=q$K=q$+$l$F$$$k(B
$B%F%/%K%C%/$r;H$&$3$H$G!"$=$N%Z!<%8$r8+$F$$$k?M$?$A$,(B
$BK>$_$N?M$?$A$G$"$k$3$H$r3N<B$K$G$-$k$G$7$g$&!#(B</p>
<p>$B$3$NJ8=q$G$O!"B?$/$N?M$,:NMQ$9$k$G$"$m$&!"(B
$B%&%'%V%5%$%H$N0lItJ,$rJ]8n$9$k!V0lHLE*$J!W(B
$BJ}K!$K$D$$$F%+%P!<$7$F$$$^$9!#(B</p>
<note><title>$BCm0U(B</title>
<p>$B%G!<%?$,K\Ev$K5!L)$J$N$G$"$l$P!"G'>Z$K2C$($F$5$i$K(B
<module>mod_ssl</module> $B$r;H$&$HNI$$$G$7$g$&!#(B</p>
</note>
</section>
<section id="theprerequisites"><title>$B=`Hw(B</title>
<p>$B$3$NJ8=q$G<h$j07$o$l$k%G%#%l%/%F%#%V$O!"(B
$B%a%$%s%5!<%P@_Dj%U%!%$%k(B ($BIaDL$O(B
<directive module="core" type="section">Directory</directive>
$B%;%/%7%g%sCf(B) $B$+!"$"$k$$$O%G%#%l%/%H%jKh$N@_Dj%U%!%$%k(B
(<code>.htaccess</code> $B%U%!%$%k(B) $B$+$GMQ$$$^$9!#(B</p>
<p><code>.htaccess</code> $B%U%!%$%k$rMQ$$$k$N$G$"$l$P!"(B
$B$3$l$i$N%U%!%$%k$KG'>ZMQ$N%G%#%l%/%F%#%V$rCV$1$k$h$&$K(B
$B%5!<%P$N@_Dj$r$7$J$$$H$$$1$J$$$G$7$g$&!#$3$l$O(B
<directive module="core">AllowOverride</directive>
$B%G%#%l%/%F%#%V$G2DG=$K$J$j$^$9!#(B
<directive module="core">AllowOverride</directive>
$B%G%#%l%/%F%#%V$G$O!"%G%#%l%/%H%jKh$N@_Dj%U%!%$%kCf$KCV$/$3$H$N$G$-$k(B
$B%G%#%l%/%F%#%V$r!"$b$7$"$l$P!";XDj$7$^$9!#(B</p>
<p>$BG'>Z$K$D$$$FOC$r?J$a$F$$$k$N$G!"<!$N$h$&$J(B
<directive module="core">AllowOverride</directive>
$B%G%#%l%/%F%#%V$,I,MW$K$J$k$G$7$g$&!#(B</p>
<example>
AllowOverride AuthConfig
</example>
<p>$B$=$&$G$J$/!"%a%$%s%5!<%P@_Dj%U%!%$%k$NCf$K(B
$BD>@\CV$/$N$G$"$l$P!"EvA3$J$,$i$=$N%U%!%$%k$X$N=q$-9~$_(B
$B8"8B$r;}$C$F$$$J$1$l$P$J$i$J$$$G$7$g$&!#(B</p>
<p>$B$^$?!"$I$N%U%!%$%k$,$I$3$KJ]B8$5$l$F$$$k$+CN$k$?$a$K!"(B
$B%5!<%P$N%G%#%l%/%H%j9=B$$K$D$$$F>/$7CN$C$F$*$/(B
$BI,MW$,$"$k$G$7$g$&!#(B
$B$3$l$O$=$s$J$KFq$7$/$J$$$N$G!"$3$NJ8=qCf$G(B
$B%G%#%l%/%H%j9=B$$K$D$$$FCN$C$F$*$/I,MW$,$"$k>lLL$G$O!"(B
$BL@$i$+$K$J$k$h$&$K$7$^$9!#(B</p>
<p><module>mod_authn_core</module> $B$H(B <module>mod_authz_core</module>
$B$NN>J}$,(B httpd $B%P%$%J%j$K@EE*$KAH$_9~$_:Q$_$G$"$k$+!"(Bhttpd.conf
$B@_Dj%U%!%$%k$GF0E*$K%m!<%I$5$l$k$+$7$F!"(Bhttpd $B$KAH$_9~$^$l$F$$$J$1$l$P(B
$B$J$j$^$;$s!#$3$l$i$NFs$D$N%b%8%e!<%k$O!"@_Dj%U%!%$%k$N$J$+$GHs>o$K(B
$B=EMW$G%&%'%V%5!<%P$NG'>Z$H>5G'$G;HMQ$5$l$k%3%"%G%#%l%/%F%#%V$H(B
$B$=$N5!G=$rDs6!$7$F$$$^$9!#(B</p>
</section>
<section id="gettingitworking"><title>$BF0:n$5$;$k(B</title>
<p>$B$G$O!"%5!<%P>e$N$"$k%G%#%l%/%H%j$r%Q%9%o!<%I$GJ]8n$9$k(B
$B4pK\<j=g$r<($7$^$9!#(B</p>
<p>$B$^$:$O$8$a$K!"%Q%9%o!<%I%U%!%$%k$r:n$j$^$9!#(B
$B$I$NG'>Z%W%m%P%$%@$r;H$&$+$K$h$C$F!"%Q%9%o!<%I%U%!%$%k@8@.$N<j=g$O(B
$BBg$-$/0[$J$j$^$9!#$3$3$G$NNc$G$O!"<j;O$a$K%F%-%9%H%Q%9%o!<%I%U%!%$%k$r(B
$B;H$$$^$9!#(B</p>
<p>$B$3$N%Q%9%o!<%I%U%!%$%k$O!"%&%'%V$+$i%"%/%;%9$G$-$k>l=j$K(B
$BCV$/$Y$-$G$O$"$j$^$;$s!#B>$N?M$,%Q%9%o!<%I%U%!%$%k$r(B
$B%@%&%s%m!<%I$G$-$J$$$h$&$K$9$k$?$a$G$9!#Nc$($P!"(B
<code>/usr/local/apache/htdocs</code> $B$G%I%-%e%a%s%H$r(B
$BDs6!$7$F$$$k$N$G$"$l$P!"%Q%9%o!<%I%U%!%$%k$O(B
<code>/usr/local/apache/passwd</code>
$B$J$I$KCV$$$?J}$,NI$$$G$7$g$&!#(B</p>
<p>$B%U%!%$%k$r:n$k$?$a$K$O!"(BApache $BIUB0$N(B <program>htpasswd</program>
$B$r;H$$$^$9!#$3$N%3%^%s%I$O(B Apache $B$r$I$3$K%$%s%9%H!<%k$7$h$&$H$b!"(B
$B%$%s%9%H!<%k%G%#%l%/%H%j$N(B <code>bin</code>
$B%G%#%l%/%H%j0J2<$KCV$+$l$^$9!#%5!<%I%P!<%F%#@=$N%Q%C%1!<%8$G(B
$B%$%s%9%H!<%k$7$?>l9g$O!"<B9T%Q%9$NCf$G8+$D$+$k$G$7$g$&!#(B</p>
<p>$B%U%!%$%k$r:n$k$K$O!"<!$N$h$&$K%?%$%W$7$F$/$@$5$$!#(B</p>
<example>
htpasswd -c /usr/local/apache/passwd/passwords rbowen
</example>
<p><program>htpasswd</program> $B$O!"%Q%9%o!<%I$rMW5a$7!"$=$N8e(B
$B3NG'$N$?$a$K$b$&0lEYF~NO$9$k$h$&$KMW5a$7$F$-$^$9!#(B</p>
<example>
# htpasswd -c /usr/local/apache/passwd/passwords rbowen<br />
New password: mypassword<br />
Re-type new password: mypassword<br />
Adding password for user rbowen
</example>
<p>$B$b$7(B <program>htpasswd</program> $B$,%Q%9$NCf$KF~$C$F$$$J$$>l9g$O!"(B
$B$b$A$m$s!"<B9T$9$k$?$a$K%W%m%0%i%`$^$G$N%U%k%Q%9$r(B
$B%?%$%W$9$kI,MW$,$"$j$^$9!#%G%U%)%k%H$N%$%s%9%H!<%k>uBV$G$"$l$P!"(B
<code>/usr/local/apache/bin/htpasswd</code>
$B$K%W%m%0%i%`$,CV$+$l$F$$$^$9!#(B</p>
<p>$B<!$K!"%5!<%P$,%Q%9%o!<%I$rMW5a$9$k$h$&$K@_Dj$7$F!"(B
$B$I$N%f!<%6$,%"%/%;%9$r5v$5$l$F$$$k$+$r%5!<%P$KCN$i$;$J$1$l$P(B
$B$J$j$^$;$s!#(B <code>httpd.conf</code> $B$rJT=8$9$k$+(B
<code>.htaccess</code> $B%U%!%$%k$r;HMQ$9$k$+$G(B
$B@_Dj$7$^$9!#Nc$($P!"%G%#%l%/%H%j(B
<code>/usr/local/apache/htdocs/secret</code>
$B$rJ]8n$7$?$$>l9g$O!"(B
<code>/usr/local/apache/htdocs/secret/.htaccess</code>
$B$+(B httpd.conf $BCf$N(B &lt;Directory
/usr/local/apache/htdocs/secret&gt; $B%;%/%7%g%s$K(B
$BG[CV$7$F!"<!$N%G%#%l%/%F%#%V$r;H$&$3$H$,$G$-$^$9!#(B</p>
<example>
AuthType Basic<br />
AuthName "Restricted Files"<br />
# (Following line optional)<br />
AuthBasicProvider file<br />
AuthUserFile /usr/local/apache/passwd/passwords<br />
Require user rbowen
</example>
<p>$B8D!9$N%G%#%l%/%F%#%V$K$D$$$F8+$F$_$^$7$g$&!#(B
<directive module="core">AuthType</directive>
$B%G%#%l%/%F%#%V$O$I$&$$$&G'>ZJ}K!$G%f!<%6$NG'>Z$r9T$&$+$r(B
$BA*Br$7$^$9!#:G$b0lHLE*$JJ}K!$O(B <code>Basic</code>
$B$G!"$3$l$O(B <module>mod_auth_basic</module>
$B$G<BAu$5$l$F$$$^$9!#$7$+$7$J$,$i!"(B
$B$3$l$O5$$rIU$1$k$Y$-=EMW$J%]%$%s%H$J$N$G$9$,!"(B
Basic $BG'>Z$O%/%i%$%"%s%H$+$i%5!<%P$X!"(B
$B%Q%9%o!<%I$r0E9f2=$;$:$KAw$j$^$9!#$G$9$+$i$3$NJ}K!$O!"(B
<module>mod_ssl</module> $B$HAH$_9g$o$;$J$$>uBV$G$O!"(B
$BFC$K5!L)@-$N9b$$%G!<%?$KBP$7$F$OMQ$$$k$Y$-$G$O(B
$B$"$j$^$;$s!#(B Apache $B$G$O$b$&0l$DJL$NG'>ZJ}K!(B:
<code>AuthType Digest</code> $B$r%5%]!<%H$7$F$$$^$9!#(B
$B$3$NJ}K!$O(B <module>mod_auth_digest</module>
$B$G<BAu$5$l$F$$$F!"$b$C$H0BA4$G$9!#(B
$B:G6a$N%/%i%$%"%s%H$O(B Digest
$BG'>Z$r%5%]!<%H$7$F$$$k$h$&$G$9!#(B</p>
<p><directive module="core">AuthName</directive>
$B%G%#%l%/%F%#%V$G$O!"G'>Z$K;H$&(B <dfn>Realm</dfn> ($BLuCm(B: $BNN0h(B)
$B$r@_Dj$7$^$9!#(BRealm $B$OBg$-$/J,$1$FFs$D$N5!G=$rDs6!$7$^$9!#(B
$B0l$DL\$O!"%/%i%$%"%s%H$,%Q%9%o!<%I%@%$%"%m%0%\%C%/%9$N(B
$B0lIt$H$7$F%f!<%6$K$3$N>pJs$r$h$/Ds<($9$k!"$H$$$&$b$N$G$9!#(B
$BFs$DL\$K$O!"%/%i%$%"%s%H$,M?$($i$l$?G'>ZNN0h$KBP$7$F$I$N%Q%9%o!<%I$r(B
$BAw?.$9$l$PNI$$$N$+$r7hDj$9$k$?$a$K;H$o$l$k!"$H$$$&5!G=$G$9!#(B</p>
<p>$BNc$($P!"(B<code>"Restricted Files"</code> $BNN0hCf$G(B
$B0lEYG'>Z$5$l$l$P!"F10l%5!<%P>e$G(B <code>"Restricted Files"</code>
Realm $B$H$7$F%^!<%/$5$l$?$I$s$JNN0h$G$b!"%/%i%$%"%s%H$O(B
$B<+F0E*$KF1$8%Q%9%o!<%I$r;H$*$&$H;n$_$^$9!#(B
$B$3$N$*$+$2$G!"J#?t$N@)8BNN0h$KF1$8(B realm $B$r6&M-$5$;$F!"(B
$B%f!<%6$,%Q%9%o!<%I$r2?EY$bMW5a$5$l$k;vBV$r(B
$BKI$0$3$H$,$G$-$^$9!#$b$A$m$s!"%;%-%e%j%F%#>e$NM}M3$+$i!"(B
$B%5!<%P$N%[%9%HL>$,JQ$o$l$P$$$D$G$bI,$:!"(B
$B%/%i%$%"%s%H$O:F$S%Q%9%o!<%I$r?R$M$kI,MW$,$"$j$^$9!#(B</p>
<p><directive
module="mod_auth_basic">AuthBasicProvider</directive>
$B$O%G%U%)%k%HCM$,(B <code>file</code> $B$J$N$G!":#2s$N>l9g$OL5$/$F$b9=$$$^$;$s!#(B
<module>mod_authn_dbm</module> $B$d(B <module>mod_authn_dbd</module>
$B$H$$$C$?B>$N%b%8%e!<%k$r;H$&>l9g$K$OI,MW$K$J$j$^$9!#(B
</p>
<p><directive module="mod_authn_file">AuthUserFile</directive>
$B%G%#%l%/%F%#%V$O(B <program>htpasswd</program> $B$G:n$C$?(B
$B%Q%9%o!<%I%U%!%$%k$X$N%Q%9$r@_Dj$7$^$9!#(B
$B%f!<%6?t$,B?$$>l9g$O!"%j%/%(%9%HKh$N%f!<%6$NG'>Z$N$?$a$N(B
$B%W%l!<%s%F%-%9%H$NC5:w$,Hs>o$KCY$/$J$k$3$H$,$"$j$^$9!#(B
Apache $B$G$O%f!<%6>pJs$r9bB.$J%G!<%?%Y!<%9%U%!%$%k$K(B
$BJ]4I$9$k$3$H$b$G$-$^$9!#(B
<module>mod_authn_dbm</module> $B%b%8%e!<%k$,(B
<directive module="mod_authn_dbm">AuthDBMUserFile</directive>
$B%G%#%l%/%F%#%V$rDs6!$7$^$9!#$3$l$i$N%U%!%$%k$O(B <program >dbmmanage</program>
$B%W%m%0%i%`$G:n@.$7$?$jA`:n$7$?$j$G$-$^$9!#(B
<a href="http://modules.apache.org/">Apache
$B%b%8%e!<%k%G!<%?%Y!<%9(B</a>$BCf$K$"$k%5!<%I%Q!<%F%#!<@=$N(B
$B%b%8%e!<%k$G!"$=$NB>B?$/$N%?%$%W$NG'>Z%*%W%7%g%s$,(B
$BMxMQ2DG=$G$9!#(B</p>
<p>$B:G8e$K!"(B<directive module="core">Require</directive>
$B%G%#%l%/%F%#%V$,!"%5!<%P$N$3$NNN0h$K%"%/%;%9$G$-$k%f!<%6$r(B
$B;XDj$9$k$3$H$K$h$C$F!"%W%m%;%9$N>5G'ItJ,$rDs6!$7$^$9!#(B
$B<!$N%;%/%7%g%s$G$O!"(B<directive module="core">Require</directive>
$B%G%#%l%/%F%#%V$NMM!9$JMQK!$K$D$$$F=R$Y$^$9!#(B</p>
</section>
<section id="lettingmorethanonepersonin"><title>
$BJ#?t$N?M$,F~$l$k$h$&$K$9$k(B</title>
<p>$B>e5-$N%G%#%l%/%F%#%V$O!"$?$@0l?M(B ($B6qBNE*$K$O%f!<%6L>(B
<code>rbowen</code> $B$NC/$+(B) $B$,%G%#%l%/%H%j$K(B
$BF~$l$k$h$&$K$7$^$9!#B?$/$N>l9g$O!"J#?t$N?M$,(B
$BF~$l$k$h$&$K$7$?$$$G$7$g$&!#$3$3$G(B
<directive module="mod_authz_groupfile">AuthGroupFile</directive>
$B$NEP>l$G$9!#(B</p>
<p>$B$b$7J#?t$N?M$,F~$l$k$h$&$K$7$?$$$N$G$"$l$P!"(B
$B%0%k!<%W$KB0$9$k%f!<%6$N0lMw$NF~$C$F$$$k!"%0%k!<%WL>$N$D$$$?(B
$B%0%k!<%W%U%!%$%k$r:n$kI,MW$,$"$j$^$9!#$3$N%U%!%$%k$N(B
$B=q<0$O$-$o$a$FC1=c$G!"$*9%$_$N%(%G%#%?$G@8@.$G$-$^$9!#(B
$B%U%!%$%k$NCf?H$O<!$N$h$&$J$b$N$G$9!#(B</p>
<example>
GroupName: rbowen dpitts sungo rshersey
</example>
<p>$B0l9T$K%9%Z!<%96h@Z$j$G!"%0%k!<%W$K=jB0$9$k%a%s%P!<$N(B
$B0lMw$r$J$i$Y$k$@$1$G$9!#(B</p>
<p>$B4{$KB8:_$9$k%Q%9%o!<%I%U%!%$%k$K%f!<%6$r2C$($k>l9g$O!"(B
$B<!$N$h$&$K%?%$%W$7$F$/$@$5$$!#(B</p>
<example>
htpasswd /usr/local/apache/passwd/passwords dpitts
</example>
<p>$B0JA0$HF1$81~Ez$,JV$5$l$^$9$,!"?7$7$$%U%!%$%k$r(B
$B:n$k$N$G$O$J$/!"4{$K$"$k%U%!%$%k$KDI2C$5$l$F$$$^$9!#(B
($B?7$7$$%Q%9%o!<%I%U%!%$%k$r:n$k$K$O(B <code>-c</code>
$B$r;H$$$^$9!#(B)</p>
<p>$B$3$3$G<!$N$h$&$K$7$F(B <code>.htaccess</code> $B%U%!%$%k$r(B
$B=$@5$9$kI,MW$,$"$j$^$9!#(B</p>
<example>
AuthType Basic<br />
AuthName "By Invitation Only"<br />
# Optional line:<br />
AuthBasicProvider file<br />
AuthUserFile /usr/local/apache/passwd/passwords<br />
AuthGroupFile /usr/local/apache/passwd/groups<br />
Require group GroupName
</example>
<p>$B$3$l$G!"%0%k!<%W(B <code>GroupName</code> $B$K%j%9%H$5$l$F$$$F!"(B
<code>password</code> $B%U%!%$%k$K%(%s%H%j$,$"$k?M$O!"(B
$B@5$7$$%Q%9%o!<%I$r%?%$%W$9$l$PF~$k$3$H$,$G$-$k$G$7$g$&!#(B</p>
<p>$B$b$C$HFCDj$;$:$KJ#?t$N%f!<%6$,F~$l$k$h$&$K$9$k!"(B
$B$b$&0l$D$NJ}K!$,$"$j$^$9!#%0%k!<%W%U%!%$%k$r:n$k$N$G$O$J$/!"(B
$B<!$N%G%#%l%/%F%#%V$r;H$($P$G$-$^$9!#(B</p>
<example>
Require valid-user
</example>
<p><code>require user rbowen</code> $B9T$G$J$/!">e5-$r;H$&$H!"(B
$B%Q%9%o!<%I%U%!%$%k$K%j%9%H$5$l$F$$$k?M$G$"$l$PC/$G$b(B
$B5v2D$5$l$^$9!#(B
$BC1$K%Q%9%o!<%I%U%!%$%k$r%0%k!<%WKh$KJ,$1$F$*$/$3$H$G!"(B
$B%0%k!<%W$N$h$&$J?6$kIq$$$r$5$;$k$3$H$b$G$-$^$9!#(B
$B$3$N%"%W%m!<%A$NMxE@$O!"(BApache $B$OFs$D$G$O$J$/!"(B
$B$?$@0l$D$N%U%!%$%k$@$1$r8!::$9$l$P$h$$$H$$$&E@$G$9!#(B
$B7gE@$O!"$?$/$5$s$N%Q%9%o!<%I%U%!%$%k$r4IM}$7$F!"$=$NCf$+$i(B
<directive module="mod_authn_file">AuthUserFile</directive>
$B%G%#%l%/%F%#%V$K@5$7$$%U%!%$%k$r;2>H$5$;$J$1$l$P$J$i$J$$E@$G$9!#(B</p>
</section>
<section id="possibleproblems"><title>$B5/$3$j$($kLdBj(B</title>
<p>Basic $BG'>Z$,;XDj$5$l$F$$$k>l9g$O!"(B
$B%5!<%P$K%I%-%e%a%s%H$r%j%/%(%9%H$9$kEY$K(B
$B%f!<%6L>$H%Q%9%o!<%I$r8!::$7$J$1$l$P$J$j$^$;$s!#(B
$B$3$l$OF1$8%Z!<%8!"%Z!<%8$K$"$kA4$F$N2hA|$r(B
$B%j%m!<%I$9$k>l9g$G$"$C$F$b3:Ev$7$^$9(B
($B$b$72hA|$bJ]8n$5$l$?%G%#%l%/%H%j$+$iMh$k$N$G$"$l$P(B) $B!#(B
$BM=A[$5$l$kDL$j!"$3$l$OF0:n$rB?>/CY$/$7$^$9!#(B
$BCY$/$J$kDxEY$O%Q%9%o!<%I%U%!%$%k$NBg$-$5$HHfNc$7$^$9$,!"(B
$B$3$l$O!"%U%!%$%k$r3+$$$F$"$J$?$NL>A0$rH/8+$9$k$^$G(B
$B%f!<%6L>$N%j%9%H$rFI$^$J$1$l$P$J$i$J$$$+$i$G$9!#(B
$B$=$7$F!"%Z!<%8$,%m!<%I$5$l$kEY$K$3$l$r9T$o$J$1$l$P(B
$B$J$j$^$;$s!#(B</p>
<p>$B7kO@$H$7$F$O!"0l$D$N%Q%9%o!<%I%U%!%$%k$KCV$/$3$H$N$G$-$k(B
$B%f!<%6?t$K$O<B<AE*$J8B3&$,$"$j$^$9!#(B
$B$3$N8B3&$O%5!<%P%^%7%s$N@-G=$K0MB8$7$FJQ$o$j$^$9$,!"(B
$B?tI4$N%(%s%H%j$r1[$($?$"$?$j$+$iB.EYDc2<$,8+$i$l$k$HM=4|$5$l$F$$$^$9!#(B
$B$=$N;~$OB>$NG'>ZJ}K!$r9MN8$KF~$l$?J}$,NI$$$G$7$g$&!#(B</p>
</section>
<section id="dbmdbd"><title>$B%Q%9%o!<%I$NJ]B87A<0$rJQ$($k(B</title>
<p>$B%W%l!<%s%F%-%9%H$G%Q%9%o!<%I$rJ]B8$9$kJ}K!$K$O>e5-$NLdBj$,$"$j!"(B
$B%G!<%?%Y!<%9$N$h$&$JJL$N>l=j$K%Q%9%o!<%I$rJ]B8$7$?$$$H;W$&(B
$B$+$b$7$l$^$;$s!#(B</p>
<p><module>mod_authn_dbm</module> $B$H(B <module>mod_authn_dbd</module>
$B$r;H$&$H!"$=$l$,$G$-$k$h$&$K$J$j$^$9!#(B
<directive module="mod_auth_basic">AuthBasicSource</directive>
$B$G(B file $B$NBe$o$j$K!"(B<code>dbm</code> $B$"$k$$$O(B <code>dbd</code>
$B$r3JG<7A<0$H$7$FA*$Y$^$9!#(B</p>
<p>$B%F%-%9%H%U%!%$%k$NBe$o$j$K(B dbm $B%U%!%$%k$rA*Br$9$k>l9g$O!"$?$H$($P<!$N$h$&$K$7$^$9!#(B</p>
<example>
&lt;Directory /www/docs/private&gt;<br />
AuthName "Private"<br />
AuthType Basic<br />
AuthBasicProvider dbm<br />
AuthDBMUserFile /www/passwords/passwd.dbm<br />
Require valid-user<br />
&lt;/Directory&gt;
</example>
<p>$B$3$NB>$N%*%W%7%g%s$bB8:_$7$^$9!#>\:Y$K4X$7$F$O(B
<module>mod_authn_dbm</module> $B$N%I%-%e%a%s%H$r$4Mw$/$@$5$$!#(B</p>
</section>
<section id="multprovider"><title>$BJ#?t$N%W%m%P%$%@$r;HMQ$9$k(B</title>
<p>$BG'>Z>5G'%"!<%-%F%/%A%c$K4p$E$$$F$$$k?7$7$$%W%m%P%$%@$r;H$&$H!"(B
$BG'>Z>5G'$NJ}K!$r$R$H$D$KG{$kI,MW$,$J$/$J$j$^$9!#(B
$B$$$/$D$b$N%W%m%P%$%@$rAH$_9g$o$;$F!"<+J,$NK>$_$N5sF0$K$G$-$^$9!#(B
$B<!$NNc$G$O(B file $BG'>Z%W%m%P%$%@$H(B ldap $BG'>Z%W%m%P%$%@$r(B
$BAH$_9g$o$;$F$$$^$9!#(B</p>
<example>
&lt;Directory /www/docs/private&gt;<br />
AuthName "Private"<br />
AuthType Basic<br />
AuthBasicProvider file ldap<br />
AuthUserFile /usr/local/apache/passwd/passwords<br />
AuthLDAPURL ldap://ldaphost/o=yourorg<br />
Require valid-user
</example>
<p>$B$3$NNc$G$O!"$^$:(B file $B%W%m%P%$%@$,%f!<%6G'>Z$r;n$_$^$9!#(B
$BG'>Z$G$-$J$+$C$?>l9g$K$O!"(Bldap $B%W%m%P%$%@$,8F$S=P$5$l$^$9!#(B
$BAH?%$GJ#?t$NG'>Z3JG<J}K!$r;H$C$F$$$k:]$J$I$K!"(B
$B$3$NJ}K!$r;H$C$FG'>Z$N%9%3!<%W$r3HBg$G$-$^$9!#(B
$B$b$&$R$H$D$N%7%J%j%*$O!"$R$H$D$NG'>Z%?%$%W$H0[$J$k>5G'$r(B
$BAH$_9g$o$;$kJ}K!$G$7$g$&!#$?$H$($P!"%Q%9%o!<%I%U%!%$%k$GG'>Z$7$F!"(B
ldap $B%G%#%l%/%H%j$G>5G'$r9T$&$H$$$C$?>l9g$G$9!#(B</p>
<p>$BG'>Z%W%m%P%$%@$rJ#?t<BAu$G$-$k$h$&$K!">5G'J}K!$bJ#?t;HMQ$G$-$^$9!#(B
$B$3$NNc$G$O(B file $B%0%k!<%W>5G'$H(B ldap $B%0%k!<%W>5G'$r;H$C$F$$$^$9!#(B</p>
<example>
&lt;Directory /www/docs/private&gt;<br />
AuthName "Private"<br />
AuthType Basic<br />
AuthBasicProvider file<br />
AuthUserFile /usr/local/apache/passwd/passwords<br />
AuthLDAPURL ldap://ldaphost/o=yourorg
AuthGroupFile /usr/local/apache/passwd/groups<br />
Require group GroupName<br />
Require ldap-group cn=mygroup,o=yourorg
</example>
<p>$B>5G'$r$h$j:Y$+$/@)8f$7$?$$>l9g$O!"(B
<directive module="mod_authz_core">&lt;SatisfyAll&gt;</directive> $B$H(B
<directive module="mod_authz_core">&lt;SatisfyOne&gt;</directive>
$B%G%#%l%/%F%#%V$r;H$C$F(B AND/OR $B%m%8%C%/$G;XDj$7!"@_Dj%U%!%$%k$G(B
$B>5G'$N=hM}=gHV$N@)8f$,$G$-$k$h$&$K$J$C$F$$$^$9!#(B
$B$3$l$i$N%G%#%l%/%F%#%V$r$I$N$h$&$K;H$($k$+!"LVMe$7$?Nc$r$4Mw$/$@$5$$!#(B</p>
</section>
<section id="beyond"><title>$BC1=c$J>5G'$N$=$N@h(B</title>
<p>$B>5G'$NJ}K!$O!"$R$H$D$N%G!<%?%=!<%9$r8+$F0l2s$@$1%A%'%C%/$9$k$N$HHf$Y$F!"(B
$B$:$C$HB?:L$JE,MQJ}K!$,$G$-$^$9!#(B
$B>5G'=hM}$NE,MQ=g=x$d@)8f!"A*Br$,$G$-$k$h$&$K$J$j$^$7$?!#(B</p>
<section id="authandororder"><title>AND/OR $B%m%8%C%/$NE,MQ$H=g=xIU$1(B</title>
<p>$B>5G'$,$I$N$h$&$J=g=x$GE,MQ$5$l$F$$$k$+!"$^$?!"$=$l$r$I$N$h$&$K@)8f$9$k$+$O!"(B
$B$3$l$^$G:.Mp$r>7$$$F$$$^$7$?!#(B
Apache 2.2 $B$G$O%W%m%P%$%@%Y!<%9$NG'>Z%a%+%K%:%`$,F3F~$5$l!"(B
$B>5G'=hM}$+$iG'>Z=hM}$H%5%]!<%H5!G=$H$,@Z$jJ,$1$i$l$^$7$?!#(B
$B$3$l$K$h$k$R$H$D$N8z2L$H$7$F!"(B
$BG'>Z%b%8%e!<%k$N%m!<%I=g$d%b%8%e!<%k<+BN$N=g=x$K0MB8$9$k$3$H$J$/!"(B
$B;XDj$7$?=gHV$GG'>Z%W%m%P%$%@$,8F$S=P$;$k$h$&!"(B
$B@_Dj$G$-$k$h$&$K$J$j$^$7$?!#(B
$B$3$N%W%m%P%$%@%a%+%K%:%`$O>5G'=hM}$G$bF3F~$5$l$F$$$^$9!#(B
$B$D$^$j!"(B<directive module="mod_authz_core">Require</directive>
$B%G%#%l%/%F%#%V$OC1$K$I$N>5G'<jK!$,;H$o$l$k$+$r;XDj$9$k$@$1$G$O$J$/!"(B
$B$=$l$i$N8F$S=P$7=g=x$b;XDj$G$-$k$h$&$K$J$j$^$7$?!#(B
$BJ#?t$N>5G'<jK!$,$"$k$H$-!"$=$N8F$S=P$7=g$O!"@_Dj%U%!%$%k$N(B
<directive module="mod_authz_core">Require</directive> $B%G%#%l%/%F%#%VCf$G(B
$B8=$l$?=g=x$HF1$8$K$J$j$^$9!#(B</p>
<p>$BDI2C$GF3F~$5$l$?(B
<directive module="mod_authz_core">&lt;SatisfyAll&gt;</directive>,
<directive module="mod_authz_core">&lt;SatisfyOne&gt;</directive>
$B%G%#%l%/%F%#%V$r;H$C$F!">5G'<jK!$,$$$D8F$S=P$5$l!"%"%/%;%9$,5v2D$5$l$?:]$K(B
$B$I$N<jB3$-$,E,MQ$5$l$k$+;XDj$9$k$3$H$,$G$-$^$9!#(B
$B$?$H$($P!"<!$N>5G'%V%m%C%/$N%m%8%C%/$r8+$F$_$^$7$g$&(B:</p>
<example>
# if ((user == "John") ||<br />
# &nbsp;&nbsp; ((Group == "admin")<br />
# &nbsp; &nbsp; &amp;&amp; (ldap-group &lt;ldap-object&gt; contains auth'ed_user)<br />
# &nbsp; &nbsp; &amp;&amp; ((ldap-attribute dept == "sales")<br />
# &nbsp; &nbsp; &nbsp; &nbsp; || (file-group contains auth'ed_user))))<br />
# then<br />
# &nbsp; auth_granted<br />
# else<br />
# &nbsp; auth_denied<br />
#<br />
&lt;Directory /www/mydocs&gt;<br />
<indent>
Authname ...<br />
AuthBasicProvider ...<br />
...<br />
Require user John<br />
&lt;SatisfyAll&gt;<br />
<indent>
Require Group admins<br />
Require ldap-group cn=mygroup,o=foo<br />
&lt;SatisfyOne&gt;<br />
<indent>
Require ldap-attribute dept="sales"<br />
Require file-group<br />
</indent>
&lt;/SatisfyOne&gt;<br />
</indent>
&lt;/SatisfyAll&gt;<br />
</indent>
&lt;/Directory&gt;
</example>
<p>$B%G%U%)%k%H$G$O(B <directive module="mod_authz_core">Require</directive>
$B%G%#%l%/%F%#%V$O(B OR $BA`:n$H$7$F07$o$l$^$9!#$D$^$j!"$b$7;XDj$7$?>5G'<jK!$N(B
$B$R$H$D$G$b9g3J$9$l$P!">5G'$5$l$^$9!#(B
<directive module="mod_authz_core">Require</directive> $B%G%#%l%/%F%#%V$N%;%C%H$r(B
$B$R$H$D$N(B <directive module="mod_authz_core">&lt;SatisfyAll&gt;</directive>
$B%V%m%C%/$G0O$`$H(BAND $BA`:n$H$J$j!"A4$F$N>5G'<jK!$G9g3J$7$J$1$l$P5v2D$5$l$^$;$s!#(B</p>
</section>
<section id="reqaccessctrl"><title>$B%"%/%;%9@)8f$K$*$1$k(B Require $B$H(B Reject $B$N;H$$J}(B</title>
<p>$B%f!<%6L>$H%Q%9%o!<%I$K$h$kG'>Z$OA4BN$N0lItJ,$G$7$+$"$j$^$;$s!#(B
$BC/$,%"%/%;%9$7$F$-$?$+$H$$$C$?>pJs0J30$N>r7o$r;H$$$?$$!"(B
$B$H$h$/;W$&$3$H$G$7$g$&!#(B
$B$?$H$($P!"$I$3$+$i%"%/%;%9$7$F$-$F$$$k$+!"$H$$$C$?6q9g$G$9!#(B</p>
<p>$B>5G'%W%m%P%$%@(B <directive module="mod_authz_host">all</directive>,
<directive module="mod_authz_host">env</directive>,
<directive module="mod_authz_host">host</directive>,
<directive module="mod_authz_host">ip</directive>
$B$r;H$&$H!"%j%/%(%9%H$rAw?.$7$F$-$F$$$k%^%7%s$N%[%9%HL>$d(B IP $B%"%I%l%9(B
$B$H$$$C$?!"%[%9%H%Y!<%9$G$N%"%/%;%9@)8f$,$G$-$^$9!#(B</p>
<p>$B$3$l$i%W%m%P%$%@$N07$$$O(B
<directive module="mod_authz_core">Require</directive> $B$d(B
<directive module="mod_authz_core">Reject</directive> $B$G(B
$B;XDj$5$l$^$9!#$3$l$i$N%G%#%l%/%F%#%V$O>5G'%W%m%P%$%@$rEPO?$7!"(B
$B%j%/%(%9%H=hM}$N>5G'CJ3,$G8F$S=P$5$l$^$9!#$?$H$($P(B:</p>
<example>
Require ip <var>address</var>
</example>
<p>$B$3$3$G!"(B<var>address</var> $B$O(B IP $B%"%I%l%9(B ($B$"$k$$$O(B IP $B%"%I%l%9$N(B
$B0lIt(B) $B$+(B : </p>
<example>
Require host <var>domain_name</var>
</example>
<p>$B$3$3$G(B <var>domain_name</var> $B$O(B FQDN ($B$"$k$$$O%I%a%$%sL>$N0lIt(B)
$B$G!"I,MW$G$"$l$PJ#?t$N%"%I%l%9$d%I%a%$%sL>$r=q$/$3$H$,$G$-$^$9!#(B</p>
<p>$B$?$H$($P!"%9%Q%`%a%C%;!<%8$rAw?.$7$F$/$kC/$+$r5qH]$7$?$$>l9g!"(B
$B<!$N$h$&$K$J$j$^$9(B : </p>
<example>
Reject ip 10.252.46.165
</example>
<p>$B$3$N%G%#%l%/%F%#%V$,M-8z$JHO0O$N%3%s%F%s%D$KBP$7$F$O!"(B
$B$=$N%"%I%l%9$+$i%"%/%;%9$7$F$-$F$b8+$k$3$H$,$G$-$^$;$s!#(B
$B$b$7%^%7%sL>$,$o$+$C$F$$$F(B IP $B%"%I%l%9$h$j$b$=$A$i$G(B
$B;XDj$7$?$$$N$G$"$l$P!"$=$N%^%7%sL>$,;H$($^$9!#(B</p>
<example>
Reject host <var>host.example.com</var>
</example>
<p>$B$^$?!"FCDj$N%I%a%$%s$+$i$N%"%/%;%9A4$F$r%V%m%C%/$7$?$$>l9g$O!"(B
IP $B%"%I%l%9$N0lIt$d!"%I%a%$%sL>$,;XDj$G$-$^$9(B :</p>
<example>
&lt;SatisfyAll&gt;<br />
<indent>
Reject ip <var>192.168.205</var><br />
Reject host <var>phishers.example.com</var> <var>moreidiots.example</var><br /> Reject host ke<br />
</indent>
&lt;/SatisfyAll&gt;
</example>
<p><directive module="mod_authz_host">Reject</directive> $B%G%#%l%/%F%#%V$r(B
<directive module="mod_authz_core">&lt;SatisfyAll&gt;</directive> $B%V%m%C%/$NCf$G;H$&$H!"(B
$B5v2D$7$?$$%0%k!<%W$K$N$_%"%/%;%9$,$G$-$k$h$&$K3NG'$G$-$^$9!#(B</p>
<p>$B>e5-$NNc$G$O(B <directive module="mod_authz_core">&lt;SatisfyAll&gt;</directive>
$B$r;H$C$F!"%"%/%;%9$K9g3J$9$kA0CJ3,$G!"A4$F$N(B
<directive module="mod_authz_host">Reject</directive> $B%G%#%l%/%F%#%V$,(B
$BK~$?$5$l$F$$$k$3$H$r3NG'$7$F$$$^$9!#(B</p>
</section>
<section id="filesystem"><title>$B%"%/%;%9@)8f$N8eJ}8_49@-(B</title>
<p>$BG'>Z%W%m%P%$%@%Y!<%9$N5!9=$,$"$k$?$a!"0JA0;HMQ$5$l$F$$$?%G%#%l%/%F%#%V(B
<directive module="mod_access_compat">Order</directive>,
<directive module="mod_access_compat">Allow</directive>,
<directive module="mod_access_compat">Deny</directive>,
<directive module="mod_access_compat">Satisfy</directive>
$B$OI,MW$J$/$J$j$^$7$?!#(B
$B$H$O$$$&$b$N$N!"8E$$@_Dj%U%!%$%k$G$N8eJ}8_49@-$rDs6!$9$k$?$a!"(B
$B$3$l$i$N%G%#%l%/%F%#%V$O(B <module>mod_access_compat</module> $B%b%8%e!<%k$K0\$5$l$^$7$?!#(B</p>
<p>$B$3$l$i$N%G%#%l%/%F%#%V$NJz$($F$$$?LdBj$N$R$H$D$K!">5G'$N@_Dj9T$H%"%/%;%9@)8f$N@_Dj9T$N(B
$B4X78$,$H$F$b$"$$$^$$$@$C$?$3$H$,5s$2$i$l$^$9!#(B
<directive module="mod_access_compat">Satisfy</directive> $B%G%#%l%/%F%#%V$O(B
$B%j%/%(%9%H=hM}Cf$G$=$l<+?H$r8F$S=P$9$3$H$K$h$C$F!"$3$l$i$N(B 2 $B$D$N=hM}CJ3,$r7k$S$D$1$h$&$H$7$^$9!#(B
$B8=:_$O!"$3$l$i$N%G%#%l%/%F%#%V$O(B <module>mod_access_compat</module> $B$K0\F0$7!"(B
$B?7$7$$G'>Z%G%#%l%/%F%#%V$H8E$$%"%/%;%9@)8f%G%#%l%/%F%#%V$r:.$<$F;H$&$3$H$O(B
$BFq$7$/$J$C$F$$$^$9!#$3$NLdBj$N$?$a!"(B<module>mod_authz_default</module> $B%b%8%e!<%k$r(B
$B%m!<%I$9$k$3$H$,$H$F$b=EMW$G!"I,?\$K$J$C$F$$$^$9!#(B
<module>mod_authz_default</module>$B!!%b%8%e!<%k$N<g$JL\E*$O!"$I$N>5G'%W%m%P%$%@$G(B
$B=hM}$5$l$J$+$C$?>5G'%j%/%(%9%H$r<u$1$k$3$H$K$"$j$^$9!#(B
$B$7$+$7!"8E$$%"%/%;%9@)8f%G%#%l%/%F%#%V$,MQ$$$i$l$?>l9g$K$O!"(B
$B%"%/%;%9@)8f$H>5G'$r7k$S$D$1$F!"$9$Y$F$N=hM}CJ3,$N=PNO7k2L$r8+$F%"%/%;%9$K9g3J$9$k$+$r7h$a$F$$$^$9!#(B
$B$G$9$+$i!"8E$$%G%#%l%/%F%#%V$,$&$^$/F0:n$7$J$$>l9g$O!"(B
<module>mod_authz_default</module> $B$,%m!<%I$5$l$F$$$J$$$+$i$+$b$7$l$J$$!"(B
$B$H5?$C$F$_$F$/$@$5$$!#(B</p>
</section>
</section>
<section id="moreinformation"><title>$BDI2C>pJs(B</title>
<p>$B$3$l$iA4$F$,$I$N$h$&$KF0:n$9$k$+$K$D$$$F(B
$B$b$C$HB?$/$N>pJs$,=q$+$l$F$$$k(B <module>mod_auth_basic</module> $B$H(B
<module>mod_authz_host</module>
$B$NJ8=q$bFI$`$H$h$$$G$7$g$&!#(B
<directive module="mod_authn_core">&lt;AuthnProviderAlias&gt;</directive>
$B%G%#%l%/%F%#%V$r;H$&$H!"FCDj$NG'>Z@_Dj$,4JC1$K=q$1$k$h$&$K$J$j$^$9!#(B</p>
<p><a href="access.html">$B%"%/%;%9@)8f(B</a>$B$NJ}K!$b!"(B
$B4XO"$9$k%H%T%C%/$,$?$/$5$s5-:\$5$l$F$$$^$9$N$G!"$4Mw$/$@$5$$!#(B</p>
</section>
</manualpage>