Gossamer Forum
Home : Products : Links 2.0 : Discussions :

Problem getting admin directory secure

Quote Reply
Problem getting admin directory secure
I have read the post at the bottom and have done everything that was suggested. In my srm.conf .htaccess is enabled. I made a .htpasswd file using 'htpasswd -c .htpasswd username' and it worked. Still when i loggin to the admin dir it says its not protected..... Suggestions? btw: what perms should the .htaccess & .htpasswd be?

------------------
Team Linux 2000
http://www.linux-2000.org
Quote Reply
Re: Problem getting admin directory secure In reply to
The permissions of both .htaccess and .htpasswd should be:

-rw-r--r-- (or 644)

Interpretation:

Owner: Read and Write
Group: Read
Everyone: Read

Regards,


------------------
Eliot Lee
Founder and Editor
Anthro TECH, L.L.C
http://www.anthrotech.com/
info@anthrotech.com
==========================
Coconino Community College
http://www.coco.cc.az.us/
Web Technology
Coordinator
elee@coco.cc.az.us
Quote Reply
Re: Problem getting admin directory secure In reply to
Yes, the .htaccess & .htpasswd are set 644.
---
vi .htaccess
AuthUserFile /path/to/admin/.htpasswd
AuthName "Password for access:"
AuthType Basic
require valid-user
---
vi .htpasswd
username:encrypted_passwd

This is the format set for these files. Do you see any mistakes?

Regards,

------------------
Team Linux 2000
http://www.linux-2000.org
Quote Reply
Re: Problem getting admin directory secure In reply to
Yep...You are missing a key component in your .htaccess file. It should be as follows for Apache 1.2.1 and above:

Code:
AuthUserFile /path/to/.htpasswd
AuthGroupFile /dev/null
AuthName "Password Secure Area"
AuthType Basic

<Limit GET POST>
require valid-user
</Limit>

Hope this helps.

Regards,

------------------
Eliot Lee
Founder and Editor
Anthro TECH, L.L.C
http://www.anthrotech.com/
info@anthrotech.com
==========================
Coconino Community College
http://www.coco.cc.az.us/
Web Technology
Coordinator
elee@coco.cc.az.us
Quote Reply
Re: Problem getting admin directory secure In reply to
Thanks Eliot,
I put:
AuthUserFile /path/to/.htpasswd
AuthGroupFile /dev/null
AuthName "Password Secure Area"
AuthType Basic
<Limit GET POST>
require valid-user
</Limit>

as my .htaccess, sent a HUP to httpd for grins but still am getting that nasty flashing Warning signal (ugg). On the AuthName "Password Secure Area" .... that is just a warning when me or anyone tries to access that directory? right? This is Apache 1.3.6.
Basically 'htpasswd -c .htpasswd username' i can use any userid with a password, this only sets 'MY' access pass and uid. Well, if you can think of any ideas why this isnt working let me know.

Regards,
Quote Reply
Re: Problem getting admin directory secure In reply to
Okay? .htaccess and .htpasswd are still not working for me. See previous post. Im just gonna restart this thread hopefully i can get more feedback.