Re: [users@httpd] Basic Authentication question

2005-07-15 Thread K Anand
Sorry, it seems there was a problem in my testing...Actually, that machine is also on the internal lan...it's lan ip is say 10.x.x.x...so in my browser, i was giving http://10.x.x.x/.at that time it was asking me for password...then in the page, I think there is a reference to the name ns.sail-

Re: [users@httpd] Basic Authentication question

2005-07-14 Thread K Anand
I tried with both IE and with FireFox..but both prompt me for the password twice...Did it ask you for the password only once ?? Anand > Works here using Mozilla.. what browser are you checking it with? > perhaps it's one that doesn't follow the standards properly :-) >

Re: [users@httpd] Basic Authentication question

2005-07-14 Thread zcat
K Anand wrote: That was my understanding alsoBut in my case, it is again prompting me for userid and password for subsequent pages also...Actually, it asks password 2 times when opening the main page..after that it does not ask for the password... http://ns.sail-steel.com/ userid is guest a

Re: [users@httpd] Basic Authentication question

2005-07-14 Thread K Anand
That was my understanding alsoBut in my case, it is again prompting me for userid and password for subsequent pages also...Actually, it asks password 2 times when opening the main page..after that it does not ask for the password... http://ns.sail-steel.com/ userid is guest and password is gs

Re: [users@httpd] Basic Authentication question

2005-07-14 Thread zcat
The browser prompts me for userid and password... now i click a link on that page and say the request goes as http://a.b.c.d/xyz.html Will it prompt again for user id and password ?? The browser keeps the username and password for the rest of the session, and will automatically send them with e

RE: [users@httpd] Basic Authentication question

2005-05-12 Thread Boyle Owen
> -Original Message- > From: Dick Davies [mailto:[EMAIL PROTECTED] > > You make it sound as though it's still a problem over SSL - > is that what you mean? It can't be snooped but it's still vulnerable. Each login attempt is regarded as a unique HTTP request and so is handled as fast

Re: [users@httpd] Basic Authentication question

2005-05-12 Thread Dick Davies
* Boyle Owen <[EMAIL PROTECTED]> [0523 12:23]: > > -Original Message- > > From: K Anand [mailto:[EMAIL PROTECTED] > > Sent: Donnerstag, 12. Mai 2005 10:46 > > To: users@httpd.apache.org > > Subject: Re: [EMAIL PROTECTED] Basic Authentication question > > > > > > Thanx...I used ethereal to

RE: [users@httpd] Basic Authentication question

2005-05-12 Thread Boyle Owen
> -Original Message- > From: K Anand [mailto:[EMAIL PROTECTED] > Sent: Donnerstag, 12. Mai 2005 10:46 > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] Basic Authentication question > > > Thanx...I used ethereal to see the flow of data between browser and > server...one point

Re: [users@httpd] Basic Authentication question

2005-05-12 Thread Dick Davies
* Boyle Owen <[EMAIL PROTECTED]> [0507 09:07]: > > The first time the client requests a resource in a protected realm, it > doesn't know it is protected so makes a plain request. The server responds > with a 401 Unauthorized. The client then pops up a password window and > captures the username

Re: [users@httpd] Basic Authentication question

2005-05-12 Thread Dick Davies
* Sandeep Gaikwad <[EMAIL PROTECTED]> [0558 09:58]: > Hello Anand, >Please try by updating the line AllowOverride None by >AllowOverride AuthConfig or AllowOverride All > > Regards, > Sandeep Guys, read the mails before posting replies, ok? What you suggest would enable .htaccess loading

Re: [users@httpd] Basic Authentication question

2005-05-12 Thread Sandeep Gaikwad
Hello Anand, Please try by updating the line AllowOverride None by AllowOverride AuthConfig or AllowOverride All Regards, Sandeep K Anand wrote: Hi all, I have a very basic question regarding authentication on apache...I have in my httpd.conf a section like below : AuthType Basic AuthN

Re: [users@httpd] Basic Authentication question

2005-05-12 Thread K Anand
Thanx...I used ethereal to see the flow of data between browser and server...one point though...I was able to see my password in clear text in ethereal. So it is possible that it could be open to the public ?? Anand - Original Message - From: "Boyle Owen" <[EMAIL PROTECTED]> To: Sent: Th

RE: [users@httpd] Basic Authentication question

2005-05-12 Thread Boyle Owen
> -Original Message- > From: K Anand [mailto:[EMAIL PROTECTED] > Sent: Donnerstag, 12. Mai 2005 05:52 > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] Basic Authentication question > > > you didn't understand what I was asking...The config I have > included is > working ..I

Re: [users@httpd] Basic Authentication question

2005-05-11 Thread K Anand
you didn't understand what I was asking...The config I have included is working ..I have used htpasswd and everything is working fineAll I want to know is how does apache know that I have already authenticated or not ? Anand - Original Message - From: "Chris Winfield-Blum" <[EMAIL

Re: [users@httpd] Basic Authentication question

2005-05-11 Thread Chris Winfield-Blum
you will have to use the htpasswd tools located in your apache bin to create the password file. then you point that directory to that file: ie: /etc/httpd/conf/passwd/passwords This should do that you need :) K Anand said the following: Hi all, I have a very basic question regarding authenticatio