htaccess or chmod

[coper]

Hello,

I have my server running r/h 7.1 and serving my domain.

# Path to DocumentRoot
/home/copper/

http://www/index.htm

# Now I have a subdirectory that I want password protected.
/home/copper/

http://www/members/freestuff.htm

Would I use htaccess for this and if so can you recommend a tut on setting it up. I heard this was pretty secure.

Thanks

 

[ifincham]

Hi,







At the simplest level you can use 'Basic' authentication via mod_auth reading a user/password file. You have something like this in your .htaccess :







AuthName "whatever"



AuthType Basic



AuthUserFile /var/

http://www/auth/userfile

require user user1 user2 user3







Then you create the 'userfile' above with the first user :







/usr/bin/htpasswd -c /var/

http://www/auth/userfile

user1







(it will prompt for password)







Add extra users with the same command but without the -c (create) flag :







/usr/bin/htpasswd /var/

http://www/auth/userfile

user2







etc.







After that you should get a user/password prompt on access of the .htaccess directory. You must have valid users listed on the 'require' line as well as having them in the userauth file.
See also -->

http://httpd.apache.org/docs/mod/mod_auth.html

Hope this helps

 

[metrix007]

nope, i did just that, and it said i was not allowed, it did not give the option for user/pass it just said not allowed.

 

[pcunix]

Aside from anything else, does the directory have Linux permissions such that the web server can access it- and of course the .htaccess etc. ? Tony Lawrence
SCO Unix/Linux Resources

http://pcunix.com

tony@pcunix.com

 

[ifincham]

Hi,

...also does the <Directory> container have 'AllowOverride All' or equivalent ?

Regards