Questions tagged [.htpasswd]

Password file format used on Apache web servers

Filter by
Sorted by
Tagged with
0 votes
2 answers
289 views

Apache 2.4 ignoring basic authentication

I'm currently searching a solution to re-enable basic authentication with .htpasswd file in Apache 2.4. Everything was ok using Apache 2.2 and then I upgraded to MAMP Pro 6.4 that implements Apache 2....
3 votes
1 answer
963 views

Why is my .htaccess and .htpasswd not working?

I have .htaccess and .htpasswd files in the directory that has png files that I want to protect. .htaccess AuthType Basic AuthName "Co to za nielegalne grzebanie w plikach, juz dzwonie na ...
  • 31
0 votes
1 answer
203 views

Limit directory index to authenticated users

Essentially what I am trying to do is to limit directory indexing to authenticated users from a htpasswd file on my Apache server. Here is what I have so far. AuthUserFile C:\XXXXXXXXX\htpasswd ...
0 votes
0 answers
445 views

nginx http authentication with system user

I'm running a nginx server with basic http authentication that use a htpasswd password file. Is possible use instead the normal user and passwpord of linux system?
0 votes
1 answer
801 views

htaccess + htpasswd: how to prevent executing php scripts without specifying a password

My site is managed by Apache on Linux. In the base directory, there is the sub folder fill. In this subfolder, there is a php script: do.php Here is my .htaccess: AuthType Basic AuthName 'Welcome ...
  • 379
0 votes
0 answers
956 views

htpasswd keeps asking for password - phpmyadmin

I am using Ubuntu 18.04 LTS Desktop to host an apache2 webserver. I installed phpmyadmin and wanted to secure it using htpasswd. There for I edited the /etc/apache2/conf-available/phpmyadmin.conf, ...
0 votes
0 answers
587 views

.htpasswd username/password picked up but don't seem to work?

My intent is to have Jenkins behind apache. It uses a proxy-pass (for /) and I want it to be behind some basic auth. So I have set up an apache2, using digitalocean's tutorial as starting point. I ...
1 vote
2 answers
1k views

.htaccess has no effect on subdirectory

I need to protect my whole website (It's just for development at the moment) with a password. So I created a .htaccess and a .htpassword file. The .htaccess contains AuthUserFile /my/absolute/path/....
  • 111
1 vote
1 answer
1k views

Apache .htaccess and .htpasswd doesn't ask for password in Django site

I have a Django site with mod_wsgi configured, using Apache 2.4 as web server. Virtual Host: <VirtualHost *:80> ServerName site.com ServerAlias site.com ServerAdmin example@...
  • 113
2 votes
2 answers
3k views

HTTP .htpasswd protect sub-domain on Nginx recursively

I want to password protect my developer subdomain (dev.example.com), and leave the main domain publicly available. I want to do this recursively, so that any file or folder on the subdomain will ...
1 vote
0 answers
367 views

.httpasswd doesn't work breaks Yii .htaccess Rewrite Rules

I have a standard .htaccess for Yii 1.1, to which I added http based authorization. When I added the password protection, the Rewrite Condition RewriteCond %{REQUEST_FILENAME} !-f stopped working, ...
  • 285
0 votes
3 answers
4k views

How to remove .htaccess and/or htpasswd from vultr wordpress installation

I fired up a server on vultr and chose wordpress. It setup htpasswd on the admin login. How can I remove that? Here is the only .htaccess file I can find: # Only allow direct access to specific Web-...
5 votes
3 answers
28k views

Permission denied: Could not open password file.

I am using Apache Red hat . I have .htaccess in my /var/www/html with permissions as followed -rwxr-xr-x. 1 apache apache 127 Dec 18 14:17 .htaccess .htaccess has following data set inside it ...
0 votes
0 answers
381 views

Apache .htpasswd SSL

I understand there are similar questions to this. I tried their solutions and even tried commenting on one before asking this. Before logging in, Chrome is showing the connection does not have SSL. ...
  • 101
0 votes
1 answer
218 views

Can i use one .htpasswd file for different folders on Linux server

I have many modules in my codeignitor application as module/products module/billing module/cms module/groups ..... Some of the above modules are accessible to admin user only so I want to put ....
  • 119
1 vote
1 answer
1k views

HTTP Basic Auth unless connecting from the office with Apache 2.4?

We wish to set up a website for demo purpose only that we can: Access from anywhere from the internet by entering a username and password via HTTP Basic Auth. For ease of use we wish to not having to ...
  • 115
0 votes
1 answer
840 views

PHP scripts fail after adding .htaccess to password protect a dir

I added .htaccess and .htpasswd to a dir in order to password protect it. That part works. AuthType Basic AuthName "Password Protected Area" AuthUserFile /path/.htpasswd Require valid-user But now, ...
1 vote
2 answers
123 views

Force https before authentification - no access to vhost

I am a beginner when it comes to servers and I have a problem similar to this one. When accessing the desired webpage, .htpasswd prompts me for an authentification before I am redirected to https. ...
  • 113
-1 votes
2 answers
4k views

How to use .htaccess and .htpasswd for selective redirects & passwords

In my /var/www/ directory I have many directories some like: /var/www/impdata/ /var/www/data/ So can I achieve this: When I go to: www.websitename.com/data/ it should give a 404 error. And when I ...
0 votes
2 answers
215 views

Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access

Given a administrative area with urls like this: wp-admin/ wp-admin/whatever wp-admin/another-page wp-adminsecretlogin A standard basic-auth coverage would provide a username and password prompt on ...
  • 1,278
0 votes
2 answers
2k views

Nginx Server Block Port 8081 Path to Root Folder [closed]

I'm trying to password protect all of port 8081 on my Nginx server. The only thing this port is used for is PhpMyAdmin. When I navigate to https://www.example.com:8081, I successfully get the default ...
  • 187
0 votes
1 answer
276 views

apache how to limit per user ip

i have a password protected directory with hundreds of users in htpasswd file. i want to allow download of files on these conditions: check if username is valid (already done). check if another ...
  • 233
8 votes
2 answers
21k views

Invalid command 'AuthType', perhaps misspelled or defined by a module not included in the server configuration

I'm trying to password protect the document root and all I get is an "internal server error" page. The Apache error log shows: Invalid command 'AuthType', perhaps misspelled or defined by a module ...
  • 213
0 votes
0 answers
3k views

.htaccess password not working

I've been trying to use .htaccess to password protect a folder for a website. Unfortunately I can't seem to get it to work. I'm not getting an error, but the password being set in the .htpasswd file ...
  • 1
1 vote
0 answers
75 views

Password protect website

I'm trying to password protect my website from ONE ip address. I just want to restrict an ip from accessing my website, but still allow them to access it if they have the password. My current code ....
  • 11
11 votes
2 answers
44k views

Apache .htaccess error: 'not allowed here' on Debian Wheezy

I am trying to configure an apache virtualhost which needs to be password protected in the root directory. So I created a .htpasswd file (with sha passwords) and configured the .htaccess file. ...
2 votes
1 answer
720 views

Apache server password file (htpasswd) encoding

I use .htaccess, basic authentication and a corresponding password file to secure my web-space. The hosting is Linux / Apache. I want to support a user name with French accents (ie. not ASCII). Are ...
  • 505
0 votes
1 answer
1k views

Looking to generate a directory exception to .htpasswd SSL-protected site

I have an entire site under .htpasswd with SSL - any http requests are rejected - and am trying to exempt a folder from the rule. Either to do a basic .htpasswd for the directory, or make it open. I'm ...
  • 1
2 votes
2 answers
2k views

How can I make Jenkins inaccessible to the outside world?

On a development server, I have installed the tool Jenkins for automated testing. This runs on port 8080. If I go to www.mysite.com:8080 I can see the command panel for this. I want to make this ...
  • 273
2 votes
0 answers
616 views

(WordPress) .htaccess redirecting actual subfolder location

I have WordPress setup in root, but I have a sub-folder that is not related to WordPress as well. I just moved servers, so before if I went to .com/admin/ I would get that subfolder. Now, I (and ...
  • 121
0 votes
3 answers
697 views

Does Apache use any other dot ht files besides .htaccess and .htpasswd?

I'm hardening my Apache server config and wondering if it uses any other "^.ht.+" files besides .htaccess and .htpasswd?
  • 1,416
0 votes
1 answer
555 views

.htaccess password directory protection - blank page

i want to use for some website Apache password protection for an directory. This is not mine hosting so I can't look to logs or sth. So I just copied my .htacces that works just perfect on my hosting. ...
  • 131
1 vote
1 answer
2k views

Is the following .htpasswd .htaccess login SSL protected?

I have a directory that I have protected using .htpasswd/.htaccess HTTP authentication. In the .htaccess file for the directory I have this: SSLRequireSSL <Files .htaccess> order allow,deny ...
  • 219
0 votes
1 answer
3k views

Apache: Restrict directory access per User

I'm looking for a solution to restrict access to directorys. I've a bunch of clients and each of them should be allowed to view only his own directory. But he needs to have (read) access to the global ...
1 vote
2 answers
4k views

Setup htpasswd for a specific URL

I have a htpasswd file, works fine - in my htaccess I have: <Limit GET POST> require valid-user </Limit> Which works, login/passwd shows up fine when you reach the root of website. ...
  • 1,157
2 votes
2 answers
4k views

Apache basic HTTP authentication not working

Trying to setup basic HTTP authentication with Apache, but it's not working. I get the directory listing and files regularly, no authentication required. I tried restarting httpd and the browsers ...
  • 305
2 votes
1 answer
2k views

Apache htaccess passwd - ignoring correct login

I want to password protect a directory. I'm running Apache 2 with cPanel on Centos. For the sake of this post, the directory is /home/user/my-secret-dir I used cPanel's "Password Protect Directories"...
0 votes
2 answers
228 views

Can't copy .htpasswd or .changes from ubuntu server via samba. Why?

I'm trying to copy a twiki data dir (ubuntu server) via a samba share to an XP box... all files copy except for .htpasswd and .changes. Any ideas why not? Is there some service that is protecting them?...
  • 3
3 votes
3 answers
15k views

Password protect directory with Apache: "couldn't check user. Check your authn provider!"

I am trying to password protect a web directory with apache. I have the site set up like this: D:/ webapp/ lib/ .htpasswd document_root/ admin/ index.php ...
8 votes
1 answer
9k views

What kind of algorithm does .htpasswd uses?

I am trying to generate this kind of hashes programmatically: axF3s9cdEnsNP But I can't identify what kind of hash it is. The hash comes from a .htpasswd file. All the online htpasswd generators I ...
  • 83
1 vote
2 answers
2k views

Apache authentication inside a WordPress install

I am currently running into an issue with trying to password protect a directory that is sitting inside a directory that's running WordPress. This is for a directory called "admin" that handles a few ...
2 votes
1 answer
5k views

500 error after creating htpasswd and edit htaccess

I just edited the .htaccess file to include: AuthType Basic AuthName "My Protected Area" AuthUserFile /home/path/to/public_html/ Require valid-user I then created a .htpasswd file via the htpasswd ...
  • 21
0 votes
2 answers
2k views

Private access to the path within RewriteEngine rule

I have the following .htaccess file (usual one for MediaWiki): RewriteEngine On RewriteRule ^wiki/(.*)$ /w/index.php?title=$1 [PT,L,QSA] RewriteRule ^wiki/*$ /w/index.php [L,QSA] RewriteRule ^/*$ /w/...
0 votes
2 answers
326 views

.htaccess directory nightmare

I'm on a shell, and my web folder is located at /home/w/waterfox/public_html. In there, I have a directory called irclogs, which I'm trying to password-protect. It is chmodded to 755. Here is the ....
  • 247
0 votes
2 answers
4k views

.htaccess and .htpassword not working

I'm running a wamp server on a windows xp box. I have a .htaccess file that contains AuthType Basic AuthName "restricted area" AuthUserFile C:/wamp/www/.htpasswd require valid-user and a password ...
  • 747
6 votes
4 answers
28k views

How to create and edit .htaccess and .htpasswd locally on my computer and then upload to my site via ftp?

I'm making a website for a client, and I want to make a password protected directory. The problem is my account type only allows FTP, so is there any way to create the .htaccess and .htpasswd files ...
  • 163
4 votes
1 answer
4k views

force https with apache before .htpasswd

I have this in my .htaccess file RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://www.myweb.com/phpmyadmin$1 [R,L] AuthUserFile /var/www/myweb/.htpasswd AuthGroupFile /dev/null ...
  • 7,233