Combining Basic Authentication with Access Restriction by IP Address and auth_basic off

2018-06-27 Thread basti
Hello, I have a config like: server { ... # combine basic auth and ip whitelisting # https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/ satisfy any; allow ; deny all; auth_basic "Restricted"; auth_basic_user_file /etc/nginx/nx4/.htpass

Re: Combining Basic Authentication with Access Restriction by IP Address and auth_basic off

2018-06-27 Thread Ruslan Ermilov
On Wed, Jun 27, 2018 at 03:08:50PM +0200, basti wrote: > Hello, > I have a config like: > > server { > > ... > # combine basic auth and ip whitelisting > # > https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/ > satisfy any; > allow ; > deny

Re: Combining Basic Authentication with Access Restriction by IP Address and auth_basic off

2018-06-27 Thread basti
On 27.06.2018 15:57, Ruslan Ermilov wrote: > Since you have switched auth_basic off, the only enabled authentication > left is by client address, and your inherited configuration says it's > denied for everything except . Put "allow all" into the > "location /.well-known/acme-challenge/" to hav