Project

General

Profile

Actions

Bug #2873

closed

Basic Auth method not working

Added by light_head about 6 years ago. Updated about 6 years ago.

Status:
Duplicate
Priority:
Normal
Category:
mod_auth
Target version:
ASK QUESTIONS IN Forums:

Description

Hi I am a newbie on lighttpd,

when I created some like this, I got this issue,

Lighttpd version 1.4.48 on arm core linux 3.14.18.

auth.debug = 2
auth.backend = "htdigest"
auth.backend.htdigest.userfile = "/lighttpd/.htdigest"
auth.require = ( "/config/" =>
(
"method" => "basic",
"realm" => "ByPassword",
"require" => "valid-user"
)
)

with this set-up, it couldn't reach host/config/ site, it kept popping up login page.

Anything I configured wrong?


Related issues 1 (0 open1 closed)

Is duplicate of Bug #2848: buffer_append_base64_decode() broken on compilers where char is assumed unsignedFixed2017-12-20Actions
Actions #1

Updated by gstrauss about 6 years ago

  • Category set to mod_auth
  • Status changed from New to Invalid
  • Target version deleted (1.4.x)

Please do not file bugs to ask questions.

Read the doc Docs_ModAuth and post more specific questions in the forum after checking the lighttpd error log.

Actions #2

Updated by light_head about 6 years ago

Sorry for the method I brought this issue.
I put some debugging codes into the mod_auth.c, what I found was, when the basic method password less than 6 characters, like "password:test", there would be extra character(s) after the real password and failed the password checking. (password doesn't match error, the password string would be test(xx), added two more bytes).
I traced back and found out that there were some modifications in base64.c, related changed base64_stanard_reverse_bable from "short" to "char". I revered the baser64.c back to version 1.4.39, this error went away.

Actions #3

Updated by avij about 6 years ago

Is this related to ARM? On my x86_64 system basic auth works OK with all password lengths ranging from 1 to 20.

https://github.com/lighttpd/lighttpd1.4/commit/d4083effab0f9bf76528d5c47198b17e7471ed13 may be related. This fix is already in git head. Please test with that change.

Actions #4

Updated by avij about 6 years ago

So this would probably be a duplicate of bug 2848.

Actions #5

Updated by gstrauss about 6 years ago

  • Status changed from Invalid to Duplicate
  • Target version set to 1.4.49

thanks, avij

Actions #6

Updated by gstrauss about 6 years ago

  • Is duplicate of Bug #2848: buffer_append_base64_decode() broken on compilers where char is assumed unsigned added
Actions #7

Updated by light_head about 6 years ago

Thanks, guys.
Just tested the patch of Bug#2848 worked.
It is a duplicates.

Actions

Also available in: Atom