Awstats password protection

[ghislain]

sorry i did not real 100% of this thread but awstats is just a page served by apache.

So why not use the directory protection module allready in ispcp and add a group 'awstats' to the protected directory setup and make a default user awstats/awstats ?

then by default you require a user in this group and this is done without mod perl of strange other dependancies , am i missleaded ?

regards,
Ghislain.

[Eminos]

I really like Cube's solution:
http://www.isp-control.net/forum/awstats...l#pid23110

It's simple, and it gives us an integrated solution that can be enhanced. Sound great to me. And it seems simple to realize as well

/E

[Eminos]

Hi guys!

I just found this. Would it work for the awstats protection?

http://packages.dotdeb.org/dists/etch/li...uth-mysql/

/E

[Cube]

But it's not officially available for Etch (and perhaps for other distros also).

[rauschr]

inserted into a .htaccess file

where is this file?

[code] PerlModule My::Auth

<Location /private>
PerlAccessHandler My::Auth::access_handler
...

[momo]

Is there any way to use BeNe solution + passing a variable path to AuthUserFile.

Preventing different user to log in others websites accounts.

[rycardo74]

Hello people I have god news ,Im found a solution for Awstats password protection simple on debian etch.

1- open a terminal of your machine


2- download libapache2-mod-auth-mysql from my site
# wget http://www.auyama.it/cfh.php?file=libapa...1_i386.deb


3- check the content of package (for security reasons)

#dpkg -I mysqlmod/libapache2-mod-auth-mysql_4.3.9-3.dotdeb.1_i386.deb
#dpkg -c mysqlmod/libapache2-mod-auth-mysql_4.3.9-3.dotdeb.1_i386.deb

4- install the package
#dpkg -i mysqlmod/libapache2-mod-auth-mysql_4.3.9-3.dotdeb.1_i386.deb

5 enable the module

#a2enmod auth_mysql

6- Restart apache
#/etc/init.d/apache2 restart

7- check if libapache2-mod-auth-mysql

apache2ctl -t -D DUMP_MODULES

this command give you alist of all modules enable
check if "auth_mysql_module (shared)" is present

8- now you have to enable the auth on your awstats apache2 config

9- edit this file "/etc/apache2/sites-enabled/01_awstats.conf with you"
prefer editor I'm use "#vi /path/filename"

and add this lines in top of the file

Code:

AuthMySQL_DefaultHost hostmane
AuthMySQL_DefaultUser mysqluser
AuthMySQL_DefaultPassword mysqlpassword

and this lines

Code:

AuthName        "AWStats auth"
AuthType        Basic
AuthUserFile /dev/null
AuthBasicAuthoritative Off
AuthMySQL_Host  localhost
AuthMySQL_DB    ispcp
AuthMySQL_Password_Table        admin
AuthMySQL_Username_Field        admin_name
AuthMySQL_Password_Field        admin_pass
AuthMySQL_Encryption_Types      PHP_MD5
<Limit POST GET >
require valid-user
</Limit>

between

Directory tags

"<Directory /usr/lib/cgi-bin></Directory>"

better if at the end

10- Restart apache
#/etc/init.d/apache2 restart

11- and enjoy!!!

[BeNe]

Fine - thanks!
Is there also a 64-Bit Version availabe ?
The problem is that it cant be installed with apt-get and is not available on other Linux distros. But in the Debian case it looks ok.

Greez BeNe

[Eminos]

BeNe Wrote:The problem is that it cant be installed with apt-get...

Yes you can if you add the dotdeb repository to apt sources first.

/E

[Cube]

I have not tested this yet, but I think it is still necessary to modify the awstats-configs (AllowAccessFromWebToAuthenticatedUsersOnly / AllowAccessFromWebToFollowingAuthenticatedUsers) to avoid that the users can access their stats one another.