On Thu, Jan 15, 2009 at 8:51 AM, Jan Hoskens <jan.hosk...@gmail.com> wrote:
> Hi all,
>
> After some digging in the Apache docs I managed to come up with the
> following configuration snippet to secure my whole server excluding one
> directory:
>
> <Location /proxyserver>
>  Order deny,allow
>  Allow from all
>  Satisfy any
>  ProxyPass http://someproxyserver.com
>  ProxyPassReverse http://someproxyserver.com
> </Location>
>
> <Location />
>  AuthType Basic
>  AuthName "myserver"
>  AuthUserFile /path/to/userfile
>  AuthGroupFile /path/to/groupfile
>  Require group mygroup
> </Location>
>
> Now for some reason the "/proxyserver" location still asks for a
> user/password, but allows entry nonetheless. I get a pop-up three times
> which I can just cancel and then I can access the page.
>
> Any idea how to avoid this? I need to access that location
> programmatically and I get confronted with an authorization which I
> don't want to handle in my code...
>
> Kind Regards,
> Jan
>

The only thing I can think of is reversing the orders of the Location
tags, i.e., have the more global one come first.

-Brian

-- 
Feel free to contact me using PGP Encryption:
Key Id: 0x3AA70848
Available from: http://pgp.mit.edu/

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to