Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Mime-Version: 1.0 (Apple Message framework v619.2)
Content-Transfer-Encoding: 7bit
Message-Id: <521f953e9c8f389d7208b49456d53c17@nedron.net>
Content-Type: text/plain; charset=US-ASCII; format=flowed
To: users@httpd.apache.org
From: David Nedrow <listbox@nedron.net>
Date: Mon, 14 Feb 2005 20:57:02 -0500
Subject: [users@httpd] Redirect question...

We are using Netegrity's SiteMinder product to authenticate internal 
users. It's an apache module that redirects users to a main 
authentication server, which auth's them, and returns them BACK to the 
original server.

Internally, we also run Nessus to scan hosts for security issues. There 
are a number of tests Nessus does that test for specific URLs. However, 
because of the initial redirect every URL test is positive.

Here's the question:

Is there any way to add some type of URL specific directive to the 
httpd conf that would return a 404 >before< handing off valid requests 
to the authentication server?

-David


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org