Brian,

This is not a bug - the security restriction is working by design; /vtdj.com/intranet does not equal /intranet. The restriction is working on the URI, not the local file system. If you want to protect /intranet via security restrictions, you will need to add it to the security restrictions as well.

/vtdj.com/intranet [EMAIL PROTECTED]
/intranet [EMAIL PROTECTED]

If you wanted the restriction to work at the file system level, you should look at using htaccess.

-Jeff

At 08:39 PM 11/04/2002 -0600, Vital Touch DJs wrote:

I am still having problems with security restrictions set up to certain
directories.  I am not sure if anyone else has had any issues with this.

here is the issue:

When I type in http://216.43.115.180/vtdj.com/intranet, it will ask for a
username and password.  But, if I type it in using the actual domain name;
http://www.vtdj.com/intranet, it goes right to the page, as you can tell by
clicking on them.  I don't have any sensitive information if anyone wants to
try it out.

In Security Restrictions settings I have the following setup:

/vtdj.com/intranet  [EMAIL PROTECTED]

This makes it where only the [EMAIL PROTECTED] user should be able to access
this directory, but as you can see it is not the case when using the domain
name.

The Documents directory setup on the server is c:/servers/www/docs/ and the
vtdj.com/intranet directory is appended to that.

Anyone think that this is a bug that should be worked out, or is there
something else that I am missing?  I have tried many things, such as making
the entry just 'vtdj.com/intranet' but then it allows access through the
domain and without the domain without authentication.

Brian S.
-------------------------------------------------------
To unsubscribe please go to http://www.sambar.ch/list/

Reply via email to