Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I run Apache on Ubuntu and use basic HTTP authentication.

I have a htpasswd file and there is a user named scott with the password of tiger. However I changed the password to tiger1.

Now I can login using both tiger and tiger1. Even though I can see that there is only one line in the htpasswd file and the encrypted password has been changed after I changed the password.

What is the problem and how can I cope with it?

share|improve this question
1  
How did you change the password? And what does your htpasswd file look like? Did you restart Apache afterwards? –  webtoe Mar 28 '12 at 15:17
    
password created with htpasswd command. In the file, there is only one line, it says scott:somehashinfo. Yes, I restarted for several times. –  noway Apr 2 '12 at 8:02
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.