Basic auth across multiple subdomains

apache-2.2http-basic-authenticationwildcard-subdomain

I'm setting up a basic test environment to test drive multiple sites I co-maintain with a colleague.

What I am trying to achieve is to password protect the entire domain with basic auth. This is working, but the problem is that for every subomain you need to reauth yourself. Which, to say the least, is pretty annoying since there are at least 30 subdomains in use at the moment.

Is it possible to transfer the basic auth session across multiple subdomains?

I know I can try to rewrite it all to use a different kind of auth but basic auth is a lot easier to set up.

I am using apache and these are the rules I am using for basic auth:

AuthType Basic
AuthName "Subversion Repository"
AuthUserFile /svn/authz
Require valid-user

Best Answer

These answers provide a way to share authentification across multiple subdomains: Apache .htaccess trick to authenticate only once for all subdomains? and https://stackoverflow.com/questions/339244/using-apaches-mod-auth-across-multiple-sub-domains-for-single-sign-on

However the subdomains have to be listed explicitely, it won't work with wildcards (which is frustrating because I have a domain with 350+ subdomains I would like to share authentification for).

Related Solutions

Centos – WebDAV on CentOS – getting 403 error when attempt to upload

I recently struggled with the same problem on my Fedora 10 system. In my case the culprit was some odd redirection that I was doing in Apache. Specifically, I use a content management system (Drupal, to be exact) that within it's .htaccess includes the following redirection logic to redirect missing files to a PHP script:

# Rewrite URLs of the form 'x' to the form 'index.php?q=x'.
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !=/favicon.ico
RewriteRule ^(.*)$ index.php?q=$1 [L,QSA]

It makes sense that the above only affects the PUT method since in that case REQUEST_FILENAME does not exist.

Not having the WebDAV area inside of the Drupal area, which seems like a reasonable constraint, fixes the problem.

Also, I think it is likely that SELinux would result in a different error, but it's not mentioned in the discussion above. Did you try disabling SELinux?

Basic Auth on DirectoryIndex Only

I can reproduce this on Apache 2.2 under Fedora. This seems to be a bug. A work-around is to use:

<Files ~ "(^index.htm$)|(^$)">

Here is another similar bug: https://issues.apache.org/bugzilla/show_bug.cgi?id=46685

Best Answer

Related Solutions

Centos – WebDAV on CentOS – getting 403 error when attempt to upload

Basic Auth on DirectoryIndex Only

Related Topic