基于basic认证机制配置httpd服务器拥有用户访问控制功能
2015-08-18 21:29
1101 查看
实验须知:
实验主机:192.168.1.11
1. 配置httpd基于用户的访问控制----basic认证机制
(1)安装httpd程序,并启动服务
(a)修改’MainServer’的路径为/data/web/html,并进行访问测试
2. 基于组的认证
创建组文件,并在配置文件中添加即可。
实验主机:192.168.1.11
1. 配置httpd基于用户的访问控制----basic认证机制
(1)安装httpd程序,并启动服务
#yum install httpd–y [root@node1 ~]# servicehttpd start Starting httpd:httpd: Could not reliably determine the server's fully qualified domain name,using 172.16.33.1 for ServerName [ OK ] [root@node1 ~]# ss –tnl(2)在配置文件中定义安全域
(a)修改’MainServer’的路径为/data/web/html,并进行访问测试
#vim/etc/httpd/conf/httpd.conf …………. DocumentRoot "/data/web/html" .…….. # mkdir/data/web/html -pv [root@node1 ~]# cd/data/web/html/ [root@node1 html]#vim index.html 添加: <h1>new path</h1> [root@node1 ~]# httpd -t httpd: Could not reliablydetermine the server's fully qualified domain name, using 172.16.33.1 forServerName Syntax OK [root@node1 ~]# servicehttpd reload Reloading httpd:在浏览器中输入:http://192.168.1.11/,访问测试(b)在/data/web/html/添加一个目录employee,并封装Directory,实现对此目录认证basic机制的实现,认证用户tom,jerry
# mkdir/data/web/html/employee # cd/data/web/html/employee [root@node1 employee]# vimindex.html Tom 21 Jerry 90 #vim/etc/httpd/conf/httpd.conf ………添加Directory,对目录的访问控制………… <Directory "/data/web/html/employee"> Options None AllowOverride None AuthType basic AuthName "it is only foremployee!!" AuthUserFile /etc/httpd/users/.htpasswd Require user tom jerry </Directory> ……………. [root@node1 html]# httpd-t httpd: Could not reliablydetermine the server's fully qualified domain name, using 172.16.33.1 forServerName Syntax OK(3)创建/etc/httpd/users目录,并在目录下提供用户的账号文件
[root@node1 html]# mkdir/etc/httpd/users [root@node1 html]# cd/etc/httpd/users [root@node1 users]#htpasswd -c -m /etc/httpd/users/.htpasswd tom New password: Re-type new password: Adding password for usertom [root@node1 users]#htpasswd -m /etc/httpd/users/.htpasswdjerry New password: Re-type new password: Adding password for userjerry [root@node1 users]# cat/etc/httpd/users/.htpasswd tom:$apr1$snf79TuR$lX7b.Y8S9bbRtZh8cpbaz1 jerry:$apr1$sxqJzSiW$fa0WXYi2dFdCDIkO.0yCt1 (4)重启服务,并在浏览器进行测试 [root@node1 employee]# httpd-t httpd: Could not reliablydetermine the server's fully qualified domain name, using 172.16.33.1 forServerName Syntax OK [root@node1 employee]#service httpd reload Reloading httpd:此时在浏览器中输入:http://192.168.1.11/employee/,输入tom、jerry及对应密码,多次输入观察结果;发现只有tom、jerry用户且都要输入正确的密码才能成功访问!
2. 基于组的认证
创建组文件,并在配置文件中添加即可。
[root@node1 employee]# vim /etc/httpd/conf/httpd.conf …………修改为如下内容…………….. <Directory"/data/web/html/employee"> Options None AllowOverride None AuthType basic AuthName "it is only foremployee!!" AuthUserFile /etc/httpd/users/.htpasswd AuthUserFile /etc/httpd/users/.htgroup Require group mc </Directory> …………………………. [root@node1 employee]# vim/etc/httpd/users/.htgroup ………….添加如下内容………………. mc: tom jerry [root@node1 employee]#httpd -t httpd: Could not reliablydetermine the server's fully qualified domain name, using 172.16.33.1 forServerName Syntax OK [root@node1 employee]#service httpd reload Reloading httpd:基于组认证的配置就完成了,下面在浏览器中进行访问测试即可!!!!
相关文章推荐
- NS3网络仿真(13): FdNetDevice的问题
- Okhttp 使用实例
- TCP为什么要三次握手而不采用两次握手
- Android之HttpClient的使用方法
- HTTP协议总结
- 生产环境中跨节点隔离网络构架解析
- linux网络编程poll与epoll区别
- linux下网络编程send,recv,read,write的区别
- 龙与虎PSP汉化版.iso 下載地址:http://www.400gb.com/file/81103616 【龙与虎PSP汉化版】 b-toradorap.cso 下载地址:http://www
- winform通过https与服务器进行通信
- 使用Jmeter进行http接口测试
- linux下socket网络通信详解
- TinyXml 操作XML 常用操作 http://www.cnblogs.com/cy568searchx/p/3670400.html
- 搭建Python HTTP服务
- 类型“System.Net.Http.HttpResponseMessage”在未被引用的程序集中定
- iOS安全系列之一:HTTPS
- 通过网络获取图片并缓存
- 网络编程的面试题
- TCP快速重传与快速恢复原理分析
- 书摘---网络搜集整理 (1--10)