Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I run Apache on Ubuntu and use basic HTTP authentication.

I have a htpasswd file and there is a user named scott with the password of tiger. However I changed the password to tiger1.

Now I can login using both tiger and tiger1. Even though I can see that there is only one line in the htpasswd file and the encrypted password has been changed after I changed the password.

What is the problem and how can I cope with it?

share|improve this question
How did you change the password? And what does your htpasswd file look like? Did you restart Apache afterwards? – webtoe Mar 28 '12 at 15:17
password created with htpasswd command. In the file, there is only one line, it says scott:somehashinfo. Yes, I restarted for several times. – noway Apr 2 '12 at 8:02

Check you .htaccess file and confirm the location of the htpasswd file .. maybe you are using 2 different files

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.