summaryrefslogtreecommitdiffstats
path: root/docs/manual/mod/mod_authn_dbm.xml
diff options
context:
space:
mode:
authorAndré Malo <nd@apache.org>2002-12-12 08:02:57 +0100
committerAndré Malo <nd@apache.org>2002-12-12 08:02:57 +0100
commitfa4d5df0da8f6f785ef5bdcf629028c19dbdfd5c (patch)
tree06fa6fd201767727f69b5b3a8e8c65c34efab815 /docs/manual/mod/mod_authn_dbm.xml
parentfurther markups (diff)
downloadapache2-fa4d5df0da8f6f785ef5bdcf629028c19dbdfd5c.tar.xz
apache2-fa4d5df0da8f6f785ef5bdcf629028c19dbdfd5c.zip
reformatting, markup and picking nits
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97890 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'docs/manual/mod/mod_authn_dbm.xml')
-rw-r--r--docs/manual/mod/mod_authn_dbm.xml17
1 files changed, 9 insertions, 8 deletions
diff --git a/docs/manual/mod/mod_authn_dbm.xml b/docs/manual/mod/mod_authn_dbm.xml
index f79b615a3c..c9be2eafab 100644
--- a/docs/manual/mod/mod_authn_dbm.xml
+++ b/docs/manual/mod/mod_authn_dbm.xml
@@ -49,15 +49,16 @@ passwords for authentication</description>
the user file.</p>
<p>The user file is keyed on the username. The value for a user is
- the <code>crypt()</code> encrypted password, optionally followed
- by a colon and arbitrary data. The colon and the data following it
- will be ignored by the server.</p>
+ the encrypted password, optionally followed by a colon and arbitrary
+ data. The colon and the data following it will be ignored by the
+ server.</p>
- <p>Security: make sure that the
- <directive>AuthDBMUserFile</directive> is stored outside the
- document tree of the web-server; do <em>not</em> put it in the
- directory that it protects. Otherwise, clients will be able to
- download the <directive>AuthDBMUserFile</directive>.</p>
+ <note type="warning"><title>Security:</title>
+ <p>Make sure that the <directive>AuthDBMUserFile</directive> is stored
+ outside the document tree of the web-server; do <em>not</em> put it in
+ the directory that it protects. Otherwise, clients will be able to
+ download the <directive>AuthDBMUserFile</directive>.</p>
+ </note>
<p>Important compatibility note: The implementation of
<code>dbmopen</code> in the apache modules reads the string length of