RE: [users@httpd] Help with Digest Authentication - PROBLEM SOLVED!

[Leo Papadopoulos <le...@telecomcto.com>]

Dear Group,

Thank you. 

I took your advice and I did the following.

1) I stopped using the AuthDigestDomain field. It doesn't seem to do
anything for me.
2) I changed the AuthName to PrivateArea  (notice there is no space).
3) I added the user leo to the htdigusers file with a realm of PrivateArea
4) Finally, (and this is important) I changed the rights of the files in the
private directory so that people other than the owner can read them (644).

Thank you all.

Leo P.

-----Original Message-----
From: Joe Orton [mailto:jorton@redhat.com] 
Sent: Wednesday, November 02, 2005 3:26 PM
To: Leo Papadopoulos
Cc: users@httpd.apache.org
Subject: Re: [users@httpd] Help with Digest Authentication

On Wed, Nov 02, 2005 at 11:33:32AM -0500, Leo Papadopoulos wrote:
> Dear httpd-users and Joshua:
> 
> Here is the information Joshua asked for.
> 
> The httpd.conf file is configured with:

In your first post you said you had:

   AuthName "private area"

which is it really using?  The string configured as the AuthName must 
exactly match the "realm" string passed to htdigest otherwise auth will 
fail.  I'd get rid of the AuthDigestDomain setting from the config as it 
doesn't make much difference.

joe

> 
> <Location /private/>
> AuthType Digest
> AuthName http://sip.telecomcto.com/
> AuthDigestDomain /private/ http://sip.telecomcto.com/
> AuthDigestFile /etc/httpd/conf/htdigusers
> Require valid-user
> </Location>
> 
> The error log says:
> 
> [Wed Nov 02 11:24:40 2005] [error] [client 69.0.78.113] Digest: user `leo'
> in realm `http://sip.telecomcto.com/' not found: /private/
> 
> The htdigusers file says:
> leo:http://sip.telecomcto.com/:23496e7646ea444ff7930fbd325d32f
> 
> I still cannot log in. I get rejected as you can see from the error
message,
> but I don't know why.
> 
> Leo P.
> 
> -----Original Message-----
> From: Joshua Slive [mailto:jslive@gmail.com] 
> Sent: Wednesday, November 02, 2005 10:49 AM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Help with Digest Authentication
> 
> On 11/1/05, Leo Papadopoulos <le...@telecomcto.com> wrote:
> 
> > When I access http://sip.telecomcto.com/private Firefox brings up the
> > username password box, but when I type it in it does not accept the
> username
> > and password and just brings up the dialog box again..
> 
> Anything interesting in the apache error_log?
> 
> Joshua.
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org