[Ilugc] httpd auth
knura at yahoo.com
Wed Mar 25 14:57:07 IST 2009
On Wednesday 25 Mar 2009, Ashish Verma wrote:
> > Also give output of "ls -l /path/to/dot/htacess/file"
> > > AllowOverride None
> > ^^^^^^^^^^^^^^^^^^
> > Change above to AllowOverride AuthConfig
> > > AuthUserFile /mount/repositories/av1984_apache_authfile
> > Suggest you rename it to .av1984_apache_authfile otherwise to
> > prevent others gaining access to this file by giving the full path.
> > Arun Khan
> Aren't these parameter required when using .htaccess file. Are these
> required when the access is controlled from the httpd.conf file also.
> The above configuration works in Fedora9. Am not sure, but this may
> either be change in functioning of Apache or a bug.
What method are you referring to besides .htaccess? How are doing
access control from the httpd.conf?
Have you tried the above and verified whether it works or not?
BTW, looks like you are running your own server and thus I would suggest
to changes perms to 400 and ownership to the uid of the apache user, on
the passwd and the .htaccess (if any) file(s).
More information about the ilugc