Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [mod-auth]

40 questions
0
votes
1 answer

Protecting directories on a Apache web server by directory name string match?

Using Apache, is there a way to protect all items beneath directory names that contain a certain string? For example, if I have this structure: wwwroot--> project1--> docs--> xls doc private_docs--> txt …
djangofan
  • 4,182
  • 10
  • 46
  • 59
0
votes
1 answer

Htaccess auth, based on server, not client information

In a current project we have separate development and production. The code on both is in single SVN repository. The problem lies in the access to the development environment from outside. Let's say we have two separate servers for prod and…
bisko
  • 103
  • 3
0
votes
1 answer

PAM authentication failure with HTTP Basic auth and mod_auth_pam on Apache

I'm trying to set up HTTP Basic auth with PAM on Apache (running on Ubuntu 10.04). I have a VirtualHost setup with SSL and the options below for HTTP Basic authentication: AuthBasicAuthoritative off AuthPAM_Enabled On AuthType Basic AuthName…
Andrei
  • 463
  • 2
  • 5
  • 12
0
votes
1 answer

mod_auth wrong password authentication?

i have a server running apache2 in a debian lenny. something strange happen with the folders protected by .htaccess. basically, if you put a wrong password but formed by the_correct_password + _more_chars it let you enter. if you put the incorrect…
shadow_of__soul
  • 376
  • 1
  • 6
  • 16
0
votes
1 answer

apache authentication

I'm trying to set up a local webserver on my network. I want to be able to be able to access the webserver from any machine inside my network w/out authenticating. and two extra domains need access to it w/out authenticating. Everyone else I…
veilig
  • 161
  • 6
0
votes
0 answers

The ModSecurity WAF used with the authentication mode

I have two Apache VirtualHost allowing access to lists of files. The first directory or server is accessible without authentication. On the other hand, the second has the native Apache authentication mode called mod_authn_dbd. I configured the…
Lynow
  • 1
  • 1
  • 2
0
votes
0 answers

Apache mod_auth_form preserve http method

I'm using the apache auth type form with the Inline Login. AuthName "Intranet" AuthType form AuthFormProvider ldap AuthLDAPUrl…
jira
  • 109
  • 4
0
votes
1 answer

Apache only when HTTPS

I'd like to use Basic Auth only when HTTPS is used. Having a .htaccess like this the user must enter password twice RewriteEngine On RewriteOptions Inherit # Rewrite to HTTPS (except for let's encrypt) RewriteCond %{HTTPS} off RewriteCond…
Florian
  • 101
  • 1
0
votes
0 answers

Apache 2.4 no auth config works in VirtualHost

I'm setting up a brand new server — I literally just spun up an AWS EC2 instance, did a fresh install of apache and mod_ssl, and have close to the simplest of configs. Apache appears to ignore any auth configuration (including LogLevel) in…
philolegein
  • 409
  • 4
  • 12
0
votes
1 answer

Securing access to certain pages/directories with Apache behind a Varnish cache?

I have a public website with some URLs/directories which are for private/internal use only. These private areas can only be accessed via certain IP addresses or with a known username/password. Currently I achieve this via .htaccess files like…
WackGet
  • 217
  • 4
  • 12
1 2
3