httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bill Moseley <>
Subject [users@httpd] Why sub-requests for <docroot>/<extra path>?
Date Tue, 07 Jun 2005 06:33:30 GMT
Apache 2.0.54-4 on Debian Sid.

I have a setup with the document root with no access, but then I allow
access to individual subdirectories (normally via basic auth).

Say foo is one of those sub-directories and DocRoot is

So a request for:

    GET http://bumby:88/foo/env.cgi/other/foo

results in this message in the error log:

    [error] .. client denied by server configuration: /var/lib/projects/other

If I enable access to the doc root then this error doesn't show up.
It's interesting that only the first extra path segment is used
("other", but not that last "foo").

Can someone explain this behavior?

Here's my complete httpd.conf file:

    ServerRoot /etc/apache2
    User www-data
    Group www-data
    Listen 88
    PidFile /var/run/
    ErrorLog /var/log/apache2/error.log
    TypesConfig /etc/mime.types
    ServerName bumby

    LoadModule cgi_module /usr/lib/apache2/modules/

    # Restrictive by default
    <Directory />
        Options None
        AllowOverride None
        Deny from all

    DocumentRoot /var/lib/projects

    <Directory /var/lib/projects>
        # Uncomment below and error does not show up
        #Allow from all

        <files env.cgi>
            SetHandler cgi-script
            Options +ExecCGI

    <Directory /var/lib/projects/foo>
        Allow from all

Bill Moseley

The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:> for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

View raw message