htaccess newbie

thechef

I'm trying to get htaccess to work. I'm probably missing something very obvious. Thanks ahead for any input.

I've created my .htaccess file:
AuthUserFile /home/kev/test/.htpasswd
AuthGroupFile /dev/null
AuthName HTACCESS LOGIN
AuthType Basic

<Limit GET POST>
require user joe
</Limit>

And I was able to make my .htpasswd file with no problem.

My httpd.conf file has the .ht area uncommented. But I still can access the pages in the directory where the .htaccess file is.
Am I missing something else in the apache configuring or some line in the .htaccess file?

brandonschnell

1) in httpd.conf change AllowOverride from "None" to "AuthConfig"

2) restart apache

3) in the folder to be protected, create a .htaccess file like so:

#######.htaccess#######
AuthName "Login"
AuthType Basic
AuthUserFile /home/kev/test/.htpasswd

require valid-user
#######################

thechef

Made the changes to httpd.conf and made the .htaccess file the identical to your message.

Still not working.

Should I be logged in as root to make the .htaccess and .htpasswd files?

Any other httpd.conf consideratoins.

I have:
<Directory "/usr/local/apache/htdocs">
##
Options Indexes FollowSymLinks MultiViews
##
AllowOverride AuthConfig
##
Order allow,deny
Allow from all
</Directory>

Thanks

brandonschnell

make sure you've got the line:
AccessFileName .htaccess

and make sure both .htaccess & .htpasswd are readable by the user.group that apache is running as.

try "chmod o+r .htaccess"

to troubleshoot this create a .htaccess file and made it readable by no one ("chmod 000 .htaccess"). you should see a forbidden error message when you try to access the folder now. if that doesn't happen then apache isn't looking for the .htaccess file so check the httpd.conf and restart apache after any changes.

thechef

Yes - I've got:
AccessFileName .htaccess

When I chmod 000 .htaccess - I get a file not found

I'll keep going through the httpd.conf file.

Can you explain what you mean by user.group for me so I can check it?. Sorry:-) and many thanks.