Xymon Mailing List Archive search

Apache ignoring .htaccess

4 messages in this thread

list Trever Noggle · Wed, 25 Sep 2019 18:01:50 -0600 ·
I followed the instructions in the xymon virtual host config file for 
enabling htaccess an apache is ignoring it and serving up the pages 
without requiring a username and passwd.


Any ideas and thank you in advance.


-Trever
list Bruce Ferrell · Wed, 25 Sep 2019 21:29:17 -0700 ·
quoted from Trever Noggle
On 9/25/19 5:01 PM, Trever Noggle wrote:
I followed the instructions in the xymon virtual host config file for enabling htaccess an apache is ignoring it and serving up the pages without requiring a username and passwd.


Any ideas and thank you in advance.


-Trever

Are there any errors in the error_log?? DO you have:

|AllowOverride All in the virtual host? |
list Trever Noggle · Wed, 25 Sep 2019 22:47:18 -0600 ·
Yes.? I am getting the following error in the apache error.log. some identifiable information masked

[Wed Sep 25 22:44:11.135589 2019] [core:alert] [pid 7282] [client IP ADDRESS:55174] /home/xymon/server/www/.htaccess: Invalid command 'USERNAME:HASHED PASSWORD', perhaps misspelled or defined by a module not included in the server configuration
quoted from Bruce Ferrell

On 9/25/2019 10:29 PM, Bruce Ferrell wrote:
On 9/25/19 5:01 PM, Trever Noggle wrote:
I followed the instructions in the xymon virtual host config file for enabling htaccess an apache is ignoring it and serving up the pages without requiring a username and passwd.


Any ideas and thank you in advance.


-Trever

Are there any errors in the error_log?? DO you have:

|AllowOverride All in the virtual host? |

list Bruce Ferrell · Wed, 25 Sep 2019 23:07:51 -0700 ·
quoted from Trever Noggle
On 9/25/19 9:47 PM, Trever Noggle wrote:
Invalid command 'USERNAME:HASHED PASSWORD', perhaps misspelled or defined by a module not included in the server configuration 
OK, that tells me .htaccess isn't being ignored.? There may be a mis-configuration in the auth modules, but

Just for grins and giggles, move the existing password file to the side and recreate it with the htpasswd command.


Do NOT use htpasswd -c

unless you DO move the existing out of the way first

it will look something like this:

 ?htpasswd /usr/local/etc/apache/.htpasswd-users jsmith