iTP Secure WebServer System Administrator's Guide (iTPWebSvr 6.0+)

Configuration Directives
iTP Secure WebServer System Administrator’s Guide—523346-002
A-50
Region Commands
The -noexist argument allows you to control the error reported if a received URL
has an incorrect extension for the region. If you specify the option, the response to
a request with an incorrect extension is “file not found.” If you omit the option, the
response to a request with an incorrect extension is “access denied.”
The file-extension variable specifies the required extension. (Do not include a
period in the value.)
For example, the following command requires that all URLs starting with /G have
the extension .html. If the URL in the request has some other extension, the server
returns an “access denied” error to the browser:
Region /G* {
RequiredFileExtension html
}
The following command requires that all URLs starting with /G have the extension
.html. If the URL in the request has some other extension, the server returns a “file
not found” error to the browser.
Region /G* {
RequiredFileExtension -noexist html
}
The following command requires that any URL referring to a Guardian subvolume
whose name ends in “atp” must have the extension .atp. If the URL in the request
has some other extension, the server returns an “access denied” error to the
browser.
Region /G/vol/*atp/* {
RequiredFileExtension atp
}
The following command requires that any URL referring to a Guardian file whose
name ends in “atp” must have the extension .atp. If the URL in the request has
some other extension, the server returns an “access denied” error to the browser.
Region /G/*atp {
RequiredFileExtension atp
}
RequirePassword realm -userfile userfile
The RequirePassword command limits access to clients that provide a valid user
name and password (HTTP basic authentication). realm is a text string presented
when the user’s web client prompts for a user name and password; userfile is
the name of the server file containing the user-name/password database.
If the web client does not supply a valid user name and password, no additional
commands in the directive are evaluated.