Disabling auth

[Dirk-Willem van Gulik <di...@jrc.it>]

If you have

	Docroot /somewhere
	<Directory /somewhere/xxx>
	AuthType Basic
	require valid-user
	</Directory>
	
But then wish to map out a single file or URL from that
protected space, i.e. with something like

	<Location /test.xx>
	?
	</Location>

	<File /somewhere/test.xx>
	?
	</File>

There seems to be no way to switch off the 'Auth' required 'valid-user' you 
defined in the directory setting. Obviously you can use Rewrite or Alias to
map it to some other directory tree, but I could not see a clean way to switch
auth off.

Am I way wrong and missing something ? Before I race off and implement a
patch to do either 'AuthType NONE' or add a no-require directive.

Dw

Re: Disabling auth

[Dirk-Willem van Gulik <di...@jrc.it>]

Marc Slemko wrote:
 
> On Wed, 20 Jan 1999, Ben Laurie wrote:
 
> > You can do it with "allow from any" (or is it all?) and the directive
> > I've forgotten that lets that override "require".

> Satisfy any

Hmm, you are right. If I strictly limit myself to mod_auth* things,
that works. Hmm, so it must be mod_rewrite or mod_ssl tripping me.

Txs,

Dw.

Re: Disabling auth

[Marc Slemko <ma...@worldgate.com>]

On Wed, 20 Jan 1999, Ben Laurie wrote:

> You can do it with "allow from any" (or is it all?) and the directive
> I've forgotten that lets that override "require".

Satisfy any

Re: Disabling auth

[Ben Laurie <be...@algroup.co.uk>]

Dirk-Willem van Gulik wrote:
> 
> If you have
> 
>         Docroot /somewhere
>         <Directory /somewhere/xxx>
>         AuthType Basic
>         require valid-user
>         </Directory>
> 
> But then wish to map out a single file or URL from that
> protected space, i.e. with something like
> 
>         <Location /test.xx>
>         ?
>         </Location>
> 
>         <File /somewhere/test.xx>
>         ?
>         </File>
> 
> There seems to be no way to switch off the 'Auth' required 'valid-user' you
> defined in the directory setting. Obviously you can use Rewrite or Alias to
> map it to some other directory tree, but I could not see a clean way to switch
> auth off.
> 
> Am I way wrong and missing something ? Before I race off and implement a
> patch to do either 'AuthType NONE' or add a no-require directive.

You can do it with "allow from any" (or is it all?) and the directive
I've forgotten that lets that override "require".

I'll figure out what I really mean if that isn't enough of a clue.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
     - Indira Gandhi