[HOWTO] - Password protect Apache folders

[uoba]

it'll only ask once! (even twice on a pc!)

[Essage]

How can I password protect the dir-directory?

[Ebonit]

I find it very annoying that when people in this thread ask something that you don't get to see the answer! Please don't use private messages to answer! I, and I assume others as well, like to see the answers to those questions.

[owaters]

Great guide/how to, works fine thanks

Just a few questions though....
I have created 2 users using:

sudo htpasswd -c .htpasswd username

and I would like to delete one of them. How do I go about doing this?

Next question..........

Is it possible to make a certain user goto a certain directory?
For example:

I have made a directory called 'remote' in my '...WebServer/Documents/'
In there is the .htaccess file containing:

AuthUserFile /private/etc/httpd/.htpasswd
AuthGroupFile /dev/null
AuthType Basic

<Limit GET POST>
require valid-user
</Limit>


In the 'remote' directory there a directory called 'guest'
When someone goes to the 'remote' directory they will be prompted.

If I put my username and pass in I will gain access to the 'remote' directory (like it does now).

If i put the guest username and pass in I would like to be taken to the 'guest' directory in the 'remote' directory.

Is this possible? if so how do i do it?

Thanks

[hazmat]

I don't think so. These things work recursively. You COULD do something along the lines of what you are asking (not totally AFAIK), but it's ugly. I would just use different directories entirely.

And to remove a user, just remove the entry in .htpasswd.

[owaters]

Hi,

Just had to reinstall my system, therefore having to set all this up again.

I have a problem this time though.

I have followed the tutorial about creating a symbolic link and having it protected.
I have created a symbolic link from
/Library/WebServer/Documents/music
to
/Users/oz/Music/iTunes/iTunes\ Music/

but now when I goto that directory I get a page with:

Forbidden
You don't have permission to access /music/ on this server

Can anyone help?

I have added the line in httpd.conf, which now looks like:

# Control access to UserDir directories. The following is an example
# for a site where these directories are restricted to read-only.
#
#<Directory /home/*/Sites>
# AllowOverride FileInfo AuthConfig Limit
# Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
# <Limit GET POST OPTIONS PROPFIND>
# Order allow,deny
# Allow from all
# </Limit>
# <LimitExcept GET POST OPTIONS PROPFIND>
# Order deny,allow
# Deny from all
# </LimitExcept>
#</Directory>

<Directory "/Library/WebServer/Documents/music">
AllowOverride AuthConfig
</Directory>

Is that right?

[hazmat]

Well either make sure that the permissions on the path to '/Users/oz/Music/iTunes/iTunes Music' is publicly accessible, or better yet, IMO, instead of a sym link use the Alias directive in httpd.conf. Sym links for a web server are a funny thing.

Alias /music '/Users/oz/Music/iTunes/iTunes Music'

That should work.

[owaters]

Where should I put that line in httpd.conf?