On Sat, 2023-04-29 at 17:39 +0100, Patrick O'Callaghan wrote:
In *some" cases, usernames are added to the password file, and the password verifies correctly (using 'htppasswd -v ...'), but Apache still throws an error, e.g.:
[Sat Apr 29 17:12:10.790251 2023] [authz_core:error] [pid 17622:tid 17769] [client 82.69.61.82:40716] AH01631: user notatest: authorization failure for "/":
(NB: "authorization failure", not "authentication failure" as with a password mismatch.)
Since these are all fictitious users (i.e. not local UIDs) I don't understand what's going on. Either it should always work or always fail.
I can't say that I've experienced that. Are there unusual (non-ASCII) characters in the username or passwords that fail oddly?