[KLUG Members] Apache LocationMatch question

[Phillip Hofmeister]

Adam bultman wrote:

>Has anybody had experience using LocationMatch in apache?
>
>I'm trying to selectively lock down Apache for awstats. I wish to have
>awstats.pl be available for customers to use, but I don't want them to
>be able to see each other's configurations.
>
>I've got something like this:
>
><LocationMatch "/awstats/awstats.pl?config=myconfig">
>    AuthName "Stats"
>    AuthType Basic
>    AuthUserFile conf/stats.users
>    Order Allow,Deny
>    Require valid-user
>    Satisfy any
></LocationMatch>
>
>I want to have other config= options available for each client.
>
>The problem is that when I surf to the page, LocationMatch either doesn'
>match correctly (I've tried throwing in an asterisk after myconfig too)
>or it simply doesn't work. 
>
>I've googled, read the manual, looked on the web for examples, but I
>can't get it to work .
>
>Anybody had this or tried this?
>  
>
Part of AWStats configuration is to allow only certain HTTP User's to
access that config file.

Here's what I do:

   1. Maintain a seperate config file for each client
   2. Maintain a seperate apache log file for each client
   3. Make awstats available via Basic HTTP Authication Only
   4. Tweak each fonfig file to allow only the desired HTTP Auth user's
      to access it.

Let me know if you have any more specific questions.

-- 
Phillip Hofmeister

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.kalamazoolinux.org/pipermail/members/attachments/20050916/a054931c/attachment.html