Satisfy not satisfying!! OS X Server

[joemedia]

Hello all,

Let me start by saying I am not really a Server person, I am not certified in anything, I am learning as I go, but know more than the average Joe. I am willing to learn and take the time to investigate issues.

 

Hoping somebody here is able to help me with a bit of an issue I am having. I am building an Intranet site for our company, and I want it to authorize anybody trying to access from outside the office network, but not internally.

 

I was told that I could use the Satisfy Directive to do this, but I can't get it to work for the life of me.

 

I am using the same 3 lines of code they have there, but nothing I do seems to work.

 

I am running Apache on an Intel XServe running OS 10.4.11. The site is a virtual host, so it has it's own .conf file, but I have tried putting the info in both the httpd.conf and the virtual hosts .conf file.

 

After much testing and restarting, I have found that I can get the 'Require valid-user' working, but that seems to be the only part that works, as soon as I put in the 'Satisfy Any' the authentication stops working.

 

I have added it like so:

<Directory "/PATH/TO/SUBDIR">

        Require valid-user

        Allow from 192.168.1 

        Satisfy Any

</Directory>

 

I have added it WITHOUT the <Directory> Tags as well.

 

Currently the Authentication portion is working via the Virtual Host .conf file. This is what that looks like:

 

<Directory "/PATH/TO/SUBDIR">

Options All -Indexes +ExecCGI +Includes +MultiViews

<IfModule mod_dav.c>

DAV Off

</IfModule>

AuthName "JMG"

<Limit GET HEAD OPTIONS CONNECT POST PROPFIND PUT DELETE PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>

Require valid-user

</Limit>

AuthType Digest

</Directory>

 

Now, if I add

 

'Allow from 192.168.1'  by itself, then it continues to ask for U/P from both inside and outside the office. As soon as I put 'Satisfy Any' anywhere in there, it's stops working and lets anybody in again.

 

I have tried with it inside the <Limit> tags and outside. I have put before and after the AuthType and AuthName, but no matter where they go, it does not work. I am starting to get really frustrated here, Can anybody help me with this?

 

Thanks!