Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [mod-authz-host]

17 questions
26
votes
3 answers

Apache httpd: How can I Deny from all, Allow from subnet, but Deny from IP within that subnet?

I am running CentOS 5.5 with the stock Apache httpd-2.2.3. I have enabled mod_status at the Location /server-status. I would like to allow access to this single Location in the following way: Deny from all Allow from the subnet 192.168.16.0/24 Deny…
Stefan Lasiewski
  • 22,949
  • 38
  • 129
  • 184
13
votes
3 answers

Apache, use X-Forwarded-For for allow

How can use X-Forwarded-For headers(my proxy ip 10.1.1.x) to allow HTTP query?
bindbn
  • 5,153
  • 2
  • 26
  • 23
4
votes
2 answers

Can you use wildcards in Subversion's Path Based Authorization?

Subversion info: Collabnet Subversion Edge 3.2.2 SVN Version: 1.8.0 Apache HTTP Server 2.4.4 Using mod_authz_svn, no ldap What I'm trying to do is allocate access of a Subversion project to all developers on the team, but have certain directories…
codewario
  • 548
  • 3
  • 16
  • 33
3
votes
2 answers

htaccess - Allow viewing of index.html via www.example.com/foo instead of www.example.com/foo/index.html

So I have a hypothetical folder on my website protected by Deny from all on my .htaccess file. I have coded an exception as below: order allow,deny Allow from all If a user types www.example.com/path/index.html they are…
hjk321
  • 33
  • 2
3
votes
1 answer

apache2.4 virtual host blocking access with authz_core log, even though authz not configured

So I'm getting 403: Forbidden errors on one of my apache2.4 virtualhosts. What's interesting, is that /var/log/apache2/error.log reports: authz_core:error] [pid 4878:tid 140394394269440] [client 10.214.154.19:33009] AH01630: client denied by server…
1n5aN1aC
  • 145
  • 2
  • 2
  • 9
3
votes
2 answers

From SVN to GIT: Something similar to authz?

We currently have an SVN repository setup and want to switch over to GIT, but we're currently not sure what exact GIT setup will work for us. We're currently using SVN (w/ Authz) + Apache (w/ WebDAV & LDAP). We use Authz for SVN since we need fine…
Greeny
  • 41
  • 3
2
votes
1 answer

Apache 2.4: Allow access to directory only for ip address range

I want allow access to /htdocs/reserved/ directory only for ip addresses from 192.168.1.193 to 192.168.1.254 (.193 --> .254). I have written this code in httpd.conf: Order Deny, Allow Deny from all Allow…
Simone Nigro
  • 375
  • 2
  • 3
  • 17
1
vote
1 answer

Require local Apache directive not working on AWS EC2 instance

I have an Apache 2.4 VirtualHost on an AWS EC2 instance with the following config: Require ip [REDACTED] # Office IP Require local When I make a request from the redacted external office IP…
Andy
  • 131
  • 1
  • 6
1
vote
1 answer

Apache restrict domain

I would like to configure Apache (2.2)to restrict what domains users can access e.g. if apache FQDN is myapache.myfunnydomain.com then apache will only allow requests to resources in .myfunnydomain.com (or whatever domain I configure as legal) and…
user1843591
  • 157
  • 1
  • 9
0
votes
1 answer

Apache, mod_authz_host, ineffective 'Allow from' clause

I am trying to restrict access to a part of my website to only a specific machine within the local network using mod_authz_host. https://httpd.apache.org/docs/2.4/mod/mod_authz_host.html My config looks like this: Order…
Martin Vlk
  • 13
  • 4
0
votes
1 answer

Basic Auth apache 2.2 bypass IP

how can set the basic auth of apache 2.2 to bypass IP? I have follow this wiki http://wiki.apache.org/httpd/BypassAuthenticationOrAuthorizationRequirements , but ask always a password, also to IP listed: AuthName…
hellb0y77
  • 955
  • 5
  • 11
  • 21
0
votes
1 answer

Network Related Apache 2.4 403 Authz Error AH01630

I've never seen this style of behavior before. If I access this site on most networks it works. However if I am on-site of the client I cannot pull up the site. TWC Home, works fine. ATT Cell Data, works fine. Pingdom tests, work fine. TWC @Work,…
Ciordia9
  • 21
  • 4
0
votes
1 answer

Apache httpd: How can I Deny from all, Allow from subnet without the ip address range being known before hand?

I am running REHL 6.7 with the stock Apache httpd-2.2. I have enabled mod_status at the Location /server-status. I would like to allow access to this single Location in the following way: Deny from all Allow from within my servers subnet with IP…
jgr208
  • 111
  • 8
0
votes
2 answers

Apache 2.4 - How to restrict traffic (by IP address) to all requests except the base path?

I have a collection of debugging scripts in /var/www that display useful information that helps with investigating issues on the server, however that same information is potentially sensitive, so I do not want it publicly available. The DocumentRoot…
tommarshall
  • 423
  • 1
  • 4
  • 7
0
votes
1 answer

Apache - protect particular http patterns

I want to restrict certain domains from accessing services on my app server. For example; mydomain.com/sensitiveInformationServlet I want to create a filter on my Apache server which will match all requests for this servlet and check the domain and…
cdugga
  • 105
  • 1
  • 5
1
2