Forum Moderators: phranque

Message Too Old, No Replies

Named user access list Apache web server

Named user access list

         

uggers

8:24 pm on Jun 17, 2009 (gmt 0)

10+ Year Member



Hi,

I have recently created an intranet site for 30 users. The web server is an APACHE server, residing on a linux box.
The users are authenticated onto the site using PKI authentication. I would like parts of the site where only certain users may access. I do not want to use a username/password route. I originally created a .htaccess file, with the names of the 10 authorised users:

SSLRequire %{SSL_CLIENT_S_DN_CN} in {"bobsmith", "tomsmith", "paulsmith",etc etc}

However there seems to be problems with this (works fine when the user list is on 1 line, but does not work when there are multiple lines?) and it does not seem practical. Is there are more efficient route? What I would like is to gain the DN credentials from the client certificate and compare against a named user list. Sounds simple!

Any advice would be appreciated

Thanks

Caterham

10:24 pm on Jun 17, 2009 (gmt 0)

10+ Year Member



works fine when the user list is on 1 line, but does not work when there are multiple lines

Did you try


first line \
second line

?