Password file format used on Apache web servers

learn more… | top users | synonyms

-1
votes
2answers
74 views

How to use .htaccess and .htpasswd for selective redirects & passwords

In my /var/www/ directory I have many directories some like: /var/www/impdata/ /var/www/data/ So can I achieve this: When I go to: www.websitename.com/data/ it should give an 404 error. And when ...
0
votes
2answers
55 views

Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access

Given a administrative area with urls like this: wp-admin/ wp-admin/whatever wp-admin/another-page wp-adminsecretlogin A standard basic-auth coverage would provide a username and password prompt on ...
0
votes
2answers
234 views

Nginx Server Block Port 8081 Path to Root Folder

I'm trying to password protect all of port 8081 on my Nginx server. The only thing this port is used for is PhpMyAdmin. When I navigate to https://www.example.com:8081, I successfully get the default ...
0
votes
1answer
50 views

apache how to limit per user ip

i have a password protected directory with hundreds of users in htpasswd file. i want to allow download of files on these conditions: check if username is valid (already done). check if another ...
1
vote
2answers
936 views

Invalid command 'AuthType', perhaps misspelled or defined by a module not included in the server configuration

I'm trying to password protect the document root and all I get is an "internal server error" page. The Apache error log shows: Invalid command 'AuthType', perhaps misspelled or defined by a module ...
0
votes
0answers
107 views

.htaccess password not working

I've been trying to use .htaccess to password protect a folder for a website. Unfortunately I can't seem to get it to work. I'm not getting an error, but the password being set in the .htpasswd file ...
0
votes
1answer
35 views

htpasswds loads site after failed authentication

I'm having an issue with htpasswds on a dedicated server with cpanel/whm where the visitor can simply click the "cancel" button several times on the htpasswds pop up and it will load the site but ...
1
vote
0answers
50 views

Password protect website

I'm trying to password protect my website from ONE ip address. I just want to restrict an ip from accessing my website, but still allow them to access it if they have the password. My current code ...
0
votes
0answers
128 views

.htpasswd allow one URL with RewriteEngine = on

I'm trying to get exception from auth (.htpasswd ) for one specific URL, but seems, that it does not work with my Rewriting rules. Disabling RewriteEngine solving auth problem. My .htaccess: SetEnv ...
0
votes
2answers
2k views

Apache .htaccess error: 'not allowed here' on Debian Wheezy

I am trying to configure an apache virtualhost which needs to be password protected in the root directory. So I created a .htpasswd file (with sha passwords) and configured the .htaccess file. ...
1
vote
1answer
45 views

Apache server password file (htpasswd) encoding

I use .htaccess, basic authentication and a corresponding password file to secure my web-space. The hosting is Linux / Apache. I want to support a user name with French accents (ie. not ASCII). ...
0
votes
1answer
338 views

Looking to generate a directory exception to .htpasswd SSL-protected site

I have an entire site under .htpasswd with SSL - any http requests are rejected - and am trying to exempt a folder from the rule. Either to do a basic .htpasswd for the directory, or make it open. I'm ...
2
votes
2answers
823 views

How can I make Jenkins inaccessible to the outside world?

On a development server, I have installed the tool Jenkins for automated testing. This runs on port 8080. If I go to www.mysite.com:8080 I can see the command panel for this. I want to make this ...
2
votes
0answers
232 views

(WordPress) .htaccess redirecting actual subfolder location

I have WordPress setup in root, but I have a sub-folder that is not related to WordPress as well. I just moved servers, so before if I went to .com/admin/ I would get that subfolder. Now, I (and ...
0
votes
3answers
173 views

Does Apache use any other dot ht files besides .htaccess and .htpasswd?

I'm hardening my Apache server config and wondering if it uses any other "^.ht.+" files besides .htaccess and .htpasswd?
0
votes
1answer
141 views

.htaccess password directory protection - blank page

i want to use for some website Apache password protection for an directory. This is not mine hosting so I can't look to logs or sth. So I just copied my .htacces that works just perfect on my hosting. ...
1
vote
1answer
262 views

Is the following .htpasswd .htaccess login SSL protected?

I have a directory that I have protected using .htpasswd/.htaccess HTTP authentication. In the .htaccess file for the directory I have this: SSLRequireSSL <Files .htaccess> order allow,deny ...
0
votes
1answer
526 views

Apache: Restrict directory access per User

I'm looking for a solution to restrict access to directorys. I've a bunch of clients and each of them should be allowed to view only his own directory. But he needs to have (read) access to the global ...
1
vote
2answers
1k views

Setup htpasswd for a specific URL

I have a htpasswd file, works fine - in my htaccess I have: <Limit GET POST> require valid-user </Limit> Which works, login/passwd shows up fine when you reach the root of website. ...
1
vote
2answers
995 views

Apache basic HTTP authentication not working

Trying to setup basic HTTP authentication with Apache, but it's not working. I get the directory listing and files regularly, no authentication required. I tried restarting httpd and the browsers ...
1
vote
1answer
598 views

Apache htaccess passwd - ignoring correct login

I want to password protect a directory. I'm running Apache 2 with cPanel on Centos. For the sake of this post, the directory is /home/user/my-secret-dir I used cPanel's "Password Protect ...
0
votes
2answers
133 views

Can't copy .htpasswd or .changes from ubuntu server via samba. Why?

I'm trying to copy a twiki data dir (ubuntu server) via a samba share to an XP box... all files copy except for .htpasswd and .changes. Any ideas why not? Is there some service that is protecting ...
3
votes
3answers
10k views

Password protect directory with Apache: “couldn't check user. Check your authn provider!”

I am trying to password protect a web directory with apache. I have the site set up like this: D:/ webapp/ lib/ .htpasswd document_root/ admin/ index.php ...
4
votes
1answer
2k views

What kind of algorithm does .htpasswd uses?

I am trying to generate this kind of hashes programmatically: axF3s9cdEnsNP But I can't identify what kind of hash it is. The hash comes from a .htpasswd file. All the online htpasswd generators I ...
0
votes
1answer
564 views

Apache authentication inside a WordPress install

I am currently running into an issue with trying to password protect a directory that is sitting inside a directory that's running WordPress. This is for a directory called "admin" that handles a few ...
0
votes
1answer
2k views

500 error after creating htpasswd and edit htaccess

I just edited the htaccess file to include: AuthType Basic AuthName "My Protected Area" AuthUserFile /home/path/to/public_html/ Require valid-user I then created a htpasswd file via the htpasswd ...
0
votes
2answers
2k views

Private access to the path within RewriteEngine rule

I have the following .htaccess file (usual one for MediaWiki): RewriteEngine On RewriteRule ^wiki/(.*)$ /w/index.php?title=$1 [PT,L,QSA] RewriteRule ^wiki/*$ /w/index.php [L,QSA] RewriteRule ^/*$ ...
0
votes
2answers
273 views

.htaccess directory nightmare

I'm on a shell, and my web folder is located at /home/w/waterfox/public_html. In there, I have a directory called irclogs, which I'm trying to password-protect. It is chmodded to 755. Here is the ...
0
votes
2answers
931 views

.htaccess and .htpassword not working

I'm running a wamp server on a windows xp box. I have a .htaccess file that contains AuthType Basic AuthName "restricted area" AuthUserFile C:/wamp/www/.htpasswd require valid-user and a password ...
3
votes
3answers
9k views

How to create and edit .htaccess and .htpasswd locally on my computer and then upload to my site via ftp?

I'm making a website for a client, and I want to make a password protected directory. The problem is my account type only allows FTP, so is there any way to create the .htaccess and .htpasswd files ...
4
votes
1answer
2k views

force https with apache before .htpasswd

I have this in my .htaccess file RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://www.myweb.com/phpmyadmin$1 [R,L] AuthUserFile /var/www/myweb/.htpasswd AuthGroupFile /dev/null ...