When the RemoteIp changes after user has authenticated, authMemcookie does not prevent user from accessing URLs.
This behaviour seems to happen only on apache 2.4.
I've narred down the issue to the hook definition
Apparently, according to apache dev doc, this hook only executes if the configuration is different from the first access, but I couldn't make it work, even using different locations, one for authentication and another one with the "requires".
When the RemoteIp changes after user has authenticated, authMemcookie does not prevent user from accessing URLs.
This behaviour seems to happen only on apache 2.4.
I've narred down the issue to the hook definition
Apparently, according to apache dev doc, this hook only executes if the configuration is different from the first access, but I couldn't make it work, even using different locations, one for authentication and another one with the "requires".