Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Error log when a "require not" directive is not me |
|
| Author |
|
cvillemure
Joined: 19 Dec 2012
Posts: 5
Location: Canada, Magog
|
 Posted: Wed 19 Dec '12 15:03 Post subject: Error log when a "require not" directive is not me |
 |
|
Question :
Why is there error log created when a "require not" directive is not met? Did I do something wrong?
Detailled explanations :
I've installed apache 2.4 64 bits from this site on a windows server 2008 R2 on a domain, with the authnz_sspi_module for SSO.
Based on the provided configuration with the third-party module, I've setup the following rules to restrict access to the SSO location.
| Code: | <RequireAll>
<RequireAny>
Require valid-sspi-user
</RequireAny>
<RequireNone>
Require user "ANONYMOUS LOGON"
</RequireNone>
</RequireAll> |
However each time the SSO work and my user get logged in automatically, the following error log get produced :
| Quote: | | [authz_user:error] [pid 5272:tid 964] [client 192.168.5.250:49458] AH01663: access to /cas-server/login failed, reason: user 'domain\\user' does not meet 'require'ments for user to be allowed access |
I've also tried with
| Code: | | Require not user "ANONYMOUS LOGON" |
But the error is still there.
If I removed the requireNone directive, everything works fine and I've got not error log |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Tue 08 Jan '13 12:20 Post subject: |
|
|
my working config is
| Code: |
<IfModule !mod_auth_sspi.c>
LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>
<IfModule mod_auth_sspi.c>
<Location /protected/>
AuthName "A Protected Place"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIOfferBasic On
SSPIBasicPreferred On
require valid-user
</Location>
</IfModule>
|
|
|
| Back to top |
|
cvillemure
Joined: 19 Dec 2012
Posts: 5
Location: Canada, Magog
|
| Posted: Wed 23 Jan '13 21:02 Post subject: MyConfig is working too |
|
|
Hi james, thanks for replying!
As said in my post, my config also works either if I use the RequireNone directive or not, I was just wondering why apache generate a ERROR log when a "RequireNone" directive is NOT met.
To avoid the log I removed the directive, anyway, I'm pretty sure i do not need it in my setup. |
|
| Back to top |
|
|
|
|
|
|
