Bespiel intranet.tema.de: Htaccess-Abfrage, wenn nicht von TEMA-IP aufgerufen
gefunden bei https://stackoverflow.com/questions/10419592/htaccess-htpasswd-bypass-if-at-a-certain-ip-address

(z.B. Cubos-Server)

AuthType Basic 
AuthName "TEMA Intranet" 
AuthUserFile /var/www/vhosts/intranet.tema.de/httpdocs/tema_intranet/.htpasswd 
Require valid-user 
Order deny,allow 
Deny from all 
Allow from 195.243.199.42 
Allow from 78.34.157.221 
Satisfy any 

(z.B. Futris-Server)

<If "%{REMOTE_ADDR} != '195.243.199.42'">  
AuthType Basic  
AuthName "restricted area"  
AuthUserFile /var/www/vhosts/intranet.tema.de/httpdocs/tema_intranet/.htpasswd  
Require valid-user
</If>

Eine IP freischalten ohne zu wissen, welche Apache-Version verwendet wird:

# Apache 2.2
<IfModule !authz_core_module>
	Order Deny,Allow
	Deny from all
	Allow from 123.123.123.123
</IfModule>

# Apache 2.4+
<IfModule authz_core_module>
	<RequireAll>
		Require ip 123.123.123.123
	</RequireAll>
</IfModule>

Authentication und Authorization - Apache HTTP Server Version 2.4:

• https://httpd.apache.org/docs/2.4/howto/auth.html
• http://httpd.apache.org/docs/current/mod/mod_auth_basic.html#authbasicprovider
• https://serverfault.com/questions/549517/what-does-apaches-require-all-granted-really-do

Unterschiede Apache 2.2 und 2.4

• https://htaccessbook.com/access-control-apache-2-4/