Lintian ReportsBETA

Wapache2-deprecated-auth-config

Tag versions

The tag is present in Lintian version 2.109.24. That is the most recent version we know about.

The package is using some of the deprecated authentication configuration directives Order, Satisfy, Allow, Deny, <Limit> or <LimitExcept>

These do not integrate well with the new authorization scheme of Apache 2.4 and, in the case of <Limit> and <LimitExcept> have confusing semantics. The configuration directives should be replaced with a suitable combination of <RequireAll>, <RequireAny>, Require all, Require local, Require ip, and Require method.

Alternatively, the offending lines can be wrapped between <IfModule !mod_authz_core.c> ... </IfModule> or <IfVersion < 2.3> ... </IfVersion> directives.

Visibility: warning

Check: apache2

The following 4 source packages in the archive triggered the tag 17 times.

We found 13 overrides. The tag performed 24% of the time.