Re: How to combine IP and user based AAA without Satisfy?

2009-12-18 Thread Rainer Jung
On 18.12.2009 00:36, Christian Seiler wrote: Hi, Since I'm also interested in AAA in future Apache versions, I decided to have a look at this. In 2.4, *without* using the deprecated "Satisfy" via mod_access_compat, you will always be prompted by basic auth, because the ip addresses are only us

Re: How to combine IP and user based AAA without Satisfy?

2009-12-17 Thread Christian Seiler
Hi, Since I'm also interested in AAA in future Apache versions, I decided to have a look at this. > In 2.4, *without* using the deprecated "Satisfy" via mod_access_compat, > you will always be prompted by basic auth, because the ip addresses are > only used during authz which comes after authn.

How to combine IP and user based AAA without Satisfy?

2009-12-16 Thread Rainer Jung
Hi, during a test migration from 2.2 to 2.4 I noticed, that the new AAA does not allow to combine ip based AAA with user based. The goal: allow access if either client ip address satisfies conditions or user authenticates via basic auth. Until 2.2 one could use "Satisfy Any". The resulting