Apache Pocket Ref

Specifies which hosts can access the resource according to the host-

name, IP address, network/netmask specification, or setting of an

environment variable. Specifying hosts by network/netmask is not

supported prior to version 1.3.

Deny mod_access

Deny from { all|host...|env=var }

Contexts: SF (Limit)

Specifies which hosts are denied access to a resource.

Order mod_access

Order { allow,deny|deny,allow|mutual-failure }

Contexts: SF (Limit)

Default: deny,allow

Specifies the order in which allow and deny directives are evaluated.

allow,deny

Allow

directives are applied before Deny directives. Unmatched

requests are denied.

deny,allow

Deny

directives are applied before Allow directives. Unmatched

requests are allowed.

mutual-failure

Only requests that match an Allow directive and are not forbid-

den by a Deny directive are allowed.

Authentication and Authorization Phases

Apache includes a number of standard modules to perform

authentication based on information stored in text files and

DB or DBM index files. These are described in this section.

There are also numerous third-party modules to handle infor-

mation stored in databases (such as MySQL, Oracle, or Post-

greSQL) or provided by LDAP servers and so on.

Each authentication module has a directive to indicate that it

is authoritative. All configured authentication modules are

42 Apache Pocket Reference

tried in turn until one succeeds ...