5

I'm wondering if the following code should be working:

<LocationMatch "/(.*)([/])?(.*)">
    Order allow,deny
    Allow from all

    AuthType Basic
    AuthName "Git"
    AuthUserFile  /git/.htpasswd
    AuthGroupFile /git/.htgroup
    Require group $1
</LocationMatch>

What I am trying to achieve with this is to require a group based on the first regex variable. So if the user goes to http://localhost/a-repository-name he has to be in the group a-repository-name to be able to open the url.

For some reason I can't get this code working and apache returns: Authorization of user **** to access /a-repository-name failed, reason: user is not part of the 'require'ed group(s).
I guess it's not matching against the proper variable at Require group $1.
Is this the right way to be done or I'm missing something?

Improve this question

2 Answers 2

Reset to default
2

LocationMatch doesn't support backreferencing, you can't do that in versions before 2.4.8.

Improve this answer
4
  • Can you please provide a link in the documentation where this is stated? I changed Require group $1 to Require group mygroup and it worked perfect.
    – tftd
    Sep 3, 2012 at 15:04
  • @tftd: Changed the wording. I meant regexp grouping, not the group you set in Require.
    – InternetSeriousBusiness
    Sep 3, 2012 at 15:07
  • Is there any known workaround?
    – tftd
    Sep 3, 2012 at 15:30
  • @tftd: I'm afraid you'll have to attack the problem from another angle.
    – InternetSeriousBusiness
    Sep 3, 2012 at 17:12
7

According to the Apache documentation this is now supported...

From 2.4.8 onwards, named groups and backreferences are captured and written to the environment with the corresponding name prefixed with "MATCH_" and in upper case. This allows elements of URLs to be referenced from within expressions and modules like mod_rewrite. In order to prevent confusion, numbered (unnamed) backreferences are ignored. Use named groups instead.

<LocationMatch "^/combined/(?<sitename>[^/]+)">
    require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
</LocationMatch>
Improve this answer
2
  • Wow! Thank you for answering such an old question! I'm glad they've included this in the newer versions. Unfortunately I can't accept your answer because the original answer was valid at the time.
    – tftd
    Sep 21, 2015 at 14:39
  • Does this work? I tried something similar serverfault.com/questions/844571/… and i cant get it to work
    – agent provocateur
    May 4, 2017 at 18:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.