www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Valerio VALDEZ Paolini" <val...@alinet.it>
Subject Re: mod_auth-any/3182: Authorization skipped in ScriptAlias-ed directory
Date Sun, 11 Oct 1998 20:40:00 GMT
The following reply was made to PR mod_auth-any/3182; it has been noted by GNATS.

From: "Valerio VALDEZ Paolini" <valdez@alinet.it>
To: Marc Slemko <marcs@znep.com>
Cc: apbugs@Apache.Org
Subject: Re: mod_auth-any/3182: Authorization skipped in ScriptAlias-ed
  directory
Date: Sun, 11 Oct 1998 22:34:44 +0200

 Hello Marc,
 
 	please note that:
 
 1. the directory /cgi-bin/ isn't protected, only subdirs /cgi-bin/admin/
 and /cgi-bin/servizi/ are protected; I saw the problem in the two subdirs
 and not in the parent dir.
 
 2. there is no .htaccess file that overrides any restriction.
 
 	Thank you very much for your attention.
 
 	Here are my configs:
 
 ----------------------------
 SRM.CONF
 ----------------------------
 
 DocumentRoot /home/httpd/html
 
 UserDir public_html/ /home/users/ 
 
 DirectoryIndex home.shtml home.html home.htm index.shtml index.html index.htm
 
 FancyIndexing on
 
 ReadmeName README
 HeaderName HEADER
 
 IndexIgnore */.??* *~ *# */HEADER* */README* */RCS
 
 AccessFileName .htaccess
 
 #
 # Directory dove possono essere eseguiti gli script cgi
 #
 
 ScriptAlias /cgi-bin/ /home/httpd/cgi-bin/
 
 #
 # Documenti html mostrati in caso di errore
 #
 ErrorDocument   400     /errori/400.shtml
 ErrorDocument   401     /errori/401.shtml
 ErrorDocument   402     /errori/402.shtml
 ErrorDocument   403     /errori/403.shtml
 ErrorDocument   404     /errori/404.shtml
 ErrorDocument   405     /errori/405.shtml
 ErrorDocument   500     /errori/500.shtml
 ErrorDocument   501     /errori/501.shtml
 ErrorDocument   503     /errori/503.shtml
 
 -----------------------
 ACCESS.CONF
 -----------------------
 
 
 #
 # disabilitiamo qualunque accesso alla root dir
 #
 <Directory />
 	Options None
 	IndexOptions FancyIndexing ScanHTMLTitles
 	AllowOverride None
 	Order deny,allow
 	Deny from all
 </Directory>
 
 #
 # concediamo l'accesso alle home degli utenti
 #
 <Directory /home/users/>
 	Options +Indexes +Includes
 	AllowOverride None
 	Order deny,allow
 	Allow from all
 </Directory>
 
 #
 # definiamo chi puo' accedere agli script cgi generali
 #
 <Location /cgi-bin>
 	Options None
 	AllowOverride None
 	Order allow,deny
 	allow from all 
 </Location>
 
 #
 # definiamo chi puo' accedere agli script cgi particolari
 #
 <Location /cgi-bin/admin>
 	Options -Indexes +Includes
 	Order deny,allow
 	deny from all 
 	AuthType Basic 
 	AuthUserFile /home/httpd/etc/passwd
 	AuthGroupFile /home/httpd/etc/group
 	AuthName "CariStudenti" 
 	Require group staff 
 	satisfy any 
 </Location>
 
 <Location /cgi-bin/servizi>
 	Options -Indexes +Includes
 	deny from all 
 	allow from cs.unibo.it
 	AuthType Basic 
 	AuthUserFile /home/httpd/etc/passwd
 	AuthName "CariStudenti" 
 	require valid-user 
 	satisfy any 
 </Location>
 
 #
 # diamo l'accesso al web e alle sue sezioni
 #
 <Location />
 	Options +Indexes +Includes +FollowSymLinks
 	AllowOverride None
 	order allow,deny
 	allow from all
 </Location>
 
 <Location /admin>
 	Options +Indexes +Includes +FollowSymLinks
 	deny from all 
 	allow from cs.unibo.it 
 	AuthType Basic 
 	AuthUserFile /home/httpd/etc/passwd
 	AuthGroupFile /home/httpd/etc/group
 	AuthName "CariStudenti" 
 	Require group staff amministratori 
 	satisfy any 
 </Location>
 
 <Location /servizi>
 	Options +Indexes +Includes +FollowSymLinks
 	deny from all 
 	allow from cs.unibo.it 
 	AuthType Basic 
 	AuthUserFile /home/httpd/etc/passwd
 	AuthName "CariStudenti" 
 	require valid-user 
 	satisfy any 
 </Location>
 
 
 
 --------------------------------------------------------------------------
  Valerio Paolini, studente del Corso di Laurea in Informatica della
  Facolta' di Scienze MM.FF.NN. dell'Universita' di Bologna, Italia.
 --------------------------------------------------------------------------
  valdez@alinet.it			paolini@cs.unibo.it
  caristudenti.cs.unibo.it/~paolini	(webmaster)
 --------------------------------------------------------------------------
  Via Matteotti 22, 40100 Bologna BO, Italia, tel. +39.051.361581
 -------------------------------------------------------------------------- 
 

Mime
View raw message