: Digest Authentication - how is it used? I understand a bit about digest authentication from here http://en.wikipedia.org/wiki/Digest_access_authentication, but I am pretty unclear on where, when or

@BetL925

Apache server has mod_auth-digest that implements it. It is more secure than basic authentication and can be used in place of it.

From the documentation:


Using MD5 Digest authentication is very simple. Simply set up authentication normally, using AuthType Digest and AuthDigestProvider instead of the normal AuthType Basic and AuthBasicProvider. Then add a AuthDigestDomain directive containing at least the root URI(s) for this protection space.

Appropriate user (text) files can be created using the htdigest tool.

Example:


<Location /private/>
AuthType Digest
AuthName "private area"
AuthDigestDomain /private/ mirror.my.dom/private2/
AuthDigestProvider file
AuthUserFile /web/auth/.digest_pw
Require valid-user
</Location>

Vote Up Vote Down