Cherokee Web Server Install - Part two

A good friend once told me, that the lenght between up and down is equal but not as fast nor secure! That's the same thing with MySQL authentication and plain text file authentication.

Therefore, this article begins easy and guide you through a fast and very simple plain text password protection setup/jump. That way you will also learn how to easily control the admin interface. In Part three we will focus on the MySQL Auth which is a bit more triggy(not much though but still up hill)

------------------------------------
Password creation
------------------------------------
First create the password plain text file by simply type in your terminal

#ipkg install joe (install a good and easy text program)
#joe /opt/share/www/cherokee/text.txt

Type:

Almighty:CherokeeGod

and press CTRL+KX for exiting and saving.

username is now : Almighty
Password is now: CherokeeGod

Very simpel -> but be sure to make a more secure password!

Also make a new folder called pass inside your webroot. eg: /opt/share/www/cherokee/pass/

------------------------------------
Make the webserver remember to ask who's knocking!
------------------------------------
In the terminal, type:
#cherokee-admin -b (this will open the cherokee admin webgui)

Go to your browser and type: http://slugip:9090/ to see your admin welcome screen.

Now to set the settings for the password press on virtual servers

Press Default
Press Default again, "List & Send"Press the security tab -> and match the screenshots text fields.



Press, send request followed by a gentle press on the apply button.

Go to your terminal and write: DO_Reboot. (As you prolly guessed, this will magically reboot the slug).

------------------------------------
Testing
------------------------------------
Once its back in action, try your browsers power and type: http://slugip:8008/
(Note: in Firefox it will look normal. But if you type in http://slugip:8008/ pass/ it will ask for a password!)

in IE it will ask for a pass after just pressing http://slugip:8008/

So that's it, you have now created a very simple password authentication system. Though its normally not recommended that you put the pass file inside your webroot, this time was just to check the basic stuff in the admin gui. So please don't use this as your final attempt in accomplishing a secure webserver.

Next we will do some more advanced MySQL Auth kongfu stuff, so be prepared!

For now, have fun password protecting your files and thank you for reading.

Cheers!