You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "J. Bakshi" <jo...@infoservices.in> on 2011/01/24 07:53:40 UTC

[users@httpd] Satisfy Any not working here

Dear list,

I have a .htaccess with authentication configuration located at the htdocs , so all folders under htdocs need a username / password to be accessed. Now I need to allow connection from a specific IP and to a specific folder, so it would be a password less access for that folder only when accessed from that IP. The .htaccess placed in that folder is

``````````````````
Allow from <ip address>
Satisfy Any
````````````````

But this allows all the connection to be password less. Is there any mistake in this config ?
Kindly suggest.
Thanks

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Satisfy Any not working here

Posted by Eric Covener <co...@gmail.com>.
On Mon, Jan 24, 2011 at 1:53 AM, J. Bakshi <jo...@infoservices.in> wrote:
> Dear list,
>
> I have a .htaccess with authentication configuration located at the htdocs , so all folders under htdocs need a username / password to be accessed. Now I need to allow connection from a specific IP and to a specific folder, so it would be a password less access for that folder only when accessed from that IP. The .htaccess placed in that folder is
>
> ``````````````````
> Allow from <ip address>
> Satisfy Any
> ````````````````
>
> But this allows all the connection to be password less. Is there any mistake in this config ?

How about preceding it with something that actually denies host-based access?

Order allow,deny
or
Order deny,allow
deny from all

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org