View Single Post

  #3 (permalink)  
Old 08-25-2005
David Efflandt
 
Posts: n/a
Default Re: having trouble getting .htaccess file to engage

On 23 Aug 2005, laredotornado@zipmail.com <laredotornado@zipmail.com> wrote:
> Hi, I'm trying to password-protect a directory on my Apache 1.31
> server. I've placed the file in the appropriate directory. It
> consists of
>
> AuthType Basic
> AuthUserFile "/my/path/that/exists/.htpasswd"
> AuthName Limited!
> require valid-user
>
> I've verified that the .htpasswd file exists. I used
> http://www.poplarware.com/cgi-bin/htpasswd.cgi to generate the line in
> my .htpasswd file. However, whenever I visit the directory I want to
> password protect, no prompt appears. I've tried restarting my server
> and set the .htaccess file permissions to 775.


Your .htaccess and .htpasswd files do not need more than 644 permission,
and might even be considered insecure if greater than that. Although, if
you are using a CGI to populate your .htpasswd it might depend who your
CGI is running as (whether suexec is effective). But it is more likely
that you overlooked the AllowOverride in your main config per another
reply.