http auth - missing htaccess

Worker Joined: Feb 18, 2006 Posts: 155 Location: Virginia

When I restored my site, I did not have a backup of the my htaccess file
that sentinel uses. Without this file I don't get the http auth login. When I
put the original sample.htaccess in the root, it get the login window but
my user/pass doesn't work. How can I fix the htaccess to accept my login
info?

Posted: Sun Nov 04, 2007 2:22 pm

Did you restore the correct .staccess file. It pulls the credentials from that:

Quote:

<Files admin.php>
<Limit GET POST PUT>
require valid-user
</Limit>
AuthName "Restricted by NukeSentinel(tm)"
AuthType Basic
AuthUserFile /path/to/.staccess
</Files>

Posted: Sun Nov 04, 2007 6:22 pm

I thought the staccess was for CGI auth. I don't remember having to
upload an htaccess or staccess when I first installed. I just went to
sentinel admin and selected "http auth" as my admin auth.

Now, when I go to sentinel admin, I don't see http auth as an option.
Only shows "Off" or CGI.

Posted: Sun Nov 04, 2007 6:38 pm

My host has been having problems lately. They said they needed to reinstall
the OS...anyway not sure what all has happened. I sent them a message.
I am thinking that whatever they did messed up my auth. Maybe they
are using CGI now.

Posted: Sun Nov 04, 2007 7:22 pm

utssace wrote:

I thought the staccess was for CGI auth.

You're right. Sorry...I misread the post.

Posted: Fri Nov 09, 2007 8:15 am

I tried this also, I only see CGIauth, But after adding the 'CGIauth setup' script to .htaccess as it says, I get an error 500 - Internal Server error.
By what I read here it's actually supposed to be added to the .staccess file not the .htaccess file is this correct?
Oh, And what is this for anyways Laughing

I've been hacked before on my current site so I'd like to make my new one as safe as is possible with NS Very Happy

Posted: Sat Nov 10, 2007 2:38 pm

manunkind wrote:

Did you restore the correct .staccess file. It pulls the credentials from that:

Quote:

<Files admin.php>
<Limit GET POST PUT>
require valid-user
</Limit>
AuthName "Restricted by NukeSentinel(tm)"
AuthType Basic
AuthUserFile /path/to/.staccess
</Files>

The above should be what you have towards the top of your .htaccess file, but note the AuthUserFile line. This MUST be the absolute path to a .staccess file that you place in the root of your nuke (right along with .htaccess).

.staccess should only have your admin users and their hashed admin passwords in it. NO other directives.