{{NeedsUpdateMessageBox|backgroundcolor = #faa|image =Warning.png|heading =WARNING|message = This is recommended only for advanced users, proceed with caution.}}Do you want to control which HDA users can access <div style="border: 1px solid #A3B1BF; padding: .8em 1em; background-color: #E6F2FF; margin: 0px 1em;">'''NOTE:''' The one-click [https://www.amahi.org/apps/web applications. While -apps Web Apps] will provide this function does not currently exist capability in Amahi, it can be done quite easily by following the steps outlined below7 or greater.</div>

This requires creation of two files (.htaccess and htpassword) the <code>htpasswd</code> be placed in the '''''/var/hda/web-apps''''' directory of each web application you want to protect. To create an The <code>htpasswd</code> file containing the users will identify user names and passwords* you can go to a [http://www.webmaster-toolkit.com/htaccess-generator.shtml public htaccess/htpasswd generator] and copy the contents of what the "And this is what your .htpasswd file should look like..." box has * or you can use the htpasswd command (first time with -cencrypted){{Code|htpasswd -c .htpasswd USERNAME}}

The ==== Create the htpasswd File ====There are two options for creating the <code>htpasswd</code> file should be owned by apache:apache *Option 1: Navigate to [http://www.htaccesstools.com/htpasswd-generator/ htpasswd Generator].<blockquote>*Enter desired Username, Password, and have 600 permissionsPath (physical location where <code>.htpasswd</code> will be stored). For example, so copy it overUsername '''''amahi''''', thenPassword '''''amahi''''', and Path '''''/var/hda/web-apps'''''.*Select the '''Generate .htaccess''' button.*Copy the text from ''"And this is what your .htpasswd file should look like..."'' box and paste it into the <code>.htpasswd</code> file. It should look similar to this: <pre>amahi:amb24e1pXrqFY</pre>*Proceed to the '''Copy and Set File Permissions''' section to complete.</blockquote>*Option 2: [[Open_Terminal_as_root|Open Terminal as rootuser]]<blockquote>*Create the <code>htpasswd</code> file (change username and password):<pre>htpasswd -c -b .htpasswd username password</pre>*Proceed to the '''Copy and Set File Permissions''' section to complete.</blockquote>

{{Code|cp .htpasswd /var/hda==== User Maintenance (Add/Delete) ====*Add additional users, repeat the previous step ('''NOTE:''' the -c option is only needed the first time you create the file for that webapplication): htpasswd -apps/htpasswdchmod 600 b /var/hda/web-apps/htpasswdusername passwordchown apache*Delete a user, do the following:apache htpasswd -D /var/hda/web-apps/htpasswd}}username

= If you have webmin installed === Copy and Set File permissions: ====*Copy the <code>.htpasswd</code> file to the web application directory: cp .htpasswd /var/hda/web-apps/htpasswd* Ensure the permissions are correctly set on the two files as follows: chmod 600 /var/hda/web-apps/htpasswd chown apache:apache /var/hda/web-apps/htpasswd

*After logging into Webmin select “Others” on the left-hand side, click on “Protected Web Directories” and then select “Add protection for a new directory”.*In “Directory path” ''"Directory path"'' browse to/or enter the path to the ‘html’ <code>html</code> web directory you wish to protect, in ''“Authentication realm” '' enter something like for example ''“Authentication required” '' (this will show up on the popup login box) and then click on create.*Now you need to setup users to allow login by clicking on ''“Add a new user”'' in ''“Associated users and groups”'', when users have been created you should be good to go.

Note'''NOTE: ''' After you have completed this process using webmin Webmin you can then select ''"un-protect selected directory" '' and use the HDA-Dashboard to enable/disable password protection.