Bug 438150

Summary:	www-servers/apache-2.4.3 - configuration files have "require host", should be "require ip"
Product:	Gentoo Linux	Reporter:	Nick Novikov <nick.novikov>
Component:	[OLD] Server	Assignee:	Lars Wendler (Polynomial-C) (RETIRED) <polynomial-c>
Status:	RESOLVED FIXED
Severity:	normal	CC:	holger, mail, nick.novikov, proxy-maint, tobias.pal, voyageur
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	468302

Description Nick Novikov 2012-10-12 16:53:56 UTC

In files /etc/apache2/modules.d/00_mod_info.conf & /etc/apache2/modules.d/00_mod_status.conf line 'Require host 127.0.0.1' is wrong.

It should be 'Require ip 127.0.0.1' or 'Require local'
Second will match both localhost, 127.0.0.1 and ::1

Comment 1 Paul Tobias 2013-09-09 18:20:58 UTC

I can confirm this bug, and add that /etc/apache2/modules.d/46_mod_ldap.conf also have this problem.

It would be great to fix this bug, as it took me like an hour to figure out why my server-status stopped working. The 'Require host 127.0.0.1' looks correct, but it actually acts like 'Require all denied'. As Nick suggested, 'Require local' would be best as it works with IPv6 localhost too.

Comment 2 Bernard Cafarelli gentoo-dev

2014-05-11 18:04:52 UTC

Sorry Lars, I missed that bug when filling #509772 :/ It may be better to use this one to track the next gentoo-apache rollout

Comment 3 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev

2014-05-22 14:05:45 UTC

Fixed in =www-servers/apache-2.2.27-r3 and =www-servers/apache-2.4.9-r3.