Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Two scenarios:

Directory

I want my entire server to be password-protected, so I included this directory config in my sites-enabled/000-default:

<Directory />
  Options FollowSymLinks
  AllowOverride None
  AuthType Basic
  AuthName "Restricted Files"
  AuthUserFile /etc/apache2/passwords
  Require user someuser
</Directory>

The question is how can I exclude a specific URL from this?

Proxy

I found that the above password protection doesn't apply to mod_proxy, so I added this to my proxy.conf:

<Proxy *>
  Order deny,allow
  Allow from all

  AuthType Basic
  AuthName "Restricted Files"
  AuthUserFile /etc/apache2/passwords
  Require user someuser
</Proxy>

How do I exclude a specific proxied URL from the password protection? I tried adding a new segment:

<Proxy http://myspecific.url/>
  AuthType None
</Proxy>

but that didn't quite do the trick.

share|improve this question
add comment

1 Answer

up vote 3 down vote accepted

Use Satisfy Any to exclude something from AuthType requirements.

If you can be more specific about what the URL is to be excluded and how your site is configured now, then I can be more specific about how this should be applied.

share|improve this answer
    
I thought my description above was rather detailed ... what is missing? The specific URL I'm trying to exclude from basic auth is mysite.com/status. Truth be told, this question might not be so relevant to me now, because of this: serverfault.com/questions/371907/… –  ripper234 Mar 22 '12 at 8:34
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.