Hi,

I try to use both require user and require group in .htaccess file.
My configuration only work with ONE directive "require user jan" or
"require group staff", but not both.


What I have done wrong here ?
Thanks
Minh


# cat .htaccess
AuthType Basic
AuthName "Password Required"
AuthUserFile /etc/httpd/conf/password.file
AuthGroupFile /etc/httpd/conf/group.file
require group staff
require user jen


# cat /etc/httpd/conf/password.file
joe:rxXCdbTQqmbYA
jen:xyVSuHLjceD92
jeff:bR0J3kdW2NuGA


# cat /etc/httpd/conf/group.file
staff:joe jeff


# cat httpd.conf
..
..
<VirtualHost 192.168.1.5:80>
DocumentRoot /var/www/html/example
ServerName www.example.com
<Directory "/var/www/html/example/data">
Options Indexes Includes
AllowOverride AuthConfig
</Directory>
</VirtualHost>

there is no reason to do this...you use the group configuration to readily eliminate/add access to people...you should not be using both at once...it is redundant.

apache

baldur

by the way, it is much more secure instead of using a .htaccess file to put your access configuration into your httpd.conf file...you can find that info on

apache

baldur

That's good point ...
Thank you