Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Importance: normal
Priority: normal
Date: Mon, 5 Dec 2005 14:24:40 +0100
Message-ID: 
 <FDD5D99066749040AF9098A720E9897701451A63@CIWMEXZSA0E.ex.ordersx.org>
Thread-Topic: Auth problem with Location
thread-index: AcX4bD85wsqN7M8ZSziQfO5uxPa+LwBCDIowAAB1hVAACiqlEA==
From: "Boyle Owen" <Owen.Boyle@swx.com>
To: <users@httpd.apache.org>
Subject: RE: [users@httpd] Auth problem with Location

> -----Original Message-----
> From: Maurer, Hermann [mailto:Hermann.Maurer@gft.com]
> Sent: Montag, 5. Dezember 2005 09:44
> To: users@httpd.apache.org
> Subject: [users@httpd] Auth problem with Location
>=20
>=20
> Hello folks,
>=20
> I'd like to implement the following scenario: We have an area, which
> must be accessible by everyone. There is an subfolder in it, which has
> to be accessible by authorized users only. Below I noted the=20
> appropriate
> piece of httpd.conf for that:
> ----------------------------
> <Location /myloc>
> Order Allow,Deny
> Allow from all
> </Location>
>=20
> <Location /myloc/confidential>
> Order Allow,Deny
> Allow from all
> AuthName "Confidentail Area, please login"
> AuthType Basic
> AuthUserFile /usr/local/apache/passwd/passwords
> Require valid-users
> </Location>
> ----------------------------
> Unfortunately, it doesn't work. Still everybody can access=20
> the subfolder
> /myloc/confidential without any password dialogs. I suppose, that the
> first Location block does have a higher priority, then the second one.

No. Quite the reverse - the more specific Location/Directory block takes =
precedence.

More likely, you have a "Satisfy any" directive somewhere at a higher =
level (check the docs to see why this would be a problem...).

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.=20

PS - check the spelling of "Confidential"....

>=20
> Is it generally possible ? Should I use any LocationMatch rules with
> regexp ? Can anybody give me an example for it ? Thank you !
>=20
> Regards,
> Hermann Maurer
>=20
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP=20
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>=20
>=20
Diese E-mail ist eine private und pers=F6nliche Kommunikation. Sie hat =
keinen Bezug zur B=F6rsen- bzw. Gesch=E4ftst=E4tigkeit der SWX Gruppe. =
This e-mail is of a private and personal nature. It is not related to =
the exchange or business activities of the SWX Group. Le pr=E9sent =
e-mail est un message priv=E9 et personnel, sans rapport avec =
l'activit=E9 boursi=E8re du Groupe SWX.
=20
=20
This message is for the named person's use only. It may contain =
confidential, proprietary or legally privileged information. No =
confidentiality or privilege is waived or lost by any mistransmission. =
If you receive this message in error, please notify the sender urgently =
and then immediately delete the message and any copies of it from your =
system. Please also immediately destroy any hardcopies of the message. =
You must not, directly or indirectly, use, disclose, distribute, print, =
or copy any part of this message if you are not the intended recipient. =
The sender's company reserves the right to monitor all e-mail =
communications through their networks. Any views expressed in this =
message are those of the individual sender, except where the message =
states otherwise and the sender is authorised to state them to be the =
views of the sender's company.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org