Re: Apache Settings [more]

[Alan Mead <adm ipat com>]

At 12:21 PM 9/20/00 , Jonathan Wilson wrote:
> Finally I'm being asked for a password, but I'm getting "Authorization 
> failed, retry?" errors.
>
> Any ideas why? I'm using htpasswd, read several examples and the man page, 
> it's so simple it's hard to mess up. Permissions and directives are as follows:
>
> [root csc003 RedHatUpdates]# ls -l /etc/httpd/conf/httpd.conf
> -rw-r--r--    1 root     root        34087 Sep 20 12:05 
> /etc/httpd/conf/httpd.conf
>
> <VirtualHost *IP_addresss_here*>
>     ServerAdmin wilson claborn net
>     DocumentRoot /Webhomes/Vanguard_mailer
>     ErrorLog logs/VanguardMailer-error_log
>     CustomLog logs/VanguardMailer-access_log common
>         <Directory /Webhomes/Vanguard_mailer>
>                 AllowOverride AuthConfig
>         </Directory>
> </VirtualHost>
>
> [root csc003 RedHatUpdates]# ls -l /Webhomes/Vanguard_mailer/.htaccess
> -rw-r--r--    1 admin    users         128 Sep 20 11:33 
> /Webhomes/Vanguard_mailer/.htaccess
>
> [root csc003 RedHatUpdates]# cat /Webhomes/Vanguard_mailer/.htaccess
> AuthType Basic
> AuthName "By Invitation Only"
> AuthUserFile /work/htpasswd.vanguard
> AuthGroupFile /dev/null
> require user *username_here*
>
>
> [root csc003 RedHatUpdates]# ls -l /work/htpasswd.vanguard
> -rw-r--r--    1 admin    users          23 Sep 20 12:08 
> /work/htpasswd.vanguard

I think the permissions you posted look OK but become nobody (# su - 
nobody) and try to cat everything to make sure.

I'm not sure of the implications of your AuthGroupFile and require 
lines.  My working basic_auth omits the AuthGroupFile and simply says 
'require valid-user'.

Finally, I'm sure you're way beyond this but you're sure you added the 
username and password correctly?  It's hard to screw up the password but 
the username could have a typo and if it is this, you'll be pulling all 
your hair out...

BTW, I think the default Red Hat Apache explicitly disables overriding 
authconfig... so that's why you have to add the directory entry in 
httpd.conf.  You wouldn't necessarily need to modify httpd.conf if you had 
rolled your own httpd.conf from scratch.

-Alan Mead