Grove

Gatorlink Authentication in your .htaccess File

Optional Directives In Your .htaccess File

Grove

GatorLink Authentication in your .htaccess file

If you want to use GatorLink for authentication, the .htaccess file will need an AuthType specification of "GatorLink". In addition, authorization control needs to be specified as well. Use the following lines in your .htaccess file to restrict access to your web pages to GatorLink usernames only. 


	AuthName MySite
	AuthType GatorLink

	require valid-user

In the next example, the owner can restrict access to only certain GatorLink usernames. 


	AuthName MySite
	AuthType GatorLink

	require user alligator alberta

GatorLink access control adding group information

If you are interested in setting up group associations, you need to create an additional file, allmygroupsfile, to hold your group names and their associated GatorLink usernames. No information in the allmygroupsfile is encrypted. Again for security reasons, it is important not to place this file in the public_html directory or its subdirectories. The path to your file allmygroupsfile generally would be located in the home directory of your account.

Additional information needed in your .htaccess file:
The location of the group file. 

	AuthGroupFile /home/MySite/allmygroupsfile

And then the require statement should look like this: 

	require group singers drummers

Using quotes in AuthName "Computer classes"

AuthName strings MUST be quoted in .htaccess if they contain blank characters (like spaces). For example, if you use an AuthName directive like this: 

       	AuthName This and That
	you will need to change it to: 
 	AuthName "This and That"

Optional Directives For Your .htaccess File

        GatorLinkTimeout - timeout in minutes before "idle"
        GatorLinkCookieLife - lifetime of temporary cookie
        GatorLinkLogin - specifies the URL for a login page.
        GatorLinkAuth - specifies a URL for authorization failures.
        GatorLinkError - specifies a URL for GatorLink server failures.

If you are interested in further information on security on the apache web server refer to apache.org.