Forum Moderators: phranque

Message Too Old, No Replies

Authentify users coming from a range of address

         

blaisbr

6:04 pm on Sep 30, 2006 (gmt 0)

10+ Year Member



I use an apache 2.? server and within this config some Directory,
Location, ProxyPass, etc.

1. Directory directives used to go within our php application:

<Directory /MySite/*>
...
</Directory>

2. Location directives are used to access on Subversion repositories

<Location /MySite/svn/myrepo01>
...
</Location>
<Location /MySite/svn/myrepo02>
...
</Location>

3. ProxyPass and ProxyPassReverse to rewrite access on internal j2ee
applications

ProxyPass /MySite/jira/ [myinternalserver...]
ProxyPassReverse /MySite/jira/ [myinternalserver...]

As you can see all those adresses begin with /MySite

It works well. The authentication for our internal users is done, if
necessary, by the different elements.

MY PROBLEM: I need to authentify users that are coming from a range of
IP Adresses. Those users are coming from Internet. There are going
trough a webgate server. This server have a certain range of addresses.

I imagine to use Proxy for this range of ip address. Is it the correct
technic?

And if Yes, How can I do to proxying all the different directives?

My goal is to find a technic to keep the different directives as it is,
and to surround them with a proxy or something like that. I want to
avoid to duplicate all the directives. I don't want a directive from
intranet and another one for this range of address.

The authentication is "just" to validate the incoming user. All those
incoming users are registered within a central ldap server.

Thanks,

Bruno

blaisbr

4:49 pm on Oct 1, 2006 (gmt 0)

10+ Year Member



Is it a solution to put a Limit like this within the httpd.conf file?

<Limit>
order allow,deny
deny from X.Y.Z.[A..B]
allow from all
AuthType Basic
AuthLDAP...
Require valid-user
</Limit>

And outside this denied address, it is a full access.

Thanks,

Bruno