wnpasswd(8) · carta

NAME

wnpasswd - create and manage password files for wn HTTP server

SYNOPSIS

wnpasswd [-n [-D] |-d [-D] |-h] [ passwd_file]

DESCRIPTION

wnpasswd is a perl(1) program that is part of the wn(1) HTTP server package. It is used to create and manage password files for authenticating a user through "Basic" authentication described in the HTTP protocol.

wnpasswd should be used the first time to create the password file:

        wnpasswd -n passwd_file

This prompts you for a user name and password and then creates a password file called passwd_file with that entry. On subsequent uses the -n argument should be omitted so that entries will be added to the existing file instead of starting a new one. If a subsequent entry is made with the same user name the entry for that user will be replaced. If the passwd_file argument is omitted then the default name of wnpasswd is used.

There is another optional argument which may be used with this program. The command:

        wnpasswd -n -D passwd_file

causes a UNIX DBM database to be created or used instead of a simple flat file. This is very useful if you have a very large number of password entries. The database resides in the two passwd_file.dir and passwd_file.pag files. To create a new database you must remove or rename the .pag and .dir files.

To remove a single entry from a password file use the command:

        wnpasswd -d passwd_file

or

        wnpasswd -d -D passwd_file

for a UNIX DBM database.

Once you have created your password file and made sure that it is readable by the user id under which the wn(1) server will run, you are ready to set up the wnauth(3) authentication module. This is done on a per directory basis by three entries in directory record of the index file (see http://dochost/doc/wn/access.html#authenticate).

WARNING

I would strongly advise against using basic authentication described here to protect sensitive information on a server which runs on system on which untrusted users have accounts. The "Basic" authentication protocol sends passwords across the network with no encryption. Specifically, you should not use the host password file /etc/passwd as the wn(1) password file.

OPTIONS

-D: Use UNIX DBM database instead of flat file.

-d [ passwd_file ]

Delete a user from the passwd_file if the user exists. If passwd_file is not supplied the default wnpasswd is used instead. If the password file is a UNIX DBM database, the -D must also be provided.

-h: Print help message.

-n [ passwd_file ]

Create new password database passwd_file or wnpasswd if optional argument is not supplied. If the -D option is also supplied, a UNIX DBM database consisting of the files passwd_file.dir and passwd_file.pag is created instead.

FILES

passwd_file [ .dir | .pag ]

Database of users and corresponding passwords.

AUTHOR

wn is written by John Franks <[email protected]>. Modified by Jean Pierre LeJacq <[email protected]> as part of packaging for the Debian GNU/Linux distribution. Manual page also added by Jean Pierre LeJacq.