Do you think this is caused Location directive used for a location and a sublocation?
I tested on a fresh apache. The <directory> directive works as expected (i.e. only user1, user2 and user3 can access bbb/) (But still I am prompted for password even if I do not access bbb/): <Directory /usr/local/apache2/htdocs/aaa> .... Require valid-user .... </Directory> <Directory /usr/local/apache2/htdocs/aaa/bbb> .... Require user user1 user2 ..... </Directory> thanks --- On Thu, 20/8/09, Eric Covener <cove...@gmail.com> wrote: > From: Eric Covener <cove...@gmail.com> > Subject: Re: [us...@httpd] 'require' keyword > To: users@httpd.apache.org, a...@ice-sa.com > Date: Thursday, 20 August, 2009, 6:21 PM > On Thu, Aug 20, 2009 at 10:55 AM, > André Warnier<a...@ice-sa.com> > wrote: > > Melanie Pfefer wrote: > > ... > > > >> Require user user1 > >> Require user user2 > > > > Melanie, > > I believe you may be caught by the fact that the two > lines above actually > > express /two/ requirements, cumulatively, which cannot > be both met at the > > same time. > > > > Try this : > > Require user user1 user2 > > This should not result in a functional change. > Multiple requires are > OR'ed, even when on different Require ... lines or > from different > modules. > > > Require user user1 > > Require user user2 > > Satisfy any > > Satisfy only changes how access control and authorization > interact, > not how multiple authorization directives interact. > > -- > Eric Covener > cove...@gmail.com > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP > Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more > info. > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > " from the digest: users-digest-unsubscr...@httpd.apache..org > For additional commands, e-mail: users-h...@httpd.apache.org > > Send instant messages to your online friends http://uk.messenger.yahoo.com --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
