Re: [cobalt-users] Password Protected Directory

[José Luis Chafardet Grimaldi <joseluis@xxxxxxxxxxxxxxxx>]

>Dear José Luis,
>
>Thank you for your help.
>I have done all steps you told me, but when the box appear to ask for user
>name and password for accessing to the folder and the files which are in
it,
>the authentication will reject the user name and password!
>Please tell me what I have done wrong.
>
>Regards,
>Shaya

-=-=-=-=-=

Create a file called .htaccess

pico .htaccess
paste the next lines on it:

AuthUserFile /home/sites/site*/web/directory/.htpasswd
AuthName "Access denied"
AuthType Basic
<Limit GET>
require username
</Limit>

make the changs to fit your server needs changing /home/sites/site* for your
site# and /home/sites/site*/web/directory to the directory to protect

in the lines <Limit GET> require username "CHANGE USERNAME" with the
username you want to use.

when done type this:

htpasswd -c AuthUserFile /home/sites/site*/web/directory/.htpasswd username

this instruction will ask you for a password twice, enter the password and
you sould be done now.

remember to change the site*, directory and username to match your needs.

you can also read this faq:

http://www.cobaltfaqs.com/wiki/index.php/RaQ%204%20.htaccess%20contents

THANKS to Bruce Timberlake for sending me this url LOL ;)

and thanks to Goetz Lohmann for explaining me the following:

this is another explaination about htaccess:
if you use AuthUserFile /home/sites/site8/web/dbmanager/.htpasswd
you should also type
htpasswd -c AuthUserFile /home/sites/site8/web/dbmanager/.htpasswd whoeva
cause .htacces have to find it or it will suck
"AuthUserFile" defines the path to your password file
(a point infront of the name makes it invisibble like in windowz "hidden")

ok, back to the .htacces file:
"AuthName" is the text of the box which is shown like
AuthName "this is my restricted area"

AuthType tells which method is used for password transmition
"Basic" is cleartext and is the common way

the Limit Clause tells which protocol is limited
<Limit GET>
</Limit>

So must be:
AuthUserFile /home/sites/site*/web/directory/.htpasswd
AuthName "Access denied"
AuthType Basic
<Limit GET>
require usename
</Limit>

But the "requiere username" that only user whoeva could log in ...
for each single user you might insert the name ... but thats far to evil try
"require valid-user"
instead ... so each valid user (password+username entered correctly) might
log in ..

AuthUserFile /home/sites/mysite/web/test/.htpasswd
AuthName "Secret Area"
AuthType Basic
<Limit GET>
require valid-user
</Limit>

with .htacces you could do a LOT more, read about


sorry the delay i forgot i moved all my emails concerning the cobalt list to
a new folder.

I hope this help,

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
José Luis Chafardet Grimaldi
DGTal Studios Information Communication & Design Intergrated Solutions
Presidente
http://www.dgtalstudios.com
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-