Forum Moderators: phranque

Message Too Old, No Replies

Looking to disable mod auth

Authauthoritative directive

         

jwalcott

10:57 pm on Nov 6, 2006 (gmt 0)

10+ Year Member



Hi all,

So here is my question. What I am trying to figure out, is how to get some error messages to get out of my way. After compiling apache 2.0.59 in Solaris 10, and installing another product with it, I seem to be getting a problem with authentication against a particular directory. But I have not even setup mod_auth. I have not don't anything at all in terms of setup of security, but the directory in question that is seems to be protected is named "secured" .

I am wondering first if the word "secured" is having an adverse affect on apache, and making it protect the directory with a username and password by default first of all.

And secondly, can I use the Authauthoritative directive to turn off mod_auth? will that work? And can anyone give me an example of the syntax?

Thanks

John Walcott

[edited by: jdMorgan at 2:35 am (utc) on Nov. 7, 2006]
[edit reason] No sigs, please. [/edit]

coopster

1:59 am on Nov 7, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



Hi John, welcome to WebmasterWorld.

The directory name itself should not be an issue to the best of my knowledge. Are you being prompted with an authentication window?

jwalcott

3:16 pm on Nov 7, 2006 (gmt 0)

10+ Year Member



No, I am not being prompted with authentication. I am just being denied entry. I am being given the following message.

Authorization Required

This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.
Apache/2.0.58 (Unix) mod_ssl/2.0.58 OpenSSL/0.9.8d Server at sottv12018.dev.ad.entrust.com Port 443

And in the logs, I see the following.

access to /TruePassSample/secured/SignTransactionPw.html failed, reason: us
er (null) not allowed access, referer: [sottv12018.dev.ad.entrust.com...]

But I have set up no rules for denial of access.

John Walcott

[edited by: jdMorgan at 3:25 pm (utc) on Nov. 7, 2006]
[edit reason] No sigs, please. See Terms of Service. [/edit]