Re: [viewvc-users] path-authorization

"C. Michael Pilato" <[email protected]> Fri, 11 Oct 2013 11:29:47 -0400
Newsgroups gmane.comp.version-control.cvs.viewcvs.user
Message-ID <[email protected]>
On 10/11/2013 10:15 AM, Ryan Milton wrote:
> Hi, I use viewvc to view rancid cvs files. I’m not a coder, but I want
> to create some kind of authorization when I access the web page. The
> FAQs describe path-based authorization using subversion’s authz-file
> mechanism… but I use cvs files…is there a way to still make this work?

Ryan, if all you want to do is prevent folks from accessing ViewVC
unless they have a username and password, then what you need is really
just to put some Apache authentication in place.  This won't require
changes to your Rancid or ViewVC configurations at all.

For example, if your ViewVC is being served up from /viewvc on your
website (http://www.example.com/viewvc), then in your httpd.conf file,
you'll want to do something like this (ignore the {{{ and }}}):

{{{
<Location /viewvc>
    AuthType basic
    AuthName "ViewVC login"
    AuthUserFile /some/path/to/htpasswd  # CHANGME
    Require valid-user
    Satisfy any
</Location>
}}}

Then, use the htpasswd tool to create and maintain the file specified by
AuthUserFile above, which will contain usernames and passwords that
folks visiting your ViewVC will have to provide.

Of course, Apache supports a whole suite of other authentication
offerings -- I've only shown you the super simple one.  Just Google
around for "httpd authentication".

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=3066162

To unsubscribe from this discussion, e-mail: [[email protected]].