Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Two scenarios:


I want my entire server to be password-protected, so I included this directory config in my sites-enabled/000-default:

<Directory />
  Options FollowSymLinks
  AllowOverride None
  AuthType Basic
  AuthName "Restricted Files"
  AuthUserFile /etc/apache2/passwords
  Require user someuser

The question is how can I exclude a specific URL from this?


I found that the above password protection doesn't apply to mod_proxy, so I added this to my proxy.conf:

<Proxy *>
  Order deny,allow
  Allow from all

  AuthType Basic
  AuthName "Restricted Files"
  AuthUserFile /etc/apache2/passwords
  Require user someuser

How do I exclude a specific proxied URL from the password protection? I tried adding a new segment:

<Proxy http://myspecific.url/>
  AuthType None

but that didn't quite do the trick.

share|improve this question
up vote 4 down vote accepted

Use Satisfy Any to exclude something from AuthType requirements.

If you can be more specific about what the URL is to be excluded and how your site is configured now, then I can be more specific about how this should be applied.

share|improve this answer
I thought my description above was rather detailed ... what is missing? The specific URL I'm trying to exclude from basic auth is Truth be told, this question might not be so relevant to me now, because of this:… – ripper234 Mar 22 '12 at 8:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.