Secure Admin section

From ClarolineDoc

On Apache http servers, the admin section is protected by an .htaccess file. The login and Password set to access the admin section are stored in the .htpasswd4admin file.

You can use the hidden tool claroline/admin/managing/addAdminInhtpassword.php.

Changing the admin Password on Linux

If you change your Password in your profile when you are logged in as an admin user, Claroline updates the Password in the .htpasswd4admin file.

You can also change the Password from the command line using the htpasswd command.

• htpasswd -c passwordfile username (-c to create a new file)
• htpasswd passwordfile username (without -c to add a new user or to update the Password of an existing user)

To change the password of the admin user, go to claroline/admin directory and type the following command :

• htpasswd .htpasswd4admin admin

You will be prompted to enter a new password for the admin user.

For other http servers, protect the admin directory by granting rights only to the administrator.