Question

• TWiki version: n/a
• Perl version: n/a
• Web server & version: Apache 2.0.40
• Server OS: linux
• Web browser & version: n/a
• Client OS: n/a

Situation

I'm running a twiki on the corporate intranet. With PAM, I have managed to get users authenticated against the Windows domain. This is nice becuase there is still an audit trail on editing, but there are no new accounts/passwords to maintain.

Problem

Apache basic authentication sends the passwords across the net in cleartext. Since these are domain passwords, sending them in cleartext is bad. However, the content itself does not need to be secured, and the webserver isn't the fastest box in the world, so I don't want to secure the entire site. I'd like to just have the authentication be done through SSL, but none of the rest of the traffic.

Question/Plea

I've googled much, but cannot find an answer. Is this posible, and if so, how do I do it?

Disclaimer

I recognize that this is more of an apache question than a TWiki question. But any help will be greatly appreciated.

-- ScottGargash - 18 Jun 2003

Assuming you find the answer, please add it to TransparentAuthentication.

thanks!

-- MattWilkie - 20 Jun 2003

Answer