Re: [users@httpd] Filename Access

[ht...@karsites.net]

I think I have isolated the problem now.

# THIS IS CAUSING THE PROBLEM WITH <Files>...</Files>
#
# remove the CONNECT bug # 
http://bugs.php.net/bug.php?id=19113
#
#<Location />
#  <Limit CONNECT>
#  Order deny,allow
#  Deny from all
#  </Limit>
#</Location>


When I un-comment the above, the error appears. If I 
comment out the above, the error goes away. 

If anyone else on the list is using this patch, maybe they 
need to check out their configuration too. It's nice to be 
able to configure apache directories now, and know what 
behaviour to expect.

Many thanks to Joe Knall for all his suggestions and help, 
from suse-security list and by sending me a copy of his 
httpd.conf file in the early hours!

Happy new year to everyone.

Keith Roberts


On Thu, 29 Dec 2005, Jim Walls wrote:

> To: users@httpd.apache.org
> From: Jim Walls <k6...@earthlink.net>
> Subject: Re: [users@httpd] Filename Access
> 
> Sean Davis wrote:
> 
> > On 12/29/05 2:26 PM, "httpd2@karsites.net" <ht...@karsites.net>
> > wrote:
snip
> > 
> > I certainly don't see why that is the case.  I hope someone else can
> > answer
> > your question so that I can learn as well.
> 
> I have a restricted directory on one of my sites and I looked at my config
> to see what I have listed.  I also tried the same test that you did on my
> site.  When I try to access the directory, I get a request for  a logon
> and password (as expected).  When I entered an invalid password, I gave me
> the Authorization Required page.  I then tried to directly access a file
> in that directory and got exactly the same response.  Lastly I verified
> that I was getting the filename right by entering the correct password
> when prompted and was able to access the file.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org