Limiting Access

This document is incomplete.

There are a two basic ways to password-protect web pages on the CS web servers. If you want to require logins using a CSID, and possibly limit it to a specific set of CSIDs, then use WebAuth. If you need to setup a shared password, or provide access to people without CSIDs, use Apache BasicAuth.

WebAuth

Please contact action@cs.stanford.edu to discuss this option.

Apache BasicAuth

In the directory you want to limit access to, create a .htaccess file similar to the following:

 AuthUserFile /afs/cs.stanford.edu/u/mycsid/.htpasswd
 AuthGroupFile /dev/null
 AuthName "By Secret Password Only"
 AuthType Basic

 <Limit GET>
  order deny,allow
  require valid-user
  # or require user <csid>
 </Limit>

Then create the password file by running

 htpasswd -cb /afs/cs.stanford.edu/u/mycsid/.htpasswd <user> <password>