Re: svn commit: r667651 - /httpd/httpd/trunk/modules/aaa/mod_authz_core.c

[David Shane Holden]

Thanks for the link and description Brad.  It makes sense now.  Explains 
why the default config was giving me a 403.  The 'Require all denied' 
was being inherited from the root directory config.  Would it be 
appropriate to add something like the attached patched to httpd.conf.in?

Index: docs/conf/httpd.conf.in
===================================================================
--- docs/conf/httpd.conf.in     (revision 675831)
+++ docs/conf/httpd.conf.in     (working copy)
@@ -155,6 +155,12 @@
     #
     Require all granted
 
+    #
+    # AuthzMergeRules controls whether this directory inherits
+    # its parents authorization rules.  By turning it 'Off'
+    # we don't include the parents 'Require all denied` rule.
+    #
+    AuthzMergeRules Off
 </Directory>
 
 #