Posted by stpaultim on Wed, Oct 16, 2024 - 12:20am --- Updated: Oct 16 '24 - 12:24am

We use HTTP Basic Authentication to prevent accidental access to our dev sites. However, we are finding that this is not compatible with CiviCRM. When we have this working, CiviCRM pages to not work. 

We are using NGINX. Here is the documenation for what we are doing?

https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

Are we doing something wrong or can someone suggest an alternative method for protecting these sites that will work with CiviCRM?

Comments

Wed, Oct 16, 2024 - 1:21am by Graham Leach

Heya Tim,

Can you provide:

  • Screenshot(s)
  • Error log(s)
  • syslog(s)

To help further investigate?

I use this mechanism to password protect  my Webmin installation.  In my experience, HTTP Basic Authentication does not usually interfere with the website it is protecting.  

But it does require a correct configuration in a few places:

  1. Web server
  2. File system
  3. File contents
  4. Correct linkage/permissions of password file

In the absence of more diagnostics, tough to say much more.  The error logs of the above (sub)systems would be most helpful.

g.
----