NAME

Apache::AuthenFTP - Authentication via an FTP server

SYNOPSIS

# Configuration in httpd.conf

PerlModule Apache::AuthenFTP

# Authentication in .htaccess

AuthName FTP User Authentication
AuthType Basic

# authenticate via FTP
PerlAuthenHandler Apache::AuthenFTP

# PerlSetVar Auth_FTP_host localhost
PerlSetVar Auth_FTP_host do.ma.in
# PerlSetVar Auth_FTP_port 21
PerlSetVar Auth_FTP_port 2003

require user fred

The AuthType is limited to Basic.

DESCRIPTION

This module allows authentication against servers that implement the FTP authentication protocol (simple gateways that don't implement all of the FTP protocol will suffice).

AuthenFTP relies on the Net::FTP module to do the real work.

LIST OF TOKENS

  • Auth_FTP_host

    The FTP server host: either its name or its dotted quad IP number. This parameter defaults to "localhost" -- the loopback interface to the same system.

  • Auth_FTP_port

    The port on which the FTP server is listening: either its service name or its actual port number. This parameter defaults to "ftp" which is the official service name for FTP servers.

BEWARE

The FTP protocol is very simple -- passwords are passed in the clear and may be snooped on insecure networks. Using the FTP service on the localhost is secure as there is no network data to be snooped.

An anonymous FTP server will let authenticate users "anonymous" and "ftp" with virtually any password -- this module will not attempt to authenticate either of those users. Many FTP servers restrict user access based on the user's login shell (see /etc/shells) and/or exclusion lists (see /etc/ftpusers).

AUTHORS

This module Apache::AuthenFTP by Reg Quinton <reggers@ist.uwaterloo.ca> using strategy of AuthenIMAP by Malcolm Beattie.

COPYRIGHT

The Apache::AuthenFTP module is free software; you can redistribute it and/or modify it under the same terms as Perl itself.