be applied.</p>
<p><strong>Note that the default access for
- <code><Directory /></code> is <code>Allow from All</code>.
+ <code><Directory /></code> is to permit all access.
This means that Apache httpd will serve any file mapped from an URL. It is
recommended that you change this with a block such
as</strong></p>
<div class="example"><p><code>
<Directory /><br />
<span class="indent">
- Order Deny,Allow<br />
- Deny from All<br />
+ Require all denied<br />
</span>
</Directory>
</code></p></div>
be applied.</p>
<p><strong>Note that the default access for
- <code><Directory /></code> is <code>Allow from All</code>.
+ <code><Directory /></code> is to permit all access.
This means that Apache httpd will serve any file mapped from an URL. It is
recommended that you change this with a block such
as</strong></p>
<example>
<Directory /><br />
<indent>
- Order Deny,Allow<br />
- Deny from All<br />
+ Require all denied<br />
</indent>
</Directory>
</example>
Anonymous_LogEmail on<br />
Anonymous anonymous guest www test welcome<br />
<br />
- Order Deny,Allow<br />
- Allow from all<br />
+ Require all granted<br />
<br />
Require valid-user<br />
</span>
Anonymous_LogEmail on<br />
Anonymous anonymous guest www test welcome<br />
<br />
- Order Deny,Allow<br />
- Allow from all<br />
+ Require all granted<br />
<br />
Require valid-user<br />
</indent>
Alias /secure /webpages/secure<br />
<Directory /webpages/secure><br />
<span class="indent">
- Order deny,allow<br />
- Allow from all<br /><br />
+ Require all granted<br /><br />
AuthBasicProvider file<br /><br />
<Location /ldap-status><br />
<span class="indent">
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
Satisfy any<br />
AuthType Basic<br />
AuthName "LDAP Protected"<br />
<Location /ldap-status><br />
<span class="indent">
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
Satisfy any<br />
AuthType Basic<br />
AuthName "LDAP Protected"<br />
<Location /ldap-status><br />
<span class="indent">
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
Satisfy any<br />
AuthType Basic<br />
AuthName "LDAP Protected"<br />
<Location /ldap-status><br />
<span class="indent">
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
Satisfy any<br />
AuthType Basic<br />
AuthName "LDAP Protected"<br />
<Location /ldap-status><br />
<span class="indent">
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
LDAPTrustedClientCert CERT_BASE64 /certs/cert1.pem<br />
LDAPTrustedClientCert KEY_BASE64 /certs/key1.pem<br />
# CA certs respecified due to per-directory client certs<br />
<Location /ldap-status><br />
<indent>
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
Satisfy any<br />
AuthType Basic<br />
AuthName "LDAP Protected"<br />
<Location /ldap-status><br />
<indent>
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
Satisfy any<br />
AuthType Basic<br />
AuthName "LDAP Protected"<br />
<Location /ldap-status><br />
<indent>
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
Satisfy any<br />
AuthType Basic<br />
AuthName "LDAP Protected"<br />
<Location /ldap-status><br />
<indent>
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
Satisfy any<br />
AuthType Basic<br />
AuthName "LDAP Protected"<br />
<Location /ldap-status><br />
<indent>
SetHandler ldap-status<br />
- Order deny,allow<br />
- Deny from all<br />
- Allow from yourdomain.example.com<br />
+
+ Require host yourdomain.example.com<br />
+
LDAPTrustedClientCert CERT_BASE64 /certs/cert1.pem<br />
LDAPTrustedClientCert KEY_BASE64 /certs/key1.pem<br />
# CA certs respecified due to per-directory client certs<br />