Re: [greenstone-users] Authentication issue

From Ata ur Rehman
DateWed, 18 Apr 2007 08:46:47 +0500
Subject Re: [greenstone-users] Authentication issue
In-Reply-To (4624C907-9060505-yale-edu)
Dear Arthur R. Belanger / All

Thanks for response.  I dont know about .htaccess and .htpasswd files.  These files are the part of Apache Server or GSDL?  What will be the syntax of these files and in which directory i have to create these files?

I have four type of collections in my digital library.  Three are open for everybody and only one collection is username/pswd protected

Regards,

Ata

On 4/17/07, Arthur R. Belanger <arthur.belanger@yale.edu> wrote:
Ata,

The Greenstone authentication system only restricts access through the
Greenstone software.  The link to any particular file dows not go
through the GS software but is a standard url although it does point to
a location within the greenstone tree.  The way I would resolve this
kind of problem is to create a .htaccess and .htpasswd file pair in the
assoc directory.  This should allow you to restrict access to users in
the .htpasswd file.  You would have to create this file with the same
usernames and passwords that you used in your auth_group xyz.  This
should work if you are using the Apache webserver and perhaps others
though I do not have experience with them.

Ata ur Rehman wrote:
> Dear All
>
> I would like to draw you attention to a very serious issue that i am
> facing now a days.  I have a collection (say abc).  I have made this
> collection password protected.  When a user click on the link of this
> collection, he has to provide username and password which i have already
> defined at Admin page of my Digital Library.  Now the problem starts
> when some of my users send a link of some PDF file to another user like
>
> http://[IP]/gsdl/collect/abc/index/assoc/HASH01e5/3dcc674e.dir/doc.pdf
>
> It must ask for username/password to access this document, but this link
> opens without authentication.
>
> Is it some bug or I am doing something wrong?
>
> Please guide me
>
> Note: I have made my collection password protected by adding the
> following lines in my collect.cfg file
>
> authenticate collection
> auth_group xyz
>
> Regards,
>
> Ata ur Rehman,
>
> Librarian,
> Akhter Hameed Khan Resource Center (AHKRC),
> NRSP-Institute of Rural Management,
> F-6/4, Islamabad
>
> Ph: +92 51 2822752
>       +92 51 2822792
>
> http://www.ahkrc.net.pk <http://www.ahkrc.net.pk >
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> greenstone-users mailing list
> greenstone-users@list.scms.waikato.ac.nz
> https://list.scms.waikato.ac.nz/mailman/listinfo/greenstone-users

--
Arthur Belanger
Medical Library System Manager
Academic Media & Technology
ITS
Yale University
100 Church Street South, Suite 107
Mailcode 138
New Haven, CT  06519

(203) 785-6928
(203) 737-2859, fax

mailto:Arthur.Belanger@Yale.Edu
http://www.yale.edu/acs
http://info.med.yale.edu/library