help excluding 1 user from secure apache

[Ron Peterson]

Christoph Doerbeck A242369 wrote:
> 
> greetings,
> 
> I have a apache web server which allows anyone with a valid system
> userid & passwd to access.  Now I need to exclude a project development
> account.
> 
> I.E: allow joe, john, jerry access to server
>      deny  projectX
> 
> all accounts are valid and have passwords in /etc/passwd.  How can
> I prevent ProjectX from logging into the web server.

How are you doing your authentication?  Are you authenticating against
/etc/passwd?  Bad idea, see:

http://www.apache.org/docs/misc/FAQ.html#passwdauth

If you're using AuthUserFile, of course, you can create any user list
you like.

Ron Peterson
rpeterson at yellowbank.com
-
Subcription/unsubscription/info requests: send e-mail with
"subscribe", "unsubscribe", or "info" on the first line of the
message body to discuss-request at blu.org (Subject line is ignored).