0
votes
0answers
8 views

How are SPNEGO mechanisms/mechTypes determined by browsers in Windows 7?

I'm authenticating to a web proxy via SPNEGO in Windows 7, and I want to know how SPENGO mechanisms are determined by browsers for a specific Windows client. I understand that SPNEGO is a mechanism ...
3
votes
0answers
21 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
4
votes
2answers
158 views

If I join esxi to an Active Directory domain, how does it choose which DC to authenticate to?

I'm familiar to vSphere and large installations, and not at all familiar with the free products. Topology & configuration We have some branch offices that use ESXi and have a DC resident on ...
0
votes
1answer
28 views

Authentication options for staging sites

We're currently authenticating our clients who wants to view their staging environments using windows authentication. That means we have to create their accounts in our local AD and assign them to ...
3
votes
1answer
36 views

Apache LDAP Authentication with AD Subgroup

I am trying to authenticate using an Active Directory User on a Website running on Apache. My Setup Active Directory: User "steven" is a member of the group "staff". User "cindy" is a member of the ...
1
vote
0answers
44 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
1
vote
1answer
555 views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
2
votes
0answers
84 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
1
vote
0answers
65 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
0
votes
0answers
26 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
0
votes
0answers
306 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
0
votes
1answer
53 views

Authenticating Apache HTTPd against Active Directory

We're using Apache 2.2.12 to authenticate against one Active Directory domain using a .htaccess configuration file. Our current configuration is: AuthBasicProvider ldap AuthType Basic AuthName "AD ...
-1
votes
1answer
74 views

Deploying software on active directory [closed]

I am not sure if this is the right place to post this question but I figured since some users here are familiar with Windows Servers and Active Directories, that I might to get some information about ...
1
vote
0answers
31 views

Remote User Authentication with Active Directory vs. Azure Directory

I am a little confused about the added topological complexities that seem to be advocated when designing remote authentication for Active Directory. I want to have single-sign on for all computers ...
1
vote
1answer
61 views

limit user access in multiple RODC

I have a RODC and a RWDC.i prepopulate some password on RODC cache database. i already read this article How’s User Authentication Working In A Site With A RODC? I want to limit user access in ...
2
votes
2answers
603 views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
4
votes
2answers
89 views

Which field to use when authenticating against Active Directory?

Active Directory user objects include a number of fields that can be considered an identifier. The following lists some of these with their label in ADUC and their attribute name: Full Name - cn ? ...
0
votes
0answers
45 views

Cyrus sasl, Authenticate with Username and Password against Active Directory

I set up a mail server with Postfix and Cyrus IMAP so that the user and password you need to enter are those of AD. I need users can log in from any mail client just put your username and password. ...
1
vote
1answer
94 views

Is it possible to authenticate MS AD users against another MS AD without a trust?

I have two Microsoft active directories, lets call them External and Internal, What I want to do is: Add users to Internal AD without password (Just save some other attributes for them). When a ...
2
votes
1answer
276 views

Disable LDAP authentication on Ubuntu

I have an Ubuntu server that is able to authenticate users against our Domain. I can not contact the person who set this up, but I do find these packages installed: libaprtil1-ldap libldap-2.4-2 ...
1
vote
1answer
85 views

Managing Active Directory account access across multiple forests / customers

We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion. Right now, we manually create ...
5
votes
1answer
74 views

Preventing a Domain Computer from Logging off Causes loss of Authentication

I have a set a domain computer to not require a password on wakeup. This is a strange situation I know but we want the user to never have to login to the computer unless he specifically logs out or ...
1
vote
0answers
121 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
1
vote
1answer
110 views

Configure samba server for Unix group

I'm trying to set up a samba server with access for users in the Linux (RHEL 6) "wheel" group. I am basing smb.conf off of the example here where it goes through the [accounting] example. In my ...
0
votes
1answer
1k views

joining esxi to active directory domain fails due to incorrect credentials even though credentials are correct

VMware vSphere ESXi 5.1.0 patched to 1157734. Using the vSphere Client 5.1.0 1064113 to connect to the ESXi host directly. In ESXi DNS and Routing the Host Identification Domain is set to test.local ...
1
vote
2answers
348 views

VPN to other domain cause local domain authentication stop to work

I have a local domain (let's call it mycorp.local). On one computer, I setup a VPN connexion to a remote domain (let's suppose it's DNS suffix is remote.local). As soon as I establish the remote ...
3
votes
1answer
168 views

Seamless authentication for corporate users on an external website

Background: Global company with multiple locations and disparate networks and IT systems. The majority of the networks are Windows based and running Active Directory and some are connected via ADFS. ...
3
votes
1answer
218 views

Current Best Practice for using AD to auth Linux (2013)

As far as I'm aware, there are 3 (common) ways to use Active Directory as the Authentication and Authorization for Linux hosts: LDAP Kerberos Samba/Winbind Is there a (current) consensus on which ...
0
votes
1answer
115 views

Difference to connect to LDAP by BindDn or by username

We have an application which can only connect to a LDAP (AD) by using the BindDn. When I try to connect from the server which host the application using a simple LDAP client (LDAPAdmin) it connects ...
3
votes
3answers
2k views

Active Directory authentication load balancing and failover

For applications that authenticate against an Active Directory DC, obviously it would be best to just point them to the main domain DNS record rather than a specific DC for failover, load balancing, ...
1
vote
1answer
81 views

Conditional authentication based on group membership in AD

I need to authenticate AD users logging into their workstations only if they belong to the security group AT THE MOMENT OF AUTHENTICATION. They're being added to this privileged group right before ...
3
votes
1answer
312 views

Active Directory authentication with Apache: why I need to use a full name (user at domain)?

We use Apache 2.2 for authentication against Active Directory. The configuration is following: AuthFormLDAPURL ...
2
votes
1answer
81 views

Domain unavailable when resuming from sleep

We have a school library with a bank of computers for students, joined to an active directory domain. I'm investigating an issue with these computers where at some time in the last six to nine months ...
0
votes
1answer
90 views

Role Based Access Control, Where Roles Change Depending on Location In Application

I am tasked with designing a new, role based access model for our system. The requirements are something to the effect of the following: A user can log in, and will have a different role depending ...
0
votes
3answers
237 views

Authenticating Clients against their own Active Directory

We are creating an application that will (hopefully) allow users to authenticate by multiple means. Either cloud-based services (google,facebook, etc.) or--hopefully--by their own company's Active ...
1
vote
1answer
289 views

Powershell - how to Start-Job with an ActiveDirectory credential

My client controls access to their database with ActiveDirectory. I would like to do the following: $cred = Get-Credential Start-Job -Credential $cred { #do some stuff with the db } This works ...
10
votes
1answer
678 views

AD Cross-forest authentication - groups missing from PAC

I have an Active Directory setup consisting of 2 forests: 1 multi-domain forest with 1 forest root domain, and 2 direct child domains 1 single-domain forest for DMZ publishing purposes I have ...
3
votes
2answers
2k views

Active Directory authentication rejected and the bad password count does not increment or reset

There is a strange and confusing (to me and to users) issue plaguing authentication. I do not know how long it has been occurring, but I believe it to be quite a while. Only recently, with the use of ...
1
vote
0answers
152 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
0
votes
1answer
634 views

Debian squeeze auth against AD 2008R2 nslcd said user not found

I'm setting up a debian squeeze to authenticate against Active Directory 2008R2. Part of nslcd.conf is below: uri ldap://bddc.test.local base dc=test,dc=local binddn cn=blah,ou=Public ...
2
votes
1answer
236 views

Authentication failure unless the user account is locked in AD

Have you ever seen authentication failure happening consistently, unless the offending user account is locked in AD? I am entering my credentials to access a network share that I have authorisation ...
0
votes
3answers
350 views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
0
votes
2answers
180 views

What is the correct authentication mechanism when there are users inside and outside the domain?

We have a Windows 7 enterprise desktop data entry app for mobile (laptop) users with local SQL Express 2008 R2 Express db that syncs data with an SQL Server 2008 R2 Server db. Users may go off ...
0
votes
1answer
72 views

How to check authenticated access to MS Windows machines in a batch

I am checking with nessus the vulnerability status of MS Windows machines on a network I do not manage for which I have received appropriate domain-level credentials. It works but the results I get ...
0
votes
1answer
395 views

Seamlessly Authenticate with a Second Active Directory Server (when primary is down) [duplicate]

Possible Duplicate: What is Active Directory and how does it work? How do you get workstations to (seamlessly) authenticate with a secondary Active Directory server when the primary one is ...
0
votes
0answers
200 views

Apache - LDAP: Is auth for subdirectories inherited from the parent directory

We're using the authnz_ldap_module with Apache 2.2.12. Is the authentication configuration for a sub-directory inherited from the parent directory? Considering the following configuration in ...
1
vote
2answers
109 views

Very strange AD authentication issue

I have a domain controller that is Server 2008 and another that is 2008R2. I changed my password two weeks ago, and have been able to log into the domain controllers no problem. When I want to ...
3
votes
1answer
470 views

ADFS v.2.0 transitive trust in a federation scenario

Currently i'm working with ADFS to establish a federated trust between two separated domains. My question is simple: does ADFS v. 2.0 support transitive trust across federated identity providers? ...
1
vote
2answers
1k views

How to automate kinit process to obtain TGT for Kerberos?

I'm currently writing a puppet module to automate the process of joining RHEL servers to an AD domain, with support for Kerberos. Currently I have problems with automatically obtain and cache ...
0
votes
1answer
62 views

Possible to include user IP within application requests to LDAP or Active Directory?

Given the following standard workflow: A user supplies a username and password to an application (ie, webmail). The application authenticates the user against LDAP or AD. LDAP or AD log the ...