Questions tagged [.htpasswd]
Password file format used on Apache web servers
48
questions
3
votes
3
answers
16k
views
Password protect directory with Apache: "couldn't check user. Check your authn provider!"
I am trying to password protect a web directory with apache. I have the site set up like this:
D:/
webapp/
lib/
.htpasswd
document_root/
admin/
index.php
...
CommunityBot
- 1
0
votes
0
answers
80
views
secured WordPress login with nginx htpasswd prevents from woocommerce logout
i've protected my /wp-admin/ and wp-login.php with htpasswd in nginx.
this is the .conf file
server {
listen [::]:443 ssl http2;
listen 443 ssl http2;
server_name www.url;
access_log ...
- 1
1
vote
1
answer
1k
views
Apache .htaccess and .htpasswd doesn't ask for password in Django site
I have a Django site with mod_wsgi configured, using Apache 2.4 as web server.
Virtual Host:
<VirtualHost *:80>
ServerName site.com
ServerAlias site.com
ServerAdmin example@...
2
votes
2
answers
2k
views
Apache authentication inside a WordPress install
I am currently running into an issue with trying to password protect a directory that is sitting inside a directory that's running WordPress. This is for a directory called "admin" that handles a few ...
CommunityBot
- 1
0
votes
2
answers
889
views
Apache 2.4 ignoring basic authentication
I'm currently searching a solution to re-enable basic authentication with .htpasswd file in Apache 2.4. Everything was ok using Apache 2.2 and then I upgraded to MAMP Pro 6.4 that implements Apache 2....
3
votes
1
answer
2k
views
Why is my .htaccess and .htpasswd not working?
I have .htaccess and .htpasswd files in the directory that has png files that I want to protect.
.htaccess
AuthType Basic
AuthName "Co to za nielegalne grzebanie w plikach, juz dzwonie na ...
- 13k
5
votes
3
answers
32k
views
Permission denied: Could not open password file.
I am using Apache Red hat .
I have .htaccess in my /var/www/html with permissions as followed
-rwxr-xr-x. 1 apache apache 127 Dec 18 14:17 .htaccess
.htaccess has following data set inside it
...
- 248k
6
votes
4
answers
31k
views
How to create and edit .htaccess and .htpasswd locally on my computer and then upload to my site via ftp?
I'm making a website for a client, and I want to make a password protected directory. The problem is my account type only allows FTP, so is there any way to create the .htaccess and .htpasswd files ...
- 284
0
votes
1
answer
370
views
Limit directory index to authenticated users
Essentially what I am trying to do is to limit directory indexing to authenticated users from a htpasswd file on my Apache server. Here is what I have so far.
AuthUserFile C:\XXXXXXXXX\htpasswd
...
- 13k
0
votes
0
answers
629
views
nginx http authentication with system user
I'm running a nginx server with basic http authentication that use a htpasswd password file.
Is possible use instead the normal user and passwpord of linux system?
2
votes
1
answer
5k
views
500 error after creating htpasswd and edit htaccess
I just edited the .htaccess file to include:
AuthType Basic
AuthName "My Protected Area"
AuthUserFile /home/path/to/public_html/
Require valid-user
I then created a .htpasswd file via the htpasswd ...
- 13k
0
votes
1
answer
954
views
htaccess + htpasswd: how to prevent executing php scripts without specifying a password
My site is managed by Apache on Linux. In the base directory, there is the sub folder fill. In this subfolder, there is a php script: do.php
Here is my .htaccess:
AuthType Basic
AuthName 'Welcome ...
- 478
0
votes
0
answers
1k
views
htpasswd keeps asking for password - phpmyadmin
I am using Ubuntu 18.04 LTS Desktop to host an apache2 webserver. I installed phpmyadmin and wanted to secure it using htpasswd. There for I edited the /etc/apache2/conf-available/phpmyadmin.conf, ...
- 111
0
votes
0
answers
801
views
.htpasswd username/password picked up but don't seem to work?
My intent is to have Jenkins behind apache. It uses a proxy-pass (for /) and I want it to be behind some basic auth.
So I have set up an apache2, using digitalocean's tutorial as starting point.
I ...
- 101
2
votes
2
answers
2k
views
.htaccess has no effect on subdirectory
I need to protect my whole website (It's just for development at the moment) with a password. So I created a .htaccess and a .htpassword file. The .htaccess contains
AuthUserFile /my/absolute/path/....
- 13k
8
votes
2
answers
23k
views
Invalid command 'AuthType', perhaps misspelled or defined by a module not included in the server configuration
I'm trying to password protect the document root and all I get is an "internal server error" page. The Apache error log shows:
Invalid command 'AuthType', perhaps misspelled or defined by a module ...
- 1
2
votes
2
answers
3k
views
HTTP .htpasswd protect sub-domain on Nginx recursively
I want to password protect my developer subdomain (dev.example.com), and leave the main domain publicly available.
I want to do this recursively, so that any file or folder on the subdomain will ...
- 242
1
vote
0
answers
402
views
.httpasswd doesn't work breaks Yii .htaccess Rewrite Rules
I have a standard .htaccess for Yii 1.1, to which I added http based authorization.
When I added the password protection, the Rewrite Condition RewriteCond %{REQUEST_FILENAME} !-f stopped working, ...
- 285
0
votes
3
answers
5k
views
How to remove .htaccess and/or htpasswd from vultr wordpress installation
I fired up a server on vultr and chose wordpress. It setup htpasswd on the admin login. How can I remove that?
Here is the only .htaccess file I can find:
# Only allow direct access to specific Web-...
- 137
-1
votes
2
answers
4k
views
How to use .htaccess and .htpasswd for selective redirects & passwords
In my /var/www/ directory I have many directories some like:
/var/www/impdata/
/var/www/data/
So can I achieve this:
When I go to: www.websitename.com/data/ it should give a 404 error.
And when I ...
- 3,053
0
votes
0
answers
400
views
Apache .htpasswd SSL
I understand there are similar questions to this. I tried their solutions and even tried commenting on one before asking this. Before logging in, Chrome is showing the connection does not have SSL. ...
- 101
0
votes
1
answer
295
views
Can i use one .htpasswd file for different folders on Linux server
I have many modules in my codeignitor application as
module/products
module/billing
module/cms
module/groups
.....
Some of the above modules are accessible to admin user only so I want to put ....
- 964
1
vote
1
answer
2k
views
HTTP Basic Auth unless connecting from the office with Apache 2.4?
We wish to set up a website for demo purpose only that we can:
Access from anywhere from the internet by entering a username and password via HTTP Basic Auth.
For ease of use we wish to not having to ...
- 80.3k
0
votes
2
answers
2k
views
Nginx Server Block Port 8081 Path to Root Folder [closed]
I'm trying to password protect all of port 8081 on my Nginx server. The only thing this port is used for is PhpMyAdmin. When I navigate to https://www.example.com:8081, I successfully get the default ...
CommunityBot
- 1
0
votes
1
answer
1k
views
PHP scripts fail after adding .htaccess to password protect a dir
I added .htaccess and .htpasswd to a dir in order to password protect it. That part works.
AuthType Basic
AuthName "Password Protected Area"
AuthUserFile /path/.htpasswd
Require valid-user
But now, ...
- 191
1
vote
2
answers
133
views
Force https before authentification - no access to vhost
I am a beginner when it comes to servers and I have a problem similar to this one.
When accessing the desired webpage, .htpasswd prompts me for an authentification before I am redirected to https.
...
CommunityBot
- 1
0
votes
2
answers
250
views
Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
Given a administrative area with urls like this:
wp-admin/
wp-admin/whatever
wp-admin/another-page
wp-adminsecretlogin
A standard basic-auth coverage would provide a username and password prompt on ...
- 1,168
0
votes
1
answer
288
views
apache how to limit per user ip
i have a password protected directory with hundreds of users in htpasswd file.
i want to allow download of files on these conditions:
check if username is valid (already done).
check if another ...
CommunityBot
- 1
0
votes
0
answers
3k
views
.htaccess password not working
I've been trying to use .htaccess to password protect a folder for a website. Unfortunately I can't seem to get it to work. I'm not getting an error, but the password being set in the .htpasswd file ...
- 1
1
vote
0
answers
76
views
Password protect website
I'm trying to password protect my website from ONE ip address.
I just want to restrict an ip from accessing my website, but still allow them to access it if they have the password.
My current code ....
- 11
11
votes
2
answers
45k
views
Apache .htaccess error: 'not allowed here' on Debian Wheezy
I am trying to configure an apache virtualhost which needs to be password protected in the root directory.
So I created a .htpasswd file (with sha passwords) and configured the .htaccess file. ...
- 80.3k
2
votes
1
answer
787
views
Apache server password file (htpasswd) encoding
I use .htaccess, basic authentication and a corresponding password file to secure my web-space. The hosting is Linux / Apache.
I want to support a user name with French accents (ie. not ASCII).
Are ...
CommunityBot
- 1
0
votes
1
answer
1k
views
Looking to generate a directory exception to .htpasswd SSL-protected site
I have an entire site under .htpasswd with SSL - any http requests are rejected - and am trying to exempt a folder from the rule. Either to do a basic .htpasswd for the directory, or make it open. I'm ...
- 7,443
2
votes
2
answers
2k
views
How can I make Jenkins inaccessible to the outside world?
On a development server, I have installed the tool Jenkins for automated testing. This runs on port 8080. If I go to www.mysite.com:8080 I can see the command panel for this. I want to make this ...
- 547
2
votes
0
answers
718
views
(WordPress) .htaccess redirecting actual subfolder location
I have WordPress setup in root, but I have a sub-folder that is not related to WordPress as well. I just moved servers, so before if I went to .com/admin/ I would get that subfolder. Now, I (and ...
CommunityBot
- 1
0
votes
3
answers
788
views
Does Apache use any other dot ht files besides .htaccess and .htpasswd?
I'm hardening my Apache server config and wondering if it uses any other "^.ht.+" files besides .htaccess and .htpasswd?
- 115k
0
votes
1
answer
631
views
.htaccess password directory protection - blank page
i want to use for some website Apache password protection for an directory. This is not mine hosting so I can't look to logs or sth. So I just copied my .htacces that works just perfect on my hosting. ...
- 111
1
vote
1
answer
2k
views
Is the following .htpasswd .htaccess login SSL protected?
I have a directory that I have protected using .htpasswd/.htaccess HTTP authentication.
In the .htaccess file for the directory I have this:
SSLRequireSSL
<Files .htaccess>
order allow,deny
...
- 115k
0
votes
1
answer
4k
views
Apache: Restrict directory access per User
I'm looking for a solution to restrict access to directorys. I've a bunch of clients and each of them should be allowed to view only his own directory. But he needs to have (read) access to the global ...
- 25.1k
1
vote
2
answers
4k
views
Setup htpasswd for a specific URL
I have a htpasswd file, works fine - in my htaccess I have:
<Limit GET POST>
require valid-user
</Limit>
Which works, login/passwd shows up fine when you reach the root of website. ...
CommunityBot
- 1
2
votes
2
answers
4k
views
Apache basic HTTP authentication not working
Trying to setup basic HTTP authentication with Apache, but it's not working. I get the directory listing and files regularly, no authentication required. I tried restarting httpd and the browsers ...
- 101
2
votes
1
answer
3k
views
Apache htaccess passwd - ignoring correct login
I want to password protect a directory. I'm running Apache 2 with cPanel on Centos.
For the sake of this post, the directory is /home/user/my-secret-dir
I used cPanel's "Password Protect Directories"...
- 17.1k
0
votes
2
answers
253
views
Can't copy .htpasswd or .changes from ubuntu server via samba. Why?
I'm trying to copy a twiki data dir (ubuntu server) via a samba share to an XP box... all files copy except for .htpasswd and .changes. Any ideas why not? Is there some service that is protecting them?...
- 2,472
8
votes
1
answer
10k
views
What kind of algorithm does .htpasswd uses?
I am trying to generate this kind of hashes programmatically:
axF3s9cdEnsNP
But I can't identify what kind of hash it is. The hash comes from a .htpasswd file.
All the online htpasswd generators I ...
- 15.1k
0
votes
2
answers
2k
views
Private access to the path within RewriteEngine rule
I have the following .htaccess file (usual one for MediaWiki):
RewriteEngine On
RewriteRule ^wiki/(.*)$ /w/index.php?title=$1 [PT,L,QSA]
RewriteRule ^wiki/*$ /w/index.php [L,QSA]
RewriteRule ^/*$ /w/...
- 103
1
vote
2
answers
4k
views
.htaccess and .htpassword not working
I'm running a wamp server on a windows xp box.
I have a .htaccess file that contains
AuthType Basic
AuthName "restricted area"
AuthUserFile C:/wamp/www/.htpasswd
require valid-user
and a password ...
- 4,119
0
votes
2
answers
331
views
.htaccess directory nightmare
I'm on a shell, and my web folder is located at /home/w/waterfox/public_html. In there, I have a directory called irclogs, which I'm trying to password-protect. It is chmodded to 755.
Here is the ....
- 2,240
4
votes
1
answer
4k
views
force https with apache before .htpasswd
I have this in my .htaccess file
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://www.myweb.com/phpmyadmin$1 [R,L]
AuthUserFile /var/www/myweb/.htpasswd
AuthGroupFile /dev/null
...
- 78.2k