[TriLUG] apache password authentication

[Dave Sorenson]

I found this link useful:
http://www.redhat.com/support/resources/faqs/RH-apache-FAQ/topics/htaccess.h
tml

It's also been pointed out to me that it's a good idea to locate your
htpasswd file outside of your web root. (Locate the file in /var/, instead
of /var/www/). In my case I set my apache to serve /home/sitename/html/ as
document root, and located the htpasswd in /home/sitename/.

My .02, YMMV

Dave S.




-----Original Message-----
From: trilug-bounces at trilug.org [mailto:trilug-bounces at trilug.org] On Behalf
Of Douglas Kojetin
Sent: Saturday, January 31, 2004 2:48 PM
To: Triangle Linux Users Group discussion list
Subject: [TriLUG] apache password authentication


Hi All-

I'm trying (first time) to create a password login to an area on my 
site and/or allow a specific IP address.  I cannot seem to get past a 
'revolving' password prompt.  I can change the 'allow from 
ipaddress.com' to my IP or not, which will allow or disallow me access, 
but the password prompt is not working properly.  Below is some info 
... any advice?

# create htpasswd/user
htpasswd -c /var/www/.htpasswd test
 > test
 > test

# .htaccess, found @ /var/www/html/intranet/.htaccess
AuthType Basic
AuthGroupFile /dev/null
AuthName "Fun Authorization Required"
AuthUserFile /var/www/.htpasswd
require valid-user
Order allow,deny
allow from ipaddress.com
satisfy any

# httpd.conf
<Directory /var/www/html/intranet>
         Options Indexes Includes FollowSymLinks
         AllowOverride All
         Allow from all
         Order allow,deny
</Directory>

Thanks,
Doug

-- 
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ  : http://trilug.org/faq/
TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
TriLUG PGP Keyring         : http://trilug.org/~chrish/trilug.asc