Cyberduck

Timestamp:

Oct 2, 2019 12:53:06 PM (19 months ago)

Author:

dkocher

Comment:

--

help/en/howto/dav

@@ -97 +97 @@
 === Socket timeout with GZIP content encoding ===
 Some servers (cPanel) have invalid return GZIP encoded content. This error may not bee seen with other clients that do not enable content compression. An invalid HTTP response status line is sent and the content size does not match the content length set. As a workaround, you can disable support for content compression. Set the [wiki:help/en/howto/preferences#Hiddenconfigurationoptions hidden option] `http.compression.enable` to `false`.
+
+=== Require Directive in Apache HTTPD ===
+The `Require` directive in Apache HTTPD tests whether an authenticated user is authorized according to a particular authorization provider and the specified restrictions. You should configure it to return a 403 HTTP status code when authorization fails using the `AuthzSendForbiddenOnFailure` directive. Refer to [https://httpd.apache.org/docs/current/mod/mod_authz_core.html#authzsendforbiddenonfailure mod_authz_core].
+
+ If authentication succeeds but authorization fails, Apache HTTPD will respond with an HTTP response code of '401 UNAUTHORIZED' by default. This usually causes browsers to display the password dialogue to the user again, which is not wanted in all situations. AuthzSendForbiddenOnFailure allows to change the response code to '403 FORBIDDEN'.
+
+