2
votes
3answers
130 views

Different authentication for HTTP POST and GET requests in Apache

I want to authenticate for POST requests for http://path/to/logical/abc.xml (but not GET requests to that URL). How do I put constraints like this in place? The paths are logical and location ...
1
vote
1answer
834 views

SSPI Apache2.2 Windows Authentication

I am trying to set up seamless authentication on windows for my intranet site, using SSPI on Apache 2.2 and windows 2008 server. I have installed mod_auth_sspi.so in apache/bin. I have also added the ...
2
votes
1answer
935 views

How to log username in Apache logs?

I need some help regarding how to log the user-name into apache logs. I'm building a use-case for Security Information Event Management. Is the method the same in case of IIS or just applicable to ...
4
votes
1answer
734 views

Password protect an alias virtual directory

I have a main domain being hosted through CPanel. I also have a sub-domain that I would like to appear as a path under the main domain instead of as a sub-domain. So I have: http://example.com/ ...
2
votes
1answer
816 views

Avoid the login popup when using http-auth

I have an Apache. Under the DOCUMENTROOT is a folder with an .htpasswd file for http-auth. If I open the browser and request the content in the folder I get an Popup to login. Is there a way to avoid ...
1
vote
0answers
160 views

Can I use both Digest and Basic Authentication on the same directory in Apache?

The reason I would want to do this is to support very old browsers (e.g. IE 6) that does not implement the more secure Digest method. If all new clients advertise the types of authentication they ...
1
vote
3answers
2k views

How to avoid basic authentication warning when using protected directory?

I used cpanel on my hosted site to set up a password protected directory to allow downloads of specific files. I send people a link to the file by email and include their username and password so ...
0
votes
1answer
410 views

Apache authentication, security exceptions and safari

I have apache authentication set up on a site, it works fine in firefox and chrome, you type in the username/pass once and then you can happily visit any page on the site. Unfortunately this is not ...
1
vote
1answer
411 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
1answer
581 views

Directory access control with Apache: do I need to use a specific .htaccess?

I have an Apache webserver, and in the Apache configuration, I have Alias /backups "/backups" <Directory "/backups"> AllowOverride None Options Indexes Order allow,deny Allow ...
7
votes
1answer
710 views

Permissions for serving up temporary files

I have a system (web based application) which pulls file attachments from a 3rd party system via SOAP. These are in turn on our system created as files in a directory. When a user of the system ...