Re: How to combine IP and user based AAA without Satisfy?

2009-12-18 Thread Rainer Jung
On 18.12.2009 00:36, Christian Seiler wrote: Hi, Since I'm also interested in AAA in future Apache versions, I decided to have a look at this. In 2.4, *without* using the deprecated Satisfy via mod_access_compat, you will always be prompted by basic auth, because the ip addresses are only

Re: How to combine IP and user based AAA without Satisfy?

2009-12-17 Thread Christian Seiler
Hi, Since I'm also interested in AAA in future Apache versions, I decided to have a look at this. In 2.4, *without* using the deprecated Satisfy via mod_access_compat, you will always be prompted by basic auth, because the ip addresses are only used during authz which comes after authn. This

How to combine IP and user based AAA without Satisfy?

2009-12-16 Thread Rainer Jung
Hi, during a test migration from 2.2 to 2.4 I noticed, that the new AAA does not allow to combine ip based AAA with user based. The goal: allow access if either client ip address satisfies conditions or user authenticates via basic auth. Until 2.2 one could use Satisfy Any. The resulting