How to give an authenticated access to a web site for some IP addresses

sharad · 05-29-2006, 03:26 AM

Hello,
I want to give an access to my web site to the computers
in my office without any authentication.
But If anybody wants to access my web site outside
the office then it should be authenticated with the
user name and password.

Please tell me to solve this problem.

b0nd · 05-29-2006, 07:59 PM

Hi,
although i don't have the answer to your question but replying b'coz i think you are very desperate to do this. That's why you are posting it again and again

It wasn't bad that you posted this question in the security section of this forum. People here are quite intelligent.
To get more help i would have posted this query in some hacking forums also. They are more used to and aware of such kinda things.
www.securibox.net
www.hackerthreads.org

(hope i would not get flamed for this reply)
regards

Capt_Caveman · 05-31-2006, 02:21 AM

Use the directive "Satisfy any" along with both Basic Auth and IP-based access control (Allow from x.x.x.x) in your authentication config. The exact example of what you are trying to setup is in the Apache documentation (see the section on the "Satisfy" directive towards the bottom).

deeptish · 05-31-2006, 03:55 AM

can you .htaaccess to achieve these

jayakrishnan · 06-01-2006, 05:29 AM

dont think its possible , u can have authentication for all users or deny/allow per ip

Regards

Capt_Caveman · 06-01-2006, 07:15 AM

Quote:

Originally Posted by jayakrishnan

dont think its possible , u can have authentication for all users or deny/allow per ip

Regards

From the link to the Apache docs that I posted above:

"A very good example of this is using access control to assure that, although a resource is password protected from outside your network, all hosts inside the network will be given free access to the resource. This would be accomplished by using the Satisfy directive, as shown below"