Combine basic auth and ip whitelisting

Server NGINX
1

Hi,

I have set up Apache for an existing site to use either ip whitelisting
or basic authentication. If the user’s IP is not on the IP whitelist, it
asks him for a password. My htaccess file looks something like this:

Order deny,allow
Deny from all
AuthName “Restricted Area”
AuthUserFile /path/to/passwords
AuthType Basic
Require valid-user
Allow from 123.456.789.10
Allow from 123.456.789.11
Satisfy Any

2

Hello!

On Thu, Apr 12, 2012 at 05:39:42PM -0400, jaynyc wrote:

AuthUserFile /path/to/passwords
AuthType Basic
Require valid-user
Allow from 123.456.789.10
Allow from 123.456.789.11
Satisfy Any

Is it possible to do something like this with Nginx?

http://nginx.org/r/satisfy

location / {
satisfy any;

allow 192.168.1.0/32;
deny  all;

auth_basic           "closed site";
auth_basic_user_file conf/htpasswd;

}

Maxim D.

3

AuthUserFile /path/to/passwords
AuthType Basic
Require valid-user
Allow from 123.456.789.10
Allow from 123.456.789.11
Satisfy Any

Is it possible to do something like this with Nginx?

auth_basic “Restricted Area”; # realm
auth_basic_user_file /path/to/passwords;

allow 123.456.789.10;
allow 123.456.789.11;
deny all;

satisfy any;

–appa

4

Hi Appa and Maxim,

Thanks a lot for your help. That worked! :slight_smile:

Regards,

  • Jay

Posted at Nginx Forum: