[Pi3web-users] Users, Realm and authentication

[<rap...@fr...>]

Hello,

I recently installed Pi3web, so forgive me I'm a beginner...

I configured Pi3web (HTTP server) with 5 or 6 users and 2 realms =
(Private_Users (basic authentication), High_Level_Users (digest =
authentication)) :
** If I have more than 1 user in the realm used for a directory then no =
authentication dialog appears on web client's screen and every one seems =
to be able to browse my site. If I have only one user in the realm then =
no problem, the authentication process occurs. (realm is basic).
** When I use a realm with digest authentication (no matter how many =
users are in this realm), no authentication dialog box appears on the =
client's browser and every one can browse my site.

I did the same test with Pi3web configured with SSL :
** whatever the authentication scheme is for the realm which protects a =
directory or whatever the number of users in the relevant realm is, no =
authentication dialog box appears on the client's side, but nobody can =
access the protected directory.

Did you experienced this kind of problem ?

I'm quite sure I've missed something but I don't know what...

Thank you for your help.

Moreover I would suggest a potential improvement which I think is a more =
user friendly way to manage users and realms :
1. create a table of users
2. create a table of realms
3. populate each realm with users you can pick from the list of users =
(so that you allow a user to be in more than one group) and (if =
possible) populate the realms with other realms...

Thank you for your help.

Raphael