apache auth

[countach44]

I keep getting a 403 when I try to go to any of my password protected folder, one is done with .htaccess, and one is done in the httpd.conf, here's the content of my .htaccess:

AuthUserFile $file
AuthGroupFile /dev/null
AuthName Password
AuthType Basic

require valid-user

the folder is 750: nobody:users (apache runs as nobody, I plan on changing this to "apache&quot
the other one looks like this

<Directory "$name">
    Options FollowSymLinks
    AuthType Basic
    AuthName "If you're not me, get out"
    AuthUserFile "$passfile"
    Require valid-user
</Directory>

With same permissions.
I read somewhere that chmodding to 750 fixes this, but it didn't for me.
Thanks.

[Compunuts]

A few comments ...

With .htaccess file, you need this directive.

 AllowOverride AuthConfig

Did you create user's password file? And place it other than root directory of Apache? Like so ...

 htpasswd -c /usr/local/apache/passwd/passwords countach44

Where the countach44 is the name that you will have to put in to have access to that directory.

Also, give explicit file location ( for ease of use ) instead of using short file names like

AuthUserFile "/usr/local/apache/$passfile"

Instead of

AuthUserFile "$passfile"

You also need to explicitly define what user you are going to allow to have access to the directory.
For example;

require user countach44

HTH ...
P.S --> The above are for apache 2.0.

[countach44]

I'm using apache 1.3 series, and I've done all of that... Also, whenever I try to list any directory (by just going to that directory) it gives me 403, I've been looking, but I can't remember how to change it to allow directory viewing.
Thanks

[Compunuts]

[quote author=Corrupt Countach44 link=board=4;threadid=9451;start=0#msg85780 date=1088917036]
how to change it to allow directory viewing.
[/quote]
It's controlled by mod_autoindex. Hereis more info for the directive setting

[Compunuts]

[quote author=Corrupt Countach44 link=board=4;threadid=9451;start=0#msg85678 date=1088740899]
here's the content of my .htaccess:

require valid-user

the other one looks like this

<Directory "$name">
    Require valid-user
</Directory>

[/quote]
It's not sufficient to have only that "valid-user". You need to specify specific users for whom it's allowed.

I read somewhere that chmodding to 750 fixes this

As I recall, it's 640.