Welcome! Log In Create A New Profile

Advanced

Re: auth_basic and satisfy allowing all traffic

April 14, 2017 03:26PM
Hi Francis -

That would have been my suspicion as well. To test that theory, I installed the same nginx 1.10.1 RPM file on a similar CentOS 6 virtual machine in my environment. This particular VM has never been used for any nginx testing, nor has it ever had nginx installed.

I tested the same server configuration as your example, but the testing VM produced the same results. The satisfy/allow/deny directives allow bypassing of the basic_auth. Once those entries have been commented out, auth works as expected.

Would there be additional steps involved in determining if this is, in fact, a bug?

Thank you for your help.
Subject Author Posted

auth_basic and satisfy allowing all traffic

daveyfx April 13, 2017 05:26PM

Re: auth_basic and satisfy allowing all traffic

Francis Daly April 13, 2017 08:18PM

Re: auth_basic and satisfy allowing all traffic

daveyfx April 13, 2017 11:49PM

Re: auth_basic and satisfy allowing all traffic

Francis Daly April 14, 2017 03:50AM

Re: auth_basic and satisfy allowing all traffic

daveyfx April 14, 2017 03:26PM

Re: auth_basic and satisfy allowing all traffic

Francis Daly April 15, 2017 04:34AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 120
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready