ptepper

Multiple sign-in required with htaccess password protected directories

Vote 0 Votes

Hi,

I have my MT blog in a htaccess password protected directory within a larger site. I get a password prompt when I get to the blog, then I get another password prompt when I go to an entry page. The entry is in a year/month subdirectory

Any idea how to get rid of these subsequent password prompts?

URL looks like this
https://.../blog/2010/03/my-entry.html

Running Movable Type Pro version 4.32-en

-paul

Reported on Movable Type 4.3

11 Replies

| Add a Reply
  • You may like to point both the blog and your year/month subdirectory to the same password file and use a common password for both.

  • Thank you for sharing

  • Thanks, but this does not solve the problem. I'm not using a password file, I'm using LDAP, but that's not really relevant. I'll try to clarify.

    I have a private area, mysite.com/private, with lots of stuff in there. Amongst the other stuff is the blog, mysite.com/private/blog. Then there are entries under there, mysite.com/private/blog/2010/03/my-entry.html

    The .htaccess file is in the top level of the private area, mysite.com/private. There are no other .htaccess files in the subdirectories. However, when you go to mysite.com/private/blog you have to login with your password. Once you've logged in, you are prompted again if you click to read an entry (mysite.com/private/blog/2010/03/my-entry.html).

    I don't know why there's this additional prompt after you've already given your username & password and I'd like to get rid of it.

    -paul

  • I think I figured this out. I had some static http://mydomain.com links and references in my templates that had to be switched to https, and I also had to switch the Site URL to https in the Publishing Settings. Seems to have solved the problem.

    -paul

  • It solved it in the sense that now everything is based on https

  • Yes, that is what caused my problem, so that is the solution.

  • where exactly did you move the content to, in httpd.conf?

  • I didn't move the content, it was an issue with the templates. The templates I used had hard references to http: URLs, I had to change them to https or relative.

  • I am getting prompts for id/password for each image file displayed on the page. My .htaccess looks like this..

    AuthName "Enter id and password"
    AuthType Basic
    AuthUserFile /www/test/src/.htpasswd
    AuthGroupFile /www/tst/src/.htgroup
    require group admins

    If I add this it won't even ask once for id/password:

    Order Deny,Allow
    Allow From All
    Satisfy Any

    Any help would be greatly appreciated

  • Thanks admin

Add a Reply

If you need to share template code, replace all the "<" signs with "&lt;" or use this utility.

Forum Groups

code.sixapart.com

137 479

Last Topic: Getting a thumbnail with xpath by Peter on Mar 13, 2011

238 797

Last Topic: Manifest Schema Compatibility Issue When Restoring Blog by Matt on Oct 17, 2012

1858 6594

Last Topic: Categories and Basename Publishing Issues by e21media on Oct 25, 2012

88 307

Last Topic: absolute publish date in Manage Entries screen by .mau. on Apr 18, 2012

1488 5347

Last Topic: Anti-cloning by .mau. on Oct 29, 2012

732 3093

Last Topic: Blog moved server - now users cannot access blog? by mowgs on Oct 30, 2012

89 317

Last Topic: How to "pretify" a url in htaccess with a few wildcards by Caio on May 30, 2012

183 771

Last Topic: Commenting with TypePad by Rob Ferrara on Oct 17, 2012

212 680

Last Topic: Does MT-Approval work in MT5? by DLpres on Sep 25, 2012

27 100

Last Topic: Upgrading MT by Caio on Oct 15, 2012

49 224

Last Topic: Movable Type 6 Ideas by Caio on May 28, 2012

65 248

Last Topic: Expanding new rich text editor and implementing table function by Takeshi Nick Osanai on Jul 30, 2012