Forum Discussion

Altera_Forum's avatar
Altera_Forum
Icon for Honored Contributor rankHonored Contributor
15 years ago

the BOA in nios2-linux-20100621.tar tarball can not support LOGIN?

I used the old tarball ,the boa could support the authorization LOGIN by setting like this:

Auth /cgi-bin/cgi_demo /etc/config/config

in the boa.conf file.

but when I changed to nios2-linux-20100621.tar tarball(in uClinux branch) ,the BOA can not support authorization function by setting in boa.conf

well ,how can I make it support authorization?

thanks.

6 Replies

  • Altera_Forum's avatar
    Altera_Forum
    Icon for Honored Contributor rankHonored Contributor
    14 years ago

    Have you solved the problem?

    I am also stuck on this topic.

    The error message is 
    Did not find keyword "Auth"
    In the boa.conf in the directory /etc which is generated from 'uClinux-dist/vendors/Altera/nios2' i wrote the line 
    Auth /home/httpd/ /etc/passwd
    The passwd file is in this directory so it is also copied through the image creation process.

    I also tried to set the Authorization in the boa.conf which is located on the board in the directory '/home/httpd/' and generated from 'uClinux-dist/vendors/Generic/httpd'.

    Urmel
  • Altera_Forum's avatar
    Altera_Forum
    Icon for Honored Contributor rankHonored Contributor
    14 years ago

    You have to apply boa authorization patch. I apply this patch. Now boa can parse Auth field. But I still have access to all html pages. If you still want to develop boa webserver you can contact with me. Maybe we can cooperate. My mail urasinov_a_inbox_._ru. Remove underlines

  • Altera_Forum's avatar
    Altera_Forum
    Icon for Honored Contributor rankHonored Contributor
    14 years ago

    Hi Urmel.

    I also use 0.94.14rc21. You can download patch, but I can not put url here, because I have not enough posts.

    I applied this patch, but I didn't understand how to use it. Now boa can read config file, and parse Auth string.

    As I understood I have to try open html page like this /~root/index.html

    Where ~ it is virtual path to folder with authentication. I try it, but boa doesn't ask me login and password. I can open all pages.

    Now I develop my custom authorization. But In my version if single user enter to site, all other user can enter to site without login and pass. In future I have to add checking of browser information and other.

    Urmel, I can not send private message to you, because I have less than 10 posts.
  • Altera_Forum's avatar
    Altera_Forum
    Icon for Honored Contributor rankHonored Contributor
    14 years ago

    Hi Uriy,

    that's exactly the problem I am facing, too. I also edited the boa source files from rc21 version to match the authentication in the rc19 patch file.

    The compilation is successful and boa now doesn't mind when using the 'Auth' command but there is still no change. Every page even the one in the cgi-bin directory which i forbid in the configuration file is accessible.

    I also tried using the original boa rc19 source and the patch file. But I couldn't port it to Nios uClinux.

    Urmel
  • Altera_Forum's avatar
    Altera_Forum
    Icon for Honored Contributor rankHonored Contributor
    14 years ago

    Hi Uriy, if you are still interested in authentication with boa i finally made it working. I used the the boa 0.94.14rc19 version configured it for Nios2 and added the authentication patch in the same version.

    Perhaps I will also try to patch the rc21 version later. If you need the modified boa source code let me know and i will upload it here.

    EDIT: Now the rc21 version also works. The trick was just deleting the old object files. So when building the image boa is compiled with the new settings.

    Urmel
  • Altera_Forum's avatar
    Altera_Forum
    Icon for Honored Contributor rankHonored Contributor
    14 years ago

    Thank you. I already complete development authorization with my custom html page. I don't use basic authorization. If user is not authorized boa alway send for him index.html page. This page has only input form for login and password. If user fill correct log and pas boa can send for him requested html page.