Hello,

I have Apache 2.0.53 running on an SuSE 9.3 box.

I need some simple authentication for Apache.

What I would like is:

my server root is /srv/www/htdocs and it has some directories in it.

I would like any directories owned by Apache's group (www) or user (wwwrun) to be readable without authentication. For directories owned by users other than Apache's, I would like authentication via SuSE's builtin system authentication (PAM / shadow password files).

So...

1) Will mod_auth_pam do this?
Will it handle not requiring authentication for Apache's user?
Is there a good HOWTO/tutorial on this?

2) Since this is using system users' passwords, do I need SSL or something else to make it secure (encrypted over the network)?
Is there a good HOWTO/tutorial for this?

Thanks,
Jason