Re: Can I use different Directory according to the source IP?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Jul 23, 2014 at 7:30 PM, Mark jensen <ngiw2012@xxxxxxxxxxx> wrote:
First, I may ask the question in a different way: can we have two defined Directory tag for one directory?

It would not accomplish what you want if it would work at all.
 
- users with source 192.168.1

<Directory /var/www/html/directory>
      Order Deny,Allow
      Deny from all
      Allow from 192.168.1
</Directory>
     
- other users (need to be authenticated using LDAP):

<Directory /var/www/html/directory>
      AuthName "LDAP Authentication"
      AuthType Basic
      AuthBasicProvider ldap
      AuthzLDAPauthoritative off
      AuthLDAPURL ldap://192.168.1.3/dc=example,dc=com?uid?sub?(objectClass=*)
      Require valid-user
</Directory>


If these are really your requirements, you could use Satisfy Any: https://wiki.apache.org/httpd/BypassAuthenticationOrAuthorizationRequirements

<Directory /var/www/html/directory>
      AuthName "LDAP Authentication"
      AuthType Basic
      AuthBasicProvider ldap
      AuthzLDAPauthoritative off
      AuthLDAPURL ldap://192.168.1.3/dc=example,dc=com?uid?sub?(objectClass=*)
      Require valid-user
      Order allow,deny
      Allow from 192.168.1
      Satisfy any
</Directory>
 
- Y

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux