Security and Cryptography
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationSecurity and Cryptography

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #16  
Old October 3rd, 2000, 04:55 AM
freebsd
Guest
Dev Shed Newbie (0 - 499 posts)
 
Posts: n/a  
Time spent in forums:
Reputation Power:
The code I posted above at 10:39 PM is just fine. In your very first message, you said you can do one or the other but not both at a time, so basically you are having a typo error somewhere since you can't get back to your successful try earlier.

What you should do now is to ignore this message and start from scratch, then go back to this message and read the one at 10:39PM.

I need to remind you about .website.com is NOT the HTTP_REFERER, it's a string of the REMOTE_HOST environment variable. So visitors coming from the WEBSITE of http://www.website.com has no affect to your "Allow from .website.com" line.

Reply With Quote
  #17  
Old October 3rd, 2000, 05:24 PM
visions visions is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Oct 2000
Posts: 10 visions User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
I am really confused, you said this

"I need to remind you about .website.com is NOT the HTTP_REFERER, it's a string of the REMOTE_HOST environment variable. So visitors coming from the WEBSITE of http://www.website.com has no affect to your "Allow from .website.com" line."

I thought this is where I put the http referer. Do I put my website url here or?
Where would I put the url's of the websites I want to gain access without authentication?

Thanks,
Mark

Reply With Quote
  #18  
Old October 5th, 2000, 04:51 AM
freebsd
Guest
Dev Shed Newbie (0 - 499 posts)
 
Posts: n/a  
Time spent in forums:
Reputation Power:
Start here -> http://www.apache.org/docs/mod/mod_setenvif.html#setenvif

Pay attention to this line -> SetEnvIf Referer www.mydomain.com intra_site_referral

Then check here -> http://www.apache.org/docs/mod/mod_access.html#allowfromenv and replace the let_me_in example with intra_site_referral or whatever you like.

Reply With Quote
  #19  
Old October 5th, 2000, 04:16 PM
visions visions is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Oct 2000
Posts: 10 visions User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Thanks for the reply here is what we tried. Where it says website I put the address I want users to have access from with Authentication.

Satisfy any
AuthUserFile /www/globill/.htpasswd
AuthGroupFile /dev/null
AuthName "Member's Area"
AuthType Basic
Require valid-user
Order Allow,Deny
Deny from all
SetEnvIf Referer www.website.com
Intra_site_referal
Allow from env=intra_site_referal

And we get an internal server error and this is what is in the log files.

[Thu Oct 05 13:57:35 2000] [alert] [client 1.3.12] /export/home/~usr/private/.htaccess: SetEnvIf not allowed here

What do you think?

Thanks,
Mark


Reply With Quote
  #20  
Old October 6th, 2000, 06:51 AM
freebsd
Guest
Dev Shed Newbie (0 - 499 posts)
 
Posts: n/a  
Time spent in forums:
Reputation Power:
>>SetEnvIf Referer www.website.com
>>Intra_site_referal

This should be in one line, not two lines.

>>Allow from env=intra_site_referal

Note the "i"ntra, the i is case-sensitive.

Also, the line order of yours doesn't make sense, please try something like this:

############################################
SetEnvIf Referer www.website.com good_host
AuthName "Member's Area"
AuthType Basic
AuthGroupFile /dev/null
AuthUserFile /www/globill/.htpasswd
Require valid-user
Allow from env=good_host
Satisfy any
############################################

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationSecurity and Cryptography > Basic Autheniction & Allow Access


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 3 hosted by Hostway
Stay green...Green IT