If this is a fresh install of slackware, can we assume slackware 14? If that’s 
the case, you’re also running httpd-2.4.3, right? Best way to do it:

 

1.       Get rid of the .htaccess file in cgi-bin/vqadmin

2.       in your httpd.conf remove the directive “order deny,allow” and replace 
it with “require valid-user”

3.       apachectl -k restart

 

old way:

 

#httpd.conf

<Directory /srv/httpd/cgi-bin/vqadmin>

                deny from all

                Options ExecCGI

                AllowOverride AuthConfig

                Order deny,allow

</Directory>

#.htaccess

AuthType Basic

AuthUserFile /etc/httpd/vqadmin.passwd

AuthName vQadmin

require valid-user

satisfy any

 

new way

#httpd.conf

<Directory /srv/httpd/cgi-bin/vqadmin>

                Options +ExecCGI

                AllowOverride AuthConfig

                AuthType Basic

                AuthName vQadmin

                <RequireAll>

                                Require valid-user

                                Require ip 192.168.0.0/24

                </RequireAll>

</Directory>

 


Technically, you could split some of those directives into an .htaccess file, 
but 1. The larger your passwd file, the bigger the performance hit 2. If you 
have permission to install qmail on the box, you should prolly also have 
permission to edit httpd.conf.

 

Hope this helps.

 

 

 

From: Przemek Kuzioła [mailto:[email protected]] 
Sent: Monday, January 21, 2013 8:44 AM
To: [email protected]
Subject: [vqadmin] [SPAM] vQadmin - problem

 

Hi,
I've a problem with login to vqadmin.
Every time I get:

-----------------------------------------------------
Authentication Failed Username unknown
 
 
vQadmin was unable to determine your username, which
means your webserver is improperly configured to run
with this CGI.  For security reasons, this script
will not run without Apache htaccess lists.
------------------------------------------------

It is a fresh installation. The system is Slackware.
There is  a .htaccess file and corresponding password file (made with htpasswd).
But it doesn't work. I've checked apache modules and it looked like all were 
loaded.
Even tried to delete password file and the message was still the same. It had 
no effect.
No errors in apache error.log
I'm stuck.
Regards

-- 
Pozdrawiam
Przemek Kuzioła 

 



!DSPAM:50fd3f0a34148484819868!

Reply via email to