How to protect URL with OSSO while leaving sub-URL unprotected

Question

Hi,
I have deployed an application to OAS while SSO is enabled and I have the following URL to be protected:
http://host:port/myContext
In the myContext application, there is a servlet that I want to be unprotected:
http://host:port/myContext/myPublic
I tried two ways to achieve this. One is in mod_osso.conf, create a Location entry like:
<Location /myContext/>
     require valid-user
     AuthType Basic
Order deny, allow
     Allow from myPublic
     Satisfy any
</Location>
The other way is to create a LocationMatch in mod_osso, like:
<LocationMatch ^/myContext((?!myPublic).)*$>
require valid-user
AuthType Basic
</LocationMatch>
The problems with both of these two methods are they seem to break the HTTP server or show down the whole server. I would like to get help on this:
1. What is the legitimate way to do this: protect a URL while unprotect its sub-page.
2. In order to protect a new URL, besides adding a Location or LocationMatch , is there something else to do? I don't know why the new entries break/slow down the server.
Thanks for any help.

Answer 1

Hi,
Please refer to this message:
Re: How to deal with SSO secured webservices
I tested the described approach and it worked fine for me.
Best regards,
IG