Go back to fronty page View most popular entries View latest additions Submit tutorials to UnixTutorials.info
UnixTutorials logo
Debian Install and Configure Auth Shadow on Debian/Ubuntu
Post date: February 23, 2007, 12:02 Category: Views: 1252 Comments: 0
Tutorial quote: Auth Shadow or mod-auth-shadow is a module for apache (and apache2, sort of) that enables authentication against /etc/shadow. The benefits being that any system user with a password can be authenticated for web_dav, subversion or simply an https server. The only other way to do this is with PAM. That method is dangerous because the apache user (www-data in my case) must be able to read /etc/shadow. Obviously, not a good idea. Auth Shadow accomplishes this safely by using a intermediate program called validate. This works because validate can be owned by root but executable by everyone. In the event that your server is compromised through apache, your password file will not be readable.

Comments

Currently there are 0 comment(s) for this tutorial. You can post a comment using the form below.


Your name/nick: Remember this?
Comment:

Allowed HTML tags:

<b>text</b>
<i>text</i>
<u>text</u>
Please solve math question below:

 F          9PM      
G3     Y    5     WR3
 X    6GP   28P      
 K     G      X   9WP
QAB         LRS