Beside the connection handler set for the rule, there are other parameters that can be set in order to customize the rule behavior.
This configuration entry determines that the directory will be served by the secure server (https) only.
If you access directory /admin or any sub-directory, throught non-secure connection Cherokee will report a 426 Upgrade Required error.
This parameter lets you set up rules form allow access to the directory contents to some IP or IP ranges. The remote client IP will be checked with all the provided list and only if the IP matches with some of the rules the access will be allowed.
There are three possible entry types:
In the two cases, both IPv4 and IPv6 addresses are valid.
Allow access only from the IPv6 localhost address:
Allow from ::1
Allow access from the 127.0.0.0/8 network:
Allow from 127.0.0.0/8
or it could also we written like:
Allow from 127.0.0.0/255.0.0.0
It is also possible to use lists instead of a single IP or network range. And ir is also possible to mix IPv4 and IPv6 addresses and networks if you want:
Allow from 192.168.0.0/16, ::1, 10.0.0.1, 3ffe:3200::/24
This parameter allows to configure user/password protected entries. A validator has to be used in each Auth entry in order to specify the validaton mechanism. The following validators are available:
htdigest - Htdigest
Uses something to perform HTTP authentication.
htpasswd - Htpasswd
Uses something to perform HTTP authentication.
ldap - LDAP Authentication
Uses an LDAP directory to perform HTTP authentication.
mysql - MySQL Authentication
Uses a MySQL database to perform HTTP authentication.
pam - PAM Authentication
Uses PAM to perform HTTP authentication.
plain - Plain Flat File Authentication
Uses a plain flat file to perform HTTP authentication.
It is important to take into consideration there are two different authentication mechanisms:
The are some validators that, by limitations for the technology can only handle one of those mechanisms. In the case the module supports both of them, the interface allow to choose whether you can it to use only one of them, or whether both can be used.