Neil, This is what I did on mod_auth_cas. However , this allows everyone in with a challenge.
I cannot use .htaccess because we have to encrypt all passwords, internal or not. <Location /var/www/html> SetEnvIf Request_URI "(/var/www/html/index.php)" allow Authtype CAS require valid-user CASAuthNHeader CAS_USER Order allow,deny Allow from env=allow Satisfy any </Location> Thank You, Chris Cheltenham SwainTechs / HHS Cell# 267-586-2369 From: Neil Sabol [mailto:[email protected]] Sent: Thursday, April 23, 2015 11:20 AM To: [email protected] Subject: RE:[cas-user] mod_auth_cas Hello Chris, We use RHEL and mod_auth_cas but use 1 of these 2 approaches to accomplish this (both with Satisfy any): SetEnvIf directive Files directive (or FilesMatch for multiple files) After your CAS auth directives (in either .htaccess or main apache config): SetEnvIf Request_URI "(directory/filename1\.xxx)$" allow SetEnvIf Request_URI "(directory/filename2\.xxx)$" allow SetEnvIf Request_URI "(directory/filename3\.xxx)$" allow Order allow,deny Allow from env=allow Satisfy any After your CAS auth directives (in either .htaccess or main apache config): <Files filename.xxx> order allow,deny allow from all satisfy any </Files> Let me know if that helps. Thanks, -Neil From: Chris Cheltenham [mailto:[email protected]] Sent: Thursday, April 23, 2015 8:20 AM To: [email protected]<mailto:[email protected]> Subject: [cas-user] mod_auth_cas Hello Everyone, Does anyone know how to in CentOs using mod_auth_cas to protect a directory, how to EXCLUDE certain files within that protected directory? Thank You, Chris Cheltenham SwainTechs / HHS Cell# 267-586-2369 -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
