You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Hank <he...@gmail.com> on 2005/08/19 23:52:23 UTC

[users@httpd] Un-password protecting a sub-directory

I have a docroot site password protected in the usual manner in
httpd.conf section of the virtual domain:

AuthUserFile /home/site/public/.htpasswd
AuthName "What's the Secret Word?"
AuthType Basic
require valid-user

How can I un-protect a subdirectory of that site?  I've tried dozens
of combinations of <directory>order allow,deny,etc .....in httpd.conf
and the local .htaccess, but can't quite figure out the right
combination.

Thanks in advance.
-- 

-Hank

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Un-password protecting a sub-directory

Posted by Joshua Slive <js...@gmail.com>.
On 8/19/05, Hank <he...@gmail.com> wrote:
> > Satisfy Any
> > Allow from all
> 
> That works great.. thanks.
> 
> > but this will also destroy any host-based access restrictions.
> 
> But only for that subdirectory, right? 

And its subdirectories.

> If I want it to be open while
> higher up dirs are closed, what are the risks?  What would be some
> other "host-based access restrictions" I might lose?

If you wanted to deny particular hosts from accessing your whole site,
or allow only a specific set of hosts to access your site.

You are probably fine, you just need to knwo that no host-based access
restrictions will be active for that directory.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Un-password protecting a sub-directory

Posted by Hank <he...@gmail.com>.
> Satisfy Any
> Allow from all

That works great.. thanks.

> but this will also destroy any host-based access restrictions.

But only for that subdirectory, right?  If I want it to be open while
higher up dirs are closed, what are the risks?  What would be some
other "host-based access restrictions" I might lose?

-Hank

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Un-password protecting a sub-directory

Posted by Joshua Slive <js...@gmail.com>.
On 8/19/05, Hank <he...@gmail.com> wrote:
> I have a docroot site password protected in the usual manner in
> httpd.conf section of the virtual domain:
> 
> AuthUserFile /home/site/public/.htpasswd
> AuthName "What's the Secret Word?"
> AuthType Basic
> require valid-user
> 
> How can I un-protect a subdirectory of that site?  I've tried dozens
> of combinations of <directory>order allow,deny,etc .....in httpd.conf
> and the local .htaccess, but can't quite figure out the right
> combination.

Satisfy Any
Allow from all

but this will also destroy any host-based access restrictions.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org