Re: Apache and password protection

From: Tyler Larson (g.news_at_tlarson.com)
Date: 09/19/03

  • Next message: Felix Tilley: "Re: IPTables and 200/8" 
    Date: 19 Sep 2003 14:44:42 -0700

    Gary Petersen <garyp1492@remove.meearthlink.invalid> wrote in message news:<pan.2003.09.18.06.40.36.966630.3604@REMOVE.MEearthlink.INVALID>...
    > On Wed, 17 Sep 2003 17:50:57 -0500, Mairhtin O'Feannag created an
    > award-winning crop circle <Xns93F9A155487FFmairhtinofeannag@64.164.98.29>,
    > which, when translated into English, means this:
    >
    > > [ difficulty setting up access restrictions in Apache snipped ]
    > >
    >
    > Perhaps you need to tell Apache to recognize
    > your .htaccess file:
    >
    > file(httpd.conf):
    > <Directory /www/secure-directory-example/>
    > AllowOverride AuthConfig
    > # [ other configuration options ]
    > </Directory>
    >
    >
    > And make sure that the root directory is not accessible:
    > <Directory />
    > Order allow,deny
    > Deny from all
    > </Directory>

    If you're going to "Deny from all" in your root directory, you'll have
    to remember to "Allow from all" in all the directories that are
    supposed to be accessible by apache.

    Of course, it's good pracice, but it's not going to make a lick of
    difference as far as password-protecting pages is concerned. Instead,
    it just makes it impossible for anyone (whether they're supposed to be
    allowed or not) to access any files except those in directories you
    explicitly mark as allowed in your httpd.conf file.

  • Next message: Felix Tilley: "Re: IPTables and 200/8"

    Relevant Pages

    • Re: Not a Debian question, but you guys know this stuff...
      ... did so with the assumption that there would be many Apache users here and that the more experienced ones may know how to help me in Windows and Linux. ... when running the installation program on the ... it's own config file and it's own root directory. ... error in the Apache documentation, but instead I reinforced my belief in the ...
      (Debian-User)
    • Re: Installation Question
      ... which will contain the http information. ... of the document root directory, ... information you need to set up PHP with Apache. ...
      (comp.lang.php)
    • Re: Installation Question
      ... Do you mean the http root directory? ... which will contain the http information. ... of the document root directory, ... information you need to set up PHP with Apache. ...
      (comp.lang.php)
    • RE: XML error in Web.config Error (Forms Authentication)
      ... yoru <deny> element should have the? ... this can only be defined at the root directory of your virtual ... > David Gordon-Brown ...
      (microsoft.public.dotnet.framework.aspnet)
    • RE: Forms-Based Security below Application Level
      ... Hi Alex, ... In your web.config of the root directory, ... The above would deny anonymous access to only those files which are under ... the securefolder1 and securefolder2. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Quantcast