apache2-deprecated-auth-config

The package is using some of the deprecated authentication configuration directives Order, Satisfy, Allow, Deny, or

These do not integrate well with the new authorization scheme of Apache 2.4 and, in the case of and have confusing semantics. The configuration directives should be replaced with a suitable combination of , , Require all, Require local, Require ip, and Require method.

Alternatively, the offending lines can be wrapped between <IfModule !mod_authz_core.c> ... or <IfVersion < 2.3> ... directives.

Severity: warning
Experimental: false

See also