Hi!

2016-04-05 14:00 GMT+02:00 Hildegard Meier <daku8...@gmx.de>:

> Thanks,
>
> that is correct, it was absoluteley not clear to me that having the module
> "access_compat" enabled and mixing old and new style would be absoluteley
> not supported.
>

Sorry to jump in again but this is not true in my opinion. As stated in my
previous email, the issue present itself only when a configuration merge
happens. I'll expand my previous example:

<Directory />
        AllowOverride None
        Require all denied
</Directory>

AND one of the following:

<Location /server-status>
        SetHandler server-status
        Order deny,allow
        Deny from all
        Allow From 127.0.0.1
</Location>

<Location /server-status>
        SetHandler server-status
        Require 127.0.0.1
</Location>

works without triggering any issue (tested it on httpd 2.4.10). The
following version instead triggers the error that you mentioned in your
original email:

<Directory />
        Options FollowSymLinks
        AllowOverride None
       Order Allow,Deny
</Directory>

<Location /server-status>
        SetHandler server-status
        Require 127.0.0.1
</Location>

[Tue Apr 05 16:37:18.023324 2016] [access_compat:error] [pid 3235:tid
140233374893824] [client 127.0.0.1:55979] AH01797: client denied by server
configuration: /var/www/html/server-status

So access_compact takes the precedence over authz_host in certain merge
config scenarios.


>
> Would be clearer, if the new style directives would lead to errors when
> having "access_compat" enabled, I guess.
>
> So I would suggest to make the 2.2->2.4 Upgrade guide (
> https://httpd.apache.org/docs/2.4/upgrading.html) clearer regarding this.
>

Definitely, I will probably use the above example to explain why the usage
of a mixed configuration can lead to issues.


>
> I disabled now the "access_compat" module and converted all the old style
> directives to the new style in one (big) step, and now everything is
> working as before.
>
> Initially, I wanted to do the conversion stepwise, and that let to the
> initial problem.
>
>

+1 for the migration, more 2.4 users are always welcomed :)

 Let me know your thoughts!

Regards,

Luca

Reply via email to