.htaccess not causing auth dialogue

[skeliten]

Hey there, Thanks for looking at this with me:

I have a .htaccess in the directory I wish to secure:

The file reads as follows (some names have been changed to protect the innocent):

AuthName "zone"
AuthType Basic
AuthUserFile /var/www/auth/.htpasswd
AuthGroupFile /var/www/auth/.htgroup

<Limit GET>
require group group
</Limit>

I have verified the location of the password and group files.

They are both owner and world readable

This .htaccess file is in the directory I wish to protect.

It does not work, no security is apparent.

The mod_auth and mod_access are both in my config file and the filename for access files is set to .htaccess.

any suggesstions?

Thanks in advance:

[freebsd]

>> I have verified the location of the password and group files

Regardless what location they reside in or even non-existence, it should prompt you to enter the username and password UNLESS you haven't told Apache to read your .htaccess file.

Start here -> http://httpd.apache.org/docs/mod/core.html#allowoverride

And add AuthConfig to AllowOverride line in <Directory "/docroot/path/to/protect"> block or a directory up one level.

[ 14 October 2001: Message edited by: freebsd ]

[skeliten]

ok, i am looking at the file for an ovveride, but one more note for the record.

this is a stock install of RH7.1. No changes to the original httpd.conf

Lets see what the file says...

Gee whiz:

It says -

AllowOverride None

Which as per the documentation you pointed me at "causes the server to ignore .htaccess files completely."

Now to comment that and restart the server..

Great..

Now I get an internal server error after I enter my auth information.

So, now to figure out what the internal server error is, and I will be spot on...

Thanks again.

Any ideas about the internal error?

[skeliten]

ok, answered my own question, had commented a line in the .htaccess file to test. everything seems to be working properly now.

Thanks!