Re: Leaf 7.2.1: Webconf login does not appear

Hi list,

I have found a missing configuration in /etc/lighttpd/conf/auth.conf: 
here the original file

#######################################################################
##
##  Authentication Module
## -----------------------
##
## See https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_ModAuth
## for more info and many more options.
##

#server.modules += ( "mod_auth" )

#server.modules += ( "mod_authn_file" )
#auth.backend                 = "plain"
#auth.backend.plain.userfile  = conf_dir + "/lighttpd.user"

#server.modules += ( "mod_authn_ldap" )
#auth.backend               = "plain"
#auth.backend.ldap.hostname = "localhost"
#auth.backend.ldap.base-dn  = "dc=my-domain,dc=com"
#auth.backend.ldap.filter   = "(uid=$)"

auth.backend                 = "htpasswd"
auth.backend.htpasswd.userfile  = "/var/webconf/www/.htpasswd"

auth.require               = ( "/server-status" =>
                                (
                                  "method"  => "basic",
                                  "realm"   => "Login",
                                  "require" => "valid-user"
                                ),
                              )

##
## cache passwords/digests in memory to reduce load on the backend
## max-age is in seconds
##   cache is checked for expiration every 8 seconds, so actual
##   caching may be up to 8 seconds longer than configured max-age.
## default: inactive (no caching)
##
#auth.cache = ("max-age" => "600")

##

and here the same file with correct configs to enable auth request:

#######################################################################
##
##  Authentication Module
## -----------------------
##
## See https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_ModAuth
## for more info and many more options.
##

*server.modules += ( "mod_auth" )*

#server.modules += ( "mod_authn_file" )
#auth.backend                 = "plain"
#auth.backend.plain.userfile  = conf_dir + "/lighttpd.user"

#server.modules += ( "mod_authn_ldap" )
#auth.backend               = "plain"
#auth.backend.ldap.hostname = "localhost"
#auth.backend.ldap.base-dn  = "dc=my-domain,dc=com"
#auth.backend.ldap.filter   = "(uid=$)"

auth.backend                 = "htpasswd"
auth.backend.htpasswd.userfile  = "/var/webconf/www/.htpasswd"

*auth.require               = ( "/" =>*
                                (
                                  "method"  => "basic",
                                  "realm"   => "Login",
                                  "require" => "valid-user"
                                ),
                              )

##
## cache passwords/digests in memory to reduce load on the backend
## max-age is in seconds
##   cache is checked for expiration every 8 seconds, so actual
##   caching may be up to 8 seconds longer than configured max-age.
## default: inactive (no caching)
##
#auth.cache = ("max-age" => "600")

##


Ciao

Graziano


Il 18/05/2023 15:48, Graziano Brioschi ha scritto:
> Hi list,
>
> I think that we have found a problem with begin uClibc 7.2.1 x64.
>
> Using webconf (webconf with lighhttpd), I can login in the 
> configuration web interface without authenticate myself (no 
> username/password is asked by the system).
>
> Looking for .htpasswd in /var/webconf/www, I can found it and it seems 
> to be correct.
>
> # ls -l /var/webconf/www/.h*
> -rw-r--r--    1 root     root            20 May 18 15:31 
> /var/webconf/www/.htpasswd
> -rw-r--r--    1 root     root            20 Mar 25 18:15 
> /var/webconf/www/.htpasswd.dist
>
> Can someone suggest me something to check?
>
> I can found only these two warnings in /var/log/lighttpd/error.log, 
> but nothing related to .htpasswd or auth problems:
>
> 2023-05-18 15:27:16: (server.c.1588) server started (lighttpd/1.4.67)
> 2023-05-18 15:27:16: (configfile.c.1287) WARNING: unknown config-key: 
> dir-listing.exclude (ignored)
> 2023-05-18 15:27:16: (configfile.c.1287) WARNING: unknown config-key: 
> dir-listing.encoding (ignored)
>
> thanks
>
> Graziano
>
-- 

Graziano Brioschi

Outland s.a.s.
sede operativa:
Via A. Don Rocca, 13
20030, Senago (MI)
tel: 02 9948 6014
mobile: 328 8382622
email:[email protected]
--> U4E <--

------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/