Configuration of access.conf

WARNING: this document is incomplete. We're working on it.

Read the docs at hoohoo.ncsa.uiuc.edu for complete info on non-Apache features.

Apache HTTP Server Documentation

access.conf defines server settings which affect which types of services are allowed, and in what circumstances.

Each directory to which Apache has access, can be configured with respect to which services and features are allowed and/or disabled in that directory (and its subdirectories).

srm.conf's AccessFileName defines the optional file which can be used to hold a directory's access information.

This information can also be placed in access.conf, and Apache expects to see the at least the access configuration for the DocumentRoot.

Each entry in access.conf refers to a directory. Since Apache expects to see the DocumentRoot, the examples will be for that directory.

For each directory to be configured, the configuration information is enclosed within

<Directory path>

and

</Directory>

e.g.

<Directory /usr/local/httpd/htdocs/>

and

</Directory>

Options

The first thing you need to configure for the directory (and its subdirectories) is which Options you want to allow.

The options are;

None
none of the following options (execpting All) are allowed.
All
all of the following options are allowed
Indexes
if a URL which maps to a directory is requested, and the there is no DirectoryIndex (e.g. index.html) in that directory, then Apache will create an index file iteslef.
Includes
server-side includes are allowed.
FollowsymLinks
symbolic links can be followed
IncludesNOEXEC
When server-side includes are enabled, this option disables the exec variety of include, for security reasons.
Multiviews
content negotitated Multiviews are allowed.

AllowOverride

When Apache finds a AccessFileName (e.g. .htaccess) file in a directory, it needs to know which of the configuration options declared in that file can override earlier access information.

Typically, admins set this to All, but one can list any of the following;

None
The file doesn't override any of the following
All
The file overrides all of the following
Options
a directory can override Options defined in this configuration file.
FileInfo
AuthConfig
Limit
access limitation (described below)

Limit

You might want to set up all of your server, or parts of your server to offer limitted access groups of people, or even to deny access to groups of people

Apache allows you to restrict access any or all directories on the virtue of;

  1. the client's host name / IP address
  2. client's with registered names and passwords

Home Index