You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Al Caponi <do...@yahoo.com.sg> on 2002/10/24 05:00:10 UTC

[users@httpd] Alias and Files directive

Hi all,
I'm using Apache 1.3.26 on RH 7.2.

I have the following settings in my httpd.comf
############################
.....

<Files ~ "^\.ht|config.inc">
    Order allow,deny
    Deny from all
    Satisfy All
</Files>

...

Alias /test "/home/myUser/web"
<Location /test>
    Options -MultiViews -Indexes FollowSymlinks IncludesNoExec

    <Limit GET >
        Order allow,deny
        Allow from all
    </Limit>
</Location>
...
############################

But I can still access a file named config.inc under /home/myUser/web/
directory but not if the config.inc is under /usr/local/httpd/htdocs/.

How do I ensure that the Files directive settings applies to the destination
of the Alias directive? I.e. I want the config.inc to be inaccessible.

Many thanks,
Al.

__________________________________________________
Do You Yahoo!?
Great flight deals, travel info and prizes!
http://sg.travel.yahoo.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


[users@httpd] Authentication with LDAP

Posted by ha...@gmx.de.
 Hi all,

i'm using Apache 1.3.26.

I'd like to do userauthentication with LDAP (openldap 2.1.x).

A quick search with google showed my some moduls,
now i'd like to hear your opinion.

Which module does the task best ?

The module should have the following topics :

- ssl/tls
- access to more than one LDAP-server (in case of mainserver is down)
- user and group authentication

So people, which module meets this topics best ?

greets Harry

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
NEU: Mit GMX ins Internet. Rund um die Uhr für 1 ct/ Min. surfen!


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


RE: [users@httpd] Alias and Files directive

Posted by Al Caponi <do...@yahoo.com.sg>.
Apparently the "Allow from all" directive within <Limit> was overriding
whatever access control I had configured server-wide (<Files> directive in
this situation).
The latter took effect after I removed the Limit directive.


> -----Original Message-----
> From: Al Caponi [mailto:don_alcaponi@yahoo.com.sg]
> Sent: Thursday, October 24, 2002 11:00 AM
> To: users@httpd.apache.org
> Subject: [users@httpd] Alias and Files directive
>
>
> Hi all,
> I'm using Apache 1.3.26 on RH 7.2.
>
> I have the following settings in my httpd.comf
> ############################
> .....
>
> <Files ~ "^\.ht|config.inc">
>     Order allow,deny
>     Deny from all
>     Satisfy All
> </Files>
>
> ...
>
> Alias /test "/home/myUser/web"
> <Location /test>
>     Options -MultiViews -Indexes FollowSymlinks IncludesNoExec
>
>     <Limit GET >
>         Order allow,deny
>         Allow from all
>     </Limit>
> </Location>
> ...
> ############################
>
> But I can still access a file named config.inc under /home/myUser/web/
> directory but not if the config.inc is under /usr/local/httpd/htdocs/.
>
> How do I ensure that the Files directive settings applies to the
> destination
> of the Alias directive? I.e. I want the config.inc to be inaccessible.
>
> Many thanks,
> Al.
>
> __________________________________________________
> Do You Yahoo!?
> Great flight deals, travel info and prizes!
> http://sg.travel.yahoo.com
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org

__________________________________________________
Do You Yahoo!?
Great flight deals, travel info and prizes!
http://sg.travel.yahoo.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org