A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
12 views

Pass authentication from IIS to JBoss

Users can access our intranet website (JBOSS EAP 6) by entering their windows active directory credentials and it works fine. We now want to allow single sign on so users in our intranet don't have ...
0
votes
1answer
16 views

Track down source of event 4771: Kerberos pre-authentication failed

Some process on a remote server is generating failed log-on attempts for a specific user account. I want to know what process it is. The account in question started generating these bad password ...
0
votes
1answer
14 views

FreeIPA (LDAP): Refuse auth for users with expired password

I have a FreeIPA used mostly as an LDAP in many local web services. Unfortunatly LDAP authorizes users to login to 3-rd party applications even when user's password is expired (including first random ...
1
vote
1answer
35 views

what does 'Logged in without disclosing public key - Intrusion?' mean?

I have set up a new debian vm and installed gitlab-ce. There is not really much more on the VM... Right from the beginning, the following msg started to show up in the auth.log: Mon 2015-08-24 ...
0
votes
0answers
15 views

configure apache to use sql server authentication using password and salt

I got a web application which I want to protect using apache authentication. I found out that it uses sha1+salt to store passwords. Since auth_mysql_module is deprecated I try to use authn_dbd_module. ...
1
vote
3answers
70 views

SSH and security guidelines

I'm trying to set-up an ubuntu server (14.04 LTS) following some security guidelines. One of these guidelines suggests to disable root user and create a new user that works as an administrator using ...
0
votes
1answer
22 views

Pool of machines without authentication?

I am working on a cluster of linux machines. What I need is for authentication to not be needed between the machines in this cluster, but required from outside. I have considered the idea of setting ...
0
votes
0answers
12 views

Mutual Authentication - Allow from IP range without client certificate

Is it possible to set SSLVerifyClient: Require but, also allow IP range for users who do not have the client cert? Possibly to use: Order deny,allow Deny from all Allow from xxx.xxx.xxx.xxx ...
0
votes
1answer
20 views

Nginx basic auth on specific location

I have a rails app and would like basic Nginx Basic Auth on specific location and now I am doing it like location / { passenger_enabled on; proxy_set_header X-Real-IP $remote_addr; ...
2
votes
1answer
28 views

Allow only root and domain group to login on Linux server

I have successfully installed PBIS-open to authenticate against active directory. I also used the /opt/pbis/bin/config RequireMembershipOf command to allow a certain domain group to login. I would ...
1
vote
0answers
38 views

freeradius client send only accounting request, not access request

I have freeradius 2.2.6. Only at first connection the client send both access request and accounting request. subsequent connections sends only accouting request! This problem occurs ONLY with sone ...
1
vote
1answer
67 views

Postfix + Dovecot with MySQL backend: md5-hashed passwords and CRAM-MD5 auth

My question What are the risks of switching from MD5 to CRAM-MD5 passwords in the database, especially considering the following, and how to approach that for an existing installation (provided I ...
0
votes
1answer
41 views

Strange symbols in /var/log/auth.log

I just installed fail2ban after realizing that there were tenthousands of attempts to log into one of our servers over SSH. After installing fail2ban, the log bloat stopped, but I still wanted to ...
0
votes
1answer
38 views

Authentication in a Mongo Sharded Cluster

I have a mongo shared cluster and replica sets: The ShardA Replica set: A1. 10.77.14.241 A2. 10.77.14.242 AA. 10.77.14.243 Arbiter Some parameters of /etc/mongod.conf: #bind_ip=127.0.0.1 ...
1
vote
0answers
30 views

Apache authentication with PHP file

Is it possible to have authentication in Apache (or for example Nginx/HAProxy/etc) with a PHP file? What I want is the following: User visits a portal (index.php). Apache will look if index.php ...
1
vote
2answers
51 views

Two factor SSH authentication on multiple servers

I am a newbie when it comes to Two factor authentication. I have the general idea of implementing two factor authentication on a single server. But I was wondering if there is a standard solution for ...
1
vote
1answer
34 views

Prevent IP Spoofing on OpenVPN tun

I have a question regarding IP Spoofing and authentication. I have an OpenVPN server in TUN mode with many untrusted clients in the same VPN network, and I was wondering if one client is able to spoof ...
0
votes
0answers
15 views

How to authenticate DSPAM webui?

Every tutorial I have found for authenticating dspam's web ui describes Apache basic auth using an apache file. If I only had a couple accounts, that would be fine. But I have several domains and ...
1
vote
0answers
6 views

Anonymous Authentication Identity Win 2012 r2 security

I have a web app that uses PHP on the back-end, and the PHP executes powershell scripts to reset AD passwords through system calls. EX: shell_exec("powershell.exe -file ...
0
votes
0answers
5 views

RADIUS for unique hotspot and iOS clients?

Sorry if stupid questions. I need to be certain. Is Radius needed for a hotspot captive portal, where no login is needed, and which is unique (one only router) ? Is Radiys involved in another thing ...
0
votes
0answers
57 views

Login Page Throws 401 with Forms Authentication

I've seen this question a few times on the internet, but no answer I've yet seen has solved my problem. I have forms authentication enabled in my application and anonymous access has been denied: ...
0
votes
1answer
16 views

How to stop Apache HTTPS ReverseProxy passing basic auth to TomCat

Apache currently interogates the user for their basic auth credentials, once the correct details are entered it passes basic auth credentials to the tomcat server it's proxying. This confuses the app ...
0
votes
1answer
27 views

Apache location directive exception

I am trying to authenticate users for all URLs except for a regular expression: https://www.example.com/****anything**** should request authentication https://www.example.com/exams/****anything**** ...
2
votes
1answer
30 views

AWS :: Ubuntu instance consistently denying my private keys

Sorry to ask this question again, as I know its been asked a crap load of times... I have been through a bunch of previous posts but have had no luck. Have tried everything... Steps: 1.) Launch ...
1
vote
1answer
25 views

What files get modified by the authconfig?

I am trying to identify which files are edited with the following command, but can not find. authconfig --enablemd5 --enableshadow --enablecache --enablelocauthorize --enableldap --enableldapauth ...
1
vote
0answers
25 views

Make a basic auth client authenticate on a digest auth proxy server

My company has a legacy application which needs to connect to the Internet. Unfortunately, our network staff has changed the proxy settings in order to accept digest authentication only, which this ...
0
votes
1answer
39 views

pam google authenticator can't compute location of secret file

I've installed Google Authentication on all the machines in our system, and while the authentication during login works fine, our machines are producing logs that have this line over and over: ...
1
vote
1answer
61 views

Kerberos master server to slave server automation?

I've set up Kerberos in my workplace running on Centos 6 boxes, and successfully propagated the master server database to the slave and also set up a cron job to update it automatically every 5 ...
-1
votes
1answer
37 views

why changing a web.config to a Windows mode does not affect IIS authentication settings?

I read the article https://msdn.microsoft.com/en-us/library/532aee0e(v=vs.100).aspx it says that default authentication in Framework 4 is Windows mode. Well, I create a MVC 4 Internet template ...
0
votes
0answers
65 views

check_snmp plugin on nagios returns: External command error: snmpget: Authentication failure (incorrect password, community or key)

I’m trying to check the uptime of a Cisco 2960X switch on Nagios with check_snmp plugin but I always get the following error: [root@nagios]# /usr/lib64/nagios/plugins/check_snmp -P 3 -U snmpv3user -L ...
0
votes
1answer
56 views

Wireless authentication with DD-WRT, Cisco and Microsoft

I'm looking for a way to authenticate my wireless users beyond them just knowing the wireless password. Ideally they would join the access point then get dumped to the login portal that they'd have to ...
0
votes
2answers
39 views

OpenSSH: allow users with writeable HOME to use publick key authentication

On a local workstation I need to have a handful of users to be able to freely write in each other $HOME. I KNOW this is a security breach and, in the specific situation, I do not care at all. I have ...
1
vote
1answer
57 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
1
vote
0answers
12 views

NIS not respecting files first in nsswitch.conf

Okay, first off, I know NIS is a turd, but it's what we've got until we do a major migration next year. Today we had a NIS server outage which predictably prevents user logins. What surprised me was ...
1
vote
1answer
116 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...
0
votes
0answers
22 views

Setting up CORS for a specific method and url

First of all, apologies if you think this should be on stackoverflow.com - it seemed more suitable for this site but it's a bit borderline. We have a partner site, i'll call it http://bob.com. For ...
0
votes
0answers
29 views

how to get info on failed authentication to domain - security audit?

Setup: 1 Windows Server 2012 box as Domain Controller, named DC1. 2 Windows Server 2012 R2 boxes, S1 and S2, on the same network, same config, joined to the domain. Issue: At random times, S1, S2 or ...
1
vote
1answer
40 views

Merging Forms Authentication databases together

I have an ASP.Net-based system; identical copies of the site run on three different servers, all Windows 2008R2 running IIS7.5. Each site has it's own authentication database, with it's own users, ...
3
votes
1answer
65 views

How to have multiple AuthUserFile directive in proftpd.conf [closed]

In my CentOS where CPanel is installed in proftpd.conf, I can see directive AuthUserFile /etc/proftpd/passwd.vhosts I wanted to add one more AuthUserFile directive, so Profptd uses one more file to ...
0
votes
0answers
19 views

Jenkins AD Auth with extended User search base

I’m trying to use a fairly large Active Directory instance to authenticate Users with Jenkins. This works quite well with the following settings: ...
2
votes
1answer
40 views

Do not use Client Cert Auth when on local network apache2

I'm hoping someone could help me with this question... I am running an Apache 2.4.7 server on my Ubuntu 14.04 box with some public facing sites. For some of those sites I've implemented a Client Cert ...
1
vote
1answer
41 views

What authentication protocols are negotiated by HP Printers to Windows Server Shares?

I am trying to find information specifying the protocol negotiation process for newer HP printers that can perform direct scans to Windows-style shared folders - in particular, the HP 8600-series is ...
1
vote
1answer
22 views

Privileges when doing sudo to another domain user

Suppose I have a corporate domain mydomain using MS Active Directory. In the domain I have the users myuser and youruser. Now, on one specific Ubuntu machine mymachine, myuser has sudo rights, and ...
-1
votes
1answer
48 views

Public Wi-Fi with Individual Authentication and Time limit for Internet Access [closed]

I would like to change the way that my costumers access to the internet. I would like to enable two ways for sharing my internet: With my wireless network as public, I would like to give a username ...
0
votes
0answers
10 views

Privileges when doing sudo to another domain user [duplicate]

Suppose I have a corporate domain mydomain using MS Active Directory. In the domain I have the users myuser and youruser. Now, on one specific Ubuntu machine mymachine, myuser has sudo rights, and ...
1
vote
1answer
186 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
1
vote
0answers
111 views

Unable to configure CNTLM

I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes- # # Cntlm Authentication Proxy Configuration # # NOTE: all values ...
4
votes
0answers
128 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
0
votes
1answer
35 views

Track a machine who is entering bad passwords into a samba3 domain controller

I have a user who is getting its account locked constantly because an other machine is trying to login with an old and bad password and thus locking the user's account... The user doesn't know which ...
0
votes
0answers
33 views

How to reuse same digest authentication credentials with multiple acls?

I want to apply different access policies to different groups/acls using Squid, which is what I've done. Now I want to set up digest authentication, but I want to use the same digest credentials for ...