Apache http auth.

Hello.

I have a folder on my server i want to protect with http authentication but i have problem.

i created a password
htpasswd -c .htpasswd razzera

then i created a .htaccess file in the folder and added
AuthType Basic
AuthName "Restricted Files"
# (Following line optional)
AuthBasicProvider file
AuthUserFile /.htpasswd
Require user razzera

but when i go tho the folder it wont request any login details. why ??

did you try .htpasswd instead of /.htpasswd?

Right, that does not look like the correct FQ path to your .htpasswd file. (Unless you literally created it under / -- the filesystem root.)

Originally Posted by anomie Right, that does not look like the correct FQ path to your .htpasswd file. (Unless you literally created it under / -- the filesystem root.)

that's what i did. i created it under root and it's currently in the root.

Like suggested make sure to create the .htpasswd file in the right folder.
Another thing to check on is if the config of the apache allows usage of .htpasswd files.
Check your config for a line like

AllowOverride

If it reads like

AllowOverride None

.htpasswd files are not used.
Change it to

AllowOverride Auth

(from mind check out apache.org page for correctness)

Originally Posted by zhjim Like suggested make sure to create the .htpasswd file in the right folder. Another thing to check on is if the config of the apache allows usage of .htpasswd files. Check your config for a line like AllowOverride If it reads like AllowOverride None .htpasswd files are not used. Change it to AllowOverride Auth (from mind check out apache.org page for correctness)

Must the .htpasswd be in the folder i want to protect? cant it be in another place on the server ??

EDIT:

I changed it in the httpd.conf for apache so it's "AllowOverride Auth" now.

I now moved the .htpasswd to /etc/apache2/.htpasswd and my .htaccess looks like this

AuthType Basic AuthName "Restricted Files" # (Following line optional) AuthBasicProvider file AuthUserFile /etc/apache2/.htpasswd Require user razzera

still when i go to the folder i get no login details :/

Sorry I mixed up .htaccess and .htpasswd.
The .htpasswd file which contains the user and passwords can be anywhere. (Just make sure the user under which apache is running can access it).
The .htaccess file needs to go into the directory you want to protect.

Did you restart the apache after changing the config file?

apache2ctl -k restart

or

/etc/init.d/apache2 restart