{"id":6369,"date":"2011-05-31T08:00:36","date_gmt":"2011-05-30T23:00:36","guid":{"rendered":"http:\/\/www.sssg.org\/blogs\/hiro345\/?p=6369"},"modified":"2011-05-25T21:20:59","modified_gmt":"2011-05-25T12:20:59","slug":"apache-basic%e8%aa%8d%e8%a8%bc%e3%81%abmtos%e3%81%ae%e8%aa%8d%e8%a8%bc%e6%83%85%e5%a0%b1%e3%82%92%e5%88%a9%e7%94%a8","status":"publish","type":"post","link":"https:\/\/www.hiro345.net\/blogs\/hiro345\/archives\/6369.html","title":{"rendered":"Apache BASIC\u8a8d\u8a3c\u306bMTOS\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5229\u7528"},"content":{"rendered":"

MTOS\u306fcrypt\u95a2\u6570\u3092\u4f7f\u3063\u3066\u3001\u8a8d\u8a3c\u60c5\u5831\u3092DB\u3078\u683c\u7d0d\u3057\u3066\u3044\u308b\u306e\u3067\u3001Apache BASIC\u8a8d\u8a3c\u306bMTOS\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5229\u7528\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n


\nCentOS\u3067\u78ba\u8a8d\u3092\u3057\u3066\u3044\u307e\u3059\u3002Apache HTTP Server (httpd), MySQL\u306frpm\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3001MTOS\u306fMTOS\u306e\u30b5\u30a4\u30c8\u304b\u3089\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u3066\u304d\u3066\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6e08\u307f\u3060\u3068\u3057\u307e\u3059\u3002\u6700\u521d\u306b mod_auth_mysql\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u3057\u307e\u3059\u3002<\/p>\n

$ sudo yum install mod_auth_mysql\n<\/div>\n

\u8a8d\u8a3c\u3092\u304b\u3051\u308b\u9818\u57df\u3092\u7528\u610f\u3057\u307e\u3059\u3002index.html\u306e\u5185\u5bb9\u306f\u533a\u5225\u3064\u304f\u6587\u5b57\u5217\u3092\u3044\u308c\u3066\u304a\u3051\u3070\u3088\u3044\u3067\u3057\u3087\u3046\u3002<\/p>\n

$ sudo mkdir -p /var/www/auth_mysql/basic/
\n$ sudo mkdir /var/www/auth_mysql/mt/
\n$ sudo vi /var/www/auth_mysql/basic/index.html
\n$ sudo vi /var/www/auth_mysql/mt/index.html
\n$ sudo vi /var/www/auth_mysql/index.html
\n$ sudo chown -R apache:apache /var/www/auth_mysql/
\n$ sudo chcon -R user_u:object_r:httpd_sys_content_t /var/www/auth_mysql/\n<\/div>\n

\u52d5\u4f5c\u78ba\u8a8d\u7528\u306bbasic\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u7528\u610f\u3057\u307e\u3059\u3002\u307e\u305f\u3053\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u30d5\u30a1\u30a4\u30eb\u3092\u7528\u610f\u3057\u307e\u3059\u304c\u3001\u3053\u3053\u3067\u306fSQL\u6587\u3092\u8a18\u8ff0\u3057\u305f\u30c6\u30ad\u30b9\u30c8\u30d5\u30a1\u30a4\u30eb\u3092\u7528\u610f\u3057\u307e\u3057\u305f\u3002<\/p>\n

$ sudo vi /var/www/auth_mysql/basic/init.sql
\n$ sudo cat /var/www/auth_mysql/basic/init.sql
\nCREATE DATABASE auth;
\nUSE auth;
\nCREATE TABLE users (
\n  name CHAR(30) NOT NULL,
\n  pass CHAR(20) NOT NULL,
\n  PRIMARY KEY (name)
\n);
\nGRANT SELECT
\n  ON auth.users
\n  TO authtest@localhost
\n  IDENTIFIED BY 'secret';
\nINSERT INTO users VALUES ('testuser', ENCRYPT('testpass'));
\n$ mysql -u root < /var/www/auth_mysql/basic/init.sql\n<\/div>\n

\u78ba\u8a8d\u3092\u3059\u308b\u305f\u3081\u306b\u3001mysql\u30b3\u30de\u30f3\u30c9\u3067\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3001auth \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u30c6\u30fc\u30d6\u30eb\u306a\u3069\u3092\u307f\u307e\u3059\u3002<\/p>\n

$ mysql -u root auth\n<\/div>\n

auth\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u304c\u4f7f\u3048\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u3089\u3001Apache HTTP Server\u306e\u8a2d\u5b9a\u3092\u3057\u307e\u3059\u3002MTOS\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30ebmt-config.cgi\u3092\u307f\u3066DB\u63a5\u7d9a\u60c5\u5831\u78ba\u8a8d\u3057\u3066\u304b\u3089\u3001auth_mysql\u306e\u8a2d\u5b9a\u3092\u3057\u307e\u3059\u3002\u3053\u3053\u3067\u306f\u3001\u30c6\u30b9\u30c8\u7528\u306b\u4f5c\u6210\u3057\u305fauth\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u60c5\u5831\u3092\u4f7f\u3046\u5834\u5408\u3068\u3001MTOS\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u4f7f\u3046\u5834\u5408\uff08MTOS\u306b\u30a2\u30ab\u30a6\u30f3\u30c8\u304c\u3042\u308c\u3070\u826f\u3044\u30d1\u30bf\u30fc\u30f3\u3068\u3001blog_id=1\u306e\u30d6\u30ed\u30b0\u306b\u95a2\u4fc2\u3059\u308b\u30a2\u30ab\u30a6\u30f3\u30c8\u304c\u3042\u308c\u3070\u826f\u3044\u30d1\u30bf\u30fc\u30f3\uff09\u306b\u3064\u3044\u3066\u3001\u3069\u3046\u8a18\u8ff0\u3059\u308c\u3070\u826f\u3044\u304b\u66f8\u3044\u3066\u3042\u308a\u307e\u3059\u3002\u96e3\u3057\u304f\u306a\u3044\u306e\u3067\u898b\u308c\u3070\u5185\u5bb9\u306f\u3059\u3050\u306b\u308f\u304b\u308b\u3067\u3057\u3087\u3046\u3002\u8a2d\u5b9a\u306e\u4e00\u90e8\u306b\u30b3\u30e1\u30f3\u30c8\u884c\u304c\u3042\u308a\u307e\u3059\u304c\u3001\u5099\u5fd8\u9332\u7684\u306b\u66f8\u3044\u3066\u3042\u308b\u3060\u3051\u3067\u3059\u3002\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u6709\u52b9\u306b\u3059\u308c\u3070\u3088\u3044\u3067\u3057\u3087\u3046\u3002<\/p>\n

$ sudo vi /etc/httpd/conf.d/auth_mysql.conf 
\n$ sudo cat /etc/httpd/conf.d/auth_mysql.conf 
\n LoadModule mysql_auth_module modules/mod_auth_mysql.so
\n Alias /auth_mysql/  /var/www/auth_mysql/
\n <Directory /var/www/auth_mysql/basic>
\n     AuthName "MySQL auth"
\n     AuthType Basic
\n     AuthMYSQLEnable on
\n     #AuthMySQLSocket /var/lib/mysql/mysql.sock
\n     #AuthMySQLHost localhost
\n     AuthMySQLUser authtest
\n     AuthMySQLPassword secret
\n     AuthMySQLDB auth
\n     AuthMySQLUserTable users
\n     AuthMySQLNameField name
\n     AuthMySQLPasswordField pass
\n     #AuthMySQLPwEncryption sha1
\n     #AuthMySQLNoPasswd Off
\n     AuthGroupFile /dev/null
\n     require valid-user
\n </Directory>
\n 
\n <Directory /var/www/auth_mysql/mt>
\n     AuthName "MySQL with MT auth"
\n     AuthType Basic
\n     AuthMYSQLEnable on
\n     AuthMySQLUser dbuser
\n     AuthMySQLPassword dbpass
\n     AuthMySQLDB mtos
\n     AuthMySQLUserTable mt_author
\n     AuthMySQLNameField author_name
\n     AuthMySQLPasswordField author_password
\n     AuthMySQLPwEncryption crypt
\n     #AuthMySQLNoPasswd Off
\n     AuthGroupFile /dev/null
\n     require valid-user
\n </Directory>
\n<Directory /var/www/auth_mysql/mtub2>
\n    AuthName "MySQL with MT blog2 authenticated zone"
\n    AuthType Basic
\n    AuthMYSQLEnable on
\n    AuthMySQLUser dbuser
\n    AuthMySQLPassword dbpass
\n    AuthMySQLDB mtos
\n    AuthMySQLUserTable "mt_author, mt_permission"
\n    AuthMySQLNameField author_name
\n    AuthMySQLPasswordField author_password
\n    AuthMySQLUserCondition "mt_permission.permission_blog_id=1 and mt_permission.permission_author_id=mt_author.author_id"
\n    AuthMySQLPwEncryption crypt
\n    #AuthMySQLNoPasswd Off
\n    AuthGroupFile /dev/null
\n    require valid-user
\n</Directory>\n<\/div>\n

\u8a2d\u5b9a\u304c\u3067\u304d\u305f\u3089\u3001httpd\u306e\u8a2d\u5b9a\u3092\u78ba\u8a8d\u3057\u3066\u304b\u3089\u518d\u8d77\u52d5\u3057\u307e\u3059\u3002<\/p>\n

$ sudo /sbin/service httpd configtest
\n$ sudo /sbin/service httpd restart\n<\/div>\n

httpd\u304c\u518d\u8d77\u52d5\u3057\u305f\u3089\u3001\u30d6\u30e9\u30a6\u30b6\u304b\u3089\u300chttp:\/\/localhost\/auth_mysql\/basic\/\u300d\u3084\u300chttp:\/\/localhost\/auth_mysql\/mt\/\u300d\u3078\u30a2\u30af\u30bb\u30b9\u3092\u3057\u3066\u3001\u8a8d\u8a3c\u304c\u5fc5\u8981\u3068\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002testuser\u3068\u3044\u3046\u30a2\u30ab\u30a6\u30f3\u30c8\u3067\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u304ctestpass\u3067\u8a8d\u8a3c\u304c\u3068\u304a\u308b\u306f\u305a\u3067\u3059\u3002<\/p>\n

\u3046\u307e\u304f\u52d5\u4f5c\u3057\u306a\u3044\u3068\u304d\u306f\u3001MySQL\u306e\u30ed\u30b0\u3092\u898b\u307e\u3059\u3002my.cnf\u306emysqld\u30bb\u30af\u30b7\u30e7\u30f3\uff08[mysqld]\uff09\u3078log\u306e\u8a2d\u5b9a\u3092\u8ffd\u52a0\u3057\u3066MySQL\u3092\u518d\u8d77\u52d5\u3057\u3066\u304a\u304f\u3068\u3001\u30af\u30a8\u30ea\u30ed\u30b0\u304c\u51fa\u529b\u3055\u308c\u308b\u306e\u3067\u3001\u554f\u984c\u89e3\u6c7a\u304c\u3057\u3084\u3059\u304f\u306a\u308a\u307e\u3059\u3002log\u3068\u3060\u3051\u66f8\u3044\u305f\u3089\u3001mysqld.log\u306b\u30af\u30a8\u30ea\u7b49\u306e\u30ed\u30b0\u304c\u51fa\u307e\u3059\u3002\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u6307\u5b9a\u3057\u306a\u3051\u308c\u3070\u3001mysql\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u5834\u6240\uff08\/var\/lib\/mysql\/ \u306a\u3069\uff09\u304c\u30c7\u30d5\u30a9\u30eb\u30c8\u51fa\u529b\u5148\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n

\u306a\u304a\u3001AuthMySQLUserTable\u3084AuthMySQLUserCondition\u3078\u3044\u308d\u3044\u308d\u3068\u6307\u5b9a\u3057\u3066\u307f\u308b\u3068\u3001\u3053\u308c\u3089\u304c\u3069\u306e\u3088\u3046\u306bSQL\u6587\u3078\u5f71\u97ff\u3059\u308b\u304b\u898b\u3066\u307f\u308b\u3068\u7406\u89e3\u304c\u6df1\u307e\u308a\u307e\u3059\u3002\u3061\u306a\u307f\u306b\u3001IP\u5236\u9650\u3092\u3059\u308b\u306b\u3042\u305f\u308a\u3001MySQL\u3092\u4f7f\u3046\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u5834\u5408\u306f\u3001AuthMySQLUserCondition \u3078\u300cip_address = '%a'\u300d\u3092\u6307\u5b9a\u3059\u308c\u3070\u826f\u3044\u3068\u3044\u3046\u3053\u3068\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n

\u53c2\u8003\u8cc7\u6599\uff1a http:\/\/modauthmysql.sourceforge.net\/CONFIGURE<\/a><\/p>\n

\u95a2\u9023\u66f8\u7c4d\uff1a
\n