Re: [viewvc-users] Apache basic authentication not working

"C. Michael Pilato" <[email protected]>
Newsgroups gmane.comp.version-control.cvs.viewcvs.user
Organization CollabNet, Inc.
Message-ID <[email protected]>
Alan Dayley wrote:
>> Any chance you're able to see the page because your browser has cached the
>> auth privilege information and is providing it on your behalf without
>> prompting?
> 
> I thought of that. I use Firefox almost exclusively. To test the authentication I cranked up Internet Explorer, knowing I have not used it for ViewVC in a long, long time, if ever. No authentication request was presented, just straight into the pages.
> 
>> Do the Apache logs you referenced show that you anonymously
>> accessed the ViewVC pages (typically depicted by showing a username of "-")?
> 
> Hm... Good tip. Answer is yes, as in the two sample lines below:
> 
> 10.x.x.71 - - [16/Apr/2009:15:44:10 -0700] "GET /viewvc/ HTTP/1.1" 200 10213 "-" "Mozilla/5.0 (Windows;
>  Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8"
> 10.148.14.71 - - [16/Apr/2009:15:44:11 -0700] "GET /viewvc-static/styles.css HTTP/1.1" 304 - "http://server/viewvc/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8"

So, I would expect that you have a location block like so:

  <Location /viewvc>
      AuthType Basic
      AuthName "ViewVC Access"
      AuthUserFile /etc/svn-auth-file
      Require valid-user
  </Location>

Is that correct?

-- 
C. Michael Pilato <[email protected]>
CollabNet   <>   www.collab.net   <>   Distributed Development On Demand

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2057398

To unsubscribe from this discussion, e-mail: [[email protected]].
signature.asc (application/pgp-signature, 197 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkn/CDMACgkQokEGqRcG/W4kvwCfbmerNwO1RpK8eLR0df0YKKHY
050AoLuflESVtx/M41xWrillffm33lHm
=pKjb
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.