Questions tagged [mod-auth]
39 questions
0
votes
1 answer
Protecting directories on a Apache web server by directory name string match?
Using Apache, is there a way to protect all items beneath directory names that contain a certain string?
For example, if I have this structure:
wwwroot-->
project1-->
docs-->
xls
doc
private_docs-->
txt
…
![](../../users/profiles/9227.webp)
djangofan
- 4,172
- 10
- 45
- 59
0
votes
1 answer
Htaccess auth, based on server, not client information
In a current project we have separate development and production. The code on both is in single SVN repository.
The problem lies in the access to the development environment from outside. Let's say we have two separate servers for prod and…
![](../../users/profiles/68715.webp)
bisko
- 103
- 3
0
votes
1 answer
PAM authentication failure with HTTP Basic auth and mod_auth_pam on Apache
I'm trying to set up HTTP Basic auth with PAM on Apache (running on Ubuntu 10.04).
I have a VirtualHost setup with SSL and the options below for HTTP Basic authentication:
AuthBasicAuthoritative off
AuthPAM_Enabled On
AuthType Basic
AuthName…
![](../../users/profiles/45967.webp)
Andrei
- 463
- 2
- 5
- 12
0
votes
1 answer
mod_auth wrong password authentication?
i have a server running apache2 in a debian lenny.
something strange happen with the folders protected by .htaccess.
basically, if you put a wrong password but formed by the_correct_password + _more_chars it let you enter. if you put the incorrect…
![](../../users/profiles/46260.webp)
shadow_of__soul
- 376
- 1
- 6
- 16
0
votes
1 answer
apache authentication
I'm trying to set up a local webserver on my network. I want to be able to be able to access the webserver from any machine inside my network w/out authenticating. and two extra domains need access to it w/out authenticating. Everyone else I…
![](../../users/profiles/80763.webp)
veilig
- 161
- 5
0
votes
0 answers
Apache mod_auth_form preserve http method
I'm using the apache auth type form with the Inline Login.
AuthName "Intranet"
AuthType form
AuthFormProvider ldap
AuthLDAPUrl…
![](../../users/profiles/130684.webp)
jira
- 109
- 4
0
votes
1 answer
Apache only when HTTPS
I'd like to use Basic Auth only when HTTPS is used. Having a .htaccess like this the user must enter password twice
RewriteEngine On
RewriteOptions Inherit
# Rewrite to HTTPS (except for let's encrypt)
RewriteCond %{HTTPS} off
RewriteCond…
![](../../users/profiles/424240.webp)
Florian
- 1
- 1
0
votes
0 answers
Apache 2.4 no auth config works in VirtualHost
I'm setting up a brand new server — I literally just spun up an AWS EC2 instance, did a fresh install of apache and mod_ssl, and have close to the simplest of configs. Apache appears to ignore any auth configuration (including LogLevel) in…
![](../../users/profiles/494645.webp)
philolegein
- 369
- 3
- 9
0
votes
1 answer
Securing access to certain pages/directories with Apache behind a Varnish cache?
I have a public website with some URLs/directories which are for private/internal use only. These private areas can only be accessed via certain IP addresses or with a known username/password.
Currently I achieve this via .htaccess files like…
![](../../users/profiles/188218.webp)
WackGet
- 187
- 1
- 12