More Secure Sub-directory

[Cantor, Scott]

On 1/26/12 6:51 PM, "Aaron Roots" <aaron.roots at deakin.edu.au> wrote:
>
>The Location block directives override the .htaccess directives:
>http://httpd.apache.org/docs/2.2/sections.html#mergin
>
>
>So the choices are:
>
>* Use a location block in your apache conf for the more secured directory
>(may not want user accessing apache conf or continually needing to action
>requests on their behalf )
>* Use the initial directive in a Directory block instead of Location (but
>this may break things like mod_rewrite)
>* Use the XML permission format

Since the latter wouldn't work with mod_auth or various other options, and
since the behavior and require options here are Apache's standard behavior
(not specific to using SAML), it seems like either the first two are just
accepted as the standard practice, or we're missing some additional trick
to do it.

-- Scott