Apache 1.3.x directive question

pll at lanminds.com pll at lanminds.com
Wed May 28 11:39:05 EDT 2003


In a message dated: 28 May 2003 08:56:58 EDT
Greg Rundlett said:

>You are correct.
[...snip...]

>I would suggest taking the trailing slash off the admin directory
>directive.
>
><Directory /admin>
>
>Hope that helps.

So did I :(

Unfortunately, the ACLs as pertain to the DocumentRoot are applied 
and matched rather than those which pertain the the /admin/ 
directory, even with the Directory clause like this:

    Alias /admin /tmp
    <Directory /admin>
        Options FollowSymLinks ExecCGI
        AllowOverride None
        AuthType Basic
        AuthName "Paul's Secret Admin Area"
        AuthLDAPAuthoritative On
        AuthLDAPURL ldap://localhost/cn=Admins,dc=EMC,dc=Centera
        AuthLDAPGroupAttributeIsDN On
        Require group cn=Admins,dc=EMC,dc=Centera
        Satisfy All
</Directory>


Interestingly, when I connect to the URL http://localhost/admin
it prompts me for a username/password pair (though specifies the 
AuthName as specified for DocumentRoot).  I enter a user who is 
specifically *not* in the LDAP 'Admin' group, and it fails, prompting 
me again for valid creds for exactly the same AuthName.  Yet when I 
enter exactly the same creds in again, if succeeds for some reason.

Any ideas?

Thanks,
-- 

Seeya,
Paul
--
Key fingerprint = 1660 FECC 5D21 D286 F853  E808 BB07 9239 53F1 28EE

	It may look like I'm just sitting here doing nothing,
   but I'm really actively waiting for all my problems to go away.

	 If you're not having fun, you're not doing it right!





More information about the gnhlug-discuss mailing list