I have an Apache server running on a linux box (say example.com). Inside the web root is a folder (
/home/me/docs), with an automatically generated index of its subdirectories, enabled by its
Options +Indexes IndexOptions FancyIndexing NameWidth=* FoldersFirst IgnoreCase SuppressDescription Charset=UTF-8 SuppressHTMLPreamble
docs/protected. This subdirectory has its own
AuthType "Basic" AuthBasicProvider file AuthUserFile /path/to/.htpasswd #Require valid-user
Now, this is where it becomes weird (for me):
- as is, with the commented line,
protectedis not password-protected (which is normal) and is visible on its parent's listing (also expected)
- if I uncomment the
protectedbecomes password-protected (if I type the URL directly), but it also doesn't appear on its parent's listing any more.
Anyone can figure out what could cause that?
Edit: now I notice that if I type the URL of the protected directory, then enter the password, then go back to the listing without closing the browser, the listing is complete. In summary, the directory is hidden until I have given credentials to it. But I only want to protect its content, not its existence!
PS: This is with Apache/2.2.21 running on a Synology box.