debian / apache / http authentication

sde · 08-02-2004, 12:45 PM

the examples i have found to setup http authentication with apache don't exactly seem like they go with this debian woody/apache setup.

can anyone tell me how to setup basic http authentication with debian?

sde · 08-02-2004, 12:59 PM

here is how i did it, but it does not work yet:

Code:

# dbmmanage /tmp/users add username password
# mv /tmp/users /my/path

then i made a .htaccess file:

Code:

AuthType	basic
AuthName	"Only for authorized personnel"
AuthUserFile	/my/path/users
Require	valid-user

it prompts for a username/password, but it will not authorize.

anything look wrong?

technobard · 08-02-2004, 01:58 PM

I don't know anything about debian or dbmmanage, but I thought you needed htpasswd(sp?) to setup the file storing username, passwords. Is dbmmanage handling this functionality?

sde · 08-02-2004, 02:49 PM

after reading a bit more i found out that dbmmanage makes an encrypted version of the password file. in my example above, the file line should be: AuthDBMUserFile if you are using a dbm file.

either way, i can't get it to work. if i don't use the dbmmanage to encrypt the file, what is the format of a normal htpasswd file? is it:

user:password
user:password

sde · 08-02-2004, 02:55 PM

u got me on the right track:

Code:

$ htpasswd -c .htpasswd name-of-user

i don't need to encrypt it, this works great.