On 03/16/2017 07:24 AM, Carlos E. R. wrote:
I suppose this is with https? Or is that a separate thing?
Yes, this is with https, I enforce it just prior to the authentication, e.g.:
Options +Indexes +FollowSymLinks
IndexOptions FancyIndexing IconsAreLinks SuppressDescription
FoldersFirst NameWidth=*
AllowOverride AuthConfig Options FileInfo Limit
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REMOTE_ADDR} !^192\.168\.7\.
RewriteCond %{HTTPS} !=on
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R,L]
</IfModule>
# Authenticate if not local
AuthType Basic
AuthName "Case_Restricted"
AuthBasicProvider dbm
AuthDBMType DB
AuthDBMUserFile /usr/local/lib/apache2/caseaccess
Require valid-user
</Directory>
--
David C. Rankin, J.D.,P.E.