Hi, Eric.I am using the Satisfy All. Do I supposed to use Satisfy Any? Can this make difference if two computers, from different networks, are accessing the Rancid via cvsweb?
That's my Apache's access log:10.0.0.1 - - [23/Mar/2010:15:21:08 -0300] "GET /cgi-bin/cvsweb/ HTTP/1.1" 200 1805 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; pt-BR; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET CLR 3.5.30729)" 10.0.0.1 - - [23/Mar/2010:15:21:09 -0300] "GET /cvsweb/icons/dir.gif HTTP/1.1" 403 193 "http://100.10.10.1/cgi-bin/cvsweb/" "Mozilla/5.0 (Windows; U; Windows NT 6.1; pt-BR; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET CLR 3.5.30729)" 10.0.0.1 - - [23/Mar/2010:15:21:09 -0300] "GET /cvsweb/css/cvsweb.css HTTP/1.1" 403 190 "http://100.10.10.1/cgi-bin/cvsweb/" "Mozilla/5.0 (Windows; U; Windows NT 6.1; pt-BR; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET CLR 3.5.30729)" 10.0.0.1 - - [23/Mar/2010:15:21:12 -0300] "GET /favicon.ico HTTP/1.1" 404 183 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; pt-BR; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET CLR 3.5.30729)"
-- Wagner Pereira PoP-SP/RNP - Ponto de Presença da RNP em São Paulo CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo http://www.pop-sp.rnp.br Tel. (11) 3091-8901 Eric Covener escreveu:
On Tue, Mar 23, 2010 at 10:12 AM, Wagner Pereira <wpereira@xxxxxxxxxxxxx> wrote:Hi, friends. I configured my htaccess/htpasswd and it is already working in my computer. User/Pass have been required to access Rancid via cvsweb. That's OK. But in other computer, from my colleague's station, which is in other network, this authentication is not required, in any browser (IE, Safari, Firefox). Below is my httpd.conf: ================= <Files ~ "^\.ht"> Order allow,deny Deny from all Satisfy All </Files> <Directory "/var/www/cvsweb"> Options Indexes FollowSymLinks MultiViews AllowOverride AuthConfig Order deny,allow Deny from all # My computer Allow from 10.0.0.1/mask # My colleague's computer Allow from 100.1.1.10/mask </Directory>What authentication do you think is being bypassed? Did you mean for 'satisfy all' or 'satisfy any' semantics? What does your access log say?
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx