I want our server to be available without LDAP login if the client is requesting through our intranet. It appears that all intranet traffic comes through 10.0* IPs. I modified our VirtualHost based on other httpd.confs I found online to the following:
<VirtualHost *> ServerName <REDACTED> WSGIScriptAlias / <REDACTED> <Directory /var/server/server> AuthType Basic AuthName "<REDACTED>" AuthBasicProvider ldap AuthLDAPBindDN "uid=<REDACTED>,ou=<REDACTED>,dc=<REDACTED>" AuthLDAPBindPassword "<REDACTED>" AuthLDAPURL "<REDACTED>" AuthzLDAPAuthoritative On Require valid-user # I added/modified the following lines when I wanted to get rid of LDAP authentication for internal users Order deny,allow Deny from all Allow from 10.0 Satisfy any </Directory> </VirtualHost>
However, when I did this it make our server available from the internet without LDAP access! Any ideas what I'm doing wrong?