Re: .htaccess not processed with client authentication

James Barwick Fri, 08 Mar 2002 21:35:08 -0800

Mads Toftum wrote:

On Fri, Mar 08, 2002 at 09:46:42AM +0800, Angus Lee wrote:

Hi,

Try to put all these directives in httpd.conf file and
also try to put the SSLRequire directive as follows

But I want each user to set their client authentication access control to their directory.

Is there any bug with previous versions of mod_ssl which would make client authentication fails?

Not in any of the recent versions ... but since you seem to be wanting
.htaccess (I missed the beginning of this question) - have you made sure
that AllowOverride allows the usage of .htaccess within those directories?
http://httpd.apache.org/docs/mod/core.html#allowoverride

vh

Mads Toftum

I FOUND A BUG!!!!!!!!!!!!!! At least I think I did...

If you have the following

http://www.virtual1.com/directory/securedirectory
http://www.virtual2.com/directory/securedirectory

and on the file system virtual1.com DocumeentRoot is
/usr/local/virtual1/directory/securedirectory
and virtual2.com DocumentRoot is
    /usr/local/virtual2/directory/securedirectory --> /usr/local/virtual1/directory/securdierectory

the .htaccess file in /usr/local/virtual1/directory/securedirectory will NOT be processed for virtual2.com.
I tried this MANY MANY MANY times. Apache 1.3.22. The .htaccess file is not honored via a sym-link. Go figure...

Don't dare tell me I'm wrong...this was my experience. If it works for you, great...this is just something to watch out for.
I had to remove my Symlinks and copy directory contents to make virtual2.com work.

I went up and down my httpd.conf file. BOTH virtual domains work correctly UNTIL I make a directory shared.
There was a <directory> entry in my httpd.conf for
<directory /usr/local/virtual1>
    </directory>
<directory /user/local/virtual2>
<directory>
with allow overrides options.

I did NOT try
/usr/local/shared/securedirectory
        /usr/local/virtual1/directory/securedirectory --> /usr/local/shared/securedirectory
/usr/local/virtual2/directory/securedirectory --> /usr/local/shared/securedirectory

I'd be interesting, however, to see what happens. My suspicion is that the .htaccess file won't be processed because of the
symlink.

I suspect you will also need a /usr/local/shared/securedirectory directory section with allow overrides...but really you shouldn't
since the followsymlink options should honor the options of the "Parent" directory. IMHO.

JDB

--
Signature


James Barwick VP Technology	ジェームス・バーウィックバイス・プレジデント・テクノロジー
Sentient Health Japan, KK Aoyama Palacio Tower 11F 3-6-7 Kita-Aoyama Minatu-ku, Tokyo 107-0061	センティエント・ヘルス・ジャパン株式会社〒107-0061 東京都港区青山3-6-7 青山パラシオタワー 11階
Tel: (03) 5778-7524 Fax: (03) 5778-7676 mailto:[EMAIL PROTECTED] http://www.sentienthealth.com	Tel: (03) 5778-7524 Fax: (03) 5778-7676 mailto:[EMAIL PROTECTED] http://www.sentienthealth.com

Re: .htaccess not processed with client authentication

Reply via email to