Unsecuring Child URI

[Jason Howe]

Standard apache rules should work here, no?

Make a stanza thusly:
<Location /content/login>
     AuthType none
     Require all granted
</location>

Uh, precidence probably matters, so try putting it above (or below?  
You'd think I'd remember after doing this for 12 years) the current 
location stanza for /content

--Jason

--
Jason Howe
Software Engineer, Web Applications
Paul G. Allen School of Computer Science & Engineering
University of Washington

On 6/4/19 9:30 AM, ronharris wrote:
> Hi,
>
> I have come across a requirement in my project, where I need to secure
> parent URI, but keep child URI unsecured.
>
> URI Eg:
> /content
> /content/login
> /content/logout
>
> I have protected "/content" as below, and it is working fine:
> <Location /content>
>    AuthType shibboleth
>    ShibRequestSetting requireSession 1
>    require valid-user
> </Location>
>
> But how can I keep other two out of it.
>
> Please let me know if it is possible.
>
> Thanks
>
>
>
>
> --
> Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html