LinHES Forums
http://forums.linhes.org/

Securing Mythweb (LinHES)
http://forums.linhes.org/viewtopic.php?f=25&t=22365
Page 1 of 1

Author:  gatorback [ Thu Dec 08, 2011 10:32 pm ]
Post subject:  Securing Mythweb (LinHES)

There is an excellent article for enabling passwords for mythweb and enabling SSL, however this is from 2007 (R5F1). As I understand it, LinHES does not use Apache (uses lighttpd?).

That being said, has anyone had success performing a similar task on LinHES? Detailing your experience and learning resources would be appreciated.

Questions:
========
1) If lighttpd is not used, what is?
2) Is this lighttpd SSL configuration tutorial appropriate in this context?
3) What is the lightttpd equivalent procedure for:

Step 1: Enable Password Control for Everything

in the original R5F1 article/? I think that this file may be the target;

/etc/lighttpd/auth-inc.conf

I am hoping that I missed an FAQ or thread that addresses this topic.

Author:  jams [ Fri Dec 09, 2011 9:25 am ]
Post subject: 

1) lighttpd
2) yes
3) if you edit /etc/lighttpd/auth-inc.conf and change /mythweb to / then the entire site will be protected. Be warned that file will be overwritten from time to time (unless you disable it in /etc/mythvantage.cfg). Also might be able to put those directives in your own conf file, but not for sure if it will conflict or not.

Author:  gatorback [ Fri Dec 09, 2011 4:00 pm ]
Post subject: 

Thanks for the response, however, it does not address how to add and manage users. (Maybe I missed something?) I Googled this a little more and found this article

http://www.cyberciti.biz/tips/lighttpd-secure-digest-authentication-mod_auth.html

It suggest using the syntax:

Code:
htdigest -c /path/to/password/file 'Realm' username


However, I htdigest is not available. It seems that LH has more (advanced) alternatives to standard *NIX resources: is there a LH equivalent \ substitute?

Author:  jams [ Fri Dec 09, 2011 4:17 pm ]
Post subject: 

htdigest is part of apache. You can either
1) install apache (it's in the repo)
2) use an online generator like http://www.askapache.com/online-tools/h ... generator/

3) skip the htdigest and use plain text. Frankly i would recommend this route for testing.

Page 1 of 1 All times are UTC - 6 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/