apache user authentication no popop is coming

Mercantilum,

  Thank you for your reply but unfortunately my problem is not solved with this. I am attaching my .htaccess, htpasswd and htgroup file for your reference. also I am attaching my httpd.conf part where I think something can be changed to do this.

-------- .htacces file ----
AuthType Basic
AuthName "Password Required"
AuthUserFile /var/www/html/.htpasswd
AuthGroupFile /var/www/html/.htgroup
Require user test
-------------------------------

-------- .htpasswd file ----
test:0$MwnHBW3Bgow
----------------------------------

--- .htgroup file ----
user-list: test
-------------------------

---------------.httpd.conf ----------------------
User apache
Group apache
ServerAdmin root@root.com
UseCanonicalName off
DocumentRoot "/var/www/html"
<Directory />
    Options Includes ExecCGI FollowSymLinks
    AllowOverride AuthConfig
</Directory>
<Directory "/var/www/html">
    Options Indexes FollowSymLinks
    AllowOverride AuthConfig
    Order allow,deny
    Allow from all
</Directory>
<LocationMatch "^/$>
    Options -Indexes
    ErrorDocument 403 /error/noindex.html
</LocationMatch>
<IfModule mod_userdir.c>
    UserDir disable
</IfModule>
DirectoryIndex index.html index.html.var
AccessFileName .htaccess
TypesConfig /etc/mime.types
DefaultType text/plain
<IfModule mod_mime_magic.c>
    MIMEMagicFile conf/magic
</IfModule>
HostnameLookups Off
ErrorLog logs/error_log
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog logs/access_log combined
ServerSignature On
Alias /icons/ "/var/www/icons/"
<Directory "/var/www/icons">
    Options Indexes MultiViews
    AllowOverride AuthConfig
    Order allow,deny
    Allow from all
</Directory>
Alias /manual "/var/www/manual"
<Directory "/var/www/manual">
    Options Indexes FollowSymLinks MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>
<IfModule mod_dav_fs.c>
    # Location of the WebDAV lock database.
    DAVLockDB /var/lib/dav/lockdb
</IfModule>
ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
<IfModule mod_cgid.c>
Scriptsock            run/httpd.cgid
</IfModule>
<Directory "/var/www/cgi-bin">
    AllowOverride AuthConfig
    Options None
    Order allow,deny
    Allow from all
</Directory>
-----------------------

waiting for a reply!

Mansoor

silly question: does your client (browser) probably automatically send the Authetication: header?
try to use another client, or check your settings

ahoffmann,

  I have checked this already in IE 5.0, 5.5, 6.0, Netscape and opera and i am getting same error:

------------------------------
Authorization Required
This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

Apache/2.0.40 Server at localhost Port 80

-----------------------------------------------------------

I am sure there is some problem in server settings not client browser. any Idea?

Mansoor

Oh by the way did you check the access rights of .htaccess

  ls -l .htaccess

You need it to be readable by Apache user (probably 'nobody')
Just in case ensure the file is
   -rw-r--r--
By doing
   chmod 644 .htaccess

 Same for
/var/www/html/.htpasswd
  and
/var/www/html/.htgroup

ensure they are 644 at least to test if the problem comes from that...

Mercantilum,

Yes?

Mercantilum,
 
 Sorry msg was submitted incomplete. Thank you for your help but still i am getting same error:

------------------------------
Authorization Required
This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

Apache/2.0.40 Server at localhost Port 80

-----------------------------------------------------------

Any idea what else need to be changed?

Mansoor

You require the user test .
Is the user declared in both
/var/www/html/.htpasswd
  and
/var/www/html/.htgroup

In the latter, it should be something like

testgrp: test

(or remove AuthGroupFile /var/www/html/.htgroup   if you just need user auth)

i have added my htpasswd and htgroup file here i am attaching again


-------- .htpasswd file ----
test:0$MwnHBW3Bgow
----------------------------------

--- .htgroup file ----
user-list: test
-------------------------

ok i have done my htacces is

-------- .htacces file ----
AuthType Basic
AuthName "Password Required"
AuthUserFile /var/www/html/.htpasswd
Require user test
-------------------------------

should it work?

Ok another possible error is that Apache needs access up to /var/www/html ...
So first get the Apache user
   grep -i user httpd.conf
Then check the access rights to
   /
   /var
   /var/www
   /var/www/html
All those directories need at least 'x' ... for Apache.
You can execute the following
   chmod 755  /  /var /var/www  /var/www/html
to be sure.

ok i have open the /etc/httpd/conf/httpd.conf i  found this "User apache" and also  
   /
   /var
   /var/www
   /var/www/html

have 755 rights. please help!

What do you have in the Error log
In /var/log/httpd  look for *error* and check what's in (especially the  10 last lines just after you test)
The reason is probably in there.

grrrrrrrr 644, 755
when will people realize that this is a big security hole? 444 and 555, or better 440 and 550 are what is ok
Sorry, no offence, but please keep thinking secure, at least for such simple things.

I also have the feeling that ther is something wrong with the filesystem permissions there.
To summarize  Mercantilum:
# get user running apache (first line might be root):
   ps aux | awk '/httpd/{print $1}'
# check uid and permissions
   ls -ld /  /var /var/www  /var/www/html
   # should be at least   drwxr-xr-x (or better according security ;-)
   ls -l  /var/www/html/.htpasswd
   # must be -rw-r--r-- or -r--r--r--

Could you also please check your error_log, and post relevant messages if any

ahoffmann 755 is at least secure to check what's wrong with his config :)

Read again the posts - for the purpose of the test ... !!

Moroever, better to show the person where/what the User is in httpd.conf rather than a ps aux ... (httpd could be off :)

no offence :)

if httpd is off, then you get no error page too ;-)
permissions are ok for test, agreed.

Ok so what do we get in the error_log mister :)

Sorry for comming back late i am sending you what i am getting in error log

-------------------------

[Fri Jun 04 10:52:45 2004] [error] [client 203.215.183.135] (2)No such file or directory: cannot access type map file: /var/www/error/HTTP_UNAUTHORIZED.html.var
[Fri Jun 04 10:52:46 2004] [error] [client 203.215.183.135] (2)No such file or directory: cannot access type map file: /var/www/error/HTTP_UNAUTHORIZED.html.var
[Fri Jun 04 10:52:46 2004] [error] [client 203.215.183.135] (2)No such file or directory: cannot access type map file: /var/www/error/HTTP_UNAUTHORIZED.html.var
[Fri Jun 04 10:52:47 2004] [error] [client 203.215.183.135] (2)No such file or directory: cannot access type map file: /var/www/error/HTTP_UNAUTHORIZED.html.var

-------------------------

Mansoor

what was the message before  "/var/www/error/HTTP_UNAUTHORIZED.html.var"  ?

no other messsage except this when i try to access theat url

sound like you have something like
  ErrorDocument /error/HTTP_UNAUTHORIZED.html.var
in your httpd.conf

disable this directive and restart apache

ahoffmann,

  Great it have started working but can you tell me why it was happening as i have another server having this in httpd.conf and apache authentication is working on that?

Anyways thanks for your great help!

Mansoor