Question

I am running TWiki and am using AuthType Basic with a passwd file for authentication to edit topics. I want to make the twiki server viewable to only people in my 10.0.0.* domain, but am unsure how to do that. I can't figure out what to do to get this wokring. I have an .htaccess file in my /twiki/bin folder with the following:

   AuthUserFile /twiki/data/.htpasswd
   AuthName "My Auth"
   AuthType Basic

 <Files ~ "[^/]*\.html$">
       SetHandler blabla
       #allow from all
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "viewauth">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "edit">
    #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "preview">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "save">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "attach">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "upload">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "rename">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "rdiffauth">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "manage">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "installpasswd">
   #       require valid-user
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

 <Files "*">
   #       allow from all
   order deny,allow
   deny from all
   allow from   10.70.60.*
   require valid-user
   satisfy any
 </Files>

My httpd.conf file is in the apache folder.

 <Directory "x:/twiki">
   Options Indexes FollowSymLinks MultiViews
   AllowOverride All

   #
   # Controls who can get stuff from this server.

   Order Deny,Allow
   Deny from all
   Allow from 10.70.60.*
 </Directory>
 
 ScriptAlias /twiki/bin/ "C:/twiki/bin/"
 Alias /twiki/ "C:/twiki/"
 <Directory  "C:/twiki/bin/">
   # RD: Changed None to All in next line, to enable .htaccess
   AllowOverride All
   Order Deny,Allow
   Deny from all
   Allow from 10.70.60.*

   FileInfo
   Options  ExecCGI
   SetHandler cgi-script
 </Directory>

Any ideas on what I need to do?

Environment

-- TWikiGuest - 09 Jan 2006

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

If you want to limit access to authenticated users from the 10.x.x.x network, you should change the require any into require all.

-- MarcFurrer - 11 Jan 2006