Require; Htaccess Security Considerations; Controlling Access For Virtual Servers - Netscape ENTREPRISE SERVER 6.1 - 04-2002 ADMINISTRATOR Administrator's Manual

Controlling Access for Virtual Servers

require

Syntax
• requires group groupname groupname
• requires user username username
• requires valid-user
Does not need to be enclosed within a
usually is.
Effect
• requires group requires the authenticated user to be a member of one of the
specified groups.
• requires user requires the authenticated user to be one of the specified users.
• requires valid-user requires an authenticated user

.htaccess Security Considerations

By default, server support for HTTP PUT is disabled. You can activate HTTP PUT
using the Remote File Manipulation page of Content Mgmt in the Class Manager.
Great care should be taken in allowing PUT access to directories containing
.htaccess
prevented on all files in a directory by restricting access. See "Restricting Access to
a Directory (Path)," on page 191.
Controlling Access for Virtual Servers
Access control information in Enterprise Server can come from a per-virtual server
ACL file and
Your
associated to a particular standard Enterprise Server 6.x ACL file. For example:
<ACLFILE id="standard" file="standard.acl">
For virtual servers to use access control you must create a reference to one or more
ACL file IDs in their 'aclids' property. Example:
<VS aclids="standard">
204 Netscape Enterprise Server Administrator's Guide • April 2002 (Draft)
files, since it will allow them to be replaced. PUT access can be
files in the document directories.
.htaccess
file can contain one or more ACLFILE tags which define an ID
server.xml
or
<Limit> <LimitExcept>
range, but