Protect a Directory on Apache in WinNT

Anon

I know how to password protect a directory on Apache for Unix, but I can't find any documentation regarding Apache running on Windows NT.

Does anybody have a link to a site containing the specified documentation or even know the solution straight away.

Thanks!

Patrick

mithril

Yup,

You need to use the same httpd.conf arguments for Win32 as for Linux. For example:

<Directory "c:/apache/htdocs/guestbook/admin">
Options Indexes FollowSymLinks MultiViews
<Limit GET POST PUT>
AuthType Basic
AuthName "Guestbook Admin"
AuthUserFile "c:/apache/pswrd/guest.users"
require valid-user
</Limit>
AllowOverride None
Order deny,allow
Allow from all
</Directory>

The "guest.users" file is created using htpsswrd.exe (located in c:\apache\bin). This file can't be used in Nix, and htpsswrd files created on Nix can be used on Win32. I believe that's due to slight differences in the Win32 port of the encryption algorythm. HTH,

Geoff A. Virgo

Anon

I added the following to the httpd.conf file

<Directory "c:/apache/htdocs/admin">
Options Indexes FollowSymLinks MultiViews

AuthType Basic
AuthName "Guestbook Admin"
AuthUserFile "c:/apache/pswrd/admin.passwd"
require valid-user

AllowOverride None
Order deny,allow
Allow from all
</Directory>

Created the admin.passwd file using the htpsswrd program... but the weird thing is, that it has only prompted me once for login and password information. The password was entered wrongly 3 times on purpose... after tha, I got the authorization failed error.

But then, apache never asks me for a login/password again... all directories, which are supposed to be protected aren't and can be accessed.

I don't understand, where the problem could be... has anybody got an idea?

Thanks!

Parick

mithril

Patrick,

It seems two lines got dropped in the previous post I made🙁 The following lines should replace the blank spaces in the httpd.conf arg's in my last post:

and

</Limit>.

Just in case🙂

and

</Limit>

Hope those tags make it through this time🙂

Geoff

Anon

Still doesn't ask for a passwrd. Don't understand that... This is a copy of what I have added in the httpd.conf

<Directory "c:/apache/htdocs/admin">
Options Indexes FollowSymLinks MultiViews
<Limit GET POST PUT>
AuthType Basic
AuthName "Admin"
AuthUserFile "c:/apache/pswrd/users.pwd"
require valid-user
</Limit>
AllowOverride None
Order deny,allow
Allow from all
</Directory>

I added these lines right below this entry:
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>

That should be alright I guess.

Am I missing something out?

Patrick