TCLUG Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Apache authentication trouble



I am trying to restrict certain pages on a web site with user 
authentication in Apache and I am in need of some help.

I started by going to the Apache site for help and that led me to this URL: 
http://www.apacheweek.com/features/userauth The document there seemed 
straightforward enough but I am not able to restrict anything yet. Here's 
what I did...

1) created a 'user' file with htpasswd and added one user and entered a 
password. I placed that file in /usr/local/etc/httpd. I had to create a 
couple of those directories, and I did so as root.

2) created a .htaccess file and here is what it contained:

  AuthName "mike-restricted"
  AuthType Basic
  AuthUserFile /usr/local/etc/httpd/users

  require mike

3) For a little more background, here is my directory structure

/home/httpd/html	here resides my index.html file. Server root.
/home/httpd/html/mike  I want this directory and all subs secured.
/home/httpd/html/mike/stuff  a subdirectory to be secured.

4) I added the following to the standard access.conf file found in 
/etc/httpd/conf

<Directory /home/httpd/html/mike>
order deny,allow
deny from all
Options None
AllowOverride AuthConfig
</Directory>

Note: I played around with this a bunch and never noticed any changes.

5) From my homepage (index.html in /home/httpd/html) I had a link on one of 
the pages that would go to the following page:

<a href="mike/stuff/testpage.html">testpage</a>

From what I have been able to determine, that when I click on the link to 
this page, so magical screen should pop up asking me to authenticate myself 
before I get to see that page. Nothing of the sort happens, it just pops 
open immediately.

Can anyone point out what I am doing wrong?? Or point my to some other 
documentation that could walk me through this?? I am using a fairly 
unmodified RedHat 6.0 installation for this web server.

Thanks,
Mike

------- End of forwarded message -------