Apache：允许本地连接绕过基本身份验证 (跳过基本身份验证)

Question

我使用的是HTTPS basic auth（AuthType Basic ... Require valid-user）保护资源，但我希望允许来自localhost的连接，即使它们未经过身份验证。

最简单的方法是什么？

杰伊 · Accepted Answer · 2013-03-02 17：12：04Z

您可以告诉apache允许来自特定IP地址的连接，如下所示：

Allow from 192.168.0.1/24Satisfy Any

如果将其添加到您的身份验证方案中，它将允许192.168.0.1 - 192.168.0.254范围内的任何IP地址访问您的内容。

一个完整的示例可能如下所示（我正在使用摘要，只需替换您的基本代码）：

<Location />    Order deny,allow    Deny from all    AuthName "SomeSite"    AuthType Digest    AuthDigestProvider file    AuthDigestDomain http://somesite.com    AuthUserFile /etc/apache2/password.file    Require valid-user    Allow from 192.168.0.1/24    Satisfy Any</Location>

啊，“满足＆＃39; - 这是我失踪的指令。谢谢！ — 大卫沃利弗, 11月19日和09:30在20:36

Jay · Accepted Answer · 2013-03-02 17:12:04Z

You can tell apache to allow connections from specific IP addresses, like this:

Allow from 192.168.0.1/24
Satisfy Any

If you add that to your authentication scheme it will allow any IP address in the 192.168.0.1 - 192.168.0.254 range to access your content.

A full example may look like this (I am using digest, just substitute with your basic code):

<Location />
    Order deny,allow
    Deny from all
    AuthName "SomeSite"
    AuthType Digest
    AuthDigestProvider file
    AuthDigestDomain http://somesite.com
    AuthUserFile /etc/apache2/password.file
    Require valid-user
    Allow from 192.168.0.1/24
    Satisfy Any
</Location>

Ah, 'satisfy' – that was the directive I was missing. Thanks! — David Wolever, Nov 19 '09 at 20:36

You are here

apache ip skip authconfig Apache：允许本地连接绕过基本身份验证有大用

Apache：允许本地连接绕过基本身份验证 (跳过基本身份验证)

1答案正确答案

来自 https://serverfault.com/questions/86401/apache-allow-local-connections-to-bypass-basic-authentication

Apache: allow local connections to bypass basic authentication

1 Answer

正确答案

来自 https://serverfault.com/questions/86401/apache-allow-local-connections-to-bypass-basic-authentication

友情链接

搜索表单

用户登录

You are here

apache ip skip authconfig Apache：允许本地连接绕过基本身份验证 有大用

Apache：允许本地连接绕过基本身份验证 (跳过基本身份验证)

1答案 正确答案

来自 https://serverfault.com/questions/86401/apache-allow-local-connections-to-bypass-basic-authentication

Apache: allow local connections to bypass basic authentication

1 Answer

正确答案

来自 https://serverfault.com/questions/86401/apache-allow-local-connections-to-bypass-basic-authentication

友情链接

apache ip skip authconfig Apache：允许本地连接绕过基本身份验证有大用

1答案正确答案