File mod_auth_memcookie.conf of Package apache2-mod_auth_memcookie
<IfModule mod_auth_memcookie.c> <Location /> # Name of the cookie to used for check authentification, set to # "AuthMemCookie" by default. # Default: AuthMemCookie Auth_memCookie_CookieName myauthcookie # List of ip or host adresse(s) and port(s) ':' separed of memcache(s) daemon # to be used, coma separed. # Example; host1:12000,host2:12000 # Default: 127.0.0.1:11211 Auth_memCookie_Memcached_AddrPort 127.0.0.1:11000 # The domain the cookie is valid for. # Default: none (means: all) # Auth_memCookie_CookieDomain .example.com # Session object stored in memcached expiry time, in seconds. Used only if # "Auth_memCookie_Memcached_SessionObject_ExpiryReset" is set to on. # Default: 3600 (seconds) # Auth_memCookie_Memcached_SessionObject_ExpireTime 86400 # Set to 'yes' to set session information to http header of the authenticated # users. # Default: no # Auth_memCookie_SetSessionHTTPHeader on # Set to 'yes' to mime64 encode session information to http header. # Default: off # Auth_memCookie_SetSessionHTTPHeaderEncode on # Session is created by doing a subrequest to the specfied URI and using the # returned headers (uses the configured SessionHeaders). # Default: none # Auth_memCookie_AuthentificationURI https://login.example.com/ # Just run the authentification steps for the subrequest (data is taken from # the input headers in that case). # Default: off # Auth_memCookie_AuthentificationURIOnlyAuth on # Tell the module that it can take the user name from the specified header # when it creates the session. # Default: none # Auth_memCookie_AuthentificationHeader X-Username # Specify which headers should be cleared from the input headers and taken # from the session data. # Default: none # Auth_memCookie_SessionHeaders X-USERNAME,X-EMAIL,X-FIRSTNAME,X-LASTNAME # to redirect unauthorized user to the login page ErrorDocument 401 "/gestionuser/login.php" # to specify if the module are autoritative in this directory Auth_memCookie_Authoritative on # must be set without that the refuse authentification AuthType Cookie # must be set (apache mandatory) but not used by the module AuthName "My Login" </Location> </IfModule> # to protect juste user authentification <Location "/myprotectedurl"> require valid-user </Location> # to protect acces to user in group1 <Location "/myprotectedurlgroup1"> require group group1 </Location>