Forum Moderators: phranque

Message Too Old, No Replies

htaccess and subfolder authentication/authorization

PAM authentication for subfolders?

         

MASantangelo

7:40 pm on Jun 16, 2009 (gmt 0)

10+ Year Member



Ok, so here is what is going on and what I need some help figuring out.

I have a main folder for the staff setup as /staff. Within staff is a subfolder, EC. Within EC is another subfolder /admin.

Staff is currently setup with htaccess that uses an htpasswd file (and a few "allow from" for certain machines on the network to not require a login). Now, as I understand it, the same logins will apply for /staff/EC. Is there any way to change this? We have a PAM authentication server which allows me to give people's REAL usernames for use in the page. I tried using <Directory /staff/EC> {buncha code} </Directory> to give different access requirements but just got 500 errors the entire time.

Is there any way to have /staff and /staff/EC use completely different logins (and to have /staff/EC ask for the correct login when you get there?)?

When I setup /staff to use /staff/EC login everyone complained because it required too much effort (the use of safeword cards for the staff page itself was too much to ask apparently) so that really isn't an option.

Any help would be appreciated.

Thanks!
-M

MASantangelo

8:38 pm on Jun 16, 2009 (gmt 0)

10+ Year Member



Or, I pose a different question. I have the following working right now:

/staff/.htaccess is working properly as setup (using an existing htpasswd file):
AuthName "Staff Pages"
AuthUserFile /toolbox/.htpasswd
AuthType Basic
<Limit GET POST>
require valid-user
</Limit>

/staff/EC/.htaccess is not working properly. It is taking auths from /staff which should not work and allowing them to login but not accepting logins from PAM authentications:
AuthName "Staff Pages - Emergency Coverage System ** Use save_ if Enigmatized **"
AuthType Basic
AuthPAM_Enabled on
AuthPAM_FallThrough off

<Files *>
<Limit GET POST>
require valid-user
satisfy all
</Limit>
</Files>

Is there any way to get /staff/EC to use the PAM setup which I have working on the devel box? I honestly cannot think of anything else to try here.