I'm using HTTPS+basic auth (AuthType Basic ... Require valid-user) to protect a resource, but I'd like to allow connections from localhost through, even if they aren't authenticated.

What's the simplest way of doing that?


You can tell apache to allow connections from specific IP addresses, like this:

Allow from
Satisfy Any

If you add that to your authentication scheme it will allow any IP address in the - range to access your content.

A full example may look like this (I am using digest, just substitute with your basic code):

<Location />
    Order deny,allow
    Deny from all
    AuthName "SomeSite"
    AuthType Digest
    AuthDigestProvider file
    AuthDigestDomain http://somesite.com
    AuthUserFile /etc/apache2/password.file
    Require valid-user
    Allow from
    Satisfy Any
  • 2
    Ah, 'satisfy' – that was the directive I was missing. Thanks! – David Wolever Nov 19 '09 at 20:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.