Posted by Bernard Higonnet on 09/30/33 11:26

Bent Stigsen wrote:

> Bernard Higonnet wrote:
>> I'm running Apache/2.0.52 (Unix) mod_perl/1.99_16 Perl/v5.8.5 PHP/5.0.1
>> under FreeBSD 4.11-RELEASE #0.
>>
>> I suddenly (sic) no longer have PHP_AUTH_USER, PHP_AUTH_PW, and AUTH_TYPE
>> or REMOTE_USER or any such variables. They do not show up in phpinfo()
>> nor do they work as expected programmatically.
>>
>> I used to have them a few weeks ago.
>>
>> I have not changed any of versionned packages shown above in months.
>>
>> My Apache authentication directives taken from server-info (unchanged
>> AFAIcanremember) are:
>>
>> <Directory "/usr/local/apache2/htdocs/pictures">
>> AuthType Basic
>> AuthName "family server"
>> Require valid-user
>> Options Indexes FollowSymLinks MultiViews
>> AllowOverride None
>> </Directory>
>
> I think you should have a "AuthUserFile" option in there. Otherwise
> Apache wouldn't know any "valid-user".
>
> But I don't understand how you can access the directory, if the
> missing option is your problem. My Apache returns a status 500, if it
> is missing the passwordfile when the browser tries to authenticate. So
> it could be something else.

There is a "AuthUserFile" option in the config file. This I know because
it's there, and because it does ask for a password and that works as it
should. I thought by posting the server-info this would be better than
showing the config file lines, but server-info doesn't show the file,
perhaps because showing it is bad from a security point of view...?

Bernard Higonnet

[Back to original message]