You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jean-Yves Avenard <jy...@gmail.com> on 2007/11/12 11:52:46 UTC

[users@httpd] Question about Authentication in sub-folders

Hi

On our private web server, every single page requires authentication.

So I've added something like

<directory />
        AuthzLDAPAuthoritative on
        AuthBasicProvider       ldap
	AuthType basic
...
</directory>

which works just fine.

However, now I would like to disable authentication for a sub-folder
so anyone can see it.

I haven't found an easy to turn off authentication for a specific
folder if the parent folder requires authentication.

I'm sure this is something that can be easily done. But I haven't
found my way around the documentation this time.

Any help would be greatly appreciated.

Thank you
Jean-Yves

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Question about Authentication in sub-folders

Posted by Jean-Yves Avenard <jy...@gmail.com>.
On Nov 12, 2007 9:57 PM, Vincent Bray <no...@gmail.com> wrote:
> On 12/11/2007, Jean-Yves Avenard <jy...@gmail.com> wrote:
> > However, now I would like to disable authentication for a sub-folder
> > so anyone can see it.
>
> http://wiki.apache.org/httpd/BypassAuthenticationOrAuthorizationRequirements
> http://httpd.apache.org/docs/2.2/mod/core.html#satisfy

Thank you heaps.

I swear I've been looking for this for several hours !

Now the problem with those docs, is that if you don't know the name of
the directive already, you're kind of stuck !

Jean-Yves

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Question about Authentication in sub-folders

Posted by Vincent Bray <no...@gmail.com>.
On 12/11/2007, Jean-Yves Avenard <jy...@gmail.com> wrote:
> However, now I would like to disable authentication for a sub-folder
> so anyone can see it.

http://wiki.apache.org/httpd/BypassAuthenticationOrAuthorizationRequirements
http://httpd.apache.org/docs/2.2/mod/core.html#satisfy

:-)

-- 
noodl

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


RE: [users@httpd] Question about Authentication in sub-folders

Posted by Luis Moreira <lu...@esi.pt>.
>From the DOCS (you don't say what version you are running).
Does this help ?


Removing controls in subdirectories
The following example shows how to use the Satisfy directive to disable
access controls in a subdirectory of a protected directory. This technique
should be used with caution, because it will also disable any access
controls imposed by mod_authz_host.

<Directory /path/to/protected/>

Require user david

</Directory>
<Directory /path/to/protected/unprotected>

# All access controls and authentication are disabled
# in this directory
Satisfy Any
Allow from all

</Directory>



Luis Moreira 
Analista 
E. S. Informática 
Gestão de Sistemas, Qualidade e Produção
Comunicação de Dados e Segurança
Rua Fraternidade Operária 5 
2799-501 Carnaxide 
Tel: +351 21 416 82 88 (extensão 26 6510)
Fax: +351 21 416 80 92 
Email : luis.moreira@esi.pt 
URL: http://www.esi.pt 
 
-----Original Message-----
From: Jean-Yves Avenard [mailto:jyavenard@gmail.com] 
Sent: segunda-feira, 12 de Novembro de 2007 10:53
To: users@httpd.apache.org
Subject: [users@httpd] Question about Authentication in sub-folders

Hi

On our private web server, every single page requires authentication.

So I've added something like

<directory />
        AuthzLDAPAuthoritative on
        AuthBasicProvider       ldap
	AuthType basic
...
</directory>

which works just fine.

However, now I would like to disable authentication for a sub-folder
so anyone can see it.

I haven't found an easy to turn off authentication for a specific
folder if the parent folder requires authentication.

I'm sure this is something that can be easily done. But I haven't
found my way around the documentation this time.

Any help would be greatly appreciated.

Thank you
Jean-Yves

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org