/* Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ /* * Adapted to allow anonymous logins, just like with Anon-FTP, when * one gives the magic user name 'anonymous' and ones email address * as the password. * * Just add the following tokes to your <directory> setup: * * Anonymous magic-userid [magic-userid]... * * Anonymous_MustGiveEmail [ on | off ] default = on * Anonymous_LogEmail [ on | off ] default = on * Anonymous_VerifyEmail [ on | off ] default = off * Anonymous_NoUserId [ on | off ] default = off * * The magic user id is something like 'anonymous', it is NOT case sensitive. * * The MustGiveEmail flag can be used to force users to enter something * in the password field (like an email address). Default is on. * * Furthermore the 'NoUserID' flag can be set to allow completely empty * usernames in as well; this can be is convenient as a single return * in broken GUIs like W95 is often given by the user. The Default is off. * * Dirk.vanGulik@jrc.it; http://ewse.ceo.org; http://me-www.jrc.it/~dirkx * */ #include "apr_strings.h" #define APR_WANT_STRFUNC #include "apr_want.h" #include "ap_provider.h" #include "httpd.h" #include "http_config.h" #include "http_core.h" #include "http_log.h" #include "http_request.h" #include "http_protocol.h" #include "mod_auth.h" typedef struct anon_auth_user { char *user; struct anon_auth_user *next; } anon_auth_user; typedef struct { anon_auth_user *users; int nouserid; int logemail; int verifyemail; int mustemail; int anyuserid; } authn_anon_config_rec; static void *create_authn_anon_dir_config(apr_pool_t *p, char *d) { authn_anon_config_rec *conf = apr_palloc(p, sizeof(*conf)); /* just to illustrate the defaults really. */ conf->users = NULL; conf->nouserid = 0; conf->anyuserid = 0; conf->logemail = 1; conf->verifyemail = 0; conf->mustemail = 1; return conf; } static const char *anon_set_string_slots(cmd_parms *cmd, void *my_config, const char *arg) { authn_anon_config_rec *conf = my_config; anon_auth_user *first; if (!*arg) { return "Anonymous string cannot be empty, use Anonymous_NoUserId"; } /* squeeze in a record */ if (!conf->anyuserid) { if (!strcmp(arg, "*")) { conf->anyuserid = 1; } else { first = conf->users; conf->users = apr_palloc(cmd->pool, sizeof(*conf->users)); conf->users->user = apr_pstrdup(cmd->pool, arg); conf->users->next = first; } } return NULL; } static const command_rec authn_anon_cmds[] = { AP_INIT_ITERATE("Anonymous", anon_set_string_slots, NULL, OR_AUTHCFG, "a space-separated list of user IDs"), AP_INIT_FLAG("Anonymous_MustGiveEmail", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_anon_config_rec, mustemail), OR_AUTHCFG, "Limited to 'on' or 'off'"), AP_INIT_FLAG("Anonymous_NoUserId", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_anon_config_rec, nouserid), OR_AUTHCFG, "Limited to 'on' or 'off'"), AP_INIT_FLAG("Anonymous_VerifyEmail", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_anon_config_rec, verifyemail), OR_AUTHCFG, "Limited to 'on' or 'off'"), AP_INIT_FLAG("Anonymous_LogEmail", ap_set_flag_slot, (void *)APR_OFFSETOF(authn_anon_config_rec, logemail), OR_AUTHCFG, "Limited to 'on' or 'off'"), {NULL} }; module AP_MODULE_DECLARE_DATA authn_anon_module; static authn_status check_anonymous(request_rec *r, const char *user, const char *sent_pw) { authn_anon_config_rec *conf = ap_get_module_config(r->per_dir_config, &authn_anon_module); authn_status res = AUTH_USER_NOT_FOUND; /* Ignore if we are not configured */ if (!conf->users && !conf->anyuserid) { return AUTH_USER_NOT_FOUND; } /* Do we allow an empty userID and/or is it the magic one */ if (!*user) { if (conf->nouserid) { res = AUTH_USER_FOUND; } } else if (conf->anyuserid) { res = AUTH_USER_FOUND; } else { anon_auth_user *p = conf->users; while (p) { if (!strcasecmp(user, p->user)) { res = AUTH_USER_FOUND; break; } p = p->next; } } /* Now if the supplied user-ID was ok, grant access if: * (a) no passwd was sent and no password and no verification * were configured. * (b) password was sent and no verification was configured * (c) verification was configured and the password (sent or not) * looks like an email address */ if ( (res == AUTH_USER_FOUND) && (!conf->mustemail || *sent_pw) && ( !conf->verifyemail || (ap_strchr_c(sent_pw, '@') && ap_strchr_c(sent_pw, '.')))) { if (conf->logemail && ap_is_initial_req(r)) { ap_log_rerror(APLOG_MARK, APLOG_INFO, APR_SUCCESS, r, "Anonymous: Passwd <%s> Accepted", sent_pw ? sent_pw : "\'none\'"); } return AUTH_GRANTED; } return (res == AUTH_USER_NOT_FOUND ? res : AUTH_DENIED); } static const authn_provider authn_anon_provider = { &check_anonymous, NULL }; static void register_hooks(apr_pool_t *p) { ap_register_provider(p, AUTHN_PROVIDER_GROUP, "anon", "0", &authn_anon_provider); } module AP_MODULE_DECLARE_DATA authn_anon_module = { STANDARD20_MODULE_STUFF, create_authn_anon_dir_config, /* dir config creater */ NULL, /* dir merger ensure strictness */ NULL, /* server config */ NULL, /* merge server config */ authn_anon_cmds, /* command apr_table_t */ register_hooks /* register hooks */ };
.htaccess Tutorial
Find information you are looking for on the AskApache Home Page.