NAME

HTTPD::UserAdmin - Management of HTTP server user databases

SYNOPSIS

use HTTPD::UserAdmin ();

DESCRIPTION

This software is meant to provide a generic interface that hides the inconsistencies across HTTP server implementations of user and group databases.

METHODS

new ()

Here's where we find out what's different about your server.

Some examples:

    @DBM = (DBType => 'DBM',
	    DB     => '.htpasswd',
	    Server => 'apache');

    $user = new HTTPD::UserAdmin @DBM;

This creates an object who's database is a DBM file named '.htpasswd', in a format that the Apache server understands.

    @Text = (DBType => 'Text',
	     DB     => '.htpasswd',
	     Server => 'ncsa');

    $user = new HTTPD::UserAdmin @Text;

This creates an object whose database is a plain text file named '.htpasswd', in a format that the NCSA server understands.

    @SQL =  (DBType =>    "SQL",          
	     Host =>      "",             #server hostname 
	     Port =>      "",             #server port
	     DB =>        "www",          #database name
	     User =>      "", 	  	  #database login name	    
	     Auth =>      "",             #database login password
             Encrypt =>   "crypt",        #encryption method
	     Driver =>    "mSQL",         #driver for DBI
	     Server =>    "apache",       #HTTP server type, not required
	     UserTable => "www-users",    #table with field names below
	     NameField => "user",         #field for the name
	     PasswordField => "password", #field for the password
	     );

    $user = new HTTPD::UserAdmin @SQL;

This creates an object who's mSQL database is named 'www', with a schema that the Apache server (extention) understands.

Full list of constructor attributes:

Note: Attribute names are case-insensitive

DBType - The type of database, one of 'DBM', 'Text', or 'SQL' (Default is 'DBM')

DB - The database name (Default is '.htpasswd' for DBM & Text databases)

Server - HTTP server name (Default is the generic class, that works with NCSA, Apache and possibly others)

Note: run 'perl t/support.t matrix' to see what support is currently availible

Encrypt - One of 'crypt', 'MD5', or 'none' (no encryption. Defaults to 'crypt'

Locking - Boolean, Lock Text and DBM files (Default is true)

Path - Relative DB files are resolved to this value (Default is '.')

Debug - Boolean, Turn on debug mode

Flags - The read, write and create flags. There are four modes: rwc - the default, open for reading, writing and creating. rw - open for reading and writing. r - open for reading only. w - open for writing only.

Specific to DBM files:

DBMF - The DBM file implementation to use (Default is 'NDBM')

Mode - The file creation mode, defaults to '0644'

Specific to DBI: We talk to an SQL server via Tim Bunce's DBI interface. For more info see: http://www.hermetica.com/technologia/DBI/

Host - Server hostname

Port - Server port

User - Database login name

Auth - Database login password

Driver - Driver for DBI (Default is 'mSQL')

UserTable - Table with field names below

NameField - Field for the name (Default is 'user')

PasswordField - Field for the password (Default is 'password')

From here on out, things should look the same for everyone.

add($username,$password,[@fields])

add($username,$password,\%fields)

Add a user.

Fails if $username exists in the database

    if($user->add('dougm', 'secret')) {
	print "You have the power!\n";
    }

You may need to pass additional fields, such as the user's real name. This depends on your server of course.

$user->add('JoeUser', 'try2guess', '', 'Joseph A. User');

You can also pass a set of field name/value pairs in the form of a hash ref. Example

$user->add('JoeUser','try2guess','',
                     {'Name'=>'Joseph A. User','Credit_limit'=>2000});

delete($username)

Delete a user

    if($user->delete('dougm')) {
	print "He's gone\n";
    }

suspend($username)

Suspend a user

    if($user->suspend('dougm')) {
	print "Account suspended\n";
    }

unsuspend($username)

Unsuspend a suspended user

    if($user->unsuspend('dougm')) {
	print "Account restored to normal\n";
    }

exists($username)

True if $username is found in the database

    if($user->exists('dougm')) {
	die "oh no!";
    }

password()

Returns the encrypted password for a user

$passwd = $user->password("dougm");

Useful for copying users to another database.

fetch($username,@fields)

Fetch a list of field values from the indicated user.  Field names may
be provided as a list or as an array reference.  The return value is a
reference to a hash containing the field/value pairs.

list()

Returns a list of usernames in the current database

@users = $user->list

update($username,$password)

update($username,$password,\%fields) SQL only

Update $username with a new $password

    if($user->update('dougm', 'idunno')) {
	print "Updated\n";
    }

With SQL servers, you can update other fields in the table by passing a hash reference:

$user->update('dougm','idunno',{'credit_limit'=>1000});

An undefined value in the password field will leave the field unchanged.

group()

Short cut for creating an HTTPD::GroupAdmin object. All applicable attributes are inherited, but can be overridden.

$group = $user->group(NAME => 'www-group');

(See HTTPD::GroupAdmin)

convert(@Attributes)

Convert a database.

$dbmuser = $user->convert(@Apache);

lock([$timeout])

unlock()

These methods give you control of the locking mechanism.

$user = new HTTPD::UserAdmin (Locking => 0); #turn off auto-locking
$user->lock; #lock the object's database
$user->add($username,$passwd); #write while file is locked
$user->unlock; release the lock

db($dbname);

Select a different database.

$olddb = $user->db($newdb);
print "Now we're reading and writing '$newdb', done with '$olddb'n\";

flags([$flags])

Get or set read, write, create flags.

commit

Commit changes to disk (for Text files).

Message Digest User Databases

Currently, you can store user info in a format for servers who support Message Digest Authentication. Here's an example:

$user = new HTTPD::UserAdmin (DB => '.htdigest', Encrypt => 'MD5');

($username,$realm,$password) = ('JoeUser', 'SomePlace', '14me');


#The checksum contains more info that just a password
$user->add($username, "$username:$realm:$password");
$user->update($username, "$username:$realm:newone");


$info = $user->password($username);
($realm, $checksum) = split(":", $info);

$user->delete($username);                                

See <URL:http://hoohoo.ncsa.uiuc.edu/docs/howto/md5_auth.html> for NCSA's implementation.

So, it's a little more work, but don't worry, a nicer interface is on the way.

SEE ALSO

HTTPD::GroupAdmin(3), HTTPD::Authen(3)

AUTHOR

Doug MacEachern <dougm@osf.org>

Copyright (c) 1996, Doug MacEachern

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.