Combine basic auth and redirect in .htaccess?

Question

Following situation:

I wish to redirect all IP adresses (but NOT two fixed ones) if accessing the www.mydomain.tld/SubFolder1/ on my apache to www.mydomain.tld
Offen basic authentication for the www.mydomain.tld/SubFolder1/ with differen usernames

any idea how to do that?

I tried to use one htaccess file where i added some redirection rules and the basic auth stuff. But I never got the redirection rules to work correctly. Seamed the auth stuff is overwriting the redirection rules. Could that be?

I use the following code for the Authentication

AuthName "Restricted"
AuthType Basic
AuthUserFile //is/htdocs/www/subfolder1/.htpasswd
AuthGroupFile /dev/null
require valid-user

Should basic authentication be shown to all the users before redirection? (including those 2 IPs)? — anubhava
– anubhava, Commented Jan 21, 2014 at 18:13
No, only the two IPs should see the basic authentication, all other users should be forwarded to the root domain without seeing the authentication. — BastianW
– BastianW, Commented Jan 22, 2014 at 18:40

anubhava · Accepted Answer · 2014-01-22 21:17:36Z

2

You can use this code in your DOCUMENT_ROOT/SubFolder1/.htaccess file:

RewriteEngine On

RewriteCond %{REMOTE_ADDR} !^(192\.168\.0\.10|192\.168\.0\.20)$
RewriteRule ^$ http://www.mydomain.tld/ [L,R]

SetEnvIf Remote_Addr ^(192\.168\.0\.10|192\.168\.0\.20)$ DOAUTH

AuthName "Restricted"
AuthType Basic
AuthUserFile //is/htdocs/www/subfolder1/.htpasswd
AuthGroupFile /dev/null
require valid-user
Satisfy     any
Order       allow,deny
Allow from  all
Deny from env=DOAUTH

SetEnvIf is needed because mod_auth runs before mod_rewrite hence env set by mod_rewrite cannot be used mod_auth.

answered Jan 22, 2014 at 21:17

anubhava

790k67 gold badges603 silver badges671 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

BastianW Over a year ago

Great, thanks ... By the way, is it possible to use more then one SetEnvIf line, for example if I wish to add 2 additional IPs? this would be handy if I would need to add my home dynamic dial up IP range here. With the pipe I might end up in a very long string

anubhava Over a year ago

Oh yes sure you can have as many SetEnvIf lines as you want.

Collectives™ on Stack Overflow

Combine basic auth and redirect in .htaccess?

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related