LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-22-2007, 11:33 AM   #1
inti
LQ Newbie
 
Registered: Oct 2007
Posts: 0

Rep: Reputation: 0
Question mod_authz_ldap.so 0.26


Hi,


Environment:

Server version: Apache/2.0.52
Module: authz_ldap_module modules/mod_authz_ldap.so 0.26
Red Hat Enterprise Linux ES4



Issue is:

When first time user logged in can see all the folders even those folders not belongs to him. He can not navigate to those folders which not belong to him but he can see names of those folders.

Main Folder contains .htaccess file
------- sub folder 1 contains .htaccess file belong to A
------- sub folder 2 contains .htaccess file belong to B
------- sub folder 3 contains .htaccess file belong to C

When A call the URL main folder a pop up windown appear for authentication after authentication A can see all sub folders:

sub folder 1
sub folder 2
sub folder 3

Suppose to be A can see only sub folder 1 because .htaccess file contains permission for A.

A can not navigate in 2 and 3 folder but he can see the folder.

How I can Hide 2 and 3 sub folder from A?

Is a defect or expected behavior?

What directive needs to be used to correct the problem?





In the following environment working fine as per expectation.
Server version: Apache/2.0.46
Module: authz_ldap_module modules/mod_authz_ldap.so 0.24 LRed Hat Enterprise Linux ES3


Thanks


Regards

Khan
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:49 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration