Protect ISPC3 w/ .htaccess> auth_basic invalid argument

Discussion in 'ISPConfig 3 Priority Support' started by Barbara, Feb 3, 2016.

  1. Barbara

    Barbara New Member

    Could you assist - perhaps I've been working too many hours.
    Thank you. --Barbara--
    Following: "NEW: Protect the ISPConfig Interface with .htaccess"
    from: http://www.ispconfig.org/blog/ispconfig-3-0-5-4p3-released-and-security-warning/
    Nginx Error Log: invalid number of arguments in "auth_basic" directive in /etc/nginx/sites-enabled/000-ispconfig.vhost:37

    Script file run and files created:
    php /usr/local/ispconfig/server/scripts/ispconfig_htaccess.php

    etc/nginx/sites-available/ispconfig.vhost:
    location ~ \.php$ {
    try_files $uri =404;
    include /etc/nginx/fastcgi_params;
    fastcgi_pass unix:/var/lib/php5-fpm/ispconfig.sock;
    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    #fastcgi_param PATH_INFO $fastcgi_script_name;
    fastcgi_buffer_size 128k;
    fastcgi_buffers 256 4k;
    fastcgi_busy_buffers_size 256k;
    fastcgi_temp_file_write_size 256k;
    auth_basic “Members Only”;
    auth_basic_user_file /usr/local/ispconfig/interface/.htpasswd;

    }

    Config: Ubuntu 14.04, Nginx 1.4.6, ISPC3.0.5.4p8
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The auth_basic config line looks fine. I'm just not sure avout the quotes, mabe there is the issue. Please try to replace the line with the exact copy from below:

    Code:
    auth_basic "Members Only";
     
  3. Barbara

    Barbara New Member

    A good lesson for all. Even with a 30" 2K monitor my eyes missed the difference in quotes. A quote ("") [html>"] is valid. A left double quote (“) [html>&ldquot;] and/or a right double quote (”) [html>&rdquot;] is Not valid.

    Correct Use of Quote:
    auth_basic "Members Only";

    Invalid Use of L&R dbl. quote:
    auth_basic Members Only;

    Thank you Till. My overworked eyes send you my best wishes. Perhaps an update to the blog posting previously mentioned would help another not make the same late night copy-paste error.

    --Barbara--

    PS: LE certs with DH patch for legacy support with A+ rating integrated. Let me know if you want us to test LE renewal in ISP3.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    I'll check how I can get Wordpress to leave the code syntax intact, internally the post has the right quotes, just Wordpress replaces them when it shows the code.
     

Share This Page