From owner-freebsd-isp Fri Apr 20 11: 4:45 2001 Delivered-To: freebsd-isp@freebsd.org Received: from gifw.genroco.com (genroco.com [205.254.195.202]) by hub.freebsd.org (Postfix) with ESMTP id BE80437B423 for ; Fri, 20 Apr 2001 11:04:41 -0700 (PDT) (envelope-from hetzels@westbend.net) Received: from gi2.genroco.com (IDENT:root@gi2.genroco.com [192.133.120.3]) by gifw.genroco.com (8.9.3/8.9.3) with ESMTP id MAA26587; Fri, 20 Apr 2001 12:04:25 -0500 Received: from d2e (d2e.genroco.com [192.133.120.8]) by gi2.genroco.com (8.9.3/8.9.3) with SMTP id NAA13870; Fri, 20 Apr 2001 13:04:44 -0500 Message-ID: <015501c0c9c4$44a45fd0$087885c0@GENROCO.com> From: "Scot W. Hetzel" To: "Apu" , "seti" Cc: References: Subject: Re: FrontPage Extensions Authentication Date: Fri, 20 Apr 2001 13:03:49 -0500 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org From: "Apu" > On Fri, 20 Apr 2001, seti wrote: > > > which all went off without a hitch. However when using the Frontpage > > 98/2000/XP client to access the FP enabled web, it simply does not ask me > > for any username and password, but instead allows me anonymously to > > edit/publish the webpage, from various workstations. My workaround has been > > You need to AllowOverride AuthConfig so Apache can process the > authentication configuration information in the .htaccess files. (The > extensions actually ask for AllowOverride All but you can get away with > giving out less to the individual .htaccess files -- you really need more > than just AuthConfig but I don't recall exactly.) > This is the minimum settings that you need to specify in order for the FP Exts to function securely on a FP enabled website. AllowOverride AuthConfig Limit Indexes Options To increase the security of the FP enabled website, you should restrict from where a FP Author/Administrator can access the FP enabled website. These restrictions can be defined thru the FP Client. Scot To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message