PiBox » piboxwww

References

• https://redmine.lighttpd.net/projects/lighttpd/repository
• https://redmine.lighttpd.net/projects/lighttpd/wiki/docs

Configuring htdigest

• Generate pw file: htdigest -c /etc/lighttpd/.passwd 'Authorized users only' tom
  • htdigest is in apache so we don't have that.
  • Generate with openssl (requires adding binary to Buildroot-Target Packages-Libraries-openssl)
    

    $ echo "password" | openssl passwd -apr1 -stdin
    $apr1$r8mlIRyv$B7xsBRVCUyMnCjfvkR/u./
    
    $ echo  "username:$(echo password | openssl passwd --salt r8mlIRyv -apr1 -stdin)" 
    username:$apr1$r8mlIRyv$B7xsBRVCUyMnCjfvkR/u./
    
    $ echo  "stats:$(echo stats | openssl passwd -apr1 -stdin)" 
    stats:$apr1$iLpPMCo9$j1zviL0K9tL6N7UtBvwcT.
    

  • Generate with md5sum and awk
    

    printf "%s:%s:%s\n" "$user" "$realm" "$(printf "%s" "$user:$realm:$pass" | md5sum | awk '{print $1}')" 
    

• Enable module: server.modules += ( "mod_auth" )
• Add to lighttpd.conf
  

  auth.backend = "htdigest" 
  auth.backend.htdigest.userfile = "/etc/lighttpd/.passwd" 
  auth.debug = 2
  

• pw protect directories
  

  auth.require = ( "/docs/" =>
  (
  "method" => "digest",
  "realm" => "Authorized users only",
  "require" => "valid-user" 
  )
  )