-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Eric, On 7/18/16 2:12 PM, Eric Covener wrote: > On Mon, Jul 18, 2016 at 2:10 PM, Christopher Schultz > <chris@xxxxxxxxxxxxxxxxxxxxxx> wrote: >> I believe by putting the exception-Location first in the >> configuration file, I should be able to trump the general >> configuration affecting the "/" URL-space, right? > > > Matching location sections get merged together in the order they > appear. Meaning the 2nd is applied on top of the 1st. > > For authorization, the default is to replace. Meaning your > override should be 2nd. > > You might have some addl complexity by using the compat module for > Order here. I would avoid it! I tried: <Location "/"> Require ldap-group </Location> <Location "/.well-known/"> Require all granted </Location> ... and I'm still getting 401 responses. :( (In fact I tried it before posting, 'cause I didn't want to make an idiot of myself for not trying an obvious alternative!). Hmm... it seems I'm running Apache 2.2.22 with whatever Debian has back-ported to it (I assumed it was 2.4, since we have that deployed nearly everywhere these days). Does that change the incantation I need to replace the "Require" directive in the .well-known Location? - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJXjR/QAAoJEBzwKT+lPKRYaeUP/RF6emHi2DgT97xRDp7xoXb3 fNU+PrluzhjIGuqnYCGnpvcQ18fVa75R6qLITyH/hCquJKCNR9qZ+I3AQr//HH5O FWVHcZxS0is1yxugG6Dl+hghIAPKfCd7gbPDoJnirGQoxQwTFnvdPcOyYUK16X1N KerTDq0LGJTASWGFxO/eifvrtcHy84aCjQSQtfqBboJpoOBzf57cZVEW4hU0e0jl vghsxSjyo7hWhCRQI3zyj34nnKjznVHOObNM9DKQXTBcHrR+L3UFx5nhHN6GwrdP KbNCngPWYLHd0Vh2+WR7URzQ2ehO89jEvd9y0RwZbeBnU8DFLEAoWZJEFo0/kfTf ZEdvtkC9OEeEHldSIwNri68QSKoDGoYuGVtlT2kaPbCoqcpYq5xYoME/GHl067DX 7vARHZtUjOvFVAZxGxRdI2LWe/Nh1ZaErG8f1OlWTCv7vnr11vOFfdQi8zYydW/l L//4SqZ4ZJxgBTp4qMaLQArRtio03sA7YTIM0h/m8qdL7F2beSn8IE6PmDEVrwak Pm6P3Z9asp/hGtlrLw9V/+mIjH8vQD9IonJh+ewM3ea7xI3/qNGHcx6Q1Llhd6I+ mPWGrBMyftrINPKdspdoRFvWWH3up5d3tmFbA5dGDoRPqjg51SSkioFjfkIuJGx6 B2h41PDPlLYcY8sP7xyV =O9+B -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|