hey all

i'm trying to protect some directories in my apache tree, and so i looked into it, and this is what i got.

<Directory "/free/httproot/music">
AuthType basic
AuthName "Sercure Area"
AuthUserFile "/usr/local/apache2/passwd/passwords"
Require valid-user
</Directory>

I set up the passwords file, and it all looks good.

When i surf to the page, i do get prompted for my login, but it always fails. I cannot for the life of me figure out what I could be doing wrong. I am sure that the password file is genereated correctly, and all path names are correct, it just seems not to work right. Any ideas? Thanks

deflin39

You typically need a .htaccess file...In that .htaccess file it also has AuthName, AuthType and AuthUserFile etc...then require valid-user

This is what I was going by. It says I don't have to use .htaccess files, and it even recommends against it. (However I know alot of people use them...) Thats why i'm using httpd.conf

My problem is with apache seeming to have trouble validating the person logging in. Just wondering if I might be missing something fundamental with the setup? I do have mod_auth and mod_access loaded.

deflin39

Thanks for your help everyone. I got it working now. Looks like someone needs to read their log files before posting...

"[Fri Jan 09 01:52:19 2004] [error] (13)Permission denied: Could not open password file: /usr/local/apache2/passwd/passwords"

chmod to the rescue!

deflin39

Heh, that's ok, when I was doing my RHCE test, I sat there for about 15 minutes trying to figure out why I couldn't get something to work, and I _was_ reading my log files...but sometimes what you're expecting isn't what you're reading...it happens.