Sun Microsystems Netscape Enterprise Server, Administrator'S Manual

Page: 339 / 532

Chapter 14, Controlling Access to Your Server 339
Restricting Access to Your Web Site
The following sections describe the options that appear in the bottom frame of
the access control page.
Setting Access Control Actions
You can specify the action the server takes when a request matches the access
control rule.
• Allow means the users or systems can access the requested resource.
• Deny means the users or systems cannot access the resource.
The server goes through the list of ACEs to determine the access permissions.
For example, the first ACE is usually to deny everyone. If the first ACE is set to
“continue,” the server checks the second ACE in the list. (If continue is
not
checked, everyone would be denied access to the resource.) If the second entry
matches, then the next ACE is used. The server continues down the list until it
reaches either an ACE that doesn’t match or that matches but is set to not
continue. The last ACE that matches is used to determine if access is allowed or
Table 14.1 LDAP Attributes
Resource wildcard What it means
default A named ACL created during installation that restricts
write access so only users in the LDAP directory can
publish documents (for example, by using the web
publisher).
Entire Server One set of rules determines the access to your entire
web site, including any virtual servers you have
running. To restrict access to a virtual server, specify
the path of its document root.
*.html
Controls access to all files with the
.html
extension
*.cgi
Controls access to all files with the
.cgi
extension
/usr/netscape/
server4/docs/
cgi-bin/*
Controls access to all files and directories in the
cgi-
bin
directory. You must specify an absolute path. On
NT, the path must include the drive letter.
uri=“/sales”
Controls access to the
sales
directory in the
document root. To specify URIs, create a named ACL.