Member Avatar for jusCk

I guess that first post was a bit vauge.

I have Apache/1.3.3 (Win32) mod_perl/1.29_01-dev up and running. But it's Wide Open! Can someone give me a Walkthrough on setting up the htaccess, htpasswd, and how to use the dbmmanage? Examples would help.

Forgive Me the first post, this is really the First Forum I've participated in.

Site may be viewed at

  • 1 Contributor
  • 1 Reply
  • 196 Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by jusCk

Dani AI

Generated

Short, practical answer for : the reason "valid-user" wasn’t doing anything under /icons/ is that you used it in an IP/host-style directive. The Allow from family controls hosts/IPs (not authenticated usernames) — valid-user is an authorization keyword and must be used with Require together with AuthType/AuthUserFile (or DBM equivalent). (docs.oracle.com)

To protect the alias directory place authentication in the same Directory (or enable .htaccess for auth). Example (use your real paths):

<Directory "C:/apache/icons">
    AuthType Basic
    AuthName "Icons Area"
    AuthUserFile "C:/apache/conf/.htpasswd"
    Require valid-user
</Directory>

Or, to use .htaccess keep AllowOverride AuthConfig on that Directory and put the three auth lines inside .htaccess. AllowOverride None will stop .htaccess from being read. (svn-master.apache.org)

Creating password stores: on Windows use the bundled htpasswd.exe (use -c only the first time). For DBM-style stores (Apache 1.3 era) dbmmanage is the tool to add/check users; newer releases provide htdbm with similar switches. Example commands:

htpasswd.exe -c "C:\apache\conf\.htpasswd" alice
dbmmanage authdb adduser alice
dbmmanage authdb view

Keep the password file outside the document root and ensure Apache can read it. (httpd.apache.org)

Quick troubleshooting checklist: (1) Use Require valid-user (not Allow from valid-user). (2) If using .htaccess, set AllowOverride AuthConfig. (3) Check error_log for messages like “check user. No user file?” which point to missing/misconfigured auth files or modules. (4) Remember Basic auth sends credentials in cleartext — use HTTPS for anything sensitive. (docs.oracle.com)

If needed, post the exact /icons/ Directory block and the server error_log lines (remove any real passwords) and someone can point out the specific mis-merge or module problem.

Member Avatar for jusCk

Got this worked out.

<Directory />
AuthType Basic
AuthName "Members Only"
AuthUserFile "C:/Program Files/Apache Group/Apache/bin/pswd"
Require user SysAdmin Ck test valid-user
</Directory>

Any thoughts on Why valid-user isn't being accepted for /icons/?
It's listed as being usable in the Documentation.

test password: 12345

Alias /icons/ "C:/Program Files/Apache Group/Apache/icons/"

<Directory "C:/Program Files/Apache Group/Apache/icons/">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from valid-user
</Directory>

Alias /ads/ "C:/Program Files/Apache Group/Apache/htdocs/bin/ads/"

<Directory "C:/Program Files/Apache Group/Apache/htdocs/bin/ads/">
Options Indexes MultiViews
AllowOverride All
Order allow,deny
Allow from all
</Directory>

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.