Entire site password protected after gallery 2 install

Regular Joined: Oct 11, 2007 Posts: 86

Hi

last night I installed Gallery 2.3 - it was working in standalone mode.

My Site: Fresh install of ravennuke 2.20.00 - php 4 mysql 5

However - after installation my entire website is now password protected. When I go to my site I get a authentication popup window that says:

"The server www.loschaos.com at Password Protected requires a username and password.

Warning: This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection)"

I can login with php-nuke login ids and passwords and gain access to the site.

I went ahead and installed the php-nuke integration package and that went smoothly with only one kink (cant view the plugins page - there are posts on this and I have not explored this problem yet).

Same thing - entire site password protected.

Note: before installing I had cgi authentication correctly setup. I would only get the login popup when logging in as admin or clicking on the administration link.

Now - I no longer get this prompt when accessing admin - I guess its because I have already authenticated before I even login as any user . .

One thing I noticed after installing gallery was that it came with a "html auth" plugin that was installed and activated. After the login prompts I deactivated it and uninstalled it but still same thing.

A tad confused here.

Is this a Nuke Sentinel issue? A web host issue?

Any idea what I must do?

Sincerely,

Kyle

Posted: Wed Sep 10, 2008 8:52 am

If this means anything - just noticed that when I login directly to admin.php on my site - I have to enter the login ID and pass from the popup - I am then taken to the login and password login section for the Administrator.

So I do have to login twice

Posted: Wed Sep 10, 2008 10:58 am

Try commenting out the Admin Auth in your .htaccess file.

I don't use Gallery, but just wondering if gallery has it's own .htaccess file and admin auth in as well. Worth a check.

Posted: Wed Sep 10, 2008 11:11 am

You know what - I think you are absolutely right:

My .htaccess file is now:

# Begin password protection #
require valid-user
AuthName "Password Protected"
AuthType Basic
AuthUserFile /path removed/.staccess
# End password protection #
# -------------------------------------------
# Start of NukeSentinel(tm) admin.php Auth
# -------------------------------------------
<Files .staccess>
deny from all
</Files>

<Files admin.php>
<Limit GET POST PUT>

</Limit>

</Files>
# -------------------------------------------
# End of NukeSentinel(tm) admin.php Auth
# -------------------------------------------

Do I just comment out these lines like so:

#require valid-user
#AuthName "Password Protected"
#AuthType Basic
#AuthUserFile /path removed/.staccess

Sincerely,

Kyle Pollard

Posted: Wed Sep 10, 2008 3:13 pm

Yes, try it, you can always remove the comments afterwards.

Posted: Wed Sep 10, 2008 3:22 pm

Cool - it worked !

Do I need top re-do the cgi auth?

I have not seen the cgi popup login (Nuke sentinel) since uncommenting those lines . ..

Sincerely,

kyle

Posted: Wed Sep 10, 2008 3:30 pm

Yes, if it is not working then probably worth just going through the setup again.

Posted: Wed Sep 10, 2008 3:46 pm

Thanks !

I will re-do it.

Sincerely,

Kyle Pollard