The following reply was made to PR mod_auth-any/4707; it has been noted by
GNATS.
From: Alex Chang <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: mod_auth-any/4707: can not implement user authentication
using mod_auth
Date: Wed, 07 Jul 1999 18:53:13 +0100
At 03:19 PM 7/7/99 +0000, you wrote:
>[In order for any reply to be added to the PR database, you need]
>[to include <[EMAIL PROTECTED]> in the Cc line and make sure the]
>[subject line starts with the report component and number, with ]
>[or without any 'Re:' prefixes (such as "general/1098:" or ]
>["Re: general/1098:"). If the subject doesn't match this ]
>[pattern, your message will be misfiled and ignored. The ]
>["apbugs" address is not added to the Cc line of messages from ]
>[the database automatically because of the potential for mail ]
>[loops. If you do not include this Cc, your reply may be ig- ]
>[nored unless you are responding to an explicit request from a ]
>[developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]
>
>
>Synopsis: can not implement user authentication using mod_auth
>
>State-Changed-From-To: open-feedback
>State-Changed-By: coar
>State-Changed-When: Wed Jul 7 08:19:06 PDT 1999
>State-Changed-Why:
>
1. What messages are in the error log?
Error log
[Wed Jul 7 18:08:31 1999] [error] [client 10.1.1.5] (13)Permission
denied: Could not open password file:
/usr/local/apache/secrets/.htpasswd
[Wed Jul 7 18:08:31 1999] [error] [client 10.1.1.5] user achang not
found: /
the permission on password file was set to 755 and root as the owner, I
have also tried it as nobody as owner,
since apache runs as nobody
Access log
10.1.1.5 - achang [07/Jul/1999:17:33:44 -0700] "GET / HTTP/1.0" 401 460
10.1.1.5 - achang [07/Jul/1999:17:33:50 -0700] "GET / HTTP/1.0"
401 460
even though the password was set correctly and typed correctly
2. How did you create the password file??
/usr/local/apache/bin/htpasswd ../secrets/.htpasswd achang
3. What are the lines in the password file??
The password is: box
achang:swKJyuLxcAjgs
achang:9fLTdI3vG/yCo same password just reseted
4. The .htaccess file in the document root
AuthName "Group's Members and Clients only"
AuthType Basic
AuthUserFile /usr/local/apache/secrets/.htpasswd
require user achang