Received: (qmail 7011 invoked by uid 2012); 26 Jun 1998 15:08:39 -0000
Message-Id: <19980626150839.7010.qmail@hyperreal.org>
Date: 26 Jun 1998 15:08:39 -0000
From: Christian Gilmore <cgilmore@research.att.com>
Reply-To: cgilmore@research.att.com
To: apbugs@hyperreal.org
Subject: <IfDenied> directive wanted
X-Send-Pr-Version: 3.2

>Number:         2512
>Category:       mod_access
>Synopsis:       <IfDenied> directive wanted
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          suspended
>Class:          change-request
>Submitter-Id:   apache
>Arrival-Date:   Fri Jun 26 08:10:00 PDT 1998
>Last-Modified:  Sat Aug 29 07:14:00 PDT 1998
>Originator:     cgilmore@research.att.com
>Organization:
>Release:        1.3.1
>Environment:
environment independent
>Description:
Currently access and denial are done via hostname or IP address/range.
There's also the match of an environment variable, but that seems very
limiting. I'd like to see a <IfDenied></IfDenied> directive that would
allow me to then use the features of mod_auth (such as require
valid-user). For instance:

<Directory />
order deny,allow
deny from all
allow from .research.att.com
<IfDenied>
AuthType Basic
AuthName Private
AuthUserFile /www/www/.htusers
require valid-user
</IfDenied>
</Directory>
>How-To-Repeat:

>Fix:

>Audit-Trail:
State-Changed-From-To: open-analyzed
State-Changed-By: marc
State-Changed-When: Fri Jun 26 09:31:22 PDT 1998
State-Changed-Why:
The example you give is already possible just using the
Satisfy directive.

The whole authentication and access control language
needs a rewrite, and that may happen in 2.0.  We don't really
want to add a zillion hacks to it though in 1.3 and make
it more of a mess...
State-Changed-From-To: analyzed-suspended
State-Changed-By: coar
State-Changed-When: Sat Aug 29 07:14:00 PDT 1998
State-Changed-Why:
This almost certainly won't happen in 1.3, so I'm marking
this as suspended for future consideration.
Release-Changed-From-To: future-1.3.1
Release-Changed-By: coar
Release-Changed-When: Sat Aug 29 07:14:00 PDT 1998
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <apbugs@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]