Apache Config - Exclude Location from Authentication

Question

I have a web application that is being protected by a Shibboleth authentication module. My current config is as below

 AuthType shibb         


        

Answer 1

When using Apache 2.4 instead of 2.2, in order to exclude "/server-status", the following was enough:

    AuthType Basic
    AuthUserFile /etc/apache2/.htpasswd
    
        Require ssl
        Require user valid_user_name
    

Analyzing:

• is equivalent to .
• The regex used, is pcre (perl compatible regular expressions).
• ^(?!/server-status) means:
  • ^: "starts with"
  • (?!): "negative look ahead (instead of positive (?=))"