htaccess / password not working

Hi all,

Hopefully someone out there can help, I seem to be having huge problems
getting password protection working. I'm running Debian unstable with
Apache 2.0.55-4 and just want to password protect the root directory.

I'm not getting anything usefull from the var/log/apache2 files.

I've got a correctly generated .htpasswd file with two users listed.

First I tried adding a .htaccess file to /var/www thus:

AuthUserFile /etc/apache2/.htpasswd
AuthGroupFile /dev/null
AuthName "By Invitation Only"
AuthType Basic
<Limit GET POST>
require valid-user
</Limit>

Which needless to say didn't even seem to get noticed...

So I added...

<Directory /var/www/>
AuthType Basic
AuthName "By Invitation Only"
AuthUserFile /etc/apache2/.htpasswd
AllowOverride AuthConfig
Require valid-user
</Directory>

Just before the last </VirtualHost> to my sites-available/default file, and
changed the AllowOverride None to AuthConfig further up the same file.

Still nothing...

So I generated a mybit.conf file in the conf.d directory containing:

<Directory /var/www/>
AuthType Basic
AuthName "By Invitation Only"
AuthUserFile /etc/apache2/.htpasswd
Require valid-user
</Directory>

Still nothing...

So I tacked it on the end of the apache2.conf file as well!

STILL NOTHING!

So my sites-available file now looks like...

NameVirtualHost *
<VirtualHost *>
ServerAdmin webmaster@localhost

DocumentRoot /var/www
<Directory />
Options FollowSymLinks
AllowOverride AuthConfig
</Directory>
<Directory /var/www/>
Options Indexes FollowSymLinks MultiViews
# AllowOverride None
AllowOverride AuthConfig
Order deny,allow
# allow from all
deny from all
# Uncomment this directive is you want to see apache2's
# default start page (in /apache2-default) when you go to /
#RedirectMatch ^/$ /apache2-default/
</Directory>

ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
<Directory "/usr/lib/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory>

ErrorLog /var/log/apache2/error.log

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn

CustomLog /var/log/apache2/access.log combined
ServerSignature On

Alias /doc/ "/usr/share/doc/"
<Directory "/usr/share/doc/">
Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128
</Directory>

# My bit
<Directory /var/www/>
AuthType Basic
AuthName "By Invitation Only"
AuthUserFile /etc/apache2/.htpasswd
AllowOverride AuthConfig
Require valid-user
</Directory>

</VirtualHost>

I've kind of run out of options now! Anyone want to tell me where I should
put the darn statements? I'd rather not have a .htaccess file if I can
avoid it, but having neither strategy work is doing my head in!!!

fluffkin wrote:
> Hi all,
>
> Hopefully someone out there can help, I seem to be having huge problems
> getting password protection working. I'm running Debian unstable with
> Apache 2.0.55-4 and just want to password protect the root directory.
>
> I'm not getting anything usefull from the var/log/apache2 files.
>
> I've got a correctly generated .htpasswd file with two users listed.
>
> First I tried adding a .htaccess file to /var/www thus:
>
> AuthUserFile /etc/apache2/.htpasswd
> AuthGroupFile /dev/null
> AuthName "By Invitation Only"
> AuthType Basic
> <Limit GET POST>
> require valid-user
> </Limit>
>
> Which needless to say didn't even seem to get noticed...
>
> So I added...
>
> <Directory /var/www/>
> AuthType Basic
> AuthName "By Invitation Only"
> AuthUserFile /etc/apache2/.htpasswd
> AllowOverride AuthConfig
> Require valid-user
> </Directory>
>
> Just before the last </VirtualHost> to my sites-available/default file, and
> changed the AllowOverride None to AuthConfig further up the same file.
>
> Still nothing...
>
> So I generated a mybit.conf file in the conf.d directory containing:
>
> <Directory /var/www/>
> AuthType Basic
> AuthName "By Invitation Only"
> AuthUserFile /etc/apache2/.htpasswd
> Require valid-user
> </Directory>
>
> Still nothing...
>
> So I tacked it on the end of the apache2.conf file as well!
>
> STILL NOTHING!
>
> So my sites-available file now looks like...
>
> NameVirtualHost *
> <VirtualHost *>
> ServerAdmin webmaster@localhost
>
> DocumentRoot /var/www
> <Directory />
> Options FollowSymLinks
> AllowOverride AuthConfig
> </Directory>
> <Directory /var/www/>
> Options Indexes FollowSymLinks MultiViews
> # AllowOverride None
> AllowOverride AuthConfig
> Order deny,allow
> # allow from all
> deny from all
> # Uncomment this directive is you want to see apache2's
> # default start page (in /apache2-default) when you go to /
> #RedirectMatch ^/$ /apache2-default/
> </Directory>
>
> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
> <Directory "/usr/lib/cgi-bin">
> AllowOverride None
> Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
> Order allow,deny
> Allow from all
> </Directory>
>
> ErrorLog /var/log/apache2/error.log
>
> # Possible values include: debug, info, notice, warn, error, crit,
> # alert, emerg.
> LogLevel warn
>
> CustomLog /var/log/apache2/access.log combined
> ServerSignature On
>
> Alias /doc/ "/usr/share/doc/"
> <Directory "/usr/share/doc/">
> Options Indexes MultiViews FollowSymLinks
> AllowOverride None
> Order deny,allow
> Deny from all
> Allow from 127.0.0.0/255.0.0.0 ::1/128
> </Directory>
>
> # My bit
> <Directory /var/www/>
> AuthType Basic
> AuthName "By Invitation Only"
> AuthUserFile /etc/apache2/.htpasswd
> AllowOverride AuthConfig
> Require valid-user
> </Directory>
>
> </VirtualHost>
>
> I've kind of run out of options now! Anyone want to tell me where I should
> put the darn statements? I'd rather not have a .htaccess file if I can
> avoid it, but having neither strategy work is doing my head in!!!

Perhaps you overlooked restarting the webserver to read in your changes ?

This is what I have in my httpd.conf file and it works as expected.

<Directory "/path/to/my/ftp_isos">
AllowOverride AuthConfig
AuthType Basic
AuthName "Mandriva FTP Downloads"
AuthUserFile /var/.mandriva_passwd
Require valid-user
</Directory>