basic authentication not being requested

basic authentication not being requested

am 31.10.2007 17:49:56 von dave

Hello,
I've got a page protected by apache basic authentication. It's actually
a backuppc admin page running on apache 2.2. On one machine i am prompted
for the username and password and all is well. On the other i'm never
prompted and i get a blank page. Both machines are running xp with ie6. Is
this an apache issue one of consistency, or if not where else should i look?
Thanks.
Dave.

Re: basic authentication not being requested

am 01.11.2007 01:15:23 von shimmyshack

On Oct 31, 4:49 pm, "Dave" wrote:
> Hello,
> I've got a page protected by apache basic authentication. It's actually
> a backuppc admin page running on apache 2.2. On one machine i am prompted
> for the username and password and all is well. On the other i'm never
> prompted and i get a blank page. Both machines are running xp with ie6. Is
> this an apache issue one of consistency, or if not where else should i look?
> Thanks.
> Dave.

my guess is that you have some kind of

combination of

Require Valid User

and

Satisfy Any

with an Order Allow, Deny statement with some IP adress

However thats just a guess, how about looking at the response headers
from the server.
If you are getting the proper response headers sent to both machines,
then all is well with the server config and your ie6 is behaving badly
(more badly than normal)

if the headers are different,heres an example of the proper headers to
expect for a basic auth response:


HTTP/1.1 401 Authorization Required
Date: Thu, 01 Nov 2007 00:10:43 GMT
Server: Apache/1.3.33 (Unix)
WWW-Authenticate: Basic realm="Access Protected Directory"
Content-Length: 631
Content-Type: text/html

notice the 401 Authorization Required header and the WWW... realm
which sets the title of the login box.

You should consider installing fiddlertool on the server box, the
default port for that proxy is 8888 i believe, then goto fidler
options and check alow remote machines to connect, make sure the
inward rule for the firewall accepts tcp connection son port 8888 and
direct your other computer to use a proxy server of the IP address of
the server, and port 8888, then both machines' requests will show up
inside fiddlertools raw session inspect screens.

you wont regret it, that tool is so incredibly useable. Anyway, show
us your config for apache to get a better answer than my feeble hand
waving.

Re: basic authentication not being requested

am 02.11.2007 01:29:42 von dave

Hello,
Thanks for your reply. Here's two lines from my access log file, error
log isn't showing anything. The two items are different, 192.168.0.1 is the
working box, .2 is the unworking one. The .1 box gets in and can get files,
the .2 doesn't even get that far.
Thanks.
Dave.

192.168.0.1 - - [31/Oct/2007:12:45:23 -0400] "GET /backuppc/html/logo.gif
HTTP/1.1" 200 1394
"http://apollo.example.net/backuppc/cgi-bin/BackupPC_Admin" "Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322)"
192.168.0.2 - - [31/Oct/2007:12:51:55 -0400] "GET /backuppc HTTP/1.1" 301
332 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322)"

"shimmyshack" wrote in message
news:1193876123.195275.287190@o80g2000hse.googlegroups.com.. .
> On Oct 31, 4:49 pm, "Dave" wrote:
>> Hello,
>> I've got a page protected by apache basic authentication. It's
>> actually
>> a backuppc admin page running on apache 2.2. On one machine i am prompted
>> for the username and password and all is well. On the other i'm never
>> prompted and i get a blank page. Both machines are running xp with ie6.
>> Is
>> this an apache issue one of consistency, or if not where else should i
>> look?
>> Thanks.
>> Dave.
>
> my guess is that you have some kind of
>
> combination of
>
> Require Valid User
>
> and
>
> Satisfy Any
>
> with an Order Allow, Deny statement with some IP adress
>
> However thats just a guess, how about looking at the response headers
> from the server.
> If you are getting the proper response headers sent to both machines,
> then all is well with the server config and your ie6 is behaving badly
> (more badly than normal)
>
> if the headers are different,heres an example of the proper headers to
> expect for a basic auth response:
>
>
> HTTP/1.1 401 Authorization Required
> Date: Thu, 01 Nov 2007 00:10:43 GMT
> Server: Apache/1.3.33 (Unix)
> WWW-Authenticate: Basic realm="Access Protected Directory"
> Content-Length: 631
> Content-Type: text/html
>
> notice the 401 Authorization Required header and the WWW... realm
> which sets the title of the login box.
>
> You should consider installing fiddlertool on the server box, the
> default port for that proxy is 8888 i believe, then goto fidler
> options and check alow remote machines to connect, make sure the
> inward rule for the firewall accepts tcp connection son port 8888 and
> direct your other computer to use a proxy server of the IP address of
> the server, and port 8888, then both machines' requests will show up
> inside fiddlertools raw session inspect screens.
>
> you wont regret it, that tool is so incredibly useable. Anyway, show
> us your config for apache to get a better answer than my feeble hand
> waving.
>