Discussion:
[SPAM] vQadmin - problem
Przemek Kuzioła
2013-01-21 14:43:38 UTC
Permalink
Hi,
I've a problem with login to vqadmin.
Every time I get:

-----------------------------------------------------
Authentication Failed Username unknown


vQadmin was unable to determine your username, which
means your webserver is improperly configured to run
with this CGI. For security reasons, this script
will not run without Apache htaccess lists.
------------------------------------------------

It is a fresh installation. The system is Slackware.
There is a .htaccess file and corresponding password file (made with
htpasswd).
But it doesn't work. I've checked apache modules and it looked like all
were loaded.
Even tried to delete password file and the message was still the same.
It had no effect.
No errors in apache error.log
I'm stuck.
Regards
--
Pozdrawiam
/Przemek Kuzioła/


!DSPAM:50fd38fc34148226113321!
Michael Ross
2013-01-21 15:09:24 UTC
Permalink
If this is a fresh install of slackware, can we assume slackware 14? If that’s the case, you’re also running httpd-2.4.3, right? Best way to do it:



1. Get rid of the .htaccess file in cgi-bin/vqadmin

2. in your httpd.conf remove the directive “order deny,allow” and replace it with “require valid-user”

3. apachectl -k restart



old way:



#httpd.conf

<Directory /srv/httpd/cgi-bin/vqadmin>

deny from all

Options ExecCGI

AllowOverride AuthConfig

Order deny,allow

</Directory>

#.htaccess

AuthType Basic

AuthUserFile /etc/httpd/vqadmin.passwd

AuthName vQadmin

require valid-user

satisfy any



new way

#httpd.conf

<Directory /srv/httpd/cgi-bin/vqadmin>

Options +ExecCGI

AllowOverride AuthConfig

AuthType Basic

AuthName vQadmin

<RequireAll>

Require valid-user

Require ip 192.168.0.0/24

</RequireAll>

</Directory>




Technically, you could split some of those directives into an .htaccess file, but 1. The larger your passwd file, the bigger the performance hit 2. If you have permission to install qmail on the box, you should prolly also have permission to edit httpd.conf.



Hope this helps.







From: Przemek Kuzioła [mailto:***@bauhaus.pl]
Sent: Monday, January 21, 2013 8:44 AM
To: ***@inter7.com
Subject: [vqadmin] [SPAM] vQadmin - problem



Hi,
I've a problem with login to vqadmin.
Every time I get:

-----------------------------------------------------
Authentication Failed Username unknown


vQadmin was unable to determine your username, which
means your webserver is improperly configured to run
with this CGI. For security reasons, this script
will not run without Apache htaccess lists.
------------------------------------------------

It is a fresh installation. The system is Slackware.
There is a .htaccess file and corresponding password file (made with htpasswd).
But it doesn't work. I've checked apache modules and it looked like all were loaded.
Even tried to delete password file and the message was still the same. It had no effect.
No errors in apache error.log
I'm stuck.
Regards
--
Pozdrawiam
Przemek Kuzioła





!DSPAM:50fd3f0a34148484819868!
Przemek Kuzioła
2013-01-22 15:24:40 UTC
Permalink
Thx for your answer. It WORKS :-)
But I had to do it with .htaccess file. Didn't work the other way.
I've made it in a kind of "new way"

#httpd.conf

<Directory /srv/httpd/cgi-bin/vqadmin>

Options +ExecCGI

AllowOverride AuthConfig

</Directory>

#.htaccess

AuthType Basic

AuthUserFile /etc/httpd/vqadmin.passwd

AuthName vQadmin

<RequireAny>
require valid-user
require ip 192.168.0.0/24
</RequireAny>

And had to start with bare minimal httpd.conf file, adding modules and
directives step by step.
My standard httpd.conf didn't allow to authorize with .htaccess and I
couldn't find out what is wrong.
Once again thanks a lot.

Pozdrawiam
/Przemek Kuzioła/
Post by Michael Ross
If this is a fresh install of slackware, can we assume slackware 14?
If that’s the case, you’re also running httpd-2.4.3, right? Best way
1.Get rid of the .htaccess file in cgi-bin/vqadmin
2.in your httpd.conf remove the directive “order deny,allow” and
replace it with “require valid-user”
3.apachectl -k restart
#httpd.conf
<Directory /srv/httpd/cgi-bin/vqadmin>
deny from all
Options ExecCGI
AllowOverride AuthConfig
Order deny,allow
</Directory>
#.htaccess
AuthType Basic
AuthUserFile /etc/httpd/vqadmin.passwd
AuthName vQadmin
require valid-user
satisfy any
new way
#httpd.conf
<Directory /srv/httpd/cgi-bin/vqadmin>
Options +ExecCGI
AllowOverride AuthConfig
AuthType Basic
AuthName vQadmin
<RequireAll>
Require valid-user
Require ip 192.168.0.0/24
</RequireAll>
</Directory>
Technically, you could split some of those directives into an
.htaccess file, but 1. The larger your passwd file, the bigger the
performance hit 2. If you have permission to install qmail on the box,
you should prolly also have permission to edit httpd.conf.
Hope this helps.
*Sent:* Monday, January 21, 2013 8:44 AM
*Subject:* [vqadmin] [SPAM] vQadmin - problem
Hi,
I've a problem with login to vqadmin.
-----------------------------------------------------
Authentication Failed Username unknown
vQadmin was unable to determine your username, which
means your webserver is improperly configured to run
with this CGI. For security reasons, this script
will not run without Apache htaccess lists.
------------------------------------------------
It is a fresh installation. The system is Slackware.
There is a .htaccess file and corresponding password file (made with htpasswd).
But it doesn't work. I've checked apache modules and it looked like all were loaded.
Even tried to delete password file and the message was still the same. It had no effect.
No errors in apache error.log
I'm stuck.
Regards
--
Pozdrawiam
/Przemek Kuzioła/
!DSPAM:50fe941a34141839518368!

Loading...