Commit f8e3cb0f authored by Rich Bowen's avatar Rich Bowen
Browse files

auth_digest doc improvement

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1745061 13f79535-47bb-0310-9956-ffa450edef68
parent 25455d2c
Loading
Loading
Loading
Loading
+10 −11
Original line number Diff line number Diff line
@@ -71,17 +71,8 @@
<div class="section">
<h2><a name="using" id="using">Using Digest Authentication</a></h2>

    <p>To use MD5 Digest authentication, simply
    change the normal <code>AuthType Basic</code> and
    <code class="directive"><a href="../mod/mod_auth_basic.html#authbasicprovider">AuthBasicProvider</a></code>
    to <code>AuthType Digest</code> and
    <code class="directive"><a href="#authdigestprovider">AuthDigestProvider</a></code>,
    when setting up authentication, then add a
    <code class="directive"><a href="#authdigestdomain">AuthDigestDomain</a></code> directive containing at least the root
    URI(s) for this protection space.</p>

    <p>Appropriate user (text) files can be created using the
    <code class="program"><a href="../programs/htdigest.html">htdigest</a></code> tool.</p>
    <p>To use MD5 Digest authentication, configure the location to be
    protected as shown in the below example:</p>

    <div class="example"><h3>Example:</h3><pre class="prettyprint lang-config">&lt;Location "/private/"&gt;
    AuthType Digest
@@ -94,6 +85,14 @@
&lt;/Location&gt;</pre>
</div>

    <p><code class="directive"><a href="#authdigestdomain">AuthDigestDomain</a></code>
    should list the locations that will be protected by this
    configuration.</p>

    <p>The pasword file referenced in the <code class="directive"><a href="#authuserfile">AuthUserFile</a></code> directive may be
    created and managed using the <code class="program"><a href="../programs/htdigest.html">htdigest</a></code> tool.</p>


    <div class="note"><h3>Note</h3>
    <p>Digest authentication was intended to be more secure than basic
    authentication, but no longer fulfills that design goal. A
+11 −12
Original line number Diff line number Diff line
@@ -49,18 +49,8 @@

<section id="using"><title>Using Digest Authentication</title>

    <p>To use MD5 Digest authentication, simply
    change the normal <code>AuthType Basic</code> and
    <directive module="mod_auth_basic">AuthBasicProvider</directive>
    to <code>AuthType Digest</code> and
    <directive module="mod_auth_digest">AuthDigestProvider</directive>,
    when setting up authentication, then add a
    <directive module="mod_auth_digest"
    >AuthDigestDomain</directive> directive containing at least the root
    URI(s) for this protection space.</p>

    <p>Appropriate user (text) files can be created using the
    <program>htdigest</program> tool.</p>
    <p>To use MD5 Digest authentication, configure the location to be
    protected as shown in the below example:</p>

    <example><title>Example:</title>
    <highlight language="config">
@@ -76,6 +66,15 @@
      </highlight>
    </example>

    <p><directive module="mod_auth_digest">AuthDigestDomain</directive>
    should list the locations that will be protected by this
    configuration.</p>

    <p>The pasword file referenced in the <directive
    module="mod_auth_digest">AuthUserFile</directive> directive may be
    created and managed using the <program>htdigest</program> tool.</p>


    <note><title>Note</title>
    <p>Digest authentication was intended to be more secure than basic
    authentication, but no longer fulfills that design goal. A