Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Apache: Users

How to allow specific IP to bypass .htaccess authentication ?

 

 

Apache users RSS feed   Index | Next | Previous | View Threaded


joydeep at infoservices

Aug 10, 2012, 5:11 AM

Post #1 of 2 (333 views)
Permalink
How to allow specific IP to bypass .htaccess authentication ?

Dear list,

I have the following in my .htaccess to force the authentication

[....]
AuthName "htaccess password prompt"
AuthUserFile /home/askapache.com/.htpasswd
AuthType Basic
Require valid-user
[...]

Now I like some IPs to bypass the authentication. Hence I have modified the rule as

[...]
Order deny,allow
Deny from all
AuthName "htaccess password prompt"
AuthUserFile /home/askapache.com/.htpasswd
AuthType Basic
Require valid-user
Allow from 172.17.10.1
Satisfy Any
[....]

But it just allow all IPs to bypass the authentication. IS there any wrong code in the rule set ?
The apache version is - [ Server version: Apache/2.2.16 (Debian) ]

Thanks

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd


apache at knutejohnson

Aug 10, 2012, 8:10 AM

Post #2 of 2 (293 views)
Permalink
Re: How to allow specific IP to bypass .htaccess authentication ? [In reply to]

On 8/10/2012 5:11 AM, J. Bakshi wrote:
> Dear list,
>
> I have the following in my .htaccess to force the authentication
>
> [....]
> AuthName "htaccess password prompt"
> AuthUserFile /home/askapache.com/.htpasswd
> AuthType Basic
> Require valid-user
> [...]
>
> Now I like some IPs to bypass the authentication. Hence I have modified the rule as
>
> [...]
> Order deny,allow
> Deny from all
> AuthName "htaccess password prompt"
> AuthUserFile /home/askapache.com/.htpasswd
> AuthType Basic
> Require valid-user
> Allow from 172.17.10.1
> Satisfy Any
> [....]
>
> But it just allow all IPs to bypass the authentication. IS there any wrong code in the rule set ?
> The apache version is - [ Server version: Apache/2.2.16 (Debian) ]
>
> Thanks

I have a similar setup but I don't use the htaccess file. To get mine
to work without letting everybody in, I needed an Order Allow,Deny line
just before the Allow from line.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

Apache users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.