Return-Path: 
 <apache-bugdb-owner-apache-bugdb-archive=hyperreal.org@apache.org>
Delivered-To: apache-bugdb-archive@hyperreal.org
Received: (qmail 19538 invoked by uid 6000); 1 Sep 1998 18:40:04 -0000
Received: (qmail 19482 invoked by uid 2001); 1 Sep 1998 18:40:00 -0000
Date: 1 Sep 1998 18:40:00 -0000
Message-ID: <19980901184000.19481.qmail@hyperreal.org>
To: apache-bugdb@apache.org
Cc: apache-bugdb@apache.org,
From: (Lars Eilebrecht) <lars@apache.org>
Subject: Re: mod_auth-any/2938: The server just lets everyone in, and see
Reply-To: (Lars Eilebrecht) <lars@apache.org>
Sender: apache-bugdb-owner@apache.org
Precedence: bulk

The following reply was made to PR mod_auth-any/2938; it has been noted by GNATS.

From: (Lars Eilebrecht) <lars@apache.org>
To: (Apache GNATS) <apbugs@apache.org>
Cc:  Subject: Re: mod_auth-any/2938: The server just lets everyone in, and see
Date: Tue, 01 Sep 1998 20:53:22 +0200 (CEST)

 According to Michael Davon:
 
 >   <Directory */members>
 >   options includes followsymlinks execcgi
 >   AuthDBMUserFile /www/data/passwd/passwd
 >   AuthGroupFile /www/data/group/group
 >   AuthType Basic
 >   AuthName HotSexPics
 >   <Limit GET POST>
 >   require valid-user
 >   </Limit>
 >   </Directory>
 
 From our upgrading_to_1_3.html file:
 
   When using wildcards in pathnames (such as * and ?) they no longer match /
   (slash). That is, they more closely behave how a UNIX shell behaves. This
   affects <Directory> directives, for example. 
 
 You may want to change your config to use either <DirectoryMatch> or
 <LocationMatch>.
 
 
 P.S.: And you should remove the lines "<Limit GET POST>" and "</Limit>".
       They are superfluous rsp. wrong.
 
 Regards...
 -- 
 Lars Eilebrecht
 lars@apache.org