Apache auth & deb auth problem?

Apache auth & deb auth problem?

Post by Stefan Lanschütze » Mon, 19 Aug 2002 01:28:36

i got a apache (1.3.9) on debian (potato) running with many virtual Hosts,
everything ok so long.
But when i try to use basic authorisation via a .htaccess-file, i can't
access my site with any user. e.g.:
VHost slanschuetzer.gre-dv.at:


User www-data
Group www-data
LoadModule auth_module /usr/lib/apache/1.3/mod_auth.so

DocumentRoot /var/www/slanschuetzer.gr-edv.at
<Directory />
        Options FollowSymLinks
        AllowOverride ALL
ServerName slanschuetzer.gr-edv.at
ErrorLog /var/log/apache/slanschuetzer.gr-edv.at-error.log
TransferLog /var/log/apache/slanschuetzer.gr-edv.at-access.log


AuthType Basic
AuthName "Fuer lanschue und magic zugaenglich."
AuthUserFile ./pwd
<Limit GET>
Require user valid-user

user lanschue and magic are entries in the
/var/www/slanschuetzer.gr-edv.at/pwd - file
and /var/www/slanschuetzer.gr-edv.at has the rights:

drwxrwxr-x    lanschue    wwwstaff ........

and when i try to access the site via a browser, i get no access and
following errors in my error-log:

[Sat Aug 17 18:18:32 2002] [error] [client] access to /
failed, reason: user magic not allowed access

(trying a user not in my pwd-file gives me the error: "user xxxx not found:
/" so my pwd-file is really read.

has anyone an idea, why my valid users don't get access?



Apache auth & deb auth problem?

Post by Christoph Voge » Mon, 19 Aug 2002 02:43:23

[Authentication problems]

Quote:> .htaccess:
> AuthType Basic
> AuthName "Fuer lanschue und magic zugaenglich."
> AuthUserFile ./pwd
> <Limit GET>
> Require user valid-user
> </Limit>

Use "Require valid-user". Your Require directive lets Apache search for
a *user* called "valid-user", not for any user. Alternatively you could
use "Require user lanschue magic" to let just those users authenticate.
If there is no special reason for it, better get off the Limit context.




1. Apache Auth / Cookie auth


I want to use an Apache authentication module, but I want to have my own
login screen, which contains a fillout form for logging in.  Is this
possible?  Is a custom module necessary or are all the sites I see with
fill out form login pages using cookie based authentication?

Thanks in advance,

2. symbolic links

3. AUth DB/Auth DMB problems

4. Slackware System Detection..help!?

5. Syslogd not logging auth.info and auth.notice properly

6. Random "`" under X?

7. separate access auth + Limit/PUT auth in same dir?

8. Sendmail: send mail right-away by default?

9. Apache .htaccess & mysql auth

10. Auth & Apache

11. Apache 1.3: Combined name & anonymous auth?

12. ndbm & dbm auth in Apache 1.0.x

13. Apache & redirect upon basic auth cancel button