To clear up confusion in the previous bug description let me
reiterate the problem in point form briefly.
1. The problem appears also within allowed htdoc directories that
get the same .htaccess file as is used in HN put in them. This identifies it
as an Apache set up problem. The files are accessible without
the .htaccess file, but but not with it in place in the directory.
2. The configuration of HN 1.10 is canonical and uses the
setup-form.pl. When removing the .htaccess files and trying to
use edit-member.pl the passwords to set new passwords the passwords get assigned but when .htaccess
is re-applied and pages access is tried the error message
is met.
3. As mentioned in 1., the problem is duplicated in non
HN situations by using a similar .htaccess file. By this I
mean a copy of HN's .hnaccess file which is renamed .htaccess,
(Apache expects this, as it is configured in the httpd.conf.)
file. Placing this file in a CGI-bin directory that is not related to HN, the problem re-appears.
4. The directories are named in the httpd.conf file with,
it seems, the proper options and AllowOveride AuthConfig for authentication
by the server. The browser asks for password and fails on
trying to acccess the html file in this case.
Apache Version is 1.3.6 working on the 2.2.13 Linux kernel.
HN version is 1.10.
|