>Number:         1675
>Category:       mod_userdir
>Synopsis:       Peculiar <Directory> results
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Wed Jan 14 20:50:00 PST 1998
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.3b3
>Environment:
Win95, using precompiled NT binary
>Description:
When the server config files contain the following definitions:

-----
<Directory />
Options None
AllowOverride None
order deny,allow
deny from all
allow from none
</Directory>

UserDir users/*/public_html

<Directory /apache/users/*/public_html>
AllowOverride Indexes AuthConfig
Options Indexes IncludesNOEXEC
order allow,deny
allow from all
deny from none
</Directory>
-----

every access to /~test/ (for which c:\apache\users\test\public_html *did* exist)
resulted in a 403 Forbidden error, and the following line in the ErrorLog:
-----
[Thu Jan 15 12:22:46 1998] [error] Client denied by server configuration: c:/apa
che\users\test\public_html\
-----
>How-To-Repeat:
Try the above code (or similar) in your own setup.
>Fix:
When I removed the <Directory /> section, the /~test/ directory loaded 
correctly.
However all the clauses in the <Directory /> section should have been overridden
by those in the <Directory /apache/users/*/public_html> section... and that 
entry in the ErrorLog looks a bit iffy, using backslashes instead of forward
ones.
%0
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]



Reply via email to