From nobody@hyperreal.com Thu May 15 13:45:14 1997 Received: (from nobody@localhost) by hyperreal.com (8.8.5/8.8.5) id NAA06226; Thu, 15 May 1997 13:45:14 -0700 (PDT) Message-Id: <199705152045.NAA06226@hyperreal.com> Date: Thu, 15 May 1997 13:45:14 -0700 (PDT) From: Randal Lathrop Reply-To: randal_lathrop@mech.disa.mil To: apbugs@hyperreal.com Subject: .htaccess files are ignored by Apache on Solaris 2.3 machine X-Send-Pr-Version: 3.2 >Number: 585 >Category: os-solaris >Synopsis: .htaccess files are ignored by Apache on Solaris 2.3 machine >Confidential: no >Severity: serious >Priority: medium >Responsible: apache >State: closed >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Thu May 15 13:50:01 1997 >Last-Modified: Sat May 24 08:12:29 PDT 1997 >Originator: randal_lathrop@mech.disa.mil >Organization: >Release: 1.2b7 >Environment: SunOS ns2 5.3 Generic_101674-01 sun4m sparc >Description: On a Solaris 2.3 machine running Apache 1.2b7, .htaccess files in directories to be protected are being ignored and full access is being granted to anybody. To verify that my .htaccess file is correct, I tried it on an RS-6000/320 machine running Apache 1.2b7 and it worked fine. >How-To-Repeat: Here is the .htaccess file from /usr/local/wwwroot/mrtg in question: Options Indexes AllowOverride None AuthUserFile /usr/local/apache/conf/.htpasswd AuthGroupFile /dev/null AuthName AuthType Basic require user xth0009 When this file is inserted into access.conf with the tags inserted, it works fine (only if .htaccess is not in the directory listed.) If .htaccess is in the specified directory, an error message is returned. >Fix: Add the contents of the .htaccess files to access.conf. But this defeats the purpose of having .htaccecs files >Audit-Trail: State-Changed-From-To: open-feedback State-Changed-By: pcs State-Changed-When: Thu May 15 14:37:43 PDT 1997 State-Changed-Why: Have you checked your error_log file after a request which ignored your .htaccess? It will probably tell you that the AllowOverride directive is not allow here. Remove the AllowOverride and try it again (AllowOverride is valid inside sections, but NOT in .htaccess). If your .htaccess file is being ignored, it might be because you have AllowOverride None in a entry in access.conf for the same directory, or a parent directory. State-Changed-From-To: feedback-closed State-Changed-By: pcs State-Changed-When: Sat May 24 08:12:29 PDT 1997 State-Changed-Why: Assume fixed by suggested configuration changes. >Unformatted: