No authentication done but request not allowed without authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

I have a problem with authz. directories.
with this config (vhost), i get server internal error.

see the line:
[Thu Dec 31 12:33:08.936249 2020] [core:error] [pid 2000:tid 1216] [client fd00::1:61701] AH00027: No authentication done but request not allowed without authentication for /index/index.php. Authentication not configured?, referer: https://www.page.net/

Jens

<VirtualHost *:443>
    ServerName www.page.net
    ServerAlias www.page.net *.page.net
    ServerAdmin admin@xxxxxx

    DocumentRoot "${APACHE_WEB}/443"

    ErrorLog   "${APACHE_LOG}/error.log"
    CustomLog  "${APACHE_LOG}/access.log" combined

    SSLEngine on
    SSLCertificateFile    "${APACHE_SRC}/ssl/www.page.net.crt"
    SSLCertificateKeyFile "${APACHE_SRC}/ssl/www.page.net.key"
	SSLOptions +StdEnvVars

	# enable HTTP/2, if available
	Protocols h2 http/1.1

	Session On
	SessionCryptoPassphrase secret
	SessionCookieName session path=/

	RewriteEngine On
	LogLevel warn rewrite:trace3

	# ---------------------------------------------------------
	# compress file(.ext) on server side, beofre delivery  ...
	# on MS-Windows; you should have the GNU-Tools installed !
	# ---------------------------------------------------------
	RewriteCond %{HTTP:Accept-encoding} gzip
	RewriteCond %{REQUEST_FILENAME}\.gz -s
	RewriteRule ^(.*)\.(css|js|txt)     $1\.$2\.gz [QSA]

	# ---------------------------------------------------------
	# out of office time rule ...
	# from 07:00 - 20:00
	# ---------------------------------------------------------
	RewriteCond %{TIME_HOUR} >=18 [OR]
	RewriteCond %{TIME_HOUR} <=08
	RewriteRule ^(.*) ${EOF_OFFICE_URL} [R=301,L]

	RewriteCond ${BOF_OFFICE_URL}/index.php !-d
	RewriteCond ${BOF_OFFICE_URL}/index.php  -f

	RewriteCond %{REQUEST_URI} ^(.+)\.php(.*)$
	RewriteRule (.*)\.php$ /$1 [R=301,L]
	RewriteCond %{REQUEST_URI} ^(.+)\.html(.*)$
	RewriteRule (.*)\.html$ /$1 [R=301,L]

	<Location "${APACHE_WEB}/443/">
		AllowMethods GET POST OPTIONS
		Options -Indexes +FollowSymLinks
		SetHandler form-login-handler
		AuthName "Restricted Resource"
		AuthType form
		AuthFormLoginRequiredLocation "${APACHE_WEB}/443/index.php"
		AuthFormLoginSuccessLocation  "${APACHE_WEB}/443/start.php"
		AuthUserFile  "${APACHE_SRC}/pass/ApacheAuthUser.passwd"
		AuthGroupFile "${APACHE_SRC}/pass/ApacheAuthUser.groups"
		Session On
		SessionCookieName session path=/
	</Location>
	<Directory "${APACHE_WEB}/443/index/">
		Options -Indexes +FollowSymLinks
		<FilesMatch "\.(ico|cgi|shtml|phtml|php|css|js|html)$">
			Require valid-user
		</FilesMatch>
	</Directory>
...
</VirtualHost>


error.log:

[Thu Dec 31 12:33:08.936249 2020] [core:error] [pid 2000:tid 1216] [client fd00::1:61701] AH00027: No authentication done but request not allowed without authentication for /index/index.php. Authentication not configured?, referer: https://www.page.net/
[Thu Dec 31 12:33:09.136856 2020] [rewrite:trace2] [pid 2000:tid 1216] mod_rewrite.c(483): [client fd00::1:61702] fd00::1 - - [www.page.net/sid#1ef2ec90dd8][rid#1ef2e91bc40/initial] init rewrite engine with requested uri /favicon.ico, referer: https://www.page.net/index/index.php?PHPSESSID=9onv2vriegb3l79llvmipest1c
[Thu Dec 31 12:33:09.138906 2020] [rewrite:trace3] [pid 2000:tid 1216] mod_rewrite.c(483): [client fd00::1:61702] fd00::1 - - [www.page.net/sid#1ef2ec90dd8][rid#1ef2e91bc40/initial] applying pattern '^(.*)\\.(css|js|txt)' to uri '/favicon.ico', referer: https://www.page.net/index/index.php?PHPSESSID=9onv2vriegb3l79llvmipest1c
[Thu Dec 31 12:33:09.138906 2020] [rewrite:trace3] [pid 2000:tid 1216] mod_rewrite.c(483): [client fd00::1:61702] fd00::1 - - [www.page.net/sid#1ef2ec90dd8][rid#1ef2e91bc40/initial] applying pattern '^(.*)' to uri '/favicon.ico', referer: https://www.page.net/index/index.php?PHPSESSID=9onv2vriegb3l79llvmipest1c
[Thu Dec 31 12:33:09.138906 2020] [rewrite:trace3] [pid 2000:tid 1216] mod_rewrite.c(483): [client fd00::1:61702] fd00::1 - - [www.page.net/sid#1ef2ec90dd8][rid#1ef2e91bc40/initial] applying pattern '(.*)\\.php$' to uri '/favicon.ico', referer: https://www.page.net/index/index.php?PHPSESSID=9onv2vriegb3l79llvmipest1c
[Thu Dec 31 12:33:09.138906 2020] [rewrite:trace3] [pid 2000:tid 1216] mod_rewrite.c(483): [client fd00::1:61702] fd00::1 - - [www.page.net/sid#1ef2ec90dd8][rid#1ef2e91bc40/initial] applying pattern '(.*)\\.html$' to uri '/favicon.ico', referer: https://www.page.net/index/index.php?PHPSESSID=9onv2vriegb3l79llvmipest1c
[Thu Dec 31 12:33:09.138906 2020] [rewrite:trace1] [pid 2000:tid 1216] mod_rewrite.c(483): [client fd00::1:61702] fd00::1 - - [www.page.net/sid#1ef2ec90dd8][rid#1ef2e91bc40/initial] pass through /favicon.ico, referer: https://www.page.net/index/index.php?PHPSESSID=9onv2vriegb3l79llvmipest1c

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux