Re: [users@httpd] prevent cgi-bin script execution prior to authorization dialog success

2018-08-15 Thread Jason Pitt
Nope...there isn't...at least not in apache2.conf, however there is clearly something different about how it is serving content from /cgi-bin than from other directories...even if those directories are flagged with ExecCGI. One nice thing I noticed is that I can use ScriptAlias to alias "/cgi-bin/"

Re: [users@httpd] prevent cgi-bin script execution prior to authorization dialog success

2018-08-15 Thread Eric Covener
On Wed, Aug 15, 2018 at 5:53 PM Jason Pitt wrote: > > Ok I have a work around but I'm really unhappy with it and I'd like it if > someone can verify for me that I'm not doing something wrong before I change > my whole code base to deal with the cgi scripts not being present in the > apache defa

Re: [users@httpd] prevent cgi-bin script execution prior to authorization dialog success

2018-08-15 Thread Jason Pitt
Ok I have a work around but I'm really unhappy with it and I'd like it if someone can verify for me that I'm not doing something wrong before I change my whole code base to deal with the cgi scripts not being present in the apache default cgi-bin (on my system /usr/lib/cgi-bin). So when a client r

Re: [users@httpd] prevent cgi-bin script execution prior to authorization dialog success

2018-08-15 Thread Jason Pitt
Thanks Eric- This was from an incognito window just to try and avoid that...it's interesting, I think what's going on is that the authorization is working in /var/www/html but isn't doing anything in /usr/lib/cgi-binwhen I disabled the authentication for /var/www/html, now I don't get any auth

Re: [users@httpd] prevent cgi-bin script execution prior to authorization dialog success

2018-08-15 Thread Eric Covener
> Here's from the access.log: > 127.0.0.1 - - [14/Aug/2018:19:33:28 -0700] "GET /wormbot/img/icon_delete.png > HTTP/1.1" 401 736 "http://127.0.0.1/cgi-bin/experimentbrowser"; "Mozilla/5.0 > (X11; Ubuntu; Linux x86_64; rv:61.0) Gecko/20100101 Firefox/61.0" > 127.0.0.1 - - [14/Aug/2018:19:33:28 -07

Re: [users@httpd] prevent cgi-bin script execution prior to authorization dialog success

2018-08-14 Thread Eric Covener
On Tue, Aug 14, 2018 at 9:33 PM Jason Pitt wrote: > > Hello- > > I'm having an issue with trying to configure apache that I'm hoping someone > can help me address. I have several scripts located in the cgi-bin that I > want to control access to. I'm able to either put an .htaccess file in the

[users@httpd] prevent cgi-bin script execution prior to authorization dialog success

2018-08-14 Thread Jason Pitt
Hello- I'm having an issue with trying to configure apache that I'm hoping someone can help me address. I have several scripts located in the cgi-bin that I want to control access to. I'm able to either put an .htaccess file in the cgi-bin or modify the apache2.conf file to prompt for a usernam