From owner-freebsd-isp  Thu Jan 28 11:06:37 1999
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id LAA26009
          for freebsd-isp-outgoing; Thu, 28 Jan 1999 11:06:37 -0800 (PST)
          (envelope-from owner-freebsd-isp@FreeBSD.ORG)
Received: from soho.london.virgin.net (soho.london.virgin.net [194.168.38.12])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA25993
          for <freebsd-isp@freebsd.org>; Thu, 28 Jan 1999 11:06:34 -0800 (PST)
          (envelope-from scot@london.virgin.net)
Received: from kirk.london.virgin.net (kirk.london.virgin.net [194.168.38.227])
          by soho.london.virgin.net (8.8.8+Sun/8.8.8) with ESMTP id TAA21767
          for <freebsd-isp@freebsd.org>; Thu, 28 Jan 1999 19:06:30 GMT
          (envelope-from scot@london.virgin.net)
Received: from localhost (scot@localhost)
	by kirk.london.virgin.net (8.9.1b+Sun/8.8.8) with ESMTP id TAA28331
	for <freebsd-isp@freebsd.org>; Thu, 28 Jan 1999 19:06:27 GMT
	(envelope-from scot@london.virgin.net)
X-Authentication-Warning: kirk.london.virgin.net: scot owned process doing -bs
Date: Thu, 28 Jan 1999 19:06:27 +0000 (GMT)
From: scot@poptart.org
X-Sender: scot@kirk.london.virgin.net
To: freebsd-isp@FreeBSD.ORG
Subject: Apache config
Message-ID: <Pine.SOL.4.05.9901281856510.27568-100000@kirk.london.virgin.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hi.

I know this is more of an Apache issue, but someone might know...

I want to allow access to a web server without authentication, from our
LAN, but require a username/password if accessed from else where.

I've done this using two location sections:

Alias /trusted "/www/htdocs"
Alias /open "/www/htdocs"

<Location /open/>
        AuthDBMGroupFile /www/auth/users
        AuthDBMUserFile  /www/auth/users
        AuthName "Web server"
        AuthType basic
        require valid-user
</Location>

<Location /trusted/>
        Order allow,deny
        allow from [some IP range...]
</Location>


This works fine most of the time.  The problem comes with access to files
protected by <Files> sections.  If I protect .htaccess files, then they
cannot be read using either URL.  But when I try something like:

<Files *.inc>
	Order allow,deny
	Deny from all
</Files>

... then I can read .inc files using /trusted/... as the base URL, but not
with /open/... as the base. [obviously, I don't want to be able to access
.inc files from anywhere...]

Has anyone else seen this behaviour.. or have I missed something obvious?
Server is Apache/1.3.4.


Thanks.

Scot Elliott



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message