The following reply was made to PR mod_auth-any/3182; it has been noted by
GNATS.
From: "Valerio VALDEZ Paolini" <[EMAIL PROTECTED]>
To: Marc Slemko <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: mod_auth-any/3182: Authorization skipped in ScriptAlias-ed
directory
Date: Sun, 11 Oct 1998 22:34:44 +0200
Hello Marc,
please note that:
1. the directory /cgi-bin/ isn't protected, only subdirs /cgi-bin/admin/
and /cgi-bin/servizi/ are protected; I saw the problem in the two subdirs
and not in the parent dir.
2. there is no .htaccess file that overrides any restriction.
Thank you very much for your attention.
Here are my configs:
----------------------------
SRM.CONF
----------------------------
DocumentRoot /home/httpd/html
UserDir public_html/ /home/users/
DirectoryIndex home.shtml home.html home.htm index.shtml index.html index.htm
FancyIndexing on
ReadmeName README
HeaderName HEADER
IndexIgnore */.??* *~ *# */HEADER* */README* */RCS
AccessFileName .htaccess
#
# Directory dove possono essere eseguiti gli script cgi
#
ScriptAlias /cgi-bin/ /home/httpd/cgi-bin/
#
# Documenti html mostrati in caso di errore
#
ErrorDocument 400 /errori/400.shtml
ErrorDocument 401 /errori/401.shtml
ErrorDocument 402 /errori/402.shtml
ErrorDocument 403 /errori/403.shtml
ErrorDocument 404 /errori/404.shtml
ErrorDocument 405 /errori/405.shtml
ErrorDocument 500 /errori/500.shtml
ErrorDocument 501 /errori/501.shtml
ErrorDocument 503 /errori/503.shtml
-----------------------
ACCESS.CONF
-----------------------
#
# disabilitiamo qualunque accesso alla root dir
#
<Directory />
Options None
IndexOptions FancyIndexing ScanHTMLTitles
AllowOverride None
Order deny,allow
Deny from all
</Directory>
#
# concediamo l'accesso alle home degli utenti
#
<Directory /home/users/>
Options +Indexes +Includes
AllowOverride None
Order deny,allow
Allow from all
</Directory>
#
# definiamo chi puo' accedere agli script cgi generali
#
<Location /cgi-bin>
Options None
AllowOverride None
Order allow,deny
allow from all
</Location>
#
# definiamo chi puo' accedere agli script cgi particolari
#
<Location /cgi-bin/admin>
Options -Indexes +Includes
Order deny,allow
deny from all
AuthType Basic
AuthUserFile /home/httpd/etc/passwd
AuthGroupFile /home/httpd/etc/group
AuthName "CariStudenti"
Require group staff
satisfy any
</Location>
<Location /cgi-bin/servizi>
Options -Indexes +Includes
deny from all
allow from cs.unibo.it
AuthType Basic
AuthUserFile /home/httpd/etc/passwd
AuthName "CariStudenti"
require valid-user
satisfy any
</Location>
#
# diamo l'accesso al web e alle sue sezioni
#
<Location />
Options +Indexes +Includes +FollowSymLinks
AllowOverride None
order allow,deny
allow from all
</Location>
<Location /admin>
Options +Indexes +Includes +FollowSymLinks
deny from all
allow from cs.unibo.it
AuthType Basic
AuthUserFile /home/httpd/etc/passwd
AuthGroupFile /home/httpd/etc/group
AuthName "CariStudenti"
Require group staff amministratori
satisfy any
</Location>
<Location /servizi>
Options +Indexes +Includes +FollowSymLinks
deny from all
allow from cs.unibo.it
AuthType Basic
AuthUserFile /home/httpd/etc/passwd
AuthName "CariStudenti"
require valid-user
satisfy any
</Location>
--------------------------------------------------------------------------
Valerio Paolini, studente del Corso di Laurea in Informatica della
Facolta' di Scienze MM.FF.NN. dell'Universita' di Bologna, Italia.
--------------------------------------------------------------------------
[EMAIL PROTECTED] [EMAIL PROTECTED]
caristudenti.cs.unibo.it/~paolini (webmaster)
--------------------------------------------------------------------------
Via Matteotti 22, 40100 Bologna BO, Italia, tel. +39.051.361581
--------------------------------------------------------------------------
