[users@httpd] Authentication using mod_auth_ldap and IP

["Martens, Jason" <jm...@cityofevanston.org>]

We have an internal web site, and I want to allow all internal users
access without logging in by granting access to 10.*.  But I also want
to allow external access by logging in with mod_auth_ldap.  Is there
some way to have an authentication scheme like this (pseudo code):

If 10.* allow
Else require valid-user

Thanks!
Jason Martens


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Authentication using mod_auth_ldap and IP

[Rich Bowen <rb...@rcbowen.com>]

On Mon, 2 Jun 2003, Martens, Jason wrote:

> We have an internal web site, and I want to allow all internal users
> access without logging in by granting access to 10.*.  But I also want
> to allow external access by logging in with mod_auth_ldap.  Is there
> some way to have an authentication scheme like this (pseudo code):
>
> If 10.* allow
> Else require valid-user

This is what the Satisfy directive is for:

Order deny,allow
Deny from all
Allow from 10.

# Other auth directives go here
require valid-user

# Enforce either requirement
Satisfy any

-- 
Nothing is perfekt. Certainly not me.
Success to failure. Just a matter of degrees.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org