Order Deny,Allow Deny from all Allow from my.lan Allow from 2001:1234:5678::/64 AuthType Basic AuthName www.my.lan AuthBasicProvider ldap AuthLDAPURL "ldap://server:389/ou=People,dc=example,dc=com?uid?sub?(objectClass=*)" Require valid-user Satisfy Any