0

Two scenarios:

Directory

I want my entire server to be password-protected, so I included this directory config in my sites-enabled/000-default:

<Directory />
  Options FollowSymLinks
  AllowOverride None
  AuthType Basic
  AuthName "Restricted Files"
  AuthUserFile /etc/apache2/passwords
  Require user someuser
</Directory>

The question is how can I exclude a specific URL from this?

Proxy

I found that the above password protection doesn't apply to mod_proxy, so I added this to my proxy.conf:

<Proxy *>
  Order deny,allow
  Allow from all

  AuthType Basic
  AuthName "Restricted Files"
  AuthUserFile /etc/apache2/passwords
  Require user someuser
</Proxy>

How do I exclude a specific proxied URL from the password protection? I tried adding a new segment:

<Proxy http://myspecific.url/>
  AuthType None
</Proxy>

but that didn't quite do the trick.

1 Answer 1

4

Use Satisfy Any to exclude something from AuthType requirements.

If you can be more specific about what the URL is to be excluded and how your site is configured now, then I can be more specific about how this should be applied.

1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.