A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
10 views

Debian Cyrus SASL LDAP Auth fails

I am in the middle of an emergency server transfer from a server I did not setup to a new piece of hardware. I am running the newest Debian with Postfix and Cyrus. I have copied over the majority of ...
1
vote
1answer
31 views

sAMAccountName requires DOMAIN\ to authenticate

I am trying to ingtegrate SLES with Windows Active directory server for authentication purposes. We need to use sAMAccountName as login name but its unable to bind if we didn't give ...
1
vote
1answer
13 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
0
votes
0answers
31 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
1
vote
1answer
10 views

Lighttpd Skip auth for ip

I have setup a login for a domain with lighttpd 1.4.31, no problem. Now, I would like to skip this login for a single IP address. I have tried a few different configs I found in the documentation ...
0
votes
0answers
32 views

Newly created Windows Domain users can't log in to Samba share joined to Domain

I have a Debian 7.2 server running Samba 3.6.6 joined to a Windows Domain. It all works great, except within the last week, newly created Domain users can't log into the Samba share. Existing accounts ...
0
votes
0answers
18 views

How do authentication servers handle thousands of CPU intensive logins?

Apologies if the answer is obvious, I'm just a little curious and couldn't nail down an answer elsewhere. I'm used to seeing authentication servers use simple SHA-1 or SHA-256 to validate ...
-4
votes
0answers
37 views

Which are the major software that provide key based authentication? [closed]

I know that as of now, Azure and AWS provide key based aauthentication. Am not only looking for cloud computing based software but asking in general which major software provide authentication with ...
0
votes
1answer
19 views

Why does nginx need an auth_http entry for smtp reverse-proxy?

I'm an apache user normally, but I need to start using nginx as a reverse proxy for smtp (postfix). I've seen tens of examples online. Like this and this. All of them have an auth_http entry, which I ...
1
vote
2answers
47 views

OpenVPN for embedd devices

I'm a newbie in OpenVPN and the related questions, I'm googling for several days without positive answer. I have several linux-based devices located in my town that collects data and sends it for me. ...
2
votes
0answers
19 views

Authentication issues when clients access domain-joined server from non Samba4 subdomain DNS name

We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago. Simplified Current ...
0
votes
1answer
20 views

Postfix: Unverified Client host rejected / SASL Logged In

Running Ubuntu, iRedMail, Mysql, Amavis, Spamassassin, Dovecot, Postfix Recently had some unauthorized usage of a postfix server internally from a malware deprecated staging server. I worked on ...
0
votes
1answer
27 views

Varnish with separate auth check or auth check followed by Varnish?

I'm not quite sure if there's a term for the architecture I'm looking to set up, but I'll try to explain. I have an API and clients calling it with a session ID. The session ID is associated with ...
-1
votes
1answer
23 views

Setting up an ssh authentication server

I have some 30 Media Temple grid servers and I need to manage the access of 15 or so developers to those servers. Is it possible, and more importantly secure, to setup a server who's only job is to ...
0
votes
0answers
35 views

authenticating Cisco IOS against FreeRADIUS not responding

My company's looking to move from local authentication on it's routers and switches to a central RADIUS server which I have been tasked with developing. I have the FreeRADIUS server properly ...
2
votes
0answers
11 views

Secure Graphite installation

I think I misunderstand something here. I've installed Graphite with Docker (sitespeedio/graphite) and set a Basic Auth for the Web-Panel. I opened the Firwall for Port 2003 to get in datapoints from ...
0
votes
0answers
9 views

dante SOCKS5 server handle authentication with external script

I'm currently choosing between using dante or 3proxy for creating a SOCKS5 server. My user login details are stored in a mysql table. Passwords are generated using bcrypt(), so RADIUS won't be an ...
0
votes
0answers
11 views

Apache authentication against custom web service

I would like to have apache that forwards the call to an internal service (a django app) that returns a True/False (and some parameters maybe) if the user is valid or not. This before forwarding the ...
0
votes
0answers
12 views

dante SOCKS5 auth process use custom script

Is there a way I can use my own script for auth process of dante SOCKS server? I store my passwords created with bcrypt(). Free radius isn't able to handle bcrypt() generated passwords I think, so a ...
0
votes
1answer
21 views

Can iis authenticate against two separate AD without trust?

First of all, I have poor experience on IIS, I'm more a linux/apache/nginx guy. Now I have a proprietary app running on an old IIS (w2003, I know is out of support) which is currently authenticating ...
0
votes
0answers
10 views

Postfix: Sender Credentials Password Storage

A few weeks ago I was trying to implement a gmail-like SMTP relay / aliases system on Postfix here: Postfix: SMTP Relay based on alias (from address) After posting a solution for the question one ...
2
votes
2answers
40 views

sshd_config how to allow one user to have full unrestricted sftp and allow ssh

I changed sshd_config to jail users within specific group into their home directory. changed subsystem to sftp internal-sftp and used forcecommand: internal-sftp However, this prevented the admin ...
0
votes
0answers
9 views

IIS - requests login for an ajax request

When I make an AJAX request from a .NET webpage, my local machine instance of IIS causes this to appear: I've tried setting a local admin account on the app pool There's nothing in the IIS logs or ...
0
votes
0answers
10 views

Client Certificate Authentication with IIS from a guest account

I have an IIS 7.5 server that uses client certificate authentication. A typical setup is to create a local user and import the client ssl certificate to that profiles user store. This process works ...
0
votes
0answers
24 views

IIS7 Digest authentication credentials forgotten between pages

I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh. If this is normal behavior for this ...
0
votes
1answer
25 views

IIS 8.5 not accepting authentication settings at app level

I'm trying to set authentication settings directly to the app level and IIS doesn't seem to be accepting it. I'm running IIS 8.5 on 2012 R2. Here's what happen when I disable all authentication ...
0
votes
0answers
29 views

Dovecot static user db and lda user verification

I've got dovecot set up to use a static userdb in my dovecot.conf file: userdb { driver = static args = uid=vmail gid=vmail home=/var/vmail/%u } Now I also do want to verify the users for the ...
0
votes
1answer
26 views

What kind of SPN is required to delegate client credentials to a SMB Share?

I'm trying to delegate KERBEROS authentication from an SQL Server to a file server over OLEDB. Is there a particular Service Principle Name that is used to delegate credentials from an SQL Server ...
0
votes
1answer
49 views

Github deploy key to allow a Docker Hub image to pull private gem with

Given repo "A", a Ruby project with a dependency on a gem, contained within another private Github repo, "B", I need to give Docker Hub permission to clone repo "B" when it builds the image. I'm ...
0
votes
0answers
24 views

Custom algorithm for password hashing with vsftpd

Traditionally, when the client logs in, it sends the credentials (username+pw) without any further processing. The server then checks if an entry exists in its user database that matches the supplied ...
1
vote
0answers
62 views

have xmpp (ejabberd) server authenticate with existing user database (MySQL)

Let me start off by stating that I know very little about the XMPP protocol or real-time communication in general. I did however manage to set up an ejabberd server with TLS encryption. I have written ...
6
votes
3answers
171 views

What is DNS TXT record “mailru-verification”?

Sometimes I see this mailru-verification DNS record. I've Googled - and Yandexed ;) - but I found nothing about it. I suspected that is a kind of russian SPF implementation... dig example.com TXT ...
1
vote
0answers
22 views

Unspecified GSS failure. after setting up krb5/ldap authentication

new here, so I recently setup ldap/krb5 authentication on an centos7.2 vm. Krb5/ldap is working correclty as I can login using ldap user account. However, when I check the logs in the client machine ...
2
votes
1answer
27 views

NO [ALERT] Unexpected response from remote authentication server

is what I see when I run testsaslauthd inside an strace socket(PF_LOCAL, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/saslauthd/mux"}, 110) = 0 writev(3, ...
0
votes
0answers
23 views

Thecus N5200PRO NAS Server and Windows 10

I got an Thecus N5200PRO NAS Server which I'd like to use, but I've got strange authentification problems which I can't resolve. What I'm doing: Reset NAS to factory default Create a user Create a ...
0
votes
1answer
12 views

Serve media content only to logged in user using Apache

I recently saw this feature on another site where it would server media files, like uploaded images, only when the user is logged in. It would throw an "ACCESS DENIED" page otherwise. So, I ...
7
votes
2answers
72 views

Same RSA key on multiple PCs

Can I use my RSA private key on multiple computers i.e. my desktop and laptop. Or do I have to create a unique key for each computer I own, and add their respective public keys to necessary ...
1
vote
0answers
24 views

Why was the previous authenticity of the host ignored?

I'm on Ubuntu 14.04 Desktop. I have just logged into other machine (Ubuntu 14.04 Server) using ssh in one terminal. I'm still connected. When I did scp in another terminal (opened earlier) to move a ...
1
vote
0answers
57 views

Can I allow configure Jenkins to use LDAP authentication while still allowing company github accounts to make commits?

We are running Jenkins CI as a critical application in our organisation. I've recently set up an openLDAP server and I am looking to migrate all of our applications to this over time. The LDAP ...
1
vote
0answers
46 views

Authentification methods for non-public facing websites

We have two different kinds of websites in our company, one of those are public-faced websites where users have to have access without serverbased authentication (anonymous auth.) and other websites ...
0
votes
0answers
61 views

Authentication Configuration with IIS 8.5 on Windows Server 2012

I have a site hosted using IIS on a Windows Server 2012 R2 server. The application is configured to use an application pool that uses the NetworkService account as the application pool identity. The ...
2
votes
1answer
41 views

AWS EC2 Server Refused Connection - Unmounted replaced authorized_keys - still cannot connect

So we were working on configurations for a soon to be production server. After making some configuration changes, we rebooted the machine and we got the dreaded "server refused connection" message. I ...
0
votes
0answers
77 views

LDAP user authentication access denied

Currently, I am configuring LDAP client for user authentication on the server. Only SSH key authentication is allowed (Password authentication is not allowed). My SSH configurtion ...
0
votes
1answer
74 views

Authenticated Origin Pulls with CloudFlare and IIS

I'm running Windows Server 2012 R2 with CloudFlare in front and trying to setup authenticated origin pulls as specified here - https://support.cloudflare.com/hc/en-us/articles/204899617 The problem ...
0
votes
1answer
33 views

Force Postfix to ask autentication

If I try to telnet a popular SMTP server I get this messages: telnet smtp.mail.yahoo.it 25 Trying <ip>... Connected to <smtp banner>. Escape character is '^]'. 220 <smtp host> ESMTP ...
3
votes
0answers
167 views

Active Directory + Google Authenticator - Native support in Windows Server? [closed]

Use Case: 2FA to log in to Active Directory (such as logging into a corporate desktop computer that is on AD) Desired Solution: Google Authenticator, because it is RFC based, and widely used for ...
1
vote
2answers
91 views

Force windows to prompt authentication to shared folder/disable “remember my credentials”

Is there a way to force windows to prompt for credentials to a shared folder? We are in a domain environment with 50+ PCs. What I need is to have a shared folder on our server that has specific user ...
0
votes
1answer
10 views

Use LDAP on top of simple mysql hash+salt user table

We have a huge table full of user accounts for our website that are stored in a very simple and standard mysql manner: the user-id is associated with a salted hash that represents the password and ...
6
votes
2answers
574 views

Active Directory + Google Authenticator - AD FS, or how?

(Edited to match the understanding of the answer-writers -- New, fresh, clean question posted here: Active Directory + Google Authenticator - Native support in Windows Server?) Research Done So Far ...
1
vote
1answer
40 views

Attempting to setup ssh authentication on linux - Grants access all the time

I am currently attempting to secure one of my linux box. I would like the device to grant access to only those systems that have the ssh private keys. In order to accomplish that here is what I did ...