You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Kyle <ky...@ccidomain.com> on 2003/05/16 14:56:07 UTC

[users@httpd] Require valid-user on alias directory problem

I have a domain that uses .htaccess to require a password to gain access 
to the entire web site.

Recently I decided to allow access to the RedHat installed module 
documentation by adding this to my virtual host definition:

    Alias /doc/ /usr/share/doc/
    <Directory /doc>
       order deny,allow
       Allow from all
       Require valid-user
       Options Indexes FollowSymLinks
    </Directory>

When I log into the web site I give a name and password to gain access. 
  I can surf to any page on the web site except for the ones in the 
/doc/ directory.  Those all give me a 403 Forbidden message (error).

I also tried replacing the <Directory> directive with <Location>, but 
had similar problems.

Can anybody suggest how I might modify the above snippet to require a 
valid user that has already logged in?

I am using Apache 1.3.27 on RedHat 7.3.  Thanks in advance.

-Kyle


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Require valid-user on alias directory problem

Posted by Thomas Strike <st...@pacbell.net>.
----- Original Message -----
From: "Kyle" <ky...@ccidomain.com>

> When I log into the web site I give a name and password to gain access.
>   I can surf to any page on the web site except for the ones in the
> /doc/ directory.  Those all give me a 403 Forbidden message (error).

Also,  make sure that the whole "/usr/local/doc" tree allows all users to
search
the tree and read the files in the "/doc" directory and there are no
.htaccess files
overriding your config directives.

Cheers,
Tom S.
http://www.SleepyValley.net/me



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Require valid-user on alias directory problem

Posted by Joshua Slive <jo...@slive.ca>.
On Fri, 16 May 2003, Kyle wrote:

> Should I use <Location> instead?
>
>      Alias /doc/ /usr/share/doc/
>      <Location /doc>

It is always better to use <Directory> to protect things in the
filesystem, because <Location> maps to URLs, not filesystems, and
therefore can be circumvented when multiple URLs map to the same
file-system location.  See:
http://httpd.apache.org/docs-2.0/sections.html#file-and-web

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Require valid-user on alias directory problem

Posted by Kyle <ky...@ccidomain.com>.
Should I use <Location> instead?

     Alias /doc/ /usr/share/doc/
     <Location /doc>

-Kyle

Joshua Slive wrote:
> On Fri, 16 May 2003, Kyle wrote:
> 
>>    Alias /doc/ /usr/share/doc/
>>    <Directory /doc>
> 
> 
> This is wrong.  <Directory> takes a file-system path, as in <Directory
> /usr/share/doc>.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Require valid-user on alias directory problem

Posted by Joshua Slive <jo...@slive.ca>.
On Fri, 16 May 2003, Kyle wrote:
>     Alias /doc/ /usr/share/doc/
>     <Directory /doc>

This is wrong.  <Directory> takes a file-system path, as in <Directory
/usr/share/doc>.

> When I log into the web site I give a name and password to gain access.
>   I can surf to any page on the web site except for the ones in the
> /doc/ directory.  Those all give me a 403 Forbidden message (error).

You need to check the error log.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org