Access Permission Problem

[Johnb175]

Ok I have my server configured and want to give access to my friends domain to view it without authing. so i added the following:
<authing info up here>
order allow,deny
allow from domain.com
satisfy any
however when he visits the site it still prompts for a user/pass. Any ideas?

 

[siberian]

Are you 100% positive the domain.com matches their IP address?

Try switching the Orderto

order deny,allow

That should deny everyone and then only allow the list. The way you have it I *think* its saying 'allow everyone and deny the list'.

I dunno, the Order clause has always been counterintuitive to me. Check the IP and try swapping the order, I know I use it as stated above and it works.

 

[RhythmAce]

I agree the the Order directive can be a little confusing. This is how it is supposed to work. The Order directive takes two arguments, Allow and Deny and does two things. It evaluates the Allow and Deny directives in the order you give them to the Order directive. It also sets the default state (allow or deny). Here's an example:

Order allow, deny
Allow from domain.com

In the above example, the order of evaluation is allow then deny. The default state is deny (the last one in the order) so access will be denied to everyone. Then the Allow directive is evaluated which allows access to domain.com. There is no need for a deny directive in this case. If you want to test this, you can put "Order allow, deny" in a directory container without an order or deny directive, and you will see the the default would be to deny access to all. My guess for why it isn't working is because the referer does not match domain.com as suggested by siberian. A couple reasons for this could be that users are coming in from outside domain.com or apache isn't doing reverse lookups to resolve the referer's ip.