<p>The <code class="directive">AuthGroupFile</code> directive sets the
name of a textual file containing the list of user groups for user
authorization. <var>File-path</var> is the path to the group
file. If it is not absolute, it is treated as relative to the <code class="directive"><a href="../mod/core.html#serverroot">ServerRoot</a></code>.</p>
<p>Each line of the group file contains a groupname followed by a
colon, followed by the member usernames separated by spaces.</p>
<div class="example"><h3>Example:</h3><p><code>
mygroup: bob joe anne
</code></p></div>
<p>Note that searching large text files is <em>very</em>
inefficient; <code class="directive"><a href="../mod/mod_authz_dbm.html#authdbmgroupfile">AuthDBMGroupFile</a></code> provides a much better performance.</p>
<div class="warning"><h3>Security</h3>
<p>Make sure that the <code class="directive">AuthGroupFile</code> is
stored outside the document tree of the web-server; do <em>not</em>
put it in the directory that it protects. Otherwise, clients may
be able to download the <code class="directive">AuthGroupFile</code>.</p>
<p>Setting the <code class="directive">AuthzGroupFileAuthoritative</code>
directive explicitly to <code>Off</code> allows for
group authorization to be passed on to lower level modules (as defined
in the <code>modules.c</code> files) if there is <strong>no
group</strong> matching the supplied userID.</p>
<p>By default, control is not passed on and an unknown group
will result in an Authentication Required reply. Not
setting it thus keeps the system secure and forces an NCSA
compliant behaviour.</p>
<div class="warning"><h3>Security</h3>
<p>Do consider the implications of allowing a user to
allow fall-through in his <code>.htaccess</code> file; and verify
that this is really what you want; Generally it is easier to just
secure a single <code>.htpasswd</code> file, than it is to secure
a database which might have more access interfaces.</p>
</div>
</div>
</div>
<div class="bottomlang">
<p><span>Available Languages: </span><a href="../en/mod/mod_authz_groupfile.html" title="English"> en </a> |
<a href="../ja/mod/mod_authz_groupfile.html" hreflang="ja" rel="alternate" title="Japanese"> ja </a> |
<a href="../ko/mod/mod_authz_groupfile.html" hreflang="ko" rel="alternate" title="Korean"> ko </a></p>
</div><div id="footer">
<p class="apache">Copyright 1995-2006 The Apache Software Foundation or its licensors, as applicable.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>