Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm using HTTPS+basic auth (AuthType Basic ... Require valid-user) to protect a resource, but I'd like to allow connections from localhost through, even if they aren't authenticated.

What's the simplest way of doing that?

share|improve this question
1  
    
Oops, clearly my searching-foo failed me today. Thanks. –  David Wolever Nov 19 '09 at 20:44

1 Answer 1

up vote 14 down vote accepted

You can tell apache to allow connections from specific IP addresses, like this:

Allow from 192.168.0.1/24
Satisfy Any

If you add that to your authentication scheme it will allow any IP address in the 192.168.0.1 - 192.168.0.254 range to access your content.

A full example may look like this (I am using digest, just substitute with your basic code):

<Location />
    Order deny,allow
    Deny from all
    AuthName "SomeSite"
    AuthType Digest
    AuthDigestProvider file
    AuthDigestDomain http://somesite.com
    AuthUserFile /etc/apache2/password.file
    Require valid-user
    Allow from 192.168.0.1/24
    Satisfy Any
</Location>
share|improve this answer
1  
Ah, 'satisfy' – that was the directive I was missing. Thanks! –  David Wolever Nov 19 '09 at 20:36

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.