I am trying to make the UCS management only accessible for local IP adresses or logged in administrators.
As first I added the group “Administrators” to the portal entries “umc-local” and “umc-domain” to make the button for system and domain settings in the portal only visible to all users in this group. But this made the button disappear completely even if users in the group “Administrators” are logged in or not.
So this solution is not working actually.
The second was to allow access to the URLs
/univention/management/ only from the LAN IP range. In
/etc/apache2/ucs-sites.conf.d/univention-portal.conf I added the following which works well in controlling the access to the URL /univention/portal/
Order Deny,Allow Deny from all Allow from 192.168.178.0/24
Adding a conf file with the following content forced trouble to the management console in loading modules.
<Directory /var/www/univention/management/> Order Deny,Allow Deny from all Allow from 192.168.178.0/24 Allow from 127.0.0.1 </Directory>
How can I allow access to
/univention/management/ to LAN IP addresses only?