Return-Path: 
 <users-return-39081-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 49704 invoked from network); 15 Mar 2004 06:14:30 -0000
Received: from daedalus.apache.org (HELO mail.apache.org) (208.185.179.12)
  by minotaur-2.apache.org with SMTP; 15 Mar 2004 06:14:30 -0000
Received: (qmail 79059 invoked by uid 500); 15 Mar 2004 06:13:57 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 78711 invoked by uid 500); 15 Mar 2004 06:13:55 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
list-post: <mailto:users@httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 78696 invoked from network); 15 Mar 2004 06:13:55 -0000
Received: from unknown (HELO web40513.mail.yahoo.com) (66.218.78.130)
  by daedalus.apache.org with SMTP; 15 Mar 2004 06:13:55 -0000
Message-ID: <20040315061406.83624.qmail@web40513.mail.yahoo.com>
Received: from [63.199.31.229] by web40513.mail.yahoo.com via HTTP;
 Sun, 14 Mar 2004 22:14:06 PST
Date: Sun, 14 Mar 2004 22:14:06 -0800 (PST)
From: David H <godave621@yahoo.com>
To: users@httpd.apache.org
In-Reply-To: <Pine.WNT.4.58.0403141414090.2276@bronfman504>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
Subject: Re: [users@httpd] Dav security problem
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N

Joshua,

It works great thanks for the pointer.

Dave

--- Joshua Slive <joshua@slive.ca> wrote:
> 
> On Sat, 13 Mar 2004, David H wrote:
> 
> > Hi Saqib,
> >
> > Thanks for the advise. Virtual Host may not solve
> my
> > problem, people still able to get in. My question
> is
> > why am I not being ask for login or deny access
> under
> > normal https and Dav did ask for login?
> 
> > > >         <LimitExcept GET POST OPTIONS>
> > > >                 require user david
> > > >         </LimitExcept>
> 
> Because you have explicitly excluded "GET" from
> requiring authentication.
> Since GET is the method used for ordinary web
> browsers, they don't need to
> authenticate.
> 
> Remove the <LimitExcept ...> and </LimitExcept>
> lines if you want to
> restrict all access.
> 
> Joshua.
> 
>
---------------------------------------------------------------------
> The official User-To-User support forum of the
> Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for
> more info.
> To unsubscribe, e-mail:
> users-unsubscribe@httpd.apache.org
>    "   from the digest:
> users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail:
> users-help@httpd.apache.org
> 


__________________________________
Do you Yahoo!?
Yahoo! Mail - More reliable, more storage, less spam
http://mail.yahoo.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org