LinHES Forums
http://forum.linhes.org/

Did the last http update remove authentication?
http://forum.linhes.org/viewtopic.php?f=21&t=21007		 Page 1 of 1
Author:  Too Many Secrets [ Tue Apr 20, 2010 5:07 pm ]
Post subject:  Did the last http update remove authentication?
It seems I no longer get the login popup after the last lighttp (sp) update. I'm on the testing stuff. Is it just me? Also looking to get it back... Yes to get it back went to LinHES config and web security, hit apply password and finish and it's good again.
Author:  bigB [ Tue Apr 20, 2010 9:14 pm ]
Post subject: 
uncomment this line

/etc/lighttpd/lighttpd.conf
Code:
#include "/etc/lighttpd/auth-inc.conf"


I have submitted a ticket
Author:  spideyk21 [ Wed Apr 21, 2010 11:00 am ]
Post subject: 
I verified that auth-inc.conf was not commented out in /etc/lighttpd/lighttpd.conf, then proceeded to Service Menu>Linhes Configuration>Web Security to enter username and password.

I applied the new username/password (Apply new Password button), and was prompted with "Username contains invalid characters!". Looking at the restricted characters, to the best of my knowledge I am not using any.

If I hit finish and navigate to the MythWeb page I am prompt with a login box, but my username and password do not work (as expected).

Any suggestions?
Author:  bigB [ Wed Apr 21, 2010 4:15 pm ]
Post subject: 
Sorry, i don't use MythVantage (the linhes config menu). I'm on testing too, and i tend to make my own changes to thing, but we should have vaguely similar settings. I would look at the auth-inc.conf file and it should look something like this;

Code:
auth.backend               = "htdigest"
auth.backend.htdigest.userfile = "/etc/lighttpd/lighttpd.user.htdigest"
auth.require               = ("/" =>
                               (
                                 "method"  => "digest",
                                 "realm"   => "MythWeb",
                                 "require" => "valid-user"
                               )
                        )


Then look at the user file (mine is /etc/lighttpd/lighttpd.user.htdigest) for valid users. I am using digest authentication, but i've seen basic authentication used on LinHes systems.

If you need more help, please tell me what you have.

bigB.
Author:  spideyk21 [ Wed Apr 21, 2010 7:51 pm ]
Post subject: 
This is what my /etc/lighttpd/auth-inc.conf shows
Code:
auth.backend               = "plain"
auth.backend.plain.userfile = "/etc/lighttpd/lighttpd.user"


auth.require               = ( "/" =>
                               (
                                 "method"  => "basic",
                                 "realm"   => "MythWeb",
                                 "require" => "valid-user"
                               )
         )

As for the /etc/lighttpd/lighttpd.user is empty/blank.

I am still receiving the error that my "username contains invalid characters!". I am not using &<>/~`;:!.
Author:  bigB [ Wed Apr 21, 2010 8:15 pm ]
Post subject: 
Ok, The format of the plain user file is:
Code:
username:password


Hope this helps.
Author:  spideyk21 [ Thu Apr 22, 2010 7:05 am ]
Post subject: 
Secure once again. Worked like a champ. I must have searched for over an hour on the username/password format for lighttpd and came up bust.

Thanks again.
Author:  jams [ Sat Apr 24, 2010 12:19 pm ]
Post subject: 
spideyk21.
About the invalid chars. You just hit upon a bug that has been fixed for the next release.
During testing some code was left in to force the invalid chars flag even when none are present.
Author:  spideyk21 [ Tue Apr 27, 2010 9:40 am ]
Post subject: 
jams wrote:
spideyk21.
You just hit upon a bug that has been fixed for the next release.


Cool. I found a bug. Has a ticket been opened?
Page 1 of 1 All times are UTC - 6 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/