We're using Apache as a reverse proxy, so some of our internal development/testing servers are accessible on the open Internet for UAT/CAT purposes.
We have basic authentication setup through LDAP servers, but we have some sites were we need to whitelist some specific IPs so that they can access the server without going through authentication.
I'm not sure if adding another section like this, above the current one, would work:
<proxy *> Require all granted Require ip x.x.x.x y.y.y.y </proxy>
Here's what the
.conf file currently looks like:
<VirtualHost *:80> ServerName some.server.url ## Vhost docroot DocumentRoot "/var/www" ## Directories, there should at least be a declaration for /var/www <Directory "/var/www"> Options Indexes FollowSymLinks MultiViews AllowOverride None Require all granted </Directory> ## Logging ErrorLog "/var/log/httpd/some.server.url_error.log" ServerSignature Off CustomLog "/var/log/httpd/some.server.url_access.log" combined ## Proxy rules ProxyRequests Off ProxyPreserveHost Off ProxyPass /robots.txt ! ProxyPassReverse /robots.txt ! ProxyPass / https://some.server.url/ acquire=3000 keepalive=On retry=0 timeout=1800 ProxyPassReverse / https://some.server.url/ ## Custom fragment <proxy *> AuthBasicProvider ldap-client-websites ldap-sidlee-dig AuthType Basic AuthName "GRM CRHA UAT" Require valid-user </proxy> </VirtualHost>