From Code to Community: Sponsoring The Perl and Raku Conference 2025 Learn more

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
<head>
<meta name="generator" content="HTML Tidy, see www.w3.org" />
<title>Apache module mod_digest</title>
</head>
<!-- Background white, links blue (unvisited), navy (visited), red (active) -->
<body bgcolor="#FFFFFF" text="#000000" link="#0000FF"
vlink="#000080" alink="#FF0000">
<div align="CENTER">
<img src="../images/sub.gif" alt="[APACHE DOCUMENTATION]" />
<h3>Apache HTTP Server Version 1.3</h3>
</div>
<h1 align="CENTER">Module mod_digest</h1>
<p>This module provides for user authentication using MD5
Digest Authentication.</p>
<p><a href="module-dict.html#Status"
rel="Help"><strong>Status:</strong></a> Extension<br />
<a href="module-dict.html#SourceFile"
rel="Help"><strong>Source File:</strong></a> mod_digest.c<br />
<a href="module-dict.html#ModuleIdentifier"
rel="Help"><strong>Module Identifier:</strong></a>
digest_module<br />
<a href="module-dict.html#Compatibility"
rel="Help"><strong>Compatibility:</strong></a> Available in
Apache 1.1 and later.</p>
<h2>Summary</h2>
<p>This module implements an older version of the MD5 Digest
Authentication specification which will probably not work with
modern browsers. Please see <a
href="mod_auth_digest.html">mod_auth_digest</a> for a module
which implements the most recent version of the standard.</p>
<h2>Directives</h2>
<ul>
<li><a href="#authdigestfile">AuthDigestFile</a></li>
</ul>
<h2>Using Digest Authentication</h2>
<p>Using MD5 Digest authentication is very simple. Simply set
up authentication normally. However, use "AuthType Digest" and
"AuthDigestFile" instead of the normal "AuthType Basic" and
"AuthUserFile". Everything else should remain the same.</p>
<p>MD5 authentication provides a more secure password system,
but only works with supporting browsers. As of this writing
(January 2002), the only major browsers which support digest
authentication are <a href="http://www.opera.com/">Opera 4.0</a>,
<a href="http://www.microsoft.com/windows/ie/">MS Internet
Explorer 5.0</a> and <a href="http://www.w3.org/Amaya/">Amaya</a>.
Therefore, we do not recommend using this feature on a large
Internet site. However, for personal and intra-net use, where
browser users can be controlled, it is ideal.</p>
<p>See also <a href="mod_auth_digest.html">mod_auth_digest</a>,
which is an updated version of this module, in order to determine
whether you want to use that module instead. In either case, if
you are using one, you should not use the other, as they share
some of the same configuration directives.</p>
<hr />
<h2><a id="authdigestfile"
name="authdigestfile">AuthDigestFile</a> directive</h2>
<a href="directive-dict.html#Syntax"
rel="Help"><strong>Syntax:</strong></a> AuthDigestFile
<em>filename</em><br />
<a href="directive-dict.html#Context"
rel="Help"><strong>Context:</strong></a> directory,
.htaccess<br />
<a href="directive-dict.html#Override"
rel="Help"><strong>Override:</strong></a> AuthConfig<br />
<a href="directive-dict.html#Status"
rel="Help"><strong>Status:</strong></a> Base<br />
<a href="directive-dict.html#Module"
rel="Help"><strong>Module:</strong></a> mod_digest
<p>The AuthDigestFile directive sets the name of a textual file
containing the list of users and encoded passwords for digest
authentication. <em>Filename</em> is the absolute path to the
user file.</p>
<p>Example</p>
<code>AuthDigestFile /usr/local/apache/passwords/passwords.digest</code>
<p>The digest file uses a special format. Files in this format
can be created using the "<a href="../programs/htdigest.html">htdigest</a>"
utility found in the support/ subdirectory of the Apache distribution.</p>
<hr />
<h3 align="CENTER">Apache HTTP Server Version 1.3</h3>
<a href="./"><img src="../images/index.gif" alt="Index" /></a>
<a href="../"><img src="../images/home.gif" alt="Home" /></a>
</body>
</html>