
Options -Indexes

<FilesMatch ".(htaccess|htpasswd|ini|sh)|clear_tmp">
 Order Allow,Deny
 Deny from all
</FilesMatch>

RewriteEngine On

RewriteRule ^equipment_api$ $1equipment-api.php

RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]

RewriteCond %{HTTP_USER_AGENT} ^.*internal\ dummy\ connection.*$ [NC]
RewriteRule .* - [F,L]

Order allow,deny
Allow from All

AuthType Kerberos
KrbAuthRealms CORP.TANDER.RU
KrbServiceName Any
Krb5Keytab /opt/rh/httpd24/root/etc/pki/esmo-app.corp.tander.ru.keytab
KrbMethodNegotiate on
KrbMethodK5Passwd on

require valid-user
Deny from 10

# Virtual machine IP
#Deny from 10.8.58.65

<If "%{QUERY_STRING} =~ /operation/">
   require all granted
</If>

<If "%{REMOTE_ADDR} == '10.8.153.190'">
   require all granted
</If>

Satisfy Any
