skip to Main Content

.htaccess

AuthName "Restricted Area" 
AuthType Basic 
AuthUserFile path/.htpasswd
require valid-user

.htpasswd

test:FUgb1Qdh6571o
#This tool is used to generate password file http://tools.dynamicdrive.com/password/

When Apache is running on Windows 10 and I’m trying to access folder authentication dialog appears, however it does not authenticate and does not allow to access restricted folder.

Apache error logs:

AH01617: user test: authentication failure for "/folder": Password Mismatch

Same setup works correctly when Apache is working on Ubuntu

What could be wrong? Different method of password storing?

2

Answers


  1. I don’t know about online tool you used, but I recommend to use
    htpasswd tool generate passwords.

    Appear that test:FUgb1Qdh6571o is generated with algorithm that are not recommended. More info about htpassword could be found at htpasswd docs

    To create a new db use:

    htpasswd -c .htpasswd test
    

    To update password use:

    htpasswd .htpasswd test
    

    PS. I don’t recommend to use online passwords generator.
    Could be harvested and later used against you.

    PS.2 Probably htpasswd command is in apache installation directory

    Login or Signup to reply.
  2. It could be fault of the line ending encoding, which is LF on Linux and CR LF on Windows.

    In a hex editor LF would show up as 0a whereas CR LF would be 0d 0a. On Ubuntu you can check with xxd .htpasswd from the terminal and on Windows you can use Notepad++ to show special characters.

    Login or Signup to reply.
Please signup or login to give your own answer.
Back To Top
Search