[Xitami] How to protect a cgi-bin subdirectory?

[Francis Turner]

Michael Pierce wrote:

>Version: 2.5b5
>
>I'm trying to figure our how to password protect a sub directory of cgi-bin.
>For example,
>I want "/cgi-bin/music" to be protected so that only trusted users can run
>the scripts
>in there.  Adding the following:
>   [/cgi-bin/music]
>         friendly = "users"
>
>To defaults.aut does not do it. I am not prompted for a password when runing
>those scripts.
>

Another of these annoying 'it works for me' people I'm afraid

In my defaults.cfg I have (amongst other things)
[Security]
    Filename = "defaults.aut"

And in defaults.aut I have (amongst other things)
[/cgi-bin/exec]
    user = "password"

Works on 2.5b5 both as localhost and to a remote server

You can even add the Webmask = <ipaddresslist> line if you want to only 
let certain scripts be run by known IP addresses. One thing I have 
noticed is that browsers often remain 'logged in' for a long time so you 
can only retest by closing the browser and restarting then you get the 
login prompt.

Francis

-- 
...if the US Government were ever to get really serious about Internet 
security, the top players in Microsoft's management hierarchy would find 
themselves handcuffed, blindfolded, led onto a tarmac within some obscure 
Air Force base, and shot.
-- Thomas C Greene (http://www.theregister.co.uk/content/55/23223.html)