Problem with Netscape Enterprise Server and HyperNews security

Forum: HyperNews Security
Date: 1999, Sep 17
From: Rafael Valcarcel

I am using Netscape Enterprise Server as a Web Server for HyperNews. Everything works fine except security. I want to use the option of having the user web browser to ask the user for user id and password when doing restricted operations (like deleting messages).

I followed the instructions given for Netscape Commerce Server and included the following in the obj.conf file:

<Object ppath="/apps/cgi/HyperNews/SECURED/*"> AuthTrans fn="basic-ncsa" userfile="/data/WWW/hn/hnpeople/.htpasswd" auth-type="basic" PathCheck fn="require-auth" realm="HyperNews" auth-type="basic" auth-user="*" </Object>
(/apps/cgi/HyperNews is the full path of the physical directory where the HyperNews Perl scripts, and in the real obj.conf file the AuthTrans ... userfile is in one line ).
The result is that when I try to do a restricted operation I don't get any prompt for user and password, but a html page from HyperNews that says the server didn't say who I was.
Any ideas?.
Regards. Rafael.