You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2016/05/15 05:28:39 UTC
[Bug 59557] New: The fix reported in 2.4.4 failed to fix Password
Mismatch problem with Basic AuthType
https://bz.apache.org/bugzilla/show_bug.cgi?id=59557
Bug ID: 59557
Summary: The fix reported in 2.4.4 failed to fix Password
Mismatch problem with Basic AuthType
Product: Apache httpd-2
Version: 2.4.18
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_auth_basic
Assignee: bugs@httpd.apache.org
Reporter: steve@doitnext.com
Steps to reproduce:
Place an .htaccess file in a directory being served by apache2 version 2.4.18
Let the file contain the following:
AuthType Basic
AuthName "Quizzard Login"
AuthUserFile .htpasswd
AuthGroupFile .htgroup
Require user steve
Place an .htgroup file next to the .htpasswd file with the following contents.
Admins: steve
Now the .htgroup file is not being used because were requiring user not group.
Enter the following command on the command line
/the/dir$ htpasswd -nb steve ILikeFrenchFries > .htpasswd
The .htpasswd file now contains:
steve:$apr1$TrIKX1SW$SJRWbFFP4g7MFgyKaXCC21
But at any rate the following command executes as follows:
/the/dir$ htpasswd -vb .htpasswd steve ILikeFrenchFries
Password for user steve correct.
The /the/dir is used here as an example but in my server it is the correct
file. What happens when I attempt to access content in this directory is tha I
am prompted o enter my username and pasword using http authentication. When I
enter the user "steve", and the password "ILikeFrenchFries", apache reports a
Password mismatch error in the error.log and the dialog continues to prompt for
a password until I hit cancel.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 59557] The fix reported in 2.4.4 failed to fix Password Mismatch problem with Basic AuthType
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=59557
Rich Bowen <rb...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |WONTFIX
--- Comment #2 from Rich Bowen <rb...@apache.org> ---
Thank you for your report. As part of an effort to clean up our issue tracker,
we are closing tickets that have seen no activity for more than 5 years. If
this issue is still relevant to a current version of Apache httpd (2.4.x or
trunk), please reopen this ticket or open a new one with updated information.
We appreciate your contribution to the project.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 59557] The fix reported in 2.4.4 failed to fix Password
Mismatch problem with Basic AuthType
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=59557
--- Comment #1 from steve@doitnext.com ---
Running this updates the .htpasswd file
htpasswd -cb .htpasswd steve ILikeFrenchFries
Adding password for user steve
The .htpasswd file now contains:
steve:$apr1$x6DBpybz$goigUHh9uROjwYGH9Jy9p.
Still get the Password Mismatch error
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org