First there is need to configure authentication to Baculum from web server side.
-Baculum supports HTTP Basic authentication from web server.
+Baculum supports HTTP Basic authentication from web server with passwords stored
+in file:
+
+./protected/Data/baculum.users
+
+NOTE!
+There is possible to use another location than:
+ ./protected/Data/baculum.users
+however then is required provide the same auth data in Baculum initial wizard.
In Apache web server this authentication method may be realizing by next directives
declaration in Apache configuration file:
AuthType Basic
-AuthUserFile /etc/apache2/passwords
+AuthUserFile /var/www/baculum/protected/Data/baculum.users
Require valid-user
-File located in /etc/apache2/passwords is an example file which contains users and
-passwords. For generating passwords file you may use htpasswd binary file in next
-way:
+For creating passwords file you may use htpasswd binary file in next way:
-# htpasswd -c /etc/apache2/passwords someuser
+# htpasswd -c /var/www/baculum/protected/Data/baculum.users someuser
You will be asked about inputing password and retype password for user.
NOTE!
"-c" switcher you should use only for new created passwords file. For existing
-passwords file "-c" switcher should not be inputed.
+passwords file "-c" switcher should not be provided.
+
+At the end there is need to give web server user possibility to manage the auth file:
+For example:
+chown www-data:www-data /var/www/baculum/protected/Data/baculum.users
5. Example configuration VirtualHost
AllowOverride All
AuthType Basic
AuthName MyPrivateFile
- AuthUserFile /etc/apache2/passwords
+ AuthUserFile /var/www/baculum/protected/Data/baculum.users
Require valid-user
</Directory>
</VirtualHost>
================================================================================
-=== 2. Baculum users configuration file for Lighttpd ===
+=== 2. Baculum users configuration file ===
There is possible to manage Baculum administrator login and password directly
in configuration wizard step titled "Step 5 - authorization params to Baculum".
-It means that Baculum administrator may change administrator auth params by
+It means that Baculum administrator may change admin auth params by
configuration wizard.
-So far in Step 5 configuration wizard there were need to input admin auth params
-the same as in pre-defined file by "htpasswd" program.
+---------------- NOTE ---------------
+In older Baculum versions (before 7.0.5) in Step 5 configuration wizard there were
+need to input admin auth params the same as in pre-defined file by "htpasswd"
+program.
-For getting possibility to change admin login and password on wizard level
-there is need to run Baculum on Lighttpd web server and create admin password
-file locatied in:
+In version 7.0.5 has been introduced partial support for possibility changing
+username and password from Baculum interface working on Lighttpd web server.
-protected/Data/baculum.users
+From version 7.2.0 this limitation has been abolished. As long as Web Server uses
+HTTP Basic auth file located in:
-where syntax is:
-
-someuser:somepassword
-myser123:password3213
-...etc.
-
-
-NOTE!
-Login and password are stored as plain text.
-
-Next in Lighttpd web server configuration file is need to define above file
-as authfile for access to Baculum, for example:
-
-auth.backend = "plain"
-auth.backend.plain.userfile = "/var/www/baculum/protected/Data/baculum.users"
-auth.require = ( "/" => (
- "method" => "basic",
- "realm" => "Baculum Auth",
- "require" => "valid-user"
-))
-
-
-Sample with whole Lighttpd configuration file you can find in directory:
-
-examples/baculum.lighttpd.conf
-
-NOTE!
-Due to Apache web server can use plain text password only for Windows,
-BEOS and Netware systems, described admin auth modification is not supported
-for Apache.
-
-NOTE!
-Functionality has been tested with Lighttpd. It has not been tested with other
-web servers that supports plain text stored password.
+./protected/Data/baculum.users
+and Web Server is capable to write (write permission) to this passwords file as
+long is possible to change username and password from Baculum interface level.
+------------ NOTE END -------------
================================================================================