0

This is for Apache 2.4.58.

Why is it that the following order of Location/LocationMatch will only evaluate the latter, but if it is reversed that it will evaluate both as intended?

<Location /basic/website/>
    Require external-group third-party-require-clause-allowing-for-anonymous-access
</Location>
<LocationMatch "^/basic/website/(?<user>[-_\.\w\d]+)/?" >
    Require user %{env:MATCH_USER}
</LocationMatch>

For reference, I am using mod_auth_external 3.3.3 for the third-party require clause.

The intention of the above configuration is to

  1. grant anonymous access (when appropriate)
  2. otherwise grant access according to criteria
  3. finally to ensure that a specific user is always allowed to access their part regardless
Improve this question
1
  • It is as though when there is a clause that requires the Authentication stage of the pipeline, it ignores all previous clauses that do not require that stage (and can simply proceed to the Authorization stage). Such that clauses that allow for anonymous users must come at the end. Commented 2 days ago
Related questions
3
Apache 2.4 mod_authz - RequireAny/All and Require valid-user
552
How to enable mod_rewrite for Apache 2.2
1
Apache 2.4 Require statements not parsing as expected
Load 5 more related questions Show fewer related questions

0

Reset to default

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.