You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Kaya Saman <Sa...@netscape.net> on 2009/10/11 23:57:20 UTC
[users@httpd] .htaccess files not working from internet? intranet access fine
Hi,
this is my first post here :-)
basically I have google'd this issue a bit and finally realized that
there was no viable solution that I could deduce results from!
I have a few servers running apache and some folders which have
.htaccess files in them, I can access these from any network inside the
NAT of my router however when it comes down to external access from
outside the NAT I always get permission denied; authorized access only??
My systems are behind a reverse proxy handled by Squid but also after
Google'ing found that Squid doesn't care about .htaccess and doesn't
even know what it is.
Another page I read claimed that it could be an issue of IPS protection
system in the firewall - however iptables doesn't contain any config
only default and isn't even running I think only in conjunction with
fail2ban to prevent DoS attacks. My router, a Cisco 857W, also doesn't
have IPS at all and IDS isn't enabled.
Can anyone help me find a solution to this situation?? I have checked
the logs for httpd/access_log and error_log only to find nothing
mentioned about denying anything.....
Any recommendations are appreciated! Thanks
An example of one config file which is the config from Munin is here:
[code]
ScriptAlias /munin/cgi/ /var/www/munin/cgi/
#<Directory /var/www/munin/cgi/>
# Options ExecCGI
# SSLRequireSSL
# order deny,allow
# deny from all
# AuthType Basic
# AuthUserFile /site/cfg/passwd
# AuthGroupFile /site/cfg/group
# AuthName "munin"
# require group munin
# Satisfy Any
#</Directory>
#
Alias /munin/ /var/www/munin/
<Directory /var/www/munin/>
Options None
# SSLRequireSSL
order deny,allow
deny from all
AuthType Basic
# AuthUserFile /site/cfg/passwd
AuthUserFile /var/http-passwords
# AuthGroupFile /site/cfg/group
#AuthGroupFile /var/http-group
# AuthName "munin"
AuthName "Restricted Files"
# require group munin
Require user admin
Satisfy Any
</Directory>
[/code]
I followed the .htaccess example from the apache.org website and have a
single file where password/username is stored for multiple pages.....
Kaya
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet?
intranetaccessfine
Posted by Dick Davies <ra...@hellooperator.net>.
Do yourself a big favour and use something like curl.
Telnet is a crappy way to test http.
On Tue, Oct 13, 2009 at 1:19 PM, Kaya Saman <Sa...@netscape.net> wrote:
> Using host: hostname from telnet I get this:
>
> [code]
> HTTP/1.0 400 Bad Request
> Server: squid/2.6.STABLE15
> Date: Tue, 13 Oct 2009 12:17:34 GMT
> Content-Type: text/html
> Content-Length: 1186
> Expires: Tue, 13 Oct 2009 12:17:34 GMT
> X-Squid-Error: ERR_INVALID_REQ 0
> X-Cache: MISS from NetraT1-Proxy
> Via: 1.0 NetraT1-Proxy:80 (squid/2.6.STABLE15)
> Proxy-Connection: close
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
> "http://www.w3.org/TR/html4/loose.dtd">
> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;
> charset=iso-8859-1">
> <TITLE>ERROR: The requested URL could not be retrieved</TITLE>
> <STYLE
> type="text/css"><!--BODY{background-color:#ffffff;font-family:verdana,sans-serif}PRE{font-family:sans-serif}--></STYLE>
> </HEAD><BODY>
> <H1>ERROR</H1>
> <H2>The requested URL could not be retrieved</H2>
> <HR noshade size="1px">
> <P>
> While trying to process the request:
> <PRE>
> host zeta-ray
>
> </PRE>
> <P>
> The following error was encountered:
> <UL>
> <LI>
> <STRONG>
> Invalid Request
> </STRONG>
> </UL>
>
> <P>
> Some aspect of the HTTP Request is invalid. Possible problems:
> <UL>
> <LI>Missing or unknown request method
> <LI>Missing URL
> <LI>Missing HTTP Identifier (HTTP/1.0)
> <LI>Request is too large
> <LI>Content-Length missing for POST or PUT requests
> <LI>Illegal character in hostname; underscores are not allowed
> </UL>
> <P>Your cache administrator is <A HREF="mailto:webmaster">webmaster</A>.
>
> <BR clear="all">
> <HR noshade size="1px">
> <ADDRESS>
> Generated Tue, 13 Oct 2009 12:17:34 GMT by NetraT1-Proxy
> (squid/2.6.STABLE15)
> </ADDRESS>
> </BODY></HTML>
> [/code]
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet?
intranetaccess fine
Posted by Dick Davies <ra...@hellooperator.net>.
What's in the error/access logs on apache, Kaya?
That should tell you whether it's apache blocking the request, or Squid.
On Tue, Oct 13, 2009 at 9:45 AM, Kaya Saman <Sa...@netscape.net> wrote:
> matt farey wrote:
>>
>> Did you ever investigate the response headers or lookup basic auth in
>> squid?
>> Sent from my BlackBerry® wireless device
>>
>
> Thanks for the response Matt!!
>
> I haven't checked the headers so will need to run Wireshark on it.
>
> Checked out basic auth in Squid and posted a line of conf which I thought
> was viable:
>
> #auth_param basic realm Squid proxy-caching web server
>
> after restarting however I got the same issue.
>
> When I get back later I'll do more Google'ing on it as I have to run out now
> as meeting for a job interview (currently transitioning between ex-student
> and IT/networking proffessional (make that junior))!!
>
> I think output from Wireshark will help you guys help me out more provided I
> don't get the issue fixed before hand :-)
>
> Thanks again for the response!!
>
> Regards,
>
> Kaya
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Kaya Saman <Sa...@netscape.net>.
matt farey wrote:
> Sorry this blasted blackberry misses letters! (And top posts!)
>
>
>
> Sent from my BlackBerry® wireless device
>
>
That's cool :-) my next step is to learn how to synch Blackberry's with
colab systems such as Zimbra and Scalix..... it's nice being an
enthusiastic student! - although once I get that first job which is so
near now I doubt it'll last but then again I love what I do so... there
may be some chance to love my job after all;
That aside exact output I'm getting is this:
[code]
----------------------------------------------------------
http://zeta-ray.optiplex-networks.com/munin/
GET /munin/ HTTP/1.1
Host: zeta-ray.optiplex-networks.com
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.14)
Gecko/2009090217 Ubuntu/9.04 (jaunty) Firefox/3.0.14
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Authorization: Basic YWRtaW46U2NscjExWFA5OQ==
HTTP/1.x 401 Unauthorized
Date: Wed, 14 Oct 2009 09:57:23 GMT
Server: Apache/2.2.3 (Red Hat)
WWW-Authenticate: Basic realm="Restricted Files"
Content-Length: 497
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from NetraT1-Proxy
Via: 1.0 NetraT1-Proxy:80 (squid/2.6.STABLE15)
Connection: close
----------------------------------------------------------
[/code]
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by matt farey <ma...@gmail.com>.
Sorry this blasted blackberry misses letters! (And top posts!)
Sent from my BlackBerry® wireless device
-----Original Message-----
From: Kaya Saman <Sa...@netscape.net>
Date: Wed, 14 Oct 2009 13:10:11
To: <us...@httpd.apache.org>
Subject: Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Firefox plugin is giving me quite an interesting readout and I think
I've located the issue which is what Matt Farey has been saying all
along about the Squid forwarding of HTTP Auth Basic Headers:
I get WWW-Authenticate: Basic realm="Restricted Files" message which I'm
pretty sure is this part of Squid:
#auth_param basic realm
of which after I get an X-cache: MISS message.
Time to go to Squid mailing list I think, would you guys agree???
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by matt farey <ma...@gmail.com>.
What should happen, is that
Firefox requests URL
Goes via squid,
Squid sends on firefoxes request headers
Apache backend sends "must authenticate" headers
These must be picked u by squid and reversed out to firefox, if this is happening, you will see the firefox basic authentication pop-up.
Once firefox sees those authentication headers and you fill in the boxes it will send the a header with a payload of base64 encoded username:password
This must be proxied by squid to apache for the resource to be allowed back.
Firefox should now cache these credentials and resend them every single request, and so on
Where does this fail, are you getting the firefox pop up?
Sent from my BlackBerry® wireless device
-----Original Message-----
From: Kaya Saman <Sa...@netscape.net>
Date: Wed, 14 Oct 2009 13:10:11
To: <us...@httpd.apache.org>
Subject: Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Firefox plugin is giving me quite an interesting readout and I think
I've located the issue which is what Matt Farey has been saying all
along about the Squid forwarding of HTTP Auth Basic Headers:
I get WWW-Authenticate: Basic realm="Restricted Files" message which I'm
pretty sure is this part of Squid:
#auth_param basic realm
of which after I get an X-cache: MISS message.
Time to go to Squid mailing list I think, would you guys agree???
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Kaya Saman <Sa...@netscape.net>.
Firefox plugin is giving me quite an interesting readout and I think
I've located the issue which is what Matt Farey has been saying all
along about the Squid forwarding of HTTP Auth Basic Headers:
I get WWW-Authenticate: Basic realm="Restricted Files" message which I'm
pretty sure is this part of Squid:
#auth_param basic realm
of which after I get an X-cache: MISS message.
Time to go to Squid mailing list I think, would you guys agree???
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by matt farey <ma...@gmail.com>.
Curl is not showing the response headers, Is it -X or -H (or neither - I forget!)
If you have access to windows, you can use fiddlertool proxy, damn hot debugging proxy.
But at least you can see that squid does not understand how to supply the credentials from the html!
Matt
Sent from my BlackBerry® wireless device
-----Original Message-----
From: Kaya Saman <Sa...@netscape.net>
Date: Wed, 14 Oct 2009 12:48:03
To: <us...@httpd.apache.org>
Subject: Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Hi guys,
this is output from curl:
[code]
root@Hp-Compaq-2230s:~# curl http://zeta-ray.optiplex-networks.com/munin/
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>401 Authorization Required</title>
</head><body>
<h1>Authorization Required</h1>
<p>This server could not verify that you
are authorized to access the document
requested. Either you supplied the wrong
credentials (e.g., bad password), or your
browser doesn't understand how to supply
the credentials required.</p>
<hr>
<address>Apache/2.2.3 (Red Hat) Server at zeta-ray.optiplex-networks.com
Port 80</address>
</body></html>
[/code]
Am gona try the firefox addons now!!
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Kaya Saman <Sa...@netscape.net>.
Hi guys,
this is output from curl:
[code]
root@Hp-Compaq-2230s:~# curl http://zeta-ray.optiplex-networks.com/munin/
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>401 Authorization Required</title>
</head><body>
<h1>Authorization Required</h1>
<p>This server could not verify that you
are authorized to access the document
requested. Either you supplied the wrong
credentials (e.g., bad password), or your
browser doesn't understand how to supply
the credentials required.</p>
<hr>
<address>Apache/2.2.3 (Red Hat) Server at zeta-ray.optiplex-networks.com
Port 80</address>
</body></html>
[/code]
Am gona try the firefox addons now!!
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Kaya Saman <Sa...@netscape.net>.
> You have to simulate what the browser would do.
> So "URL" or "hostname" must be http://the.url.you.never/told/us.here,
> OK? :)
Whoops, sorry got so caught up in my own stuff major apologies!!
URL is http://zeta-ray.optiplex-networks.com/munin/
This is one of the systems I have .htaccess passwd files on.....
>
> You could try Firefox and LiveHTTPHeaders add-on.
> http://www.mozilla-europe.org/de/firefox/
> https://addons.mozilla.org/de/firefox/addon/3829
Thank you I will try these and curl as well, as suggested previously :-)
>
> Then you may see, what's going on.
>
>
> Marc
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Marc Patermann <ha...@ofd-sth.niedersachsen.de>.
Kaya Saman schrieb:
> Using host: hostname from telnet I get this:
You have to simulate what the browser would do.
So "URL" or "hostname" must be http://the.url.you.never/told/us.here, OK? :)
You could try Firefox and LiveHTTPHeaders add-on.
http://www.mozilla-europe.org/de/firefox/
https://addons.mozilla.org/de/firefox/addon/3829
Then you may see, what's going on.
Marc
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Kaya Saman <Sa...@netscape.net>.
Using host: hostname from telnet I get this:
[code]
HTTP/1.0 400 Bad Request
Server: squid/2.6.STABLE15
Date: Tue, 13 Oct 2009 12:17:34 GMT
Content-Type: text/html
Content-Length: 1186
Expires: Tue, 13 Oct 2009 12:17:34 GMT
X-Squid-Error: ERR_INVALID_REQ 0
X-Cache: MISS from NetraT1-Proxy
Via: 1.0 NetraT1-Proxy:80 (squid/2.6.STABLE15)
Proxy-Connection: close
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=iso-8859-1">
<TITLE>ERROR: The requested URL could not be retrieved</TITLE>
<STYLE
type="text/css"><!--BODY{background-color:#ffffff;font-family:verdana,sans-serif}PRE{font-family:sans-serif}--></STYLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>The requested URL could not be retrieved</H2>
<HR noshade size="1px">
<P>
While trying to process the request:
<PRE>
host zeta-ray
</PRE>
<P>
The following error was encountered:
<UL>
<LI>
<STRONG>
Invalid Request
</STRONG>
</UL>
<P>
Some aspect of the HTTP Request is invalid. Possible problems:
<UL>
<LI>Missing or unknown request method
<LI>Missing URL
<LI>Missing HTTP Identifier (HTTP/1.0)
<LI>Request is too large
<LI>Content-Length missing for POST or PUT requests
<LI>Illegal character in hostname; underscores are not allowed
</UL>
<P>Your cache administrator is <A HREF="mailto:webmaster">webmaster</A>.
<BR clear="all">
<HR noshade size="1px">
<ADDRESS>
Generated Tue, 13 Oct 2009 12:17:34 GMT by NetraT1-Proxy
(squid/2.6.STABLE15)
</ADDRESS>
</BODY></HTML>
[/code]
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Kaya Saman <Sa...@netscape.net>.
Dick Davies wrote:
> On Tue, Oct 13, 2009 at 12:33 PM, Kaya Saman <Sa...@netscape.net> wrote:
>
>
>
> You have to type the GET bit yourself :)
>
Oops... newbie mistake haha :-)
Output:
[code]
GET url HTTP/1.1
HTTP/1.0 400 Bad Request
Server: squid/2.6.STABLE15
Date: Tue, 13 Oct 2009 12:14:05 GMT
Content-Type: text/html
Content-Length: 1143
Expires: Tue, 13 Oct 2009 12:14:05 GMT
X-Squid-Error: ERR_INVALID_URL 0
X-Cache: MISS from NetraT1-Proxy
Via: 1.0 NetraT1-Proxy:80 (squid/2.6.STABLE15)
Connection: close
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=iso-8859-1">
<TITLE>ERROR: The requested URL could not be retrieved</TITLE>
<STYLE
type="text/css"><!--BODY{background-color:#ffffff;font-family:verdana,sans-serif}PRE{font-family:sans-serif}--></STYLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>The requested URL could not be retrieved</H2>
<HR noshade size="1px">
<P>
While trying to retrieve the URL:
<A HREF="url">url</A>
<P>
The following error was encountered:
<UL>
<LI>
<STRONG>
Invalid URL
</STRONG>
</UL>
<P>
Some aspect of the requested URL is incorrect. Possible problems:
<UL>
<LI>Missing or incorrect access protocol (should be `http://'' or similar)
<LI>Missing hostname
<LI>Illegal double-escape in the URL-Path
<LI>Illegal character in hostname; underscores are not allowed
</UL>
<P>Your cache administrator is <A HREF="mailto:webmaster">webmaster</A>.
<BR clear="all">
<HR noshade size="1px">
<ADDRESS>
Generated Tue, 13 Oct 2009 12:14:05 GMT by NetraT1-Proxy
(squid/2.6.STABLE15)
</ADDRESS>
</BODY></HTML>
[/code]
>
>
> If squid is running on the same box, you'd see an error like that if
> squid was letting you
> in and you requested /announce .
>
Separate box!! Is a standalone proxy...
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet?
intranetaccessfine
Posted by Dick Davies <ra...@hellooperator.net>.
On Tue, Oct 13, 2009 at 12:33 PM, Kaya Saman <Sa...@netscape.net> wrote:
> I used: telnet {mydomain.com} 80 and it just gives me connected??? No 'get
> url' etc... - am on Ubuntu 9.04 currently but even within the Solaris and
> Cent OS servers I don't get that kind of response.
You have to type the GET bit yourself :)
> Dick, I have nothing in access log apart from BitTorrent stuff, but in
> error_log I get this:
>
> [Tue Oct 13 14:30:16 2009] [error] [client 127.0.0.1] File does not exist:
> /var/www/html/announce
If squid is running on the same box, you'd see an error like that if
squid was letting you
in and you requested /announce .
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Kaya Saman <Sa...@netscape.net>.
Got a wireshark output on this and get:
X-cache=MISS
but nothing really distinguishable within the http headers..... :-(
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by Kaya Saman <Sa...@netscape.net>.
Many thanks for the responses :-)
I am back now with possible job placements which is a good sign!
Matt, I tried telnet but my telnet version doesn't give me as specific
detailed output as that....
I used: telnet {mydomain.com} 80 and it just gives me connected??? No
'get url' etc... - am on Ubuntu 9.04 currently but even within the
Solaris and Cent OS servers I don't get that kind of response.
Dick, I have nothing in access log apart from BitTorrent stuff, but in
error_log I get this:
[Tue Oct 13 14:30:16 2009] [error] [client 127.0.0.1] File does not
exist: /var/www/html/announce
I don't think it is relevant but however the issue looks to be squid by
my inexperienced knowledge...?? :-)
Time to fire up wireshark or tshark on this one I think....
Regards,
Kaya
matt farey wrote:
> You can use a telnet
>
>
> Telnet hostname 80
>
>
> GET url HTTP/1.1
> Host: hostname
> Enter enter
>
>
> And see what comes back
>
>
> It strike me squid is not passing back the headers or you would see the browser pop up, but squid *is* seeing the challenge since it fails with 403.
>
> Now do same telnet direct to page and see the difference
>
> Sent from my BlackBerry® wireless device
>
> -----Original Message-----
> From: Kaya Saman <Sa...@netscape.net>
> Date: Tue, 13 Oct 2009 11:45:01
> To: <us...@httpd.apache.org>
> Subject: Re: [users@httpd] .htaccess files not working from internet? intranetaccess
> fine
> matt farey wrote:
>
>> Did you ever investigate the response headers or lookup basic auth in squid?
>> Sent from my BlackBerry® wireless device
>>
>>
>>
> Thanks for the response Matt!!
>
> I haven't checked the headers so will need to run Wireshark on it.
>
> Checked out basic auth in Squid and posted a line of conf which I
> thought was viable:
>
> #auth_param basic realm Squid proxy-caching web server
>
> after restarting however I got the same issue.
>
> When I get back later I'll do more Google'ing on it as I have to run out
> now as meeting for a job interview (currently transitioning between
> ex-student and IT/networking proffessional (make that junior))!!
>
> I think output from Wireshark will help you guys help me out more
> provided I don't get the issue fixed before hand :-)
>
> Thanks again for the response!!
>
> Regards,
>
> Kaya
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccessfine
Posted by matt farey <ma...@gmail.com>.
You can use a telnet
Telnet hostname 80
GET url HTTP/1.1
Host: hostname
Enter enter
And see what comes back
It strike me squid is not passing back the headers or you would see the browser pop up, but squid *is* seeing the challenge since it fails with 403.
Now do same telnet direct to page and see the difference
Sent from my BlackBerry® wireless device
-----Original Message-----
From: Kaya Saman <Sa...@netscape.net>
Date: Tue, 13 Oct 2009 11:45:01
To: <us...@httpd.apache.org>
Subject: Re: [users@httpd] .htaccess files not working from internet? intranetaccess
fine
matt farey wrote:
> Did you ever investigate the response headers or lookup basic auth in squid?
> Sent from my BlackBerry® wireless device
>
>
Thanks for the response Matt!!
I haven't checked the headers so will need to run Wireshark on it.
Checked out basic auth in Squid and posted a line of conf which I
thought was viable:
#auth_param basic realm Squid proxy-caching web server
after restarting however I got the same issue.
When I get back later I'll do more Google'ing on it as I have to run out
now as meeting for a job interview (currently transitioning between
ex-student and IT/networking proffessional (make that junior))!!
I think output from Wireshark will help you guys help me out more
provided I don't get the issue fixed before hand :-)
Thanks again for the response!!
Regards,
Kaya
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccess
fine
Posted by Kaya Saman <Sa...@netscape.net>.
matt farey wrote:
> Did you ever investigate the response headers or lookup basic auth in squid?
> Sent from my BlackBerry® wireless device
>
>
Thanks for the response Matt!!
I haven't checked the headers so will need to run Wireshark on it.
Checked out basic auth in Squid and posted a line of conf which I
thought was viable:
#auth_param basic realm Squid proxy-caching web server
after restarting however I got the same issue.
When I get back later I'll do more Google'ing on it as I have to run out
now as meeting for a job interview (currently transitioning between
ex-student and IT/networking proffessional (make that junior))!!
I think output from Wireshark will help you guys help me out more
provided I don't get the issue fixed before hand :-)
Thanks again for the response!!
Regards,
Kaya
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranetaccess fine
Posted by matt farey <ma...@gmail.com>.
Did you ever investigate the response headers or lookup basic auth in squid?
Sent from my BlackBerry® wireless device
-----Original Message-----
From: Kaya Saman <Sa...@netscape.net>
Date: Tue, 13 Oct 2009 11:02:52
To: <us...@httpd.apache.org>
Subject: Re: [users@httpd] .htaccess files not working from internet? intranet
access fine
Hi guys,
sorry don't mean to be pushy or hasty but has anyone any idea of why my
security within .htaccess isn't working through the internet???
I kinda got some responses which at least I think helped identify the
problem more specifically but nothing to solve my issues... :-(
Thanks again, I do respect the fact that everyone has jobs and lives
which is why I waited till now as I assume the thread has got stale??
Many thanks for any solutions or probably ones ;-)
regards,
Kaya
Kaya Saman wrote:
>
>>>
>>>
>>> If you remove the http password parts from your config, do things
>>> start to work for you?
>>
>> Yes then it works no probs :-)
>
> Sorry if was unclear on this....
>
> I can access the pages but then I have no security as .htaccess
> becomes disabled!
>
> Any thing else which can help me??
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet
access fine
Posted by Kaya Saman <Sa...@netscape.net>.
Hi guys,
sorry don't mean to be pushy or hasty but has anyone any idea of why my
security within .htaccess isn't working through the internet???
I kinda got some responses which at least I think helped identify the
problem more specifically but nothing to solve my issues... :-(
Thanks again, I do respect the fact that everyone has jobs and lives
which is why I waited till now as I assume the thread has got stale??
Many thanks for any solutions or probably ones ;-)
regards,
Kaya
Kaya Saman wrote:
>
>>>
>>>
>>> If you remove the http password parts from your config, do things
>>> start to work for you?
>>
>> Yes then it works no probs :-)
>
> Sorry if was unclear on this....
>
> I can access the pages but then I have no security as .htaccess
> becomes disabled!
>
> Any thing else which can help me??
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet
access fine
Posted by Kaya Saman <Sa...@netscape.net>.
>>
>>
>> If you remove the http password parts from your config, do things
>> start to work for you?
>
> Yes then it works no probs :-)
Sorry if was unclear on this....
I can access the pages but then I have no security as .htaccess becomes
disabled!
Any thing else which can help me??
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet
access fine
Posted by Kaya Saman <Sa...@netscape.net>.
Scott Haneda wrote:
> On Oct 11, 2009, at 4:38 PM, Kaya Saman wrote:
>
>> There isn't an error as such it just doesn't let me in!!!
>
> Ahh, I think I see better what you are up against now.
>
>> The browser goes directly back to password/uname input prompt after
>> values inputted?? Inside is ok let's me in but outside is issue...
>> same URLs as my internal DNS matches external DNS.
>>
>> Also am in another country right now from the network so am having to
>> use combination of ssh and web to check stuff.
>
>
> If you remove the http password parts from your config, do things
> start to work for you?
Yes then it works no probs :-)
Internally is ok too with htaccess enabled (sorry if said this multiple
times) - when I left the network everything was fine internally but now
that I'm on the otherside of the fishbowl things are a bit different....
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet access fine
Posted by Scott Haneda <ta...@newgeo.com>.
On Oct 11, 2009, at 4:38 PM, Kaya Saman wrote:
> There isn't an error as such it just doesn't let me in!!!
Ahh, I think I see better what you are up against now.
> The browser goes directly back to password/uname input prompt after
> values inputted?? Inside is ok let's me in but outside is issue...
> same URLs as my internal DNS matches external DNS.
>
> Also am in another country right now from the network so am having
> to use combination of ssh and web to check stuff.
If you remove the http password parts from your config, do things
start to work for you?
--
Scott * If you contact me off list replace talklists@ with scott@ *
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet
access fine
Posted by Kaya Saman <Sa...@netscape.net>.
Scott Haneda wrote:
> On Oct 11, 2009, at 2:57 PM, Kaya Saman wrote:
>
>>
>
> Sounds to me like this is a DNS issue.
DNS is fine :-) URL's resolve no probs
>
>
> Squid probably does not play a role in this.
hmm.... that's exactly what I read but having slight second thoughts now!
>
>
> However, you mention you get an access denied error, can you tell us
> specifically what that error is, is it page 404 not found? What is
> the http response code?
>
>
There isn't an error as such it just doesn't let me in!!!
The browser goes directly back to password/uname input prompt after
values inputted?? Inside is ok let's me in but outside is issue... same
URLs as my internal DNS matches external DNS.
Also am in another country right now from the network so am having to
use combination of ssh and web to check stuff.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet access fine
Posted by Scott Haneda <ta...@newgeo.com>.
On Oct 11, 2009, at 2:57 PM, Kaya Saman wrote:
> I have a few servers running apache and some folders which
> have .htaccess files in them, I can access these from any network
> inside the NAT of my router however when it comes down to external
> access from outside the NAT I always get permission denied;
> authorized access only??
Sounds to me like this is a DNS issue.
> My systems are behind a reverse proxy handled by Squid but also
> after Google'ing found that Squid doesn't care about .htaccess and
> doesn't even know what it is.
Squid probably does not play a role in this.
> Another page I read claimed that it could be an issue of IPS
> protection system in the firewall - however iptables doesn't contain
> any config only default and isn't even running I think only in
> conjunction with fail2ban to prevent DoS attacks. My router, a Cisco
> 857W, also doesn't have IPS at all and IDS isn't enabled.
I doubt that is related, though possible, my gut tells me it is simpler.
> Can anyone help me find a solution to this situation?? I have
> checked the logs for httpd/access_log and error_log only to find
> nothing mentioned about denying anything.....
If you can load a hostname from within your network, yet not outside,
that would tell me that when you are inside the network, the
resolution of that hostname is turning up an IP that apache is happy
to serve the results for. When you are outside the network, that
hostname is not the same IP as what is returned when you are inside
the network.
> Any recommendations are appreciated! Thanks
I would run DNS lookups under both conditions. To keep it simple, if
your Web site you are trying to access is example.com, from the
working case, inside your network, open a terminal and run:
dig example.com A
Look for the result of the A record, and what IP address is is showing.
Now, go to the outside network where this is not working, and run the
same dig command. I suspect you will find there is a different IP
address being returned. If you are not seeing any hits to the
acces_log and error_log when outside the local network, it more than
likely means you are simply not reaching the machine you think you are.
However, you mention you get an access denied error, can you tell us
specifically what that error is, is it page 404 not found? What is
the http response code?
I do not see a Virtual Host container in your sample config you sent
in, you probably just need to set one up for the host you are trying
to reach.
Here is how I generally do it:
# START example.com
<VirtualHost *:80>
DocumentRoot "/var/www/munin"
ServerName example.com
ServerAlias www.example.com
DirectoryIndex index.html index.htm
<Directory "/var/www/munin">
Options FollowSymLinks
AllowOverride All
Order allow,deny
allow from all
</Directory>
</VirtualHost>
# END example.com
--
Scott * If you contact me off list replace talklists@ with scott@ *
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet
access fine
Posted by Kaya Saman <Sa...@netscape.net>.
matt farey wrote:
> Is your squid proxy set up to forward on the basic authentication headers? Doesn't sound like they are being sent to your browser
>
>
> Sent from my BlackBerry® wireless device
>
>
Many thanks for the response! Is this the line I should be looking at in
Squid:
#auth_param basic realm Squid proxy-caching web server
uncomment then restart squid???
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet access fine
Posted by matt farey <ma...@gmail.com>.
Is your squid proxy set up to forward on the basic authentication headers? Doesn't sound like they are being sent to your browser
Sent from my BlackBerry® wireless device
-----Original Message-----
From: Kaya Saman <Sa...@netscape.net>
Date: Mon, 12 Oct 2009 00:57:20
To: <us...@httpd.apache.org>
Subject: [users@httpd] .htaccess files not working from internet? intranet access fine
Hi,
this is my first post here :-)
basically I have google'd this issue a bit and finally realized that
there was no viable solution that I could deduce results from!
I have a few servers running apache and some folders which have
.htaccess files in them, I can access these from any network inside the
NAT of my router however when it comes down to external access from
outside the NAT I always get permission denied; authorized access only??
My systems are behind a reverse proxy handled by Squid but also after
Google'ing found that Squid doesn't care about .htaccess and doesn't
even know what it is.
Another page I read claimed that it could be an issue of IPS protection
system in the firewall - however iptables doesn't contain any config
only default and isn't even running I think only in conjunction with
fail2ban to prevent DoS attacks. My router, a Cisco 857W, also doesn't
have IPS at all and IDS isn't enabled.
Can anyone help me find a solution to this situation?? I have checked
the logs for httpd/access_log and error_log only to find nothing
mentioned about denying anything.....
Any recommendations are appreciated! Thanks
An example of one config file which is the config from Munin is here:
[code]
ScriptAlias /munin/cgi/ /var/www/munin/cgi/
#<Directory /var/www/munin/cgi/>
# Options ExecCGI
# SSLRequireSSL
# order deny,allow
# deny from all
# AuthType Basic
# AuthUserFile /site/cfg/passwd
# AuthGroupFile /site/cfg/group
# AuthName "munin"
# require group munin
# Satisfy Any
#</Directory>
#
Alias /munin/ /var/www/munin/
<Directory /var/www/munin/>
Options None
# SSLRequireSSL
order deny,allow
deny from all
AuthType Basic
# AuthUserFile /site/cfg/passwd
AuthUserFile /var/http-passwords
# AuthGroupFile /site/cfg/group
#AuthGroupFile /var/http-group
# AuthName "munin"
AuthName "Restricted Files"
# require group munin
Require user admin
Satisfy Any
</Directory>
[/code]
I followed the .htaccess example from the apache.org website and have a
single file where password/username is stored for multiple pages.....
Kaya
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet? intranet
access fine
Posted by Kaya Saman <Sa...@netscape.net>.
>
> What denies you access, squid or apache?
>
Not sure about this one which is why initially I came here in the first
place but it looks like I have eliminated apache as the culprit since
internally I can gain access to .htaccess uname/passwd files no probs.
Issue is with WAN connection so it seems like Squid is denying me
access, however from what I read Squid has nothing to do with .htaccess
at all but since Squid analyzes http headers etc I think it seems a more
viable culprit to blame then Apache.
> When you request a file that you get denied access to, what exactly gets
> printed to the apache error log? If nothing is printed there, then your
> problem is with squid (see you on squid-users@squid-cache.org :).
> If you have something printed there, let us know and we can help.
>
>
Nothing gets printed meaning that issue is Squid as mentioned above :-)
Of course an expert opinion meaning second opinion is always a good idea
but I think that everyone here would concur that I should approach the
Squid mailing list.....
Thanks for everyone's help time to go to Squid :-)
> Cheers
>
> Tom
>
>
>
Kaya
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] .htaccess files not working from internet?
intranet access fine
Posted by Tom Evans <te...@googlemail.com>.
On Mon, 2009-10-12 at 00:57 +0300, Kaya Saman wrote:
> Hi,
>
> this is my first post here :-)
>
> basically I have google'd this issue a bit and finally realized that
> there was no viable solution that I could deduce results from!
>
> I have a few servers running apache and some folders which have
> .htaccess files in them, I can access these from any network inside the
> NAT of my router however when it comes down to external access from
> outside the NAT I always get permission denied; authorized access only??
>
> My systems are behind a reverse proxy handled by Squid but also after
> Google'ing found that Squid doesn't care about .htaccess and doesn't
> even know what it is.
>
> Another page I read claimed that it could be an issue of IPS protection
> system in the firewall - however iptables doesn't contain any config
> only default and isn't even running I think only in conjunction with
> fail2ban to prevent DoS attacks. My router, a Cisco 857W, also doesn't
> have IPS at all and IDS isn't enabled.
>
> Can anyone help me find a solution to this situation?? I have checked
> the logs for httpd/access_log and error_log only to find nothing
> mentioned about denying anything.....
>
> Any recommendations are appreciated! Thanks
>
> An example of one config file which is the config from Munin is here:
>
> [code]
> ScriptAlias /munin/cgi/ /var/www/munin/cgi/
> #<Directory /var/www/munin/cgi/>
> # Options ExecCGI
> # SSLRequireSSL
> # order deny,allow
> # deny from all
> # AuthType Basic
> # AuthUserFile /site/cfg/passwd
> # AuthGroupFile /site/cfg/group
> # AuthName "munin"
> # require group munin
> # Satisfy Any
> #</Directory>
> #
> Alias /munin/ /var/www/munin/
> <Directory /var/www/munin/>
> Options None
> # SSLRequireSSL
> order deny,allow
> deny from all
> AuthType Basic
> # AuthUserFile /site/cfg/passwd
> AuthUserFile /var/http-passwords
> # AuthGroupFile /site/cfg/group
> #AuthGroupFile /var/http-group
> # AuthName "munin"
> AuthName "Restricted Files"
> # require group munin
> Require user admin
> Satisfy Any
> </Directory>
> [/code]
>
> I followed the .htaccess example from the apache.org website and have a
> single file where password/username is stored for multiple pages.....
>
> Kaya
What denies you access, squid or apache?
When you request a file that you get denied access to, what exactly gets
printed to the apache error log? If nothing is printed there, then your
problem is with squid (see you on squid-users@squid-cache.org :).
If you have something printed there, let us know and we can help.
Cheers
Tom
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org