You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Warron French <wf...@xtria.com> on 2004/11/05 16:36:12 UTC

[users@httpd] Problems with htpasswd confused with other sites

Server is running RedHat 9.0 with Apache-1.3.33 from source not RPM.

Problem I am having though now is :

I have many websites on this server.

And for the most part the perform as expected, but one of the sites (let's call it www.securedA.ws) needs to be protected at the root level main webpage, so I am using .htaccess/htpasswd to protect it.
But for some reason it doesn't matter if I am leaving THAT site (www.securedA.ws) or not, I get prompted for a username and passwd on another site which is also being hosted on this same server.  It is ONLY one site that I am entering that I have a problem with this issue.  More to the point... it prompts me for the username/passwd based on the "Realm" from www.securedA.ws.  But if I go to ANY other sites, no problems.

I can tell you that I did discover a .htaccess file in that other site's (www.notreallysecured.biz) root-level directory for it's web page but there is NO Directory container/Directive (as I like to call them), established in the httpd.conf file.  I had this problem on a webserver I run at home to and I never fixed it.  Never figured it out.

Also, there is NO passwd file associated with the .htaccess file for the second site, so I am really confused as to WHY I am being prompted for a username and passwd from  another site, even when I enter the username/passwd ..... it dumps me in to the site  www.securedA.ws

This really isn't making any sense.

Can you help me?  I am sending this same email to the Users list too.


Thanks in advance.
Warron French
Sr. Network Engineer
Xtria, LLC


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Problems with htpasswd confused with other sites

Posted by Ralf Glauberman <rg...@michaeli-gymnasium.de>.
are you using namebased or ipbased virtual hosts?
try to access the page you are having problems with with telnet, i.e. telnet 
webserver 80 and enter the following:
GET / HTTP/1.1<RETURN>
Host: www.notreallysecured.biz<RETURN>
<RETURN>
post the output here.

----- Original Message ----- 
From: "Warron French" <wf...@xtria.com>
To: "Users Apache (E-mail)" <us...@httpd.apache.org>
Sent: Friday, November 05, 2004 4:36 PM
Subject: [users@httpd] Problems with htpasswd confused with other sites


Server is running RedHat 9.0 with Apache-1.3.33 from source not RPM.

Problem I am having though now is :

I have many websites on this server.

And for the most part the perform as expected, but one of the sites (let's 
call it www.securedA.ws) needs to be protected at the root level main 
webpage, so I am using .htaccess/htpasswd to protect it.
But for some reason it doesn't matter if I am leaving THAT site 
(www.securedA.ws) or not, I get prompted for a username and passwd on 
another site which is also being hosted on this same server.  It is ONLY one 
site that I am entering that I have a problem with this issue.  More to the 
point... it prompts me for the username/passwd based on the "Realm" from 
www.securedA.ws.  But if I go to ANY other sites, no problems.

I can tell you that I did discover a .htaccess file in that other site's 
(www.notreallysecured.biz) root-level directory for it's web page but there 
is NO Directory container/Directive (as I like to call them), established in 
the httpd.conf file.  I had this problem on a webserver I run at home to and 
I never fixed it.  Never figured it out.

Also, there is NO passwd file associated with the .htaccess file for the 
second site, so I am really confused as to WHY I am being prompted for a 
username and passwd from  another site, even when I enter the 
username/passwd ..... it dumps me in to the site  www.securedA.ws

This really isn't making any sense.

Can you help me?  I am sending this same email to the Users list too.


Thanks in advance.
Warron French
Sr. Network Engineer
Xtria, LLC


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org