LX0-104 · Question #228
The local system administrator has created a configuration entry for apache version 2 that isn't working. What is wrong with the following configuration? <Location /members> AuthName Members AuthType
The correct answer is A. The directive require validuser is missing.. The Apache configuration for basic authentication is incomplete because it defines how to authenticate users but does not specify that authentication is actually required for access.
Question
Options
- AThe directive require validuser is missing.
- BBasic Authentication has been removed from Apache 2.x.
- CThe format of the password file is not specified.
- DThe AuthUserFile must be in the apache configuration directory.
How the community answered
(39 responses)- A87% (34)
- C5% (2)
- D8% (3)
Why each option
The Apache configuration for basic authentication is incomplete because it defines how to authenticate users but does not specify that authentication is actually required for access.
The `require valid-user` directive is necessary to enforce that a successfully authenticated user must be a valid user recognized by the `AuthUserFile` for access to be granted. Without this directive, Apache performs the authentication checks but does not actually block unauthenticated access.
Basic Authentication remains a fully supported and commonly used authentication method in Apache 2.x and subsequent versions.
Apache implicitly understands the format of password files created for Basic Authentication (e.g., via `htpasswd`); the format does not need explicit configuration.
The `AuthUserFile` can be located anywhere on the file system, provided the Apache process has appropriate read permissions to access it, not just within the Apache configuration directory.
Concept tested: Apache Basic Authentication configuration
Source: https://httpd.apache.org/docs/2.4/howto/auth.html
Topics
Community Discussion
No community discussion yet for this question.