From d3fe20b4ccb36c5c28919a4a128f613b336425db Mon Sep 17 00:00:00 2001
From: Marcin Haba <marcin.haba@bacula.pl>
Date: Mon, 23 Jun 2014 15:51:43 +0200
Subject: [PATCH] baculum: Updated README file

---
 gui/baculum/README | 62 +++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 61 insertions(+), 1 deletion(-)

diff --git a/gui/baculum/README b/gui/baculum/README
index 5ab2dd9577..c3713533c8 100644
--- a/gui/baculum/README
+++ b/gui/baculum/README
@@ -2,7 +2,12 @@ Baculum - Bacula web interface
 
 Features description:
 
-=== Customized and restricted consoles ===
+1. Customized and restricted consoles
+2. Baculum users configuration file
+
+================================================================================
+
+=== 1. Customized and restricted consoles ===
 
 Baculum supports customized and restricted consoles for each logged in user.
 
@@ -136,3 +141,58 @@ Configuration wizard restriction
 
 For security reason there has been disabled access to Configuration Wizard
 function for all users except administrator.
+
+
+================================================================================
+
+=== 2. Baculum users configuration file for Lighttpd ===
+
+There is possible to manage Baculum administrator login and password directly
+in configuration wizard step titled "Step 5 - authorization params to Baculum".
+
+It means that Baculum administrator may change administrator auth params by
+configuration wizard.
+
+So far in Step 5 configuration wizard there were need to input admin auth params
+the same as in pre-defined file by "htpasswd" program.
+
+For getting possibility to change admin login and password on wizard level
+there is need to run Baculum on Lighttpd web server and create admin password
+file locatied in:
+
+protected/Data/baculum.users
+
+where syntax is:
+
+someuser:somepassword
+myser123:password3213
+...etc.
+
+
+NOTE!
+Login and password are stored as plain text.
+
+Next in Lighttpd web server configuration file is need to define above file
+as authfile for access to Baculum, for example:
+
+auth.backend = "plain"
+auth.backend.plain.userfile = "/var/www/baculum/protected/Data/baculum.users"
+auth.require = ( "/" => (
+        "method" => "basic",
+        "realm" => "Baculum Auth",
+        "require" => "valid-user"
+))
+
+
+Sample with whole Lighttpd configuration file you can find in directory:
+
+examples/baculum.lighttpd.conf
+
+NOTE!
+Due to Apache web server can use plain text password only for Windows,
+BEOS and Netware systems, described admin auth modification is not supported
+for Apache.
+
+NOTE!
+Functionality has been tested with Lighttpd. It has not been tested with other
+web servers that supports plain text stored password.
-- 
2.39.5