summaryrefslogtreecommitdiff
path: root/wiki/401.mdwn
blob: ea86872008719a214061bfc52ce9e1020c819b15 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
# wiki.freedesktop.org: 401 Unauthorized

wiki.freedesktop.org has two authentication methods; one is through [[ssh access to fd.o shell accounts|http://www.freedesktop.org/wiki/AccountRequests/]] (e.g. <git+ssh://wiki.freedesktop.org/srv/ikiwiki/git/sitewranglers.git> ), the other is over HTTPS (e.g. <https://secure.freedesktop.org/write/sitewranglers/ikiwiki.cgi?page=wiki%2F401&do=edit> ). 

To avoid problems with spammers, the htpasswd entries associated with HTTPS authentication involve manual administration.

If you have a freedesktop.org shell account, you can add or update any htpasswd entry: `ssh wiki.freedesktop.org sudo wikipasswd INSERT_DESIRED_USERNAME_HERE`. Use your powers wisely; everything is logged under version control.

If you don't have a shell account, you should find a way to generate a hash and safely send it to the sitewranglers, preferably with a signature.

### Generation

* local shell:
    * `htpasswd -c -m /dev/stdout DesiredUsername` # and input your password at the prompts
* browser:
    * <https://secure.freedesktop.org/static/htpasswd.html>

(Note if you customize the hash mechanism: we are currently using Apache 2.2 and thus do not yet support bcrypt hashes.)

### Signing

* `gpg --clearsign`
* enter GPG passphrase
* paste htpasswd entry
* EOF with ctrl-d

### Transmission

* If you do not have an existing shell account, send your signed hash to sitewranglers on IRC ( irc://irc.freenode.net/ usernames jrayhawk or Mithrandir ) or by email ( jrayhawk@freedesktop.org, tfheen@freedesktop.org ).

### Sitewranglers

* With a root account on annarchy, append or replace the user's htpasswd entry in /etc/apache2/userdb.basic