Apache directory security
 

Hi guys

I must be missing something stupid here but I can't figure it out.

I know I can password protect a directory in apache and if I go to http://server.domain.com/directory it prompts for a password, all OK no issues there.

If I access the same directory via IP e.g. http://xx.xx.xx.xx/directory it doesnt ask for a password and lets me straight in.

What am I missing? Is this because my directory isn't inside a virtualhost?

Thanks

hard to say without seeing any config, but I'd certainly guess initially at a different virtualhost being used to reach it when the IP is not used.

note that when using virtualhosts, the first virtualhost in the list will be used as the default if the hostname doesn't match any other one.

acid kewpie is probably correct, but one should also remember that once a browser instance has authenticated, it won't be prompted a second time.