You are viewing a plain text version of this content. The canonical link for it is here.
Posted to modules-dev@httpd.apache.org by Michele Waldman <mm...@nyc.rr.com> on 2009/04/24 02:11:28 UTC

mod_auth_digest amiss

Maybe, I'm missing something.  I was talking about needing to change apache,
but I decided to try something else.

 

I've got this:

 

<FilesMatch ".*[^(login.php|logout.php)]">

AuthType Digest

AuthName "account" 

AuthUserFile /home/path/public_html/account/.htpasswd

Require user admin

</FilesMatch>

 

<Files login.php> 

AuthType Digest

AuthName "account"

AuthUserFile /home/path/public_html/account/.htpasswd

Require user admin

</Files> 

 

<Files logout.php> 

AuthType Digest 

AuthName "account" 

AuthUserFile /home/path/public_html/account/.htpasswd

Require user logout

</Files> 

 

 

I access login.php and have access to the entire directory which via ajax.

 

Then I access logout.php and have access to logout.php, but nothing else.
Good.

 

Next, time I try to access login.php using Safari and ajax with the right
creditials, I get a popup with login user name filled out.

 

Am I mistaken in thinking I should not be logged in as admin?  Or that there
is someway to force this to happen?

 

Michele

RE: mod_auth_digest amiss correction

Posted by Michele Waldman <mm...@nyc.rr.com>.
Forget the user name is logout.

If you can log in to admin, then into logout, why can't you log back into
admin?

M*

> -----Original Message-----
> From: Eric Covener [mailto:covener@gmail.com]
> Sent: Thursday, April 23, 2009 8:42 PM
> To: modules-dev@httpd.apache.org
> Subject: Re: mod_auth_digest amiss correction
> 
> >> Am I mistaken in thinking I should not be logged in as admin?  Or that
> >> there
> >> is someway to force this to happen?
> 
> This is just your browser using stored credentials. It doesn't know
> the significance of your "logout" user.
> 
> --
> Eric Covener
> covener@gmail.com

Re: mod_auth_digest amiss correction

Posted by Eric Covener <co...@gmail.com>.
>> Am I mistaken in thinking I should not be logged in as admin?  Or that
>> there
>> is someway to force this to happen?

This is just your browser using stored credentials. It doesn't know
the significance of your "logout" user.

-- 
Eric Covener
covener@gmail.com

RE: mod_auth_digest amiss correction

Posted by Michele Waldman <mm...@nyc.rr.com>.
Correction:

The second time I try to access login.php, I get access.  But, not when I
try to access the directory that also has the same require.

Michele

> -----Original Message-----
> From: Michele Waldman [mailto:mmwaldman@nyc.rr.com]
> Sent: Thursday, April 23, 2009 8:11 PM
> To: modules-dev@httpd.apache.org
> Subject: mod_auth_digest amiss
> 
> Maybe, I'm missing something.  I was talking about needing to change
> apache,
> but I decided to try something else.
> 
> 
> 
> I've got this:
> 
> 
> 
> <FilesMatch ".*[^(login.php|logout.php)]">
> 
> AuthType Digest
> 
> AuthName "account"
> 
> AuthUserFile /home/path/public_html/account/.htpasswd
> 
> Require user admin
> 
> </FilesMatch>
> 
> 
> 
> <Files login.php>
> 
> AuthType Digest
> 
> AuthName "account"
> 
> AuthUserFile /home/path/public_html/account/.htpasswd
> 
> Require user admin
> 
> </Files>
> 
> 
> 
> <Files logout.php>
> 
> AuthType Digest
> 
> AuthName "account"
> 
> AuthUserFile /home/path/public_html/account/.htpasswd
> 
> Require user logout
> 
> </Files>
> 
> 
> 
> 
> 
> I access login.php and have access to the entire directory which via ajax.
> 
> 
> 
> Then I access logout.php and have access to logout.php, but nothing else.
> Good.
> 
> 
> 
> Next, time I try to access login.php using Safari and ajax with the right
> creditials, I get a popup with login user name filled out.
> 
> 
> 
> Am I mistaken in thinking I should not be logged in as admin?  Or that
> there
> is someway to force this to happen?
> 
> 
> 
> Michele
> 
>