[users@httpd] mod_rewrite and mod_auth ordering issue

[Stephen Shirley <di...@skynet.ie>]

Morning,
	I want to use mod_auth for apache2 to restrict access to a directory on
a website. I also want to use mod_rewrite to force such authentication
to be over https. I have the following in dir/.htaccess:

	RewriteEngine On
	RewriteCond %{HTTPS} !^on$
	RewriteRule ^(.*)$ https://%{HTTP_HOST}/dir/$1

	AuthType Basic
	AuthName "private thingum"
	require user username

However, what happens is that i'm prompted for the username and password
before i'm redirected to ssl, which is useless. Is there any way i can
get the rewrite to happen before the auth? Thanks,

Steve


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

[users@httpd] Re: mod_rewrite and mod_auth ordering issue

[Joost de Heer <sa...@xs4all.nl>]

Stephen Shirley said:
> Morning,
> 	I want to use mod_auth for apache2 to restrict access to a directory on
> a website. I also want to use mod_rewrite to force such authentication
> to be over https.

One way to do this: use a RedirectPermanent to the https-site in the
http-vhost, and put the authentication part in the https-vhost.

Joost


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org