Dotaz: Apache autentizace proti /etc/passwd

[apache]

Potreboval bych overovat uzivatele ze souboru /etc/passwd.
V /etc/apache2/sites-available/default mam:

NameVirtualHost *
<VirtualHost *>
 ServerAdmin webmaster@localhost 
 DocumentRoot /var/www/
 <Directory />
  Options FollowSymLinks
  AllowOverride None
 </Directory>
 <Directory /var/www />
  Options Indexes FollowSymLinks MultiViews
  AllowOverride All
  Order allow,deny
  allow from all
  # This directive allows us to have apache2's default start page
  # in /apache2-default/, but still have / go to the right place
  # RedirectMatch ^/$ /apache2-default/
 </Directory>
###########################
Alias /pokus/ /home/pokus/
<Directory /home/pokus />
  Options +Indexes
  AllowOverride None
     
  AuthUserFile /home/pokus/.htpasswd
  AuthName "Heslo:"
  AuthType Basic
  require valid-user  
</Directory>
########################### 

 ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
 <Directory "/usr/lib/cgi-bin">
  AllowOverride None
  Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
  Order allow,deny
  Allow from all
 </Directory>
 ErrorLog /var/log/apache2/error.log
 # Possible values include: debug, info, notice, warn, error, crit,
 # alert, emerg.
 LogLevel warn
 CustomLog /var/log/apache2/access.log combined
 ServerSignature On
  Alias /doc/ "/usr/share/doc/"
  <Directory "/usr/share/doc/">
  Options Indexes MultiViews FollowSymLinks
  AllowOverride None
  Order deny,allow
  Deny from all
  Allow from 127.0.0.0/255.0.0.0 ::1/128
  </Directory>
</VirtualHost> 

Todle mi funguje, ale potreboval bych to pres /etc/passwd, neco jako:
 

###########################
Alias /pokus/ /home/pokus/
<Directory /home/pokus />
  Options +Indexes
  AllowOverride None
     
  AuthUserFile /etc/passwd
  AuthName "Heslo:"
  AuthType Basic
  require valid-user  
</Directory>
########################### 

Nevite nekdo jak na to? Ja na to nemuzu prijit. Napada me jedine autentizace pres LDAP, ale to mi prijde zbytecne slozity.

Odpovědi

[moira]

Nasel jsem tenhle modul do Apache.

Otazka je, nakolik je to stabilni, aktualni, bezpecne atd... Ja bych mozna stejne precijenom zvazoval ten LDAP.

[frEon]

Na overovani proti /etc/shadow bude lepsi pouzit mod_authz_external nabo mod_auth_pam.

Tak jak to ma nastavene autor dotazu to fungovat nemuze, soubor /etc/passwd na rozumne nastavenem systemu neobsahuje zadna hesla (ta jsou v /etc/shadow), proti kterym se da neco overit a i kdyby je obsahoval, tak ma ten soubor jiny format.