I'm tring to password protect a directory on my webserver. In my httpd.conf, I've edited it so it has:

AllowOverride AuthConfig

I've added a .htaccess file to the directory that looks like so:

AuthUserFile /var/www/access/.htpasswd
AuthName Foo
AuthType Basic
require valid-user

I created the passwd file by:

# htpasswd -c ../../access/.htpasswd briank

When I try to open the page, I get the password challenge, but it does not let me through. I've tried changing the ownership of the .htpasswd file to apache, but that still doesn't work.

What's wrong?

Apache 2.0.40
RH9

Thanks.

anyone?

Having the exact same problem...I upgraded to Apache 2.0.40 (clarkconnect)

And I changed nothing on a protected directory...but now it won't authenticate and let me in. I redid the htpasswd with no help. My .htaccess is setup exactly like BrianK's is.

anyone know if this is a known problem?


TKS

Got it!

it was a permissions problem. whoever owns httpd (which, in my case, is the user "apache") needs to own the .htaccess and the .htpasswd file.

user "apache" must also be able to cd into the directory that owns the .htpasswd file.

the permissions on the htpasswd file *must* be strict, i.e. go-rwx, or 600