hi3103の備忘録

参考URL

• ApacheでBasic認証を設定する方法

手順

.htaccessの設置

$ vi .htaccess

<Files index.html>
AuthType basic

#ダイアログに表示される文言
AuthName "Please enter username and password"

#ID・パスワードの設定ファイルを指定(場所もファイル名も任意)
AuthUserFile /home/{ユーザー名}/.htpasswd

Require valid-user
</Files>

.htpasswdの作成

• htpasswdコマンドを使う
  • 今回は .htpasswd というファイル名で作成する

$ htpasswd -c .htpasswd {ログインID}
New password: #パスワードを入力
Re-type new password: #パスワードを入力
Adding password for user {ログインID}

Usage:
    htpasswd [-cimBdpsDv] [-C cost] passwordfile username
    htpasswd -b[cmBdpsDv] [-C cost] passwordfile username password

    htpasswd -n[imBdps] [-C cost] username
    htpasswd -nb[mBdps] [-C cost] username password
 -c  Create a new file.
 -n  Don't update file; display results on stdout.
 -b  Use the password from the command line rather than prompting for it.
 -i  Read password from stdin without verification (for script usage).
 -m  Force MD5 encryption of the password (default).
 -B  Force bcrypt encryption of the password (very secure).
 -C  Set the computing time used for the bcrypt algorithm
     (higher is more secure but slower, default: 5, valid: 4 to 31).
 -d  Force CRYPT encryption of the password (8 chars max, insecure).
 -s  Force SHA encryption of the password (insecure).
 -p  Do not encrypt the password (plaintext, insecure).
 -D  Delete the specified user.
 -v  Verify password for the specified user.
On other systems than Windows and NetWare the '-p' flag will probably not work.
The SHA algorithm does not use a salt and is less secure than the MD5 algorithm.