httpd 密码验证

Myth丶恋晨 2023-06-27 12:49 10阅读 0赞

[httpd访问控制：用户授权—>官方指南:http://httpd.apache.org/docs/2.4/howto/auth.html][httpd_http_httpd.apache.org_docs_2.4_howto_auth.html]  
注1： http2.2/http2.4的访问控制，配置方式是通用的  
注2：生成密码文件(-m:md5,默认选项): htpasswd \[-c\] \[-b\] \[-m\] /etc/httpd/http.users tom \[-b的密码\]

<table> 
 <thead> 
  <tr> 
   <th>操作系统</th> 
   <th>http版本</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>centos6</td> 
   <td>http2.2</td> 
  </tr> 
  <tr> 
   <td>centos7</td> 
   <td>http2.4</td> 
  </tr> 
 </tbody> 
</table>

# 1， 网站验证授权: 基于用户名/密码 #

#1，配置站点：
    [root@c7 conf.d]# grep DocumentRoot /etc/httpd/conf/httpd.conf 
    # DocumentRoot: The directory out of which you will serve your
    DocumentRoot "/var/www/html"
       
    [root@c7 conf.d]# mkdir -p /var/www/html/admin/
    [root@c7 conf.d]# echo "admin" >/var/www/html/admin/index.html 
    [root@c7 conf.d]# curl c7:80/admin/
    admin
    
    #2, 添加密码验证配置
    #--------------添加用户名密码:数据文件/etc/httpd/http.users--------------
    #tom:123
    #jerry:456
    #test:123456
    [root@c7 ~]# htpasswd -c /etc/httpd/http.users tom
    New password: #密码:123
    Re-type new password: 
    Adding password for user tom
    [root@c7 ~]# cat /etc/httpd/http.users 
    tom:$apr1$BYpkVDFf$w0vnrc8D0ecklq69NKciW1
    
    [root@c7 ~]# htpasswd /etc/httpd/http.users jerry
    New password: #密码:456
    Re-type new password: 
    Adding password for user jerry
    
    [root@c7 ~]# htpasswd -b /etc/httpd/http.users test 123456 #密码:123456
    Adding password for user test
    [root@c7 ~]# cat /etc/httpd/http.users 
    tom:$apr1$BYpkVDFf$w0vnrc8D0ecklq69NKciW1
    jerry:$apr1$/kCjFP.P$haIHJ8c66US631W40Sw1A1
    test:$apr1$3idpMzlY$HoASzcDTYnElVykDwoD84/
    
    #--------------为站点添加密码验证： 基于用户名/密码--------------
    [root@c7 conf.d]# pwd
    /etc/httpd/conf.d
    [root@c7 conf.d]# cat mypass.conf 
    
    <Directory /var/www/html/admin>
        Options None
        AllowOverride None   
        AuthType basic
        AuthName " please input name/passwd:"
    
        #基于username/passwd
        AuthUserFile "/etc/httpd/http.users"
        Require user tom jerry
        #Require valid-user 
    
        #基于group
        #AuthUserFile "/etc/httpd/http.users"
        #AuthGroupFile "/etc/httpd/http.groups"
        #Require group admins
    </Directory>
    
    #--------------测试密码验证是否生效--------------
    [root@c7 conf.d]# curl -u tom:123 c7:80/admin/
    admin
    [root@c7 conf.d]# curl -u jerry:456 c7:80/admin/
    admin
    [root@c7 conf.d]# curl -u test:123456 c7:80/admin/
    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <html><head>
    <title>401 Unauthorized</title>
    </head><body>
    <h1>Unauthorized</h1>
    <p>This server could not verify that you
    are authorized to access the document
    requested.  Either you supplied the wrong
    credentials (e.g., bad password), or your
    browser doesn't understand how to supply
    the credentials required.</p>
    </body></html>

# 2， 网站验证授权: 基于组 #

#--------------为站点添加密码验证: 基于组--------------
    [root@c7 conf.d]# pwd
    /etc/httpd/conf.d
    [root@c7 conf.d]# cat /etc/httpd/http.users 
    tom:$apr1$BYpkVDFf$w0vnrc8D0ecklq69NKciW1
    jerry:$apr1$/kCjFP.P$haIHJ8c66US631W40Sw1A1
    test:$apr1$3idpMzlY$HoASzcDTYnElVykDwoD84/
    [root@c7 conf.d]# cat /etc/httpd/http.groups 
    admins: tom test
    [root@c7 conf.d]# cat mypass.conf 
    
    <Directory /var/www/html/admin>
        Options None
        AllowOverride None    
        AuthType basic
        AuthName " please input name/passwd:"
    
        #基于username/passwd
        #AuthUserFile "/etc/httpd/http.users"
        #Require user tom jerry
    
        #基于group
        AuthUserFile "/etc/httpd/http.users"
        AuthGroupFile "/etc/httpd/http.groups"
        Require group admins
    </Directory>
    
    #--------------测试密码验证是否生效--------------
    [root@c7 conf.d]# curl -u tom:123 c7:80/admin/
    admin
    [root@c7 conf.d]# curl -u jerry:456 c7:80/admin/
    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <html><head>
    <title>401 Unauthorized</title>
    </head><body>
    <h1>Unauthorized</h1>
    <p>This server could not verify that you
    are authorized to access the document
    requested.  Either you supplied the wrong
    credentials (e.g., bad password), or your
    browser doesn't understand how to supply
    the credentials required.</p>
    </body></html>

[httpd_http_httpd.apache.org_docs_2.4_howto_auth.html]: http://httpd.apache.org/docs/2.4/howto/auth.html