httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rich Bowen <>
Subject Re: [users@httpd] Apache 2.x authentication and mod_rewrite
Date Fri, 28 Jan 2011 11:18:27 GMT
> I have an app that I run that distinguishes between users by appending a cgi variable
to the end of a URL, so I setup a .htaccess file in the root of my web directories (/var/www/html)
as follows:
> RewriteEngine on
> RewriteBase /
> RewriteRule ^foo/(.*)$ some/really/long/url/$1?tenant_filter=2 [L]
> RewriteRule ^bar/(.*)$ some/really/long/url/$1?tenant_filter=1 [L]
> This works really great.  Clients type in
and the URL magically points them at
while all they see is the
> Here's where the problem comes in.
> I'd like to define *separate* authentication parameters for the /foo and /bar virtual
directories.  No matter what I try, the authentication is always overridden by the ldap setup
in my http.conf above.  What am I doing wrong and what can I do to achieve my goal?  Is it
even possible?

Two things you need to look into.

First, doing this in a .htaccess file rather than in the main server configuration file increases
the complexity. You should move these rules into the server config.

Second, authentication happens too late to try to do Rewrite based on it. You have to use
the %{LA-U:variable} syntax to do a peek-ahead. See
for more details on how to do that.

Rich Bowen

The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:> for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

View raw message