After reading the description on the project page and reviewing the code, it seems that SSL Users is about enforcing Apache authentication for specific Drupal users. I'm having a hard time understanding what this module has to do with SSL. Can you explain?
Comments
Comment #1
dealancer commentedHi!
Thanks for good question. I will try to eplain how this module works.
When you want to enter protected folder on your site, apache server promts you to enter login and password. Browser show the window where you can enter authentification data. Then, after sucsesfull authorization server shows either direrecory content or opens index.htm, index.php, etc.
Configuration of it is in setting of allowed user names and passowrds in .htpasswd files. And .htacces should be in protected directory. Regarding this module it can edit this files. But there is one restriction exits: only one password for any user. You can set any user names, but them are not related to Drupal users. So this is an aswer for one of your question.
Restricted directory shouldn't be a root directory, it should be nested direcotory on your site, for ex. http://yoursite.com/restricted_directory/. In that folder could be stored any data: files, drupal sites, etc. which you want to protect from external world.
Comment #2
mshaver commentedSo this module doesn't authentic a drupal user for access to the restricted directory? Or does it partially by inserting the email address of those that can access the restricted directory?
Comment #3
dealancer commentedModule doesn't integrated with Drupal users in current version. I will implement it in future.
In current version admin or somebody with appropriate permission should insert any (!) user names he/she wants and set only one password for all user names. I guess this functional will be extended in future.
I want to hear your ideas.
Comment #4
dealancer commentedAny Ideas?
Comment #5
dealancer commentedComment #6
dealancer commentedComment #7
dealancer commented