Stack Overflow
Stack Overflow

Questions tagged [mod-auth]

41 questions
15
votes
1 answer

AH01626: authorization result of Require all granted: granted

I'm running apache 2.4.6 on my site. And I keep seeing this message repeated over and over again in my apache error logs. [Tue Nov 10 01:42:40.659710 2015] [authz_core:debug] [pid 10727] mod_authz_core.c(809): [client 107.170.139.115:58678] AH01626:…
bluethundr
  • 1,005
  • 17
  • 68
  • 141
6
votes
5 answers

Anonymous SVN Checkout, but Authenticate Commit

I am setting up SVN repository with Httpd. Currently, my repository is available through Httpd, but anybody can checkout and commit back. I want to limit the commit action using Microsoft Active Directory Authentication. I am using the following in…
divinedragon
  • 5,105
  • 13
  • 50
  • 97
4
votes
1 answer

Referencing .htpasswd from accounts with different usernames

I push my website to multiple servers where I have different usernames. I want to have a .htaccess file that password protects a file regardless of which server I'm on. The issue is that AuthUserFile only takes absolute paths, so if I…
dysbulic
  • 3,005
  • 2
  • 28
  • 48
3
votes
1 answer

Using Apache's mod_auth across multiple sub-domains for single sign-on?

I have a domain and a group of sub-domains that require authentication to access. I am currently using mod_auth to authenticate users (mod_auth basic) at the domain.tld level. My goal is for single sign-on between the domain and all the…
user43040
3
votes
2 answers

Kerberos SSO with mod_auth_kerb: Verification code 589824 and Token seems to be NTLM

I've run into some difficulties kerberizing a host, t.p.no. I'm follwing http://grolmsnet.de/kerbtut, which have worked for others kerberizing a host not added to the windows domain. The problem seems to be the client NTLM tokens for some…
jhsveli
  • 63
  • 1
  • 1
  • 8
3
votes
0 answers

mod_authz_host is ignored

I'm having problems with one of my servers (Centos 6.3 using Apache 2.2.25). The mod_authz_host seems to be ignored even though it is enabled in the httpd.conf I have almost all the modules enabled by default but even if I do something…
Davidoff
  • 199
  • 2
  • 3
  • 12
3
votes
1 answer

SIMPLEST way to set up password protection for a static site?

I have a static site. I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about performance. I don't care if it's PHP or Django or…
Joseph Turian
  • 15,430
  • 14
  • 47
  • 62
2
votes
1 answer

Limit retries for secured directory with .htaccess file

Is there any way to limit the number of attempt to gain access to a directory secured with a .htaccess file in a specified length of time? Eg. Can I make a user wait an hour if they get details wrong 10 times? Are there any other ways to reduce…
Toby Allen
  • 10,997
  • 11
  • 73
  • 124
2
votes
3 answers

Configuring authentication and authorization in Apache2 with MySQL

I am trying to configure Apache2 so I can use MySQL for authenticating users to access certain pages. Also authorization needs to work so different groups can reach differen pages. Now, I have googled a lot but can't find out how to do this. At…
Nicsoft
  • 3,644
  • 9
  • 41
  • 70
2
votes
0 answers

.htaccess error, Expected > but saw

I am no expert on apache conf files, but I am reasonably familiar with them. A security plugin I have installed on one of my wordpress sites (https://ithemes.com/security/) makes edits to an .htaccess files in order to enforce automated IP bans (for…
chiliNUT
  • 18,989
  • 14
  • 66
  • 106
2
votes
1 answer

expire or redirect http of 401 for mod_auth_openidc

I'm not sure if this is something handled in OIDC or apache in general but what I'm seeing is this and was hoping for some advice: A customer is logged into multiple Google accounts and at the Account Chooser they click the wrong account they get a…
Trimbee
  • 75
  • 1
  • 8
2
votes
4 answers

Require ip 127.0.0.1 works sometimes and sometimes' it won't

I have a very simple .htaccess file: Require all granted # require localhost Require ip 127.0.0.1 and it works... sometimes! Sometimes, it will throw me a 403, and the error.log explains: [client ::1:65443]…
Domi
  • 22,151
  • 15
  • 92
  • 122
2
votes
2 answers

configuring apache2 - LDAP and understanding LDAP configuration

I'm trying to configure and understand apache2 LDAP authorization. Actual I'm running openSUSE 13.1 64 Bit as an VM and I enabled the required modules and followed those steps:…
Yaerox
  • 608
  • 2
  • 11
  • 27
2
votes
1 answer

SVN Authentication using MySQL

I'm trying to setup per repository SVN authentication via MySQL but I'm having a few problems. Firstly what is the difference between mod_authn_dbd and mod_auth_mysql? Secondly I already have a MySQL database setup with a table for users, groups and…
James
  • 2,609
  • 3
  • 20
  • 27
2
votes
1 answer

htaccess: Conditional Authentication

How can i configure this in my apache/htaccess configuration: I want HTTP-Authentication for all files with one exception. The files click.php and js/clickheat.js may be accessed from 1.2.3.4 without any authentication. I tried FilesMatch, but i…
David
  • 409
  • 3
  • 14
1
2 3