Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a bunch of dev domains that are all subdomains of e.g., etc

They all use HTTP authentication and the same username and password. Is there a way of adding a wildcard username and password to my mac keychain?

share|improve this question
So, no control of the type of HTTP Authentication? – Arjan Oct 5 '09 at 20:15
Nope, sorry it is what it is :( – Tom Oct 6 '09 at 10:29
up vote 2 down vote accepted

The Keychain and Safari's built-in password manager does not support wildcards, as far as I know.

An alternative would be 1Password, a third-party password manager that integrates with Safari, Firefox, and other browsers and does support wildcards. (Actually, it will offer to autofill a password for any subdomain of the domain associated with the password.) It's not as simple or straightforward to use as what's built in, but is definitely worth a look.

share|improve this answer

They all use HTTP authentication

If that is HTTP Basic Authentication then I think you're out of luck (and your credentials are sent in an insecure way when not using HTTPS). But, if it is HTTP Digest Authentication then you can fix it on the server, assuming you can control those development servers and have a limited number of domains.

For Apache see directive AuthDigestDomain in mod_auth_digest:

The specified URIs are prefixes; the client will assume that all URIs "below" these are also protected by the same username/password.
The URIs specified can also point to different servers, in which case clients (which understand this) will then share username/password info across multiple servers without prompting the user each time.

(See also domain as defined in "3.2.1 The WWW-Authenticate Response Header" of RFC 2617. See also Apache .htaccess trick to authenticate only once for all subdomains? on Stack Overflow. Note that old versions of IE have some issues.)

share|improve this answer

I went ahead and filed a bug on Firefox for this. Surprised it wasn't filed already:

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .