>   I have done another new test.. and it worked.
> These are all the
>   step to reproduce the test:
> 
> =======================
> $ mkdir -p /tmp/test/www
> 
> $ echo "alo:password00" > /tmp/test/passwords
> 
> $ cat << EOF >/tmp/test/cherokee.conf
> > Port 5000
> > DocumentRoot /tmp/test/www
> > Directory / {
> >   Handler common
> >   Auth Basic, Digest {
> >     Name "Test"
> >     Method plain {
> >        PasswdFile /tmp/test/passwords
> >     }
> >   }
> > }
> > EOF
> 
> $ /usr/sbin/cherokee -b -C /tmp/test/cherokee.conf
> Cherokee Web Server 0.5.1: Listening on port 5000,
> TLS disabled
>  IPv6 enabled, using epoll, 1024 fds limit, 5
> threads, 204 fds in each
>  standard scheduling policy
> 
> $ wget -O - http://localhost:5000/
> --17:42:27--  http://localhost:5000/
>            => `-'
> Resolving localhost... 127.0.0.1
> Connecting to localhost|127.0.0.1|:5000...
> connected.
> HTTP request sent, awaiting response... 401
> Authorization Required
> Authorization failed.
> 
> $ wget -O - http://alo:[EMAIL PROTECTED]:5000/
> --17:52:26--  http://alo:[EMAIL PROTECTED]:5000/
>            => `-'
> Resolving localhost... 127.0.0.1
> Connecting to localhost|127.0.0.1|:5000...
> connected.
> HTTP request sent, awaiting response... 200 OK
> Length: unspecified [text/html]
> 
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2
> Final//EN">
> [..]
> =======================
> 
>   May it be that you are using the wrong validator? 
> Where it says
>   "Method plain", it defines the validator you are
> using, and each one
>   understand a different password file format.
> 
>   Rainer, berVi; is it working for you?
> 
> -- 
> Greetings, alo.

I tried plain authentication, and surprisingly it
works! It's just surprising coz last time I tried it
it wasn't working. htpasswd still doesnt work since
that plugin wasnt built, but there's alread a ticket
bout that

http://www.0x50.org/bugs/ticket/52

Anyway, there's something really weird! Here's my
config (sites-available/default):

Directory /home/nod {
    Auth Basic {
        Name "Restricted Area"
        Method plain {
            PasswdFile /var/www/conf/passwd
        }
    }
#    User nod_upd
}

Directory /home/backup {
    Auth Basic {
        Name "Restricted Area"
        Method plain {
            PasswdFile /var/www/conf/passwd
        }
    }
#    User backup
}

When I go to eg. /home/nod/, it asks for user and
pass, BUT it accepts it even if I enter an n for
username and nod_upd user's password. I think it's a
serious problem. Please check it if it's the same with
you or not.

Anyway, I'd like to ask, is there a way to specify
what user to require per folder? I'm talking about sg
like apache's config, so:

AuthType Basic
AuthName "By Invitation Only"
AuthUserFile /usr/local/apache/passwd/passwords
Require user rbowen sungo

That's what I wanted to achieve with the line 

#    User backup

but it didn't work, so I had to comment it out. I just
thought it's supposed to work coz I saw it here:

http://www.0x50.org/doc/PAM_validator.html

I'm waiting for comments.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
_______________________________________________
Cherokee mailing list
[email protected]
http://www.0x50.org/cgi-bin/mailman/listinfo/cherokee

Reply via email to