Re: проблема с satisfy any;

[Andrew Sitnikov <sitnikov@xxxxxxxxxx>]

Hello Igor,

Friday, September 18, 2009, 2:42:53 PM, you wrote:

IS> On Fri, Sep 18, 2009 at 02:08:12PM +0300, Andrew Sitnikov wrote:

>> Hello Igor,
>> 
>> Friday, September 18, 2009, 1:03:31 PM, you wrote:
>> 
>> IS> On Fri, Sep 18, 2009 at 12:49:50PM +0300, Andrew Sitnikov wrote:
>> 
>> >> Hello Igor,
>> >> 
>> >> IS> У меня эта конфигурация на 0.7.62 выдало такое:
>> >> IS> 2009/09/18 11:37:38 [debug] 98153#0: *1 access phase: 8
>> >> IS> 2009/09/18 11:37:38 [debug] 98153#0: *1 access: 935A1351 FFFFFFFF 
>> >> 04030201
>> >> IS> 2009/09/18 11:37:38 [debug] 98153#0: *1 access: 935A1351 00000000 
>> >> 00000000
>> >> IS> 2009/09/18 11:37:38 [debug] 98153#0: *1 access phase: 9
>> >> IS> 2009/09/18 11:37:38 [error] 98153#0: *1 no user/password was
>> >> IS> provided for basic authentication, ...
>> >> IS> 2009/09/18 11:37:38 [debug] 98153#0: *1 post access phase: 10
>> >> 
>> >> IS> Есть ощущение, что не собран один из модулей - ngx_http_access_module
>> >> IS> или ngx_http_auth_basic_module. Что показывает "nginx -t" ?
>> >> если  убрать  satisfy  то  сработает  deny. если убрать еще и deny то
>> >> сработает auth. так что модули все на месте.
>> 
>> IS> Как выглядит лог без satisfy и deny, но с ошибкой в auth в районе
>> IS>     access phase
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 event timer del: 10: 1253272111197
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 generic phase: 0
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 add cleanup: 0000000014FF5148
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 generic phase: 1
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 test location: "/"
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 using configuration "/"
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 http cl:-1 max:1048576
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 generic phase: 3
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 post rewrite phase: 4
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 generic phase: 5
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 add cleanup: 0000000014FF5180
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 generic phase: 6
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 generic phase: 7
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 access phase: 8
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 access phase: 9
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 access phase: 10
>> 2009/09/18 14:07:31 [error] 15675#0: *2 no user/password was provided for 
>> basic authentication, client: 212.7.1.2, server: si.infonet.ee, request: 
>> "GET / HTTP/1.1", host: "si.infonet.ee:8000"
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 http finalize request: 401, "/?" 1
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 http special response: 401, "/?"
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 http set discard body
>> 2009/09/18 14:07:31 [debug] 15675#0: *2 HTTP/1.1 401 Unauthorized

IS> Я правильно понимаю, что конфиг, приведённый в самом первом письме полный ?
да. он короткий.

user  wwwrun www;
worker_processes  1;

error_log  /var/log/nginx/error.log;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
        debug_connection 212.7.1.2;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    sendfile  on;
    gzip  on;

    server {
        listen  8000;

            satisfy any;
                #allow 1.2.3.4/32;
            deny all;
                                                                                
                                                             
            auth_basic "Restricted Zone";                                       
                                                                     
            auth_basic_user_file  /etc/nginx/.htpasswd;
    
            location / {
            root   /var/www/nginx/htdocs;
            index  index.html;
        }
    }
}




-- 
Best regards,
 Andrew                            mailto:sitnikov@xxxxxxxxxx