Apache Module mod_autoindex Description: Generates directory indexes, automatically, similar to the Unix ls command or the Win32 dir shell command Status: Base ModuleIdentifier: autoindex_module SourceFile: mod_autoindex.c Summary The index of a directory can come from one of two sources: A file located in that directory, typically called index.html. The DirectoryIndex directive sets the name of the file or files to be used. This is controlled by mod_dir. Otherwise, a listing generated by th

Apache Module mod_auth_form Description: Form authentication Status: Base ModuleIdentifier: auth_form_module SourceFile: mod_auth_form.c Compatibility: Available in Apache 2.3 and later Summary Warning Form authentication depends on the mod_session modules, and these modules make use of HTTP cookies, and as such can fall victim to Cross Site Scripting attacks, or expose potentially private information to clients. Please ensure that the relevant risks have been taken into account before enab

Apache Module mod_auth_digest Description: User authentication using MD5 Digest Authentication Status: Extension ModuleIdentifier: auth_digest_module SourceFile: mod_auth_digest.c Summary This module implements HTTP Digest Authentication (RFC2617), and provides an alternative to mod_auth_basic where the password is not transmitted as cleartext. However, this does not lead to a significant security advantage over basic authentication. On the other hand, the password storage on the server is m

Apache Module mod_auth_basic Description: Basic HTTP authentication Status: Base ModuleIdentifier: auth_basic_module SourceFile: mod_auth_basic.c Compatibility: Available in Apache 2.1 and later Summary This module allows the use of HTTP Basic Authentication to restrict access by looking up users in the given providers. HTTP Digest Authentication is provided by mod_auth_digest. This module should usually be combined with at least one authentication module such as mod_authn_file and one autho

Apache Module mod_authz_user Description: User Authorization Status: Base ModuleIdentifier: authz_user_module SourceFile: mod_authz_user.c Compatibility: Available in Apache 2.1 and later Summary This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site. mod_authz_user grants access if the authenticated user is listed in a Require user directive. Alternatively Require valid-user can be used to grant access to all s

Apache Module mod_authz_owner Description: Authorization based on file ownership Status: Extension ModuleIdentifier: authz_owner_module SourceFile: mod_authz_owner.c Compatibility: Available in Apache 2.1 and later Summary This module authorizes access to files by comparing the userid used for HTTP authentication (the web userid) with the file-system owner or group of the requested file. The supplied username and password must be already properly verified by an authentication module, such as

Apache Module mod_authz_host Description: Group authorizations based on host (name or IP address) Status: Base ModuleIdentifier: authz_host_module SourceFile: mod_authz_host.c Compatibility: The forward-dns provider was addded in 2.4.19 Summary The authorization providers implemented by mod_authz_host are registered using the Require directive. The directive can be referenced within a <Directory>, <Files>, or <Location> section as well as .htaccess files to control access t

Apache Module mod_authz_groupfile Description: Group authorization using plaintext files Status: Base ModuleIdentifier: authz_groupfile_module SourceFile: mod_authz_groupfile.c Compatibility: Available in Apache 2.1 and later Summary This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site by group membership. Similar functionality is provided by mod_authz_dbm. The Require Directives Apache's Require directive

Apache Module mod_authz_dbm Description: Group authorization using DBM files Status: Extension ModuleIdentifier: authz_dbm_module SourceFile: mod_authz_dbm.c Compatibility: Available in Apache 2.1 and later Summary This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site by group membership. Similar functionality is provided by mod_authz_groupfile. The Require Directives Apache's Require directives are used du

Apache Module mod_authz_dbd Description: Group Authorization and Login using SQL Status: Extension ModuleIdentifier: authz_dbd_module SourceFile: mod_authz_dbd.c Compatibility: Available in Apache 2.4 and later Summary This module provides authorization capabilities so that authenticated users can be allowed or denied access to portions of the web site by group membership. Similar functionality is provided by mod_authz_groupfile and mod_authz_dbm, with the exception that this module queries