Apache http.conf allow intranet

Question

what would be the correct config to allow only authenticated users and the intranet (without need for a password) in apache? This does not request a password and without the "satisfy any" intranet users are also required to enter a password...

<Directory "/var/www">
#   Allow Network Access and/or Basic Auth
Satisfy any

allow from 192.168

AuthName "Enter passwd!"
require valid-user
AuthUserFile /var/.passwd
AuthType Basic
allow from all
order deny,allow
</Directory>

Answer 1

But let's say you want people from your LAN to have full access, without being prompted for a password. In this scenario we could use:

<Directory /home/www/site1/private>
  AuthUserFile /home/www/site1-passwd
  AuthType Basic
  AuthName MySite
  Require valid-user
  Order allow,deny
  Allow from 172.17.10
  Satisfy any
</Directory>

This will force everyone from the outside to authenticate, but those coming from the LAN IP range would not be required to do so. Apache will let them access the directory without authenticating. You can add other hostnames (local or remote) to the Allow directive to give them access to the directory as well. See the Apache Docs on Allow.

From apache wiki http://wiki.apache.org/httpd/BypassAuthenticationOrAuthorizationRequirements

Answer 2

Try putting

satisfy any
order deny,allow
deny from all

at the top instead of at the bottom:

<Directory "/var/www">
#   Allow Network Access and/or Basic Auth
order deny,allow
Satisfy any

allow from 192.168

AuthName "Enter passwd!"
require valid-user
AuthUserFile /var/.passwd
AuthType Basic

deny from all    
</Directory>