apache 1.3.27, basic authentication problem
 

here is the section in question from my httpd.conf file:

<Directory /var/www/html/pics>
AuthName "VIP Area"
AuthType Basic
AuthUserFile /home/username/.pass
require user username
</Directory>


i added this at the end of my httpd.conf file so that i could make that paritcular directory password protected. to set it up i did the fllowing:
it then asked me for the password (twice) and accepted it.

now, when i go to the page, i get the popup and it has my site name the AuthName "VIP Area" shows up and everything.....but when i enter the username and password, i cannot gain access to the information, it treats it as if either the user name is wrong, the password is wrong or both and i get the access denied page after like 3 tries.

i even went as far as making the .pass file readable by everyone (group user and other) but that didnt work either.

ideas?

Thanks

bump: just moving it up to see if i get a reply this time....im still lost on this one, i tried it again and even read it in a book.....still a no-go.

The problem is this:
That configuration doesn't go in your httpd.conf file, you have to create a separate .htaccess file in the directory you want to protect.

Try searching on the subject, its brought up all the time as I know there is one going on in the Newbie forum as we speak.

yea, i saw that option listed but it also said it was recommended to not do it that way.....but if it works....im game.

oh, I have the wrox book Professional Apache...that's where i read that you should try to do it the other way. But like i said....whatever..doesnt matter to me, at this point i just want it to work.

It seems to me that you should try putting the password file (.pass) somewhere in the /var/www dir tree, and see if that works, I'm not sure that after startup when apache would normally go to a lower privelege level how far it's allowed to go to get at the files it needs.

Does apache have read permissions on the .pass file?

i got this to work a few days ago, i just put the directives
in the .htaccess file and did the override directive. I didnt get it
to work with directives in the regular .conf file, but it's cool i guess.