Apache Authorization for the Allowed Users? [closed]

Question

I have read the answer to this question:

https://stackoverflow.com/questions/4102763/apache-basic-authentication-except-for-those-allowed

It helped me understand how to not authenticate some users (according to the IP):

<Directory /var/www/files/>
    Order deny,allow
    Deny from all
    Allow from 192.168.1.2
    Satisfy Any
    AuthUserFile /etc/apache2/basic.pwd 
    AuthName "Please enter username and password" 
    AuthType Basic 
    Require valid-user 
</Directory>

Imagine I have this DB (Different from the DB used for authentication):

User        IP 
Mark        192.168.1.2
Mike        192.168.1.3
Karl        192.168.1.4

1- can I allow all the IP addresses stored in the DB using a configuration in Apache?

2- another problem is the authorization of the allowed IP is lost, can Apache use this DB for authorization, if the user is allowed to get the pages without authentication?

Update:

to be clear:

1- I don't want a static solution, I want Apache to Allow all IPs from the mentioned table in the DB ( the DB is changing dynamically).

2- We know when Apache authenticate users, it knows the user name from authentication credentials, but with the Allowing, the user name will be lost, I want Apache to extract the user name of the IP its allowing from the same table it extract the IP address?

Answer 1

You can try the answer suggested here of using mod_rewrite to blacklist from a file:

## WHITELIST IPS ##
RewriteMap ipslist txt:/path/to/whitelist.txt
RewriteCond %{REMOTE_ADDR} ^(.*)$
RewriteCond ${ipslist:%1|black} ^black$ [NC]
RewriteRule (.*) - [F]

You can try and use something dynamic like mod_authn_dbd to select the username and password from a database:

# mod_dbd configuration
DBDriver pgsql
DBDParams "dbname=apacheauth user=apache password=xxxxxx"

DBDMin  4
DBDKeep 8
DBDMax  20
DBDExptime 300

<Directory /usr/www/myhost/private>
  # core authentication and mod_auth_basic configuration
  # for mod_authn_dbd
  AuthType Basic
  AuthName "My Server"
  AuthBasicProvider dbd

  # core authorization configuration
  Require valid-user

  # mod_authn_dbd SQL query to authenticate a user
  AuthDBDUserPWQuery \
    "SELECT password FROM authn WHERE user = %s"
</Directory>

Answer 2

In answer to #1 you can have as many IP's allowed as you want... examples:

Allow from 192.168.1.2
Allow from 192.168.1.3
Allow from 192.168.1.4

or even

Allow from 192.168.1.2 192.168.1.3 192.168.1.4

and many others including ranges.

for #2, sorry but I'm not understanding what you're asking, perhaps an example?