# Changes for page User Authentication

<
From version
edited by Thomas Mortagne
on 2011/06/22
To version
edited by Vincent Massol
on 2011/10/28
>
Change comment: Added documentation for basic auth

## Details

Page properties
Author
 ... ... @@ -1,1 +1,1 @@ 1 -XWiki.ThomasMortagne 1 +XWiki.VincentMassol
Content
 ... ... @@ -12,6 +12,18 @@ 12 12 13 13 Form authentication is the default way to get authenticated within a Wiki. It requires a user and a password. 14 14 15 += Basic Authentication = 16 + 17 +XWiki supports [basic access authentication>http://en.wikipedia.org/wiki/Basic_access_authentication], a method designed to allow a Web browser, or other client program, to provide credentials - in the form of a user name and password - when making a request. You can get authenticated against an XWiki server with the basic authentication protocol using the following URL scheme: 18 + 19 +{{code}} 20 +http://username:password@mywiki.xwiki.com/xwiki/bin/view/Main/WebHome?basicauth=1 21 +{{/code}} 22 + 23 +{{warning}} 24 +Be careful that if you use the ##HTTP## protocol your password will be sent in clear over the network and is thus very unsafe. When using Basic Authentication you should make sure your wiki is configured to use ##HTTPS##. 25 +{{/warning}} 26 + 15 15 = LDAP Authentication = 16 16 17 17 {{warning}} ... ... @@ -122,7 +122,7 @@ 122 122 123 123 See [[AdminGuide.Logging]]. 124 124 125 -The specific packages to track for LDAP are ##com.xpn.xwiki.plugin.ldap## and ###com.xpn.xwiki.user.impl.LDAP#.## 137 +The specific packages to track for LDAP are ##com.xpn.xwiki.plugin.ldap## and ##com.xpn.xwiki.user.impl.LDAP##. 126 126 127 127 Before 3.1, add the following to the log4j configuration file: 128 128