apache basic authenticaionPermission issues while setting up cakephpRunning two instances of Apache as separate users — permission denieddifference between Apache installationsWhy does httpd give an error following a symlink into my home directory on Fedora?postgresql auth against samba active directoryApache group authorization with mod_lookup_identityCGI with Shell ScriptDebian SFTP WinSCP “Authentication failed.” User in Group can't establish SFTP connectionApache2.4 on Centos - allow specific IPs to skip authentication - not workingWhat am I missing in PAM configuration for Redhat Apache?

I am the light that shines in the dark

Can I challenge the interviewer to give me a proper technical feedback?

PTIJ: Sport in the Torah

Why does this boat have a landing pad? (SpaceX's GO Searcher) Any plans for propulsive capsule landings?

Is this Paypal Github SDK reference really a dangerous site?

What exactly is the meaning of "fine wine"?

Is it appropriate to ask a former professor to order a library book for me through ILL?

I am the person who abides by rules but breaks the rules . Who am I

What is the purpose of a disclaimer like "this is not legal advice"?

Has a sovereign Communist government ever run, and conceded loss, on a fair election?

Can multiple states demand income tax from an LLC?

What is 'Log Memory' in Query Store 2017

Professor forcing me to attend a conference, I can't afford even with 50% funding

How to distinguish easily different soldier of ww2?

An Undercover Army

Averaging over columns while ignoring zero entries

Does the US political system, in principle, allow for a no-party system?

std::string vs const std::string& vs std::string_view

Where is the License file location for Identity Server in Sitecore 9.1?

Why restrict private health insurance?

School performs periodic password audits. Is my password compromised?

Boss Telling direct supervisor I snitched

Why do we call complex numbers “numbers” but we don’t consider 2-vectors numbers?

Tabular environment - text vertically positions itself by bottom of tikz picture in adjacent cell



apache basic authenticaion


Permission issues while setting up cakephpRunning two instances of Apache as separate users — permission denieddifference between Apache installationsWhy does httpd give an error following a symlink into my home directory on Fedora?postgresql auth against samba active directoryApache group authorization with mod_lookup_identityCGI with Shell ScriptDebian SFTP WinSCP “Authentication failed.” User in Group can't establish SFTP connectionApache2.4 on Centos - allow specific IPs to skip authentication - not workingWhat am I missing in PAM configuration for Redhat Apache?













0















I have enabled basic authentication for one of the directories on website.
The code has been added in the httpd.conf file.
The user and passwords have been added in the /etc/passwd file. The same path has been entered in the httpd.conf.
Checked that all the modules i.e. basic, auth, rewrite etc are being loaded in apache.



Problem - once I try and access the folder on the website (internet) the authentication popup comes up, however when I fill in the username and password it does not proceed further and keeps showing the popup again and again, without access to the directory.



code of httpd.conf



<Directory "/srv/www/htdocs/.....">
AllowOverride AuthConfig
AuthType Basic
AuthName "Restricted Files"
# (Following line optional)
AuthBasicProvider file
AuthUserFile "/etc/passwd"
# AuthGroupFile "/etc/group"
Require valid-user
</Directory>









share|improve this question



















  • 1





    why did you set the AuthUserFile as "/etc/passwd" ? this file is already used for other purposes : containing essential informations about system's accounts

    – lese
    Nov 26 '15 at 14:28















0















I have enabled basic authentication for one of the directories on website.
The code has been added in the httpd.conf file.
The user and passwords have been added in the /etc/passwd file. The same path has been entered in the httpd.conf.
Checked that all the modules i.e. basic, auth, rewrite etc are being loaded in apache.



Problem - once I try and access the folder on the website (internet) the authentication popup comes up, however when I fill in the username and password it does not proceed further and keeps showing the popup again and again, without access to the directory.



code of httpd.conf



<Directory "/srv/www/htdocs/.....">
AllowOverride AuthConfig
AuthType Basic
AuthName "Restricted Files"
# (Following line optional)
AuthBasicProvider file
AuthUserFile "/etc/passwd"
# AuthGroupFile "/etc/group"
Require valid-user
</Directory>









share|improve this question



















  • 1





    why did you set the AuthUserFile as "/etc/passwd" ? this file is already used for other purposes : containing essential informations about system's accounts

    – lese
    Nov 26 '15 at 14:28













0












0








0








I have enabled basic authentication for one of the directories on website.
The code has been added in the httpd.conf file.
The user and passwords have been added in the /etc/passwd file. The same path has been entered in the httpd.conf.
Checked that all the modules i.e. basic, auth, rewrite etc are being loaded in apache.



Problem - once I try and access the folder on the website (internet) the authentication popup comes up, however when I fill in the username and password it does not proceed further and keeps showing the popup again and again, without access to the directory.



code of httpd.conf



<Directory "/srv/www/htdocs/.....">
AllowOverride AuthConfig
AuthType Basic
AuthName "Restricted Files"
# (Following line optional)
AuthBasicProvider file
AuthUserFile "/etc/passwd"
# AuthGroupFile "/etc/group"
Require valid-user
</Directory>









share|improve this question
















I have enabled basic authentication for one of the directories on website.
The code has been added in the httpd.conf file.
The user and passwords have been added in the /etc/passwd file. The same path has been entered in the httpd.conf.
Checked that all the modules i.e. basic, auth, rewrite etc are being loaded in apache.



Problem - once I try and access the folder on the website (internet) the authentication popup comes up, however when I fill in the username and password it does not proceed further and keeps showing the popup again and again, without access to the directory.



code of httpd.conf



<Directory "/srv/www/htdocs/.....">
AllowOverride AuthConfig
AuthType Basic
AuthName "Restricted Files"
# (Following line optional)
AuthBasicProvider file
AuthUserFile "/etc/passwd"
# AuthGroupFile "/etc/group"
Require valid-user
</Directory>






apache-httpd authentication






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited 5 hours ago









Rui F Ribeiro

41.2k1481140




41.2k1481140










asked Nov 26 '15 at 13:30









Prop ChillProp Chill

1




1







  • 1





    why did you set the AuthUserFile as "/etc/passwd" ? this file is already used for other purposes : containing essential informations about system's accounts

    – lese
    Nov 26 '15 at 14:28












  • 1





    why did you set the AuthUserFile as "/etc/passwd" ? this file is already used for other purposes : containing essential informations about system's accounts

    – lese
    Nov 26 '15 at 14:28







1




1





why did you set the AuthUserFile as "/etc/passwd" ? this file is already used for other purposes : containing essential informations about system's accounts

– lese
Nov 26 '15 at 14:28





why did you set the AuthUserFile as "/etc/passwd" ? this file is already used for other purposes : containing essential informations about system's accounts

– lese
Nov 26 '15 at 14:28










2 Answers
2






active

oldest

votes


















1














I'm pretty sure you don't want to use /etc/passwd and /etc/group in the AuthUserFile and AuthGroupFile directives.



I believe you need to create separate files (with the AuthUserFile file created and maintained using the htpasswd command).



If you want to have Apache authenticate using your normal system accounts, then you need to look at an authentication module that uses something like PAM (I found this but I have no idea if it is any good - I've never used it).






share|improve this answer


















  • 1





    All in all it is not a good idea to add normal Unix user accounts expressly for web pages authentication.

    – Rui F Ribeiro
    Nov 26 '15 at 14:24



















0














As Murray suggested you could create an other file ( that is not /etc/passwd ), and then as described here, you can proceed as follow in order to create Basic Authentication users :



htpasswd -c /path/to/your/file username


this will prompt you to enter a password that will be encrypt and saved into the file defined above. Note that if you want to create an other user (more than one) you need to remember to omit the -c parameter :



htpasswd /path/to/your/file username


Otherwise your file will be re-created, and you will overwrite the previous added user(s)



htpasswd --help



-c Create a new file.




additionally, consider that you can decide what encryption algorithm to use for password encryption:




-m Force MD5 encryption of the password.



-d Force CRYPT encryption of the password (default).



-p Do not encrypt the password (plaintext).



-s Force SHA encryption of the password.







share|improve this answer

























  • thanx plz, I am using apache ver 2.2.12 and the command htpasswd does not work. I have been using useradd and passwd commands is that ok?

    – Prop Chill
    Nov 27 '15 at 10:51











  • using suse enterprise server 11 sp3

    – Prop Chill
    Nov 27 '15 at 10:56











  • thanx a ton found it it is usr/bin as htpasswd2

    – Prop Chill
    Nov 27 '15 at 11:02











  • good, I'm glad of that, remember to accept an answer if there is one that resolved you issue. And in case vote

    – lese
    Nov 27 '15 at 11:08










Your Answer








StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













draft saved

draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f245668%2fapache-basic-authenticaion%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown

























2 Answers
2






active

oldest

votes








2 Answers
2






active

oldest

votes









active

oldest

votes






active

oldest

votes









1














I'm pretty sure you don't want to use /etc/passwd and /etc/group in the AuthUserFile and AuthGroupFile directives.



I believe you need to create separate files (with the AuthUserFile file created and maintained using the htpasswd command).



If you want to have Apache authenticate using your normal system accounts, then you need to look at an authentication module that uses something like PAM (I found this but I have no idea if it is any good - I've never used it).






share|improve this answer


















  • 1





    All in all it is not a good idea to add normal Unix user accounts expressly for web pages authentication.

    – Rui F Ribeiro
    Nov 26 '15 at 14:24
















1














I'm pretty sure you don't want to use /etc/passwd and /etc/group in the AuthUserFile and AuthGroupFile directives.



I believe you need to create separate files (with the AuthUserFile file created and maintained using the htpasswd command).



If you want to have Apache authenticate using your normal system accounts, then you need to look at an authentication module that uses something like PAM (I found this but I have no idea if it is any good - I've never used it).






share|improve this answer


















  • 1





    All in all it is not a good idea to add normal Unix user accounts expressly for web pages authentication.

    – Rui F Ribeiro
    Nov 26 '15 at 14:24














1












1








1







I'm pretty sure you don't want to use /etc/passwd and /etc/group in the AuthUserFile and AuthGroupFile directives.



I believe you need to create separate files (with the AuthUserFile file created and maintained using the htpasswd command).



If you want to have Apache authenticate using your normal system accounts, then you need to look at an authentication module that uses something like PAM (I found this but I have no idea if it is any good - I've never used it).






share|improve this answer













I'm pretty sure you don't want to use /etc/passwd and /etc/group in the AuthUserFile and AuthGroupFile directives.



I believe you need to create separate files (with the AuthUserFile file created and maintained using the htpasswd command).



If you want to have Apache authenticate using your normal system accounts, then you need to look at an authentication module that uses something like PAM (I found this but I have no idea if it is any good - I've never used it).







share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 26 '15 at 14:23









Murray JensenMurray Jensen

1,314165




1,314165







  • 1





    All in all it is not a good idea to add normal Unix user accounts expressly for web pages authentication.

    – Rui F Ribeiro
    Nov 26 '15 at 14:24













  • 1





    All in all it is not a good idea to add normal Unix user accounts expressly for web pages authentication.

    – Rui F Ribeiro
    Nov 26 '15 at 14:24








1




1





All in all it is not a good idea to add normal Unix user accounts expressly for web pages authentication.

– Rui F Ribeiro
Nov 26 '15 at 14:24






All in all it is not a good idea to add normal Unix user accounts expressly for web pages authentication.

– Rui F Ribeiro
Nov 26 '15 at 14:24














0














As Murray suggested you could create an other file ( that is not /etc/passwd ), and then as described here, you can proceed as follow in order to create Basic Authentication users :



htpasswd -c /path/to/your/file username


this will prompt you to enter a password that will be encrypt and saved into the file defined above. Note that if you want to create an other user (more than one) you need to remember to omit the -c parameter :



htpasswd /path/to/your/file username


Otherwise your file will be re-created, and you will overwrite the previous added user(s)



htpasswd --help



-c Create a new file.




additionally, consider that you can decide what encryption algorithm to use for password encryption:




-m Force MD5 encryption of the password.



-d Force CRYPT encryption of the password (default).



-p Do not encrypt the password (plaintext).



-s Force SHA encryption of the password.







share|improve this answer

























  • thanx plz, I am using apache ver 2.2.12 and the command htpasswd does not work. I have been using useradd and passwd commands is that ok?

    – Prop Chill
    Nov 27 '15 at 10:51











  • using suse enterprise server 11 sp3

    – Prop Chill
    Nov 27 '15 at 10:56











  • thanx a ton found it it is usr/bin as htpasswd2

    – Prop Chill
    Nov 27 '15 at 11:02











  • good, I'm glad of that, remember to accept an answer if there is one that resolved you issue. And in case vote

    – lese
    Nov 27 '15 at 11:08















0














As Murray suggested you could create an other file ( that is not /etc/passwd ), and then as described here, you can proceed as follow in order to create Basic Authentication users :



htpasswd -c /path/to/your/file username


this will prompt you to enter a password that will be encrypt and saved into the file defined above. Note that if you want to create an other user (more than one) you need to remember to omit the -c parameter :



htpasswd /path/to/your/file username


Otherwise your file will be re-created, and you will overwrite the previous added user(s)



htpasswd --help



-c Create a new file.




additionally, consider that you can decide what encryption algorithm to use for password encryption:




-m Force MD5 encryption of the password.



-d Force CRYPT encryption of the password (default).



-p Do not encrypt the password (plaintext).



-s Force SHA encryption of the password.







share|improve this answer

























  • thanx plz, I am using apache ver 2.2.12 and the command htpasswd does not work. I have been using useradd and passwd commands is that ok?

    – Prop Chill
    Nov 27 '15 at 10:51











  • using suse enterprise server 11 sp3

    – Prop Chill
    Nov 27 '15 at 10:56











  • thanx a ton found it it is usr/bin as htpasswd2

    – Prop Chill
    Nov 27 '15 at 11:02











  • good, I'm glad of that, remember to accept an answer if there is one that resolved you issue. And in case vote

    – lese
    Nov 27 '15 at 11:08













0












0








0







As Murray suggested you could create an other file ( that is not /etc/passwd ), and then as described here, you can proceed as follow in order to create Basic Authentication users :



htpasswd -c /path/to/your/file username


this will prompt you to enter a password that will be encrypt and saved into the file defined above. Note that if you want to create an other user (more than one) you need to remember to omit the -c parameter :



htpasswd /path/to/your/file username


Otherwise your file will be re-created, and you will overwrite the previous added user(s)



htpasswd --help



-c Create a new file.




additionally, consider that you can decide what encryption algorithm to use for password encryption:




-m Force MD5 encryption of the password.



-d Force CRYPT encryption of the password (default).



-p Do not encrypt the password (plaintext).



-s Force SHA encryption of the password.







share|improve this answer















As Murray suggested you could create an other file ( that is not /etc/passwd ), and then as described here, you can proceed as follow in order to create Basic Authentication users :



htpasswd -c /path/to/your/file username


this will prompt you to enter a password that will be encrypt and saved into the file defined above. Note that if you want to create an other user (more than one) you need to remember to omit the -c parameter :



htpasswd /path/to/your/file username


Otherwise your file will be re-created, and you will overwrite the previous added user(s)



htpasswd --help



-c Create a new file.




additionally, consider that you can decide what encryption algorithm to use for password encryption:




-m Force MD5 encryption of the password.



-d Force CRYPT encryption of the password (default).



-p Do not encrypt the password (plaintext).



-s Force SHA encryption of the password.








share|improve this answer














share|improve this answer



share|improve this answer








edited Nov 27 '15 at 22:59

























answered Nov 26 '15 at 14:48









leselese

2,13331327




2,13331327












  • thanx plz, I am using apache ver 2.2.12 and the command htpasswd does not work. I have been using useradd and passwd commands is that ok?

    – Prop Chill
    Nov 27 '15 at 10:51











  • using suse enterprise server 11 sp3

    – Prop Chill
    Nov 27 '15 at 10:56











  • thanx a ton found it it is usr/bin as htpasswd2

    – Prop Chill
    Nov 27 '15 at 11:02











  • good, I'm glad of that, remember to accept an answer if there is one that resolved you issue. And in case vote

    – lese
    Nov 27 '15 at 11:08

















  • thanx plz, I am using apache ver 2.2.12 and the command htpasswd does not work. I have been using useradd and passwd commands is that ok?

    – Prop Chill
    Nov 27 '15 at 10:51











  • using suse enterprise server 11 sp3

    – Prop Chill
    Nov 27 '15 at 10:56











  • thanx a ton found it it is usr/bin as htpasswd2

    – Prop Chill
    Nov 27 '15 at 11:02











  • good, I'm glad of that, remember to accept an answer if there is one that resolved you issue. And in case vote

    – lese
    Nov 27 '15 at 11:08
















thanx plz, I am using apache ver 2.2.12 and the command htpasswd does not work. I have been using useradd and passwd commands is that ok?

– Prop Chill
Nov 27 '15 at 10:51





thanx plz, I am using apache ver 2.2.12 and the command htpasswd does not work. I have been using useradd and passwd commands is that ok?

– Prop Chill
Nov 27 '15 at 10:51













using suse enterprise server 11 sp3

– Prop Chill
Nov 27 '15 at 10:56





using suse enterprise server 11 sp3

– Prop Chill
Nov 27 '15 at 10:56













thanx a ton found it it is usr/bin as htpasswd2

– Prop Chill
Nov 27 '15 at 11:02





thanx a ton found it it is usr/bin as htpasswd2

– Prop Chill
Nov 27 '15 at 11:02













good, I'm glad of that, remember to accept an answer if there is one that resolved you issue. And in case vote

– lese
Nov 27 '15 at 11:08





good, I'm glad of that, remember to accept an answer if there is one that resolved you issue. And in case vote

– lese
Nov 27 '15 at 11:08

















draft saved

draft discarded
















































Thanks for contributing an answer to Unix & Linux Stack Exchange!


  • Please be sure to answer the question. Provide details and share your research!

But avoid


  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f245668%2fapache-basic-authenticaion%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Word for a person who has no opinion about whether god existsWord for having a definite opinion while simultaneously withholding judgment?What's the opposite of “newcomer? Is ”veteran" OK?What do you call an “atheist” who might believe in an afterlife?What's a word for someone who wants to voice opinions but not have them challenged?Word for someone who dismisses contrary opinions as irrational?Somone who thinks they are overly special/out of the ordinaryIs there a word, phrase or idiom for “a person who is incapable of thinking about the future”?The belief that a god is human-likeA word for a non-famous person/thing you have heard a lot aboutAdjective for a person who enjoys taking care of their appearance

What was this official D&D 3.5e Lovecraft-flavored rulebook?What was this set of RPG tools called?As a first-time DM should I let my players play complex character classes and roles?Nymph's Kiss and the RelationshipWhat was the name of this Cleric Prestige Class that shapes metal with its bare hands?Are the 3.5e Dragonlance books third party or official works?What's up with the domain Vile Darkness?What was this 80s book about RPGs?What was the name of this Werewolf band?What book had Rituals to “upgrade” animal companions to keep them viable at higher levels?What was this RPG that had rules for player-owned businesses?

2017 IndyCar Series Contents Series news Teams and drivers Schedule Season summary Footnotes References External links Navigation menu"INDYCAR: Initial 2018 bodywork concepts unveiled"the original"IndyCar confirms switch to Performance Friction brakes in 2017""AJ Foyt Racing will switch to Chevy"the original"Carlos Munoz, Conor Daly will drive for AJ Foyt Racing""Zach Veach's Indy 500 Debut Confirmed with Foyt""No mass exodus from Honda after Ganassi switch""Ex-F1 driver Sato joins Andretti Autosport for 2017 IndyCar season""IndyCar's Ryan Hunter-Reay, sponsor DHL paired through 2020""hhgregg and Andretti Autosport announce partnership for key races in 2016""INDYCAR: Rossi re-signs with Andretti"the original"McLaren Formula 1 - Fernando Alonso to race at Indy 500 with McLaren, Honda and Andretti Autosport""Shank will finally take part in Indy 500 with Harvey, Andretti | MotorSportsTalk""Andretti adds Jack Harvey to Indy 500 field""Ganassi switches to Honda power for 2017""INDYCAR: Chilton returns to Ganassi"the original"IndyCar silly season: Who's going where in 2017?""INDYCAR: Kanaan, NTT Data return to Ganassi"the original"Kimball to remain at Ganassi for 2017""Coyne confirms Bourdais for 2017 IndyCar season""Davison to sub for Bourdais in Indy 500"the original"Gutierrez confirmed for Detroit IndyCar debut""Gutierrez returns with Coyne for rest of 2017 season""Vautier to drive for Coyne at Texas"the original"INDYCAR: Coyne confirms Jones for 2017"the original"Pippa Mann returns to Coyne for Indy 500""Karam, Dreyer & Reinbold teaming up again for Indianapolis 500""Pigot to return to Ed Carpenter Racing""Hildebrand confirmed as full-time Ed Carpenter driver""Veach to replace injured Hildebrand at Barber"the originalNew Team Harding Racing Enters Chaves for 101st Indianapolis 500"Juncos Racing Announces Entry in 101st Running of the Indianapolis 500 :: Juncos Racing""Juncos confirms Pigot for Indy 500""Saavedra confirmed in Juncos' second 500 entry"the original"Lazier confirms Indy 500 run after son's USF2000 debut"the original"Claman DeMelo to race for RLLR at Sonoma"the original"Rahal signs Servia and ace engineer for 2017""IndyCar: Aleshin returns with Schmidt"the original"Aleshin replaced by Saavedra for Toronto""Jack Harvey will pilot SPM No. 7 car at Watkins Glen, Sonoma""Jay Howard confirmed in Tony Stewart's supported SPM Indy entry""INDYCAR: Newgarden to wave the flag at Penske"the original"Pagenaud opts for No. 1 in 2017"the original"Penske confirms Newgarden for 2017""Montoya to stay with Team Penske in 2017""Target leaving IndyCar after 27 seasons with Chip Ganassi""Cavin: IndyCar could see complete driver/team shakeup in 2017""End of the road for KV Racing?""KV Racing confirms closure, equipment sold to Juncos""Juncos confirms IndyCar Series entry"the original"Juncos readies IndyCar program, aims for '17 500"the original"Harding Racing to add Texas, Pocono to schedule"the original"Sato signs with Andretti Autosport for 2017""INDYCAR: Aleshin in Doubt at SPM"the original"Long Beach notebook: JR Hildebrand breaks hand""Hildebrand cleared to return at Phoenix"the original"Bourdais to undergo surgery on multiple fractures""Aleshin loses Schmidt Peterson IndyCar ride""Saavedra in at SPM for Pocono, Gateway"the original"Bourdais to make return at Gateway"the original"The IndyCar Grand Prix no longer is sponsored by Angie's List""2017 IndyCar Series rulebook""2017 Verizon IndyCar Series Official Rulebook"Official websiteeeeee