You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2016/05/15 05:28:39 UTC

[Bug 59557] New: The fix reported in 2.4.4 failed to fix Password Mismatch problem with Basic AuthType

https://bz.apache.org/bugzilla/show_bug.cgi?id=59557

            Bug ID: 59557
           Summary: The fix reported in 2.4.4 failed to fix Password
                    Mismatch problem with Basic AuthType
           Product: Apache httpd-2
           Version: 2.4.18
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_auth_basic
          Assignee: bugs@httpd.apache.org
          Reporter: steve@doitnext.com

Steps to reproduce:

Place an .htaccess file in a directory being served by apache2 version 2.4.18
Let the file contain the following:

AuthType Basic
AuthName "Quizzard Login"
AuthUserFile .htpasswd
AuthGroupFile .htgroup
Require user steve

Place an .htgroup file next to the .htpasswd file with the following contents.
Admins: steve 
Now the .htgroup file is not being used because were requiring user not group.

Enter the following command on the command line
/the/dir$ htpasswd -nb steve ILikeFrenchFries > .htpasswd

The .htpasswd file now contains:
steve:$apr1$TrIKX1SW$SJRWbFFP4g7MFgyKaXCC21

But at any rate the following command executes as follows:
/the/dir$ htpasswd -vb .htpasswd steve ILikeFrenchFries
Password for user steve correct.

The /the/dir is used here as an example but in my server it is the correct
file.  What happens when I attempt to access content in this directory is tha I
am prompted o enter my username and pasword using http authentication. When I
enter the user "steve", and the password "ILikeFrenchFries", apache reports a
Password mismatch error in the error.log and the dialog continues to prompt for
a password until I hit cancel.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 59557] The fix reported in 2.4.4 failed to fix Password Mismatch problem with Basic AuthType

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=59557

Rich Bowen <rb...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #2 from Rich Bowen <rb...@apache.org> ---
Thank you for your report. As part of an effort to clean up our issue tracker,
we are closing tickets that have seen no activity for more than 5 years. If
this issue is still relevant to a current version of Apache httpd (2.4.x or
trunk), please reopen this ticket or open a new one with updated information.
We appreciate your contribution to the project.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 59557] The fix reported in 2.4.4 failed to fix Password Mismatch problem with Basic AuthType

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=59557

--- Comment #1 from steve@doitnext.com ---
Running this updates the .htpasswd file 

htpasswd -cb .htpasswd steve ILikeFrenchFries
Adding password for user steve

The .htpasswd file now contains:
steve:$apr1$x6DBpybz$goigUHh9uROjwYGH9Jy9p.

Still get the Password Mismatch error

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org