[users@httpd] question about Apache

[Peng Annie <An...@KONE.com>]

> Hi,
> 
> I know you from the professional list on apache web site. I have got a
> very urgent problem. Could you help me with it? The problem is as
> following:
> 
> The Apache2 is behind NETEGRITY firewall, NETEGRITY is taking care of the
> user authentication, after the checking, NETEGRITY put a HTTP header which
> called HTTP_SM_USER. Under Apache2's document room, there is a secret
> directory (for example $Apache_Document_Root/secretDir/) , which is only
> accessable by one user (for example this username is admin, it means
> HTTP_SM_USER=admin). What do I have to do with this security checking?
> 
> Thanks in advance & Best Regards,
> 
> Annie

This message has been checked by KONE Corporation for the presence of computer viruses

Re: [users@httpd] question about Apache

[Joshua Slive <jo...@slive.ca>]

On Tue, 19 Nov 2002, Peng Annie wrote:
> The Apache2 is behind NETEGRITY firewall, NETEGRITY is taking care of
> the user authentication, after the checking, NETEGRITY put a HTTP header
> which called HTTP_SM_USER. Under Apache2's document room, there is a
> secret directory (for example $Apache_Document_Root/secretDir/) , which
> is only accessable by one user (for example this username is admin, it
> means HTTP_SM_USER=admin). What do I have to do with this security
> checking?

See mod_setenvif or mod_rewrite.

In the first case, it will look something like:

SetEnvIf SM-USER ^admin$ got_admin
Order deny,allow
deny from all
allow from env=got_admin

I'm assuming that the real name of the HTTP header is SM-USER.

Joshua.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org