SUMMARY: iPlanet password security

I've been told that iPlanet requires an LDAP server to do any
authentication. If this is indeed the case, I'm pretty dissappointed.
Whatever happenned to making the simple things simple? Anyway, now I
need to install an LDAP server and work out how to configure it for
the simple task of one username and password... sigh.

Thanks for the help anyway, gurus :)

rr

On Fri, Dec 06, 2002 at 04:26:06PM +1030, Richard Russell wrote:
> Hi,
> 
> I have an iPlanet (Sun ONE) Web Server, Enterprise Edition 6.0 running
> on a V100 with Solaris 8. I have a vitrual server that has a directory
> structure as follows:
> 
> <server_root>/index.html
> <server_root>/Application1/
> <server_root>/Application2/
> 
> ... and I want to be able to restrict access to Application1 to a
> single user, while leaving index.html and the Application2 separate.
> Now, I've discovered the ACL file editing on the web-based admin
> interface, and indeed, I have set up my ACL file approximately as I
> want it[1]. However, I can't figure out what I'm supposed to be
> authenticating against. In Apache, I use htpasswd to create an apache
> passwd file... What do I use with iPlanet?
> 
> thanks
> 
> rr
> 
> [1] The ACL file (slightly edited for privacy)
> ----
> version 3.0;
> acl "default";
> authenticate (user, group) {
>   prompt = "iPlanet Web Server";
> };
> allow (read, list, execute,info) user = "anyone";
> allow (write, delete) user = "all";
> 
> acl "es-internal";
> allow (read, list, execute,info) user = "anyone";
> deny (write, delete) user = "anyone";
> 
> acl "path=/<application_path>";
> authenticate (user,group) {
>         database = "default";
>         method = "basic";
>         prompt = "<Application Name>";
> };
> allow (all)
>  (user = "<username>");
> 
> deny (all)
>  (user = "anyone");
> ----
> 
> 
> 
> -- 
> Richard Russell
> Yellow Goanna P/L
> e: richard@yellowgoanna.com
> m: +61 412 827 805
> f: +61 8 8462 2362
> _______________________________________________
> sunmanagers mailing list
> sunmanagers@sunmanagers.org
> http://www.sunmanagers.org/mailman/listinfo/sunmanagers
> 

-- 
-- 
Richard Russell
Yellow Goanna P/L
e: richard@yellowgoanna.com
m: +61 412 827 805
f: +61 8 8462 2362
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers