About HyperNews
 Next-in-Thread Next-in-Thread
 Next Message Next Message

Note Ambiguities in Apache Bug Revisited 

Forum: HyperNews Security
Re: Question Apache Problem. But Revelant. (E. Charters)
Date: 2000, Nov 22
From: <Anonymous>

To clear up confusion in the previous bug description let me
reiterate the problem in point form briefly.
1. The problem appears also within allowed htdoc directories that
get the same .htaccess file as is used in HN put in them. This identifies it
as an Apache set up problem. The files are accessible without
the .htaccess file, but but not with it in place in the directory.
2. The configuration of HN 1.10 is canonical and uses the
setup-form.pl. When removing the .htaccess files and trying to
use edit-member.pl the passwords to set new passwords the  passwords get assigned but when .htaccess
is re-applied and pages access is tried the error message
is met.
3. As mentioned in 1., the problem is duplicated in non
HN situations by using a similar .htaccess file. By this I
mean a copy of HN's .hnaccess file which is renamed .htaccess,
(Apache expects this, as it is configured in the httpd.conf.)
file. Placing this file in a CGI-bin directory that is not related to HN, the problem re-appears.
4. The directories are named in the httpd.conf file with,
it seems, the proper options and AllowOveride AuthConfig for authentication
by the server. The browser asks for password and fails on
trying to acccess the html file in this case.
Apache Version is 1.3.6 working on the 2.2.13 Linux kernel.
HN version is 1.10.

 Next-in-Thread Next-in-Thread
 Next Message Next Message
Inline:
 1 1
 All All
Outline:
 1 1
 2 2
 All All

 Add Add
to: "Ambiguities in Apache Bug Revisited"

 Members Members
 Subscribe Subscribe
 Admin Mode Admin Mode
 Show Frames Show Frames
 Help Help


Installation Topics:
  • Creating Base Articles, also called Forums.
  • Security Issues regarding HyperNews
  • Bidirectional E-mail gateway

    Earn money with Scour!
    Google
     
    Web www.HyperNews.org
    Earn money with Scour!