Apache IP based authentication

cbass · 11-14-2010, 06:43 AM

Hi all,

I'm trying to set up an Apache server (version 2.2.16 (Ubuntu)).

This is only the second time I've done it, so I'm taking baby steps. I'm planning on having my homepage visible only within the LAN (192.168.0), and a few other authenticated pages accessible from the www, via a no-ip type url.

I'm falling at the first hurdle; I can't get ip-based authentication to work. This is a snippet from my sites-available/default:

Code:

  3     DocumentRoot "/srv/www"
  4 
  5     <Directory "/srv/www/">
  6         Options Indexes FollowSymLinks MultiViews
  7         AllowOverride None
  8         Order deny,allow
  9         Deny from all
 10         Allow from 192.168.0
 11     </Directory>

My interpretation of the Apache docs is that this should allow access from all machines within the 192.168.0 network, but it doesn't allow any access. All I get is:

Code:

Forbidden
You don't have permission to access /
on this server.

If I remove lines 8-10, it works fine, but doesn't restrict the access as I would like.

What am I doing wrong?

Thanks in advance,

Charlie

grim76 · 11-14-2010, 07:59 AM

I think you have to flip lines 9 and 10. That way your last directive is your deny.

bathory · 11-14-2010, 08:01 AM

Hi and welcome to LQ,

These lines are correct.
Just a silly question: Are you sure that your LAN IP is 192.168.0.x?

Regards

cbass · 11-14-2010, 10:08 AM

Quote:

Originally Posted by bathory

Hi and welcome to LQ,

These lines are correct.
Just a silly question: Are you sure that your LAN IP is 192.168.0.x?

Regards

100%. I manage the router at 192.168.0.1. With the Order/Allow/Deny directives removed, I can point a browser to 192.168.0.1 and the index.html shows fine. Can ssh into the server by IP as well.

I've had a bit of a poke around. I changed the order to allow,deny and allowed from 192.168.0 . This let me access the homepage from within the lan, but not from the server itself.

So I added 127.0.0.1 to the allow from directive. Now it all works.

Thanks for your help.

blue_print · 11-14-2010, 10:31 AM

You will need to change "Allow From" as like this one,

Allow From 192.168.0.0/24