Netware Webserver - more info Re: Apache not enforcing security across servers

This is Interesting: Free IT Magazines  
Home > Archive > Netware Webserver > September 2005 > more info Re: Apache not enforcing security across servers





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author more info Re: Apache not enforcing security across servers
Bob Newlin

2005-09-01, 5:49 pm

The relevant parts of the config file follow. Names have been cahnged
to protect the server. When alias Bob is used which refers to a
directory on the Apache server, the server challenges for name and
passwords. When alias bob is used on the remote server, there is no
challenge, the page is delivered to anyone. What am I missing?

NameVirtualHost *:80
<VirtualHost *:80>
ServerName www.fred.duke.edu
ServerAlias "*.fred.duke.edu"
DocumentRoot "Stuff:/webtest"
Alias /bob "stuff:/bobtest"
<Directory "stuff:/bobtest">
Order deny,allow
Allow from all
AuthType Basic
AuthName LDAP_Protected_Site
AuthLDAPDereferenceAliases never
AuthLDAPURL
ldap://152.3.231.10/ou=provost,ou=acad,o=university?cn?sub?(objectClass=inetOrgPerson)
require user bob
</Directory>
</VirtualHost>
<VirtualHost *:80>
ServerName www.mary.duke.edu
DocumentRoot "Stuff:/othertest"
Alias /bob "usher/provost:/bpir/bob"
<Directory "provost:/bpir/bob">
Order deny,allow
Allow from all
AuthType Basic
AuthName LDAP_Protected_Site
AuthLDAPDereferenceAliases never
AuthLDAPURL
ldap://152.3.231.10/ou=provost,ou=acad,o=university?cn?sub?(objectClass=inetOrgPerson)
require user bob
</Directory>
</VirtualHost>


Bob Newlin wrote:
> I am running Apache2 (2.0.52) on a 6.5 server (service Pack 3). Things
> seem to work well on the Apache home server. If I say require user bob,
> it requires me to log in as bob. However, if I specify a file on
> another server (also Netware 6.5 sp3), it does not challenge me at all.
> It servers up the page to all comers.
>
> Any idea what I am doing wrong? Or is it that security only works within
> the Apache server?
>
> Thanks, Bob

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com