A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
7 views

How does Group Policy's Site to zone assignment handle multiple matches?

I am using Group Policy to set sites to zones, I have these policies (generalized for clarity): *.mysite.com --> intranet zone (1) http://*.mysite.com --> trusted site zone (2) cl.mysite....
-2
votes
0answers
10 views

Proxy Authentication in Browsers

WHat is meant by ERR_PROXY_AUTH_UNSUPPORTED in Chrome or any browser? Does this mean that the server you are trying to connect to doesn't support proxy authentication? Can anybody explain the 407 HTTP ...
-1
votes
0answers
17 views

Looking for a GUI for HTPASSWD, or a way to style the popup [on hold]

At the moment I am just using htpasswd authentication for my clients login to my dev server... I would really like to be able to style a landing page that has the htpasswd login functionality albeit ...
0
votes
0answers
16 views

Remote Desktop authentication fails to find Azure AD user

I have set up a new Windows 10 VM (Hyper-V) on my local Windows Server 2012 R2 machine. I do not run a domain locally, but I joined the Azure AD using my Office 365 details. The VM is activated and ...
0
votes
0answers
8 views

OpenVPN: Push IP address/routes to client in non-TLS mode

I am trying to push IP address and routes from OpenVPN server to client. I am using pre-shared static key as authentication mechanism. Client is giving following error: "Parameter --pull can only be ...
0
votes
0answers
22 views

Squid for Windows - Basic Authorization but denied access after username and password is entered

Im using squid Version 3.5.20 built with Cygwin with installer 1.3.5.20 Diladele Im no expert and have tried for many days now to get this to work with no success and its probably just a silly error. ...
0
votes
0answers
8 views

Apache server not handling Basic Authentication on HTTP REST queries

I am trying to manage WordPress REST API on Ubuntu 12.04.5 LTS server with Apache, but it turns out that I am not able to get autheticated using Basic Authentication (user and password on HTTP header)....
0
votes
0answers
26 views

How to expose windows file share via HTTPS and NTLM authentication?

I want to be able to expose the contents of a windows file share via HTTP, so a file can be linked to using http:// rather than file:// which doesnt work in all popular browsers. I want to be able ...
0
votes
0answers
16 views

Apache AuthProviderAlias not working

Running Apache 2.4.10 on openSUSE 13.2 I'm going to be doing some fancy(ish) authentication, so I was trying to use AnthnProviderAlias. To start, I just wanted to make sure I could get simple form ...
-1
votes
0answers
15 views

What is the difference between enable password and line password on Dell PowerConnect?

What is the difference between enable password and line password on Dell PowerConnect? I think I need more info about authentication of Dell switches.
0
votes
0answers
45 views

How can i make nginx basic auth to deny rewrite redirect?

We know nginx rewrite directive with redirect flag will send 302 to client with a new location. I add basic auth in nginx config to protect all resource. server { listen 801; server_name ...
0
votes
1answer
29 views

How to avoid asking password when logging via SSH Key?

I have this scenario: I login to dns1 with key and same with dns2. Suddenly for each of the keys I used it started to ask me server password, this was never happening in past, and I did no changes on ...
1
vote
0answers
13 views

How to centrally managing e-mail for multiple domains using Google Apps?

I'm re-posting this thread to Serverfault from Webmasters as this is a more relevant place to ask about e-mail server related questions. I have multiple domains that I'm managing. Most of the cases ...
0
votes
1answer
50 views

message headers say dkim = fail, stats say = PASSED. why the conflict, and how to fix?

In some-not-all received emails -- notably ONLY those sent via 'bulk' services -- I get a DKIM fail: "signature verification failed". Here's one example: Received message headers DKIM-Filter: ...
0
votes
0answers
14 views

Multi user passwordless directory specific ssh login

I am running Ubuntu 14.04 LTS. I want to allow multi user passwordless ssh login. But I want to give directory specific ssh access. For example: My home directory(server home) has two folders user1 ...
-4
votes
1answer
22 views

web program today: why is online web program user =/= Unix user in /etc/passwd [closed]

History and explanation In the early days of Unix, ... as Unix was invented as a network and multi-user operating system; you could deploy web server programs on Unix where the online user in the ...
0
votes
0answers
8 views

IIs 7.0 intranet server authentication challenge

I probably have no business administering a web server, but there is nobody else in our team to do it. We have a company intranet site that is open to everyone in the enterprise. It is running on a ...
19
votes
2answers
2k views

Receiving a private key from server admin: ok or not?

I am to get access to a remote SFTP server. The admin has created a user for me, and generated a public/private key pair for me. Then he securely sent me the private key file, which I use for ...
-1
votes
0answers
12 views

apache on centos not asking for client certificates

I have apache 2.4 on CentOS 7, and I'm trying to use client certificates for authentication. I have the site using comodo positive SSL, and I want to use self signed certs for client authentication, ...
0
votes
0answers
13 views

tacacs+ windows based server Authorization failed, dropping priv-lvl to 0

i'm having a problem with tacacs authorization. I have configured tacacs server as per this blog :tacacsConfig As specified in the blog i made changes exactly, tacacs test/verify works as expected ...
0
votes
1answer
25 views

Apache authentication against FreeIPA's Kerberos

I'm currently trying to set up Apache as an authentication portal. It's supposed to act as a reverse proxy with krb authentication. My apache server is named portal.example.com (debian container) My ...
2
votes
2answers
41 views

What are the disadvantages when using two-factor authentication on SSH like Authy-SSH?

I'm considering to setup Two Factor Authentication on my SSH accounts (OpenSSH, Ubuntu). I was looking into Authy-SSH but I'm wondering what the possible disadvantages are? Also, can I lock myself ...
1
vote
0answers
15 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
0
votes
0answers
19 views

Apache sometimes not starting after reboot

Sometimes, after my server (Cent OS7, default repository) reboots, Apache is not started automatically. To fix this, I reboot the server one more time, and then it works. My Apache error logs shows ...
0
votes
0answers
10 views

Is it possible to have mutual certificate authentication in wpa2-enterprise?

1) Is it possible to have mutual certificate authentication when using WPA2-enterprise so that a) the client identifies the server and b) the server identifies the client through pre-installed ...
0
votes
0answers
21 views

freeradius+ external users database

I need authenticate users with freeradius, these users are located in an existing external database. I think that the rest_module can help me to do that, in that case, which values the rest api ...
0
votes
1answer
41 views

Server allows logging in without supplying a password and no ssh keys were exchanged, what could be the reason?

I'm trying to secure an outbound server with Google 2FA solution. For the time being, I'm first configuring everything on a local Vagrant machine and once everything works as intended I'll run it as ...
1
vote
1answer
32 views

How to configure pam sshd to allow different rules on different users/groups?

I'm configuring google two-factor authentication on an outbound server in the company I work for. Here are the relevant configurations: /etc/ssh/sshd_config: ubuntu@stage-itai-1:~$ egrep -v '^#' /...
0
votes
1answer
47 views

courier-authlib: wrong username enters search query

I am trying to setup smtp authentication using courier, mysql on postfix. My passwords in my db are encrypted. When I attempt to connect, I get an auth failure r2d2 ~ # telnet mail.server.com 25 ...
0
votes
1answer
52 views

random “MongoError: not authorized on XXX to execute command {YYY}” with mongo 3.2

since very recently I have random errors like these: 2016-06-06T18:17:55.386Z pid:2458 worker:3 MongoError: not authorized on db to execute command {...someQuery...} 2016-06-06T18:17:55.386Z pid:...
0
votes
0answers
22 views

Using biometric authentication with rdesktop to Windows machine?

I'm using rdesktop to access windows servers/clients from a linux machine. I can setup biometric access with AD for these windows clients, but is it possible to rdesktop to a windows box and use a ...
0
votes
0answers
19 views

Tomcat6 Client Authentication

I configured a Tomcat6 webserver on CentOS with SSL, and it works fine. Now I want to configure Client Authentication on it too: The server and the clients have their own certs signed by a local ...
0
votes
2answers
91 views

Is it possible to configure a Cisco AnyConnect VPN to use two separate LDAP authentication methods simultaneously?

I have a Cisco ASA 5505 with a Security Plus license along with an AnyConnect Plus license. I don't currently have any VPN configuration on the ASA as I'm still in the planning phase. I would like to ...
0
votes
0answers
38 views

Allow domain group ssh access

Centos 7 joined to 2012 R2 AD domain Joined to AD domain with realm join and now I can ssh in as any domain user (ssh server -l domusr@lab.local) I can also login to the local console via domusr@lab....
0
votes
1answer
27 views

Trying to restrict ssh access to domain groups

Centos 7 joined to 2012 R2 AD domain Joined to AD domain with realm join and now I can ssh in as any domain user (ssh server -l domusr@lab.local) I want to only allow certain domain groups to ssh in ...
0
votes
1answer
41 views

Kafka acl without kerberos

I'm trying to set up a single kafka server with certificate authentication and access controls based on those certificates without the bother of setting up a kerberos service. Setting upp the ...
0
votes
2answers
40 views

apache reverse proxy with basic auth

I am trying to reverse proxy a web site with apache httpd 2.2 on centos 6. Access to part of that site should be restricted via basic auth. To that end, I have the following config: <Location ~ "(/...
0
votes
0answers
24 views

Debian Cyrus SASL LDAP Auth fails

I am in the middle of an emergency server transfer from a server I did not setup to a new piece of hardware. I am running the newest Debian with Postfix and Cyrus. I have copied over the majority of ...
1
vote
1answer
81 views

sAMAccountName requires DOMAIN\ to authenticate

I am trying to ingtegrate SLES with Windows Active directory server for authentication purposes. We need to use sAMAccountName as login name but its unable to bind if we didn't give DOMAIN/...
1
vote
1answer
57 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
0
votes
0answers
36 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
1
vote
1answer
15 views

Lighttpd Skip auth for ip

I have setup a login for a domain with lighttpd 1.4.31, no problem. Now, I would like to skip this login for a single IP address. I have tried a few different configs I found in the documentation ...
0
votes
0answers
57 views

Newly created Windows Domain users can't log in to Samba share joined to Domain

I have a Debian 7.2 server running Samba 3.6.6 joined to a Windows Domain. It all works great, except within the last week, newly created Domain users can't log into the Samba share. Existing accounts ...
0
votes
0answers
20 views

How do authentication servers handle thousands of CPU intensive logins?

Apologies if the answer is obvious, I'm just a little curious and couldn't nail down an answer elsewhere. I'm used to seeing authentication servers use simple SHA-1 or SHA-256 to validate credentials,...
0
votes
1answer
33 views

Why does nginx need an auth_http entry for smtp reverse-proxy?

I'm an apache user normally, but I need to start using nginx as a reverse proxy for smtp (postfix). I've seen tens of examples online. Like this and this. All of them have an auth_http entry, which I ...
1
vote
2answers
49 views

OpenVPN for embedd devices

I'm a newbie in OpenVPN and the related questions, I'm googling for several days without positive answer. I have several linux-based devices located in my town that collects data and sends it for me. ...
4
votes
0answers
51 views

Authentication issues when clients access domain-joined server from non Samba4 subdomain DNS name

We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago. Simplified Current ...
0
votes
1answer
32 views

Postfix: Unverified Client host rejected / SASL Logged In

Running Ubuntu, iRedMail, Mysql, Amavis, Spamassassin, Dovecot, Postfix Recently had some unauthorized usage of a postfix server internally from a malware deprecated staging server. I worked on ...
0
votes
1answer
33 views

Varnish with separate auth check or auth check followed by Varnish?

I'm not quite sure if there's a term for the architecture I'm looking to set up, but I'll try to explain. I have an API and clients calling it with a session ID. The session ID is associated with ...
-1
votes
1answer
24 views

Setting up an ssh authentication server

I have some 30 Media Temple grid servers and I need to manage the access of 15 or so developers to those servers. Is it possible, and more importantly secure, to setup a server who's only job is to ...