Return-Path: 
 <dev-return-33736-apmail-httpd-dev-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-dev-archive@httpd.apache.org
Received: (qmail 40949 invoked by uid 500); 3 Oct 2002 01:31:30 -0000
Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
list-help: <mailto:dev-help@httpd.apache.org>
list-unsubscribe: <mailto:dev-unsubscribe@httpd.apache.org>
list-post: <mailto:dev@httpd.apache.org>
Delivered-To: mailing list dev@httpd.apache.org
Received: (qmail 40932 invoked from network); 3 Oct 2002 01:31:29 -0000
Subject: Re: Authentication
From: =?ISO-8859-1?Q?Andr=E9?= Malo <nd@perlig.de>
References: <3D9A720F.8090209@attbi.com> <3D9A7EE5.5080108@attbi.com>
 <3D9A7F90.6070801@attbi.com> <3D9A8093.6000600@attbi.com>
 <20021002155052.A19552@lyra.org> <3D9B7885.9010807@attbi.com>
 <Xns929CA82FD2D5ndparker@news.perlig.de> <3D9B7DAD.8040904@attbi.com>
Organization: TIMTOWTDI
Message-ID: <Xns929C240A0BA88ndparker@news.perlig.de>
User-Agent: Xnews/5.04.25
To: dev@httpd.apache.org
Date: Thu, 03 Oct 2002 03:30:15 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

* Jerry Baker wrote:

> If there's no way to have a LimitExcept *and* separate directories
> requiring authentication for everything, how in the world could you
> have a DAV enabled server while still being able to restrict
> directories with authentication requirements?

There are several ways. For instance:

# turn <directory> to <location>
<Location />
<LimitExcept GET HEAD POST>
   Require user bob
</LimitExcept>
</Location>
...
<Alias /secret "D:/Web/www/protected">
<Location /secret>
AuthType Basic
AuthUserFile "D:/Web/htpasswd"
AuthName "Protected Area"
Require valid-user
</Location>

# or: use advantages of PCRE
<Location /(?!secret)>
<LimitExcept GET HEAD POST>
   Require user bob
</LimitExcept>
</Location>
...
<Alias /secret "D:/Web/www/protected">
<Directory "D:/Web/www/protected">
AuthType Basic
AuthUserFile "D:/Web/htpasswd"
AuthName "Protected Area"
Require valid-user
</Directory>

nd
--=20
sub the($){+shift} sub answer (){ord q
        [* It is always 42! *]       }
           print the answer
# Andr=E9 Malo # http://www.perlig.de/ #