You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@httpd.apache.org by li...@panka.com on 2006/08/15 17:31:37 UTC

[users@httpd] auth not working with ssl


Hello,

I have a virtual host and I'd like to require basic auth for a directory and
everything under it. The following works, goodUser can login and access
everythin in www.foo.com/private and all directories below:

<VirtualHost *:80>
	DocumentRoot /www/foo.com/htdocs
	ServerName www.foo.com
	<Directory /www/foo.com/htdocs/private>
		#SSLRequireSSL
		AuthType Basic
		AuthName "private"
		AuthUserFile conf/auth/passwd
		AuthGroupFile conf/auth/group
		Require user goodUser
	</Directory>
</VirtualHost>

However I also want te require an ssl connection. When I uncomment
SSLRequireSSL, I can browse to www.foo.com/private over ssl WITHOUT any
password, and I cannot access anything in the subdirectories and no error is
written into the log.

What am I missing here?

Thanks,
Lajos





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] auth not working with ssl

Posted by li...@panka.com.

Thanks, Joshua, moving the <Directory> section out of vhosts solved all the
problems.

Thanks,
Lajos


Quoting Joshua Slive <jo...@slive.ca>:

> On 8/15/06, lists@panka.com <li...@panka.com> wrote:
> >
> >
> > Hello,
> >
> > I have a virtual host and I'd like to require basic auth for a directory
> and
> > everything under it. The following works, goodUser can login and access
> > everythin in www.foo.com/private and all directories below:
> >
> > <VirtualHost *:80>
> >         DocumentRoot /www/foo.com/htdocs
> >         ServerName www.foo.com
> >         <Directory /www/foo.com/htdocs/private>
> >                 #SSLRequireSSL
> >                 AuthType Basic
> >                 AuthName "private"
> >                 AuthUserFile conf/auth/passwd
> >                 AuthGroupFile conf/auth/group
> >                 Require user goodUser
> >         </Directory>
> > </VirtualHost>
> >
> > However I also want te require an ssl connection. When I uncomment
> > SSLRequireSSL, I can browse to www.foo.com/private over ssl WITHOUT any
> > password, and I cannot access anything in the subdirectories and no error
> is
> > written into the log.
> >
> > What am I missing here?
> 
> Your <Directory> section is inside a <VirtualHost> that applies only
> to non-ssl connections.  It has no effect whatsoever on ssl
> connections.
> 
> Start by putting that <Directory> section outside any <VirtualHost>.
> (Although your symptoms suggest you might also have other problems
> with your ssl vhost.)
> 
> Joshua.
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 






---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] auth not working with ssl

Posted by Joshua Slive <jo...@slive.ca>.

On 8/15/06, lists@panka.com <li...@panka.com> wrote:
>
>
> Hello,
>
> I have a virtual host and I'd like to require basic auth for a directory and
> everything under it. The following works, goodUser can login and access
> everythin in www.foo.com/private and all directories below:
>
> <VirtualHost *:80>
>         DocumentRoot /www/foo.com/htdocs
>         ServerName www.foo.com
>         <Directory /www/foo.com/htdocs/private>
>                 #SSLRequireSSL
>                 AuthType Basic
>                 AuthName "private"
>                 AuthUserFile conf/auth/passwd
>                 AuthGroupFile conf/auth/group
>                 Require user goodUser
>         </Directory>
> </VirtualHost>
>
> However I also want te require an ssl connection. When I uncomment
> SSLRequireSSL, I can browse to www.foo.com/private over ssl WITHOUT any
> password, and I cannot access anything in the subdirectories and no error is
> written into the log.
>
> What am I missing here?

Your <Directory> section is inside a <VirtualHost> that applies only
to non-ssl connections.  It has no effect whatsoever on ssl
connections.

Start by putting that <Directory> section outside any <VirtualHost>.
(Although your symptoms suggest you might also have other problems
with your ssl vhost.)

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org