When to use

Use this code when you want a file to be viewed only by members of the BU community. Using the first method, visitors will be prompted to give their BU login name and Kerberos password when they try to view files in the restricted directory. Using the second method, only visitors using the BU campus network (such as visitors using BU dialup service or computing on campus) will be allowed access. The third method combines the first two, prompting visitors to log in only if they are not using the BU Network.

Option 1: Kerberos method

Using this method, visitors will be prompted to give their BU login name and Kerberos password when they try to view files in the restricted directory. This prompt will occur whether the visitor is on campus or off campus.

CODE EXAMPLE:

AuthType weblogin
<Limit GET POST>
require valid-user
</Limit>

NOTES:

  1. Copy and paste this code as outlined in Protect Your Subdirectory. Use this code exactly as above. Do not modify it.
  2. Only members of the BU community who have a BU login name and Kerberos password will be able to view files restricted in this way. However, most members of the community do have a BU login name and Kerberos password.

Oprion 2: Domain method

With this method, you restrict access to on-campus viewers. This is convenient for visitors who always view the restricted files from an on-campus location. However, this method does not allow members of the BU community to view restricted files from off campus.

CODE EXAMPLE:

AuthType weblogin
<Limit GET POST>
Satisfy any

order deny,allow
deny from all
allow from .bu.edu
</Limit>

NOTES:

Copy and paste this code as outlined in Protect Your Subdirectory. Use this code exactly as above. Do not modify it.

Option 3: Domain method with Kerberos

With this method, all members of the BU community will be able to view restricted files, whether or not they are using the campus network (either from on campus or by using BU dialup service) when viewing restricted files. Only visitors who are not using the BU network will be prompted to log in.

CODE EXAMPLE:

AuthType weblogin
<Limit GET POST>
Satisfy any

order deny,allow
deny from all
allow from .bu.edu
require valid-user
</Limit>

NOTES:

Copy and paste this code as outlined in Protect Your Subdirectory. Use this code exactly as above. Do not modify it.