Re: Cannot authenticate (after six years) (Apache Users)

Because you are not using encryption, I hope that you know anyone on your network can sniff your login usernames and passwords used for your webserver.

You can get a free SSL certificate from: https://letsencrypt.org/

You can test your SSL server here: https://www.ssllabs.com/ssltest/analyze.html

and here: https://en.internet.nl/

Landon

On Thu, Jul 20, 2023 at 7:07 AM Andrew Hoff <andrew.hoff@xxxxxxxxxxx.invalid> wrote:

Hello,

Strange problem. Everything was going great for at least six years then all of a sudden authentication using port 80 failed. Authentication using port 443 works fine.
I first noticed the problem because apache no longer creates the REMOTE_USER env variable. I want authentication using port 80, i.e. plain vanilla http.

httpd.conf attached. See line 169. (httpd service is running.)
If I enter the following url it should bring up a login box: http://172.18.0.20/~hoff (It no longer does.)
Error_log: [Thu Jul 20 21:39:57.913337 2023] [core:error] [pid 3460:tid 3522] (13)Permission denied: [client 172.18.0.97:54422] AH00035: access to /~hoff/index.html denied (filesystem path '/home/hoff/public_html/index.html') because search permissions are missing on a component of the path

I rebuilt the server and am using fedora 38 fully updated. Problem still persists.

FYI only (netstat -nap | grep httpd):
tcp 0 0 172.18.0.20:80 0.0.0.0:* LISTEN 3456/httpd
tcp 0 0 172.18.0.20:443 0.0.0.0:* LISTEN 3456/httpd
tcp6 0 0 fec0::ac12:14:443 :::* LISTEN 3456/httpd
tcp6 0 0 fec0::ac12:14:80 :::* LISTEN 3456/httpd

Regards,
--
Andrew Hoff
6/10 Middle Road
Maribyrnong 3032
Victoria, AU
Tel: 0393185581 (Please leave a message.)
Mob: 0400966178
Email: andrew.hoff@xxxxxxxxxxx
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx