iPlanet password security

From: Richard Russell (richard@yellowgoanna.com)
Date: Fri Dec 06 2002 - 00:56:06 EST


Hi,

I have an iPlanet (Sun ONE) Web Server, Enterprise Edition 6.0 running
on a V100 with Solaris 8. I have a vitrual server that has a directory
structure as follows:

<server_root>/index.html
<server_root>/Application1/
<server_root>/Application2/

... and I want to be able to restrict access to Application1 to a
single user, while leaving index.html and the Application2 separate.
Now, I've discovered the ACL file editing on the web-based admin
interface, and indeed, I have set up my ACL file approximately as I
want it[1]. However, I can't figure out what I'm supposed to be
authenticating against. In Apache, I use htpasswd to create an apache
passwd file... What do I use with iPlanet?

thanks

rr

[1] The ACL file (slightly edited for privacy)

----
version 3.0;
acl "default";
authenticate (user, group) {
  prompt = "iPlanet Web Server";
};
allow (read, list, execute,info) user = "anyone";
allow (write, delete) user = "all";
acl "es-internal";
allow (read, list, execute,info) user = "anyone";
deny (write, delete) user = "anyone";
acl "path=/<application_path>";
authenticate (user,group) {
        database = "default";
        method = "basic";
        prompt = "<Application Name>";
};
allow (all)
 (user = "<username>");
deny (all)
 (user = "anyone");
----
-- 
Richard Russell
Yellow Goanna P/L
e: richard@yellowgoanna.com
m: +61 412 827 805
f: +61 8 8462 2362
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers


This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:25:25 EDT