You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Grant <em...@gmail.com> on 2009/01/19 20:41:21 UTC
[users@httpd] Authentication IP restriction by user?
I have 2 users who need to be able to access a website from anywhere
and 2 users who only need to access it from a certain IP. Can
authentication be restricted to a certain IP for certain users, and
not restricted for others?
- Grant
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Authentication IP restriction by user?
Posted by Grant <em...@gmail.com>.
>> I have 2 users who need to be able to access a website from anywhere
>> and 2 users who only need to access it from a certain IP. Can
>> authentication be restricted to a certain IP for certain users, and
>> not restricted for others?
>>
> Hi.
> You can do pretty much what you want with Apache + mod_perl, in terms of
> access control and authentication. With Apache and the standard (non-perl)
> Apache modules, I doubt you can do what you indicate above.
> Just in case someone else wants to contradict me and follow this up, can you
> be a bit more precise about what you want ?
>
> Do you want e.g. :
> - any connection from IP 1.2.3.4 will (automatically) be authenticated as
> "userA" and be granted access ?
> OR
> - userA gets access if he not only authenticates with user-id/pw but *also*
> is accessing from IP address 1.2.3.4 ?
> AND/OR
Thanks for your response, the above is what I'm after. I don't want
certain users to be able to log in with their password unless they are
doing so from a certain IP.
- Grant
> - accesses from addresses other than 1.2.3.4 must always authenticate with
> valid userid/pw ?
> etc..
>
> Depending on your precise requirements, there may still exist a devious
> combination of "Allow from .." and "Require .." and "Satisfy .." that may
> work, maybe.
> Or maybe you could set up 2 <VirtualHost> with slightly different AAA
> requirements, but accessing the same DocumentRoot ?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Authentication IP restriction by user?
Posted by André Warnier <aw...@ice-sa.com>.
Grant wrote:
> I have 2 users who need to be able to access a website from anywhere
> and 2 users who only need to access it from a certain IP. Can
> authentication be restricted to a certain IP for certain users, and
> not restricted for others?
>
Hi.
You can do pretty much what you want with Apache + mod_perl, in terms of
access control and authentication. With Apache and the standard
(non-perl) Apache modules, I doubt you can do what you indicate above.
Just in case someone else wants to contradict me and follow this up, can
you be a bit more precise about what you want ?
Do you want e.g. :
- any connection from IP 1.2.3.4 will (automatically) be authenticated
as "userA" and be granted access ?
OR
- userA gets access if he not only authenticates with user-id/pw but
*also* is accessing from IP address 1.2.3.4 ?
AND/OR
- accesses from addresses other than 1.2.3.4 must always authenticate
with valid userid/pw ?
etc..
Depending on your precise requirements, there may still exist a devious
combination of "Allow from .." and "Require .." and "Satisfy .." that
may work, maybe.
Or maybe you could set up 2 <VirtualHost> with slightly different AAA
requirements, but accessing the same DocumentRoot ?
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org