Reference

wnauth(3)

CGI program for Basic authorization for wn HTTP server

NAME

wnauth - CGI program for Basic authorization for wn HTTP server

SYNOPSIS

wnauth [-D] [-g group_name -G group_file] ([-P password_file]| password_file)

DESCRIPTION

wnauth is a C CGI program that is part of the wn(1) HTTP server package. It is used for authenticating a user through "Basic" authentication described in the HTTP protocol. It is used in conjunction with the wn_mkpasswd(8) utility to create password files and the index files "Authorization" entries (see http:/doc/wn/access.html).

WARNING

I would strongly advise against using basic authentication described here to protect sensitive information on a server which runs on system on which untrusted users have accounts. The "Basic" authentication protocol sends passwords across the network with no encryption. Specifically, you should not use the host password file /etc/passwd as the wn(1) password file.

OPTIONS

-D

The password file passwd_file uses the UNIX DBM database instead of a flat file format.

-g group_name

Use the group file specified by the -G option and use group_name for authentication.

-G group_file

Use group authentication instead of the default user authentication. The group file is a file in the format of a UNIX /etc/group file. That is, it has lines of the form:

        group_name:*:99:user1,user3,user5 

where the fields are separated by colons, the first field is a group name, and the fourth field is a comma separated list of user names. wnauth will ignore the second and third fields. If the line above is in the file group_file and wnauth is invoked as above then a user will be granted access provided the supplied password matches that in the wnpasswd file and the user's username is in the list after the second ':' in the line starting with the group name. Thus, in this example users user1, user3, and user5 will be given access if they provide valid passwords and other users will not.

-P password_file

The password file as created by the wn_mkpasswd(8) program. This option can be used or the argument passwork_file by itself.

FILES

./group_file

Group file for directory.

./index

Access control file for directory.

./index.cache

Access control database for directory.

./password_file

Password file for directory.

SEE ALSO

wn(1), wn_mkdigest(1), wn_uncache(1), wndex(1), wnindexmaker(1), wnpnuts(1), wncat(3), wnhtmlify(3), wnredir(3), wnsectsearch(3), wnseven_m(3), wn_md5passwd(8), wn_mkpasswd(8), wnconfig(8), wnd(8), wnsd(8), wnupdatewww(8), wnv2c(8)
http:/doc/wn/access.html
http:/doc/wn/appendixD.html
http:/doc/wn/manual.html
http://hopf.math.nwu.edu/

AUTHOR

wn is written by John Franks <[email protected]>. Modified by Jean Pierre LeJacq <[email protected]> as part of packaging for the Debian GNU/Linux distribution. Manual page also added by Jean Pierre LeJacq.

BUGS

This page isn't complete.

History