HTTP apache password protected directory with Digest

Digest authentication uses a more secure method that is much less sus-
ceptible to credential theft, spoofing, and replay attacks.
The essential ingredient is that no username or password traverses the network in plain-
text.

Preparing a realm to use Basic authentication consists of simply storing the username/
password pair and telling the server where to find them. The password may or may not
be encrypted. The same credentials may be applied to any realm on the server, or even
copied to a completely different server and used there.

Setting up Digest authentication is a little more involved. For one thing, the credentials
are not transportable to other realms; when you generate them, you specify the realm
to which they apply.

[root@station246 ~]# vim /etc/httpd/conf/httpd.conf

# password protected httpd directory eith digest protocal
<Directory /var/www/html/data2>
AuthName "RESTRICTED" # <-----------cosider this as realm
AuthType digest
AuthDigestFile /etc/httpd/conf/.htdigest
Require valid-user
</Directory>

[root@station246 ~]# mkdir /var/www/html/data2

[root@station246 ~]# cd /var/www/html/data2

[root@station246 data2]# echo "This is digest password protected directory index" >> index.html

[root@station246 data2]# ls
index.html
[root@station246 data2]#

[root@station246 ~]# /etc/init.d/httpd restart
Stopping httpd: