Hi!
2016-04-05 14:00 GMT+02:00 Hildegard Meier <[email protected]>:
> Thanks,
>
> that is correct, it was absoluteley not clear to me that having the module
> "access_compat" enabled and mixing old and new style would be absoluteley
> not supported.
>
Sorry to jump in again but this is not true in my opinion. As stated in my
previous email, the issue present itself only when a configuration merge
happens. I'll expand my previous example:
<Directory />
AllowOverride None
Require all denied
</Directory>
AND one of the following:
<Location /server-status>
SetHandler server-status
Order deny,allow
Deny from all
Allow From 127.0.0.1
</Location>
<Location /server-status>
SetHandler server-status
Require 127.0.0.1
</Location>
works without triggering any issue (tested it on httpd 2.4.10). The
following version instead triggers the error that you mentioned in your
original email:
<Directory />
Options FollowSymLinks
AllowOverride None
Order Allow,Deny
</Directory>
<Location /server-status>
SetHandler server-status
Require 127.0.0.1
</Location>
[Tue Apr 05 16:37:18.023324 2016] [access_compat:error] [pid 3235:tid
140233374893824] [client 127.0.0.1:55979] AH01797: client denied by server
configuration: /var/www/html/server-status
So access_compact takes the precedence over authz_host in certain merge
config scenarios.
>
> Would be clearer, if the new style directives would lead to errors when
> having "access_compat" enabled, I guess.
>
> So I would suggest to make the 2.2->2.4 Upgrade guide (
> https://httpd.apache.org/docs/2.4/upgrading.html) clearer regarding this.
>
Definitely, I will probably use the above example to explain why the usage
of a mixed configuration can lead to issues.
>
> I disabled now the "access_compat" module and converted all the old style
> directives to the new style in one (big) step, and now everything is
> working as before.
>
> Initially, I wanted to do the conversion stepwise, and that let to the
> initial problem.
>
>
+1 for the migration, more 2.4 users are always welcomed :)
Let me know your thoughts!
Regards,
Luca
