A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

-3
votes
0answers
21 views

IIS Windows Authentication - Change Password at next login

I have set windows authentication and FBA in IIS for my web application. I added users to windows so they can login using the windows prompt. I set the checkbox to force them to change their password ...
0
votes
0answers
7 views

Mac OS X Server authenticate Samba agains external LDAP

Here's our current situation; We have 2 networks that are connected to each other with a router. The first network in an Microsoft Active Directory based network. The second network is an Apple Mac OS ...
3
votes
0answers
27 views

Windows server 2012 R2 - delay before certificates start working

I have this weird unexplained delay before the certificates i put in my servers start actually working it goes something like this: I add the certificates snap-in to mmc to manage the computer ...
0
votes
1answer
8 views

mod_wsgi authorization with Django users from postgres database

I am trying to protect a url path with basic auth and want to use the users from my Django application which are stored in a Postgres database. The user app is allowed to access this database, the web ...
0
votes
2answers
16 views

Is it possible to delegate AD FS admin functions via a web interface?

I am looking at IAM for a SaaS application. The application will have client organisations accessing it and each organisation will want to manage their own users, permissions and roles. Of course only ...
0
votes
1answer
22 views

Stormpath and saltstack

Does anyone use stormpath to authenticate against user/password with saltstack? Instead of creating new users and/or getting it from db, I was wondering if someone is using stormpath to get the ...
0
votes
0answers
12 views

Accepting SAML token from third-party to allow access to our RDweb application

We have an RDweb hosted application, which until now has access control performed by a form and username/password authenticated against active directory. A third-party wishes to use their own ...
3
votes
1answer
56 views

LDAP authentication fails

I try to set up an LDAP directory that will allow me to authenticate Debian users. Once the configuration of the LDAP server and PAM files is done, the authentication fails. I think the client doesn't ...
1
vote
0answers
66 views

LDAP with SSSD: force user to change password - 'ShadowLastChange' not working

I have CentOS6, with LDAP user authentication, using OpenLDAP and SSSD. I'm trying to force user to change the password. According to this ServerFault question I tried to set ShadowLastChange to 0, ...
2
votes
1answer
39 views

LDAP authentication - avoid duplicate uidNumber

I have just successfully configured OpenLDAP Users authentication in a single CentOS6 box, based on SSSD. Took some time and many trials, but it's working. Now, I want to start adding users. I'm ...
1
vote
0answers
48 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
2
votes
1answer
32 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
2
votes
1answer
18 views

SSH authentication based on existing OpenVPN tunnel

I have a single CentOS server, and several Windows clients that should connect to it, from remote. I've successfully setup OpenVPN (with Public Keys), with which the clients connect to the server; and ...
2
votes
2answers
56 views

OpenSSH two factor authentication combined with Kerberos / public key

I'm trying to implement two-factor authentication for OpenSSH. The environment is Centos 7 (kernel: 3.10.0-229.1.2.el7.x86_64) with OpenSSH_6.6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013. We have Active ...
-1
votes
0answers
10 views

Windows Server 2008R2 Remoteapp Authentication [migrated]

I have generated a Remoteapp MSI which I have installed on 2 machines and it prompts for authentication using the standard Windows auth prompt. on a third machine it opens up an rdp session and the ...
1
vote
1answer
49 views

authentication error on WS2012 (trust relationship failed)

Given the following lab setup: HOST1 on Windows Server 2012 R2 (host running Hyper-V, joined test.local domain, static IP) DC1 on Windows Server 2012 (VM under Hyper-V on HOST1, AD and DNS roles, all ...
0
votes
0answers
39 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
0answers
20 views

connect server via ssh using ldap account anywhere

I'm new in using openldap I'm using centOS7 to be my openldap server my question is, can I login server via ssh using ldap account without any client settings? something like when I done setting ...
0
votes
0answers
20 views

SSH-FTP Authentication Fail and MySQL Database Error on Debian VPS Until Reboot

The last few days I'm having an issue with a VPS which is part of a cluster setup. The VPS with the problem is used as a MySQL and a nameserver. All other machines in cluster behaving as should. I ...
2
votes
4answers
99 views

How to get Microsoft license authentication for all machines on a network?

We have a small network (~150 desktops, ~20 servers) much of which is Linux. MS keeps wanting to audit our MS products every 3 years or so. I really don't have time to go around to 80-90 desktops and ...
1
vote
1answer
82 views

Disable authentication for HTTP OPTIONS method (preflight request)

One recurring problem with CORS is that the spec prescribes request headers get stripped from the preflight request (HTTP OPTIONS). However if the server requires authentication, this means the ...
0
votes
1answer
29 views

Authentication using ADFS 2.0 is not woking

I'm trying to configure ADFS 2.0 with thinktecute STS as an SP. The relying party has been configured successfully using the RP metadata. But when an authentication request is being sent to the ADFS ...
0
votes
1answer
29 views

Server denied check_authentication after migration of Drupal

I just moved a drupal website from one server to another. On the original server the site was set up directly in apache. On the new server, i have a docker layer in between: The machine runs a debian ...
0
votes
1answer
33 views

How to set auth_basic for one file in NGINX? [duplicate]

Here is my config: server { #... location ^~ /wp-login.php { auth_basic "Restricted"; auth_basic_user_file /var/www/.htpasswd; } ...
0
votes
0answers
10 views

mod_authnz_external and password expired

I configured mod_authnz_external with mod_auth_form and everything works fine. The script I made to authenticate the user returns 0 if the username and password combination is correct, and 1 if it is ...
0
votes
1answer
18 views

Squid upgrade stops authentication

Recently we installed a squid proxy server for a customer who was using an older server. New server is ubuntu 14.04.2 with squid 3.3.8. We used the same password file to authenticate users. The ...
2
votes
0answers
50 views

How to configure LDAP client without Yast - SLES 11 SP3 [closed]

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. I did it on RHEL, Debian, and ...
0
votes
1answer
20 views

Make an authenticated SIP call via URI

I'm trying to redirect a phone number to a SIP address that's only accessible when authenticated. Given the following, how would the SIP URI look like (if possible) ? SIP Server: sip.example.com Auth ...
2
votes
2answers
74 views

Single sign on with Apache and LDAP

I have a server running two web applications: Gerrit and Mantis BT. Now, these applications connect to an LDAP server to authenticate users and it works fine. But the user has to authenticate for each ...
1
vote
0answers
58 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
4
votes
4answers
256 views

Which ports are required in order to authenticate against a ldap server in another domain which is behind a firewall?

I have a Linux domain running with sssd, let's call this domain NJ. I'd like machines on the NJ domain to be able to authenticate against an Active Directory ldap server which resides on a different ...
0
votes
1answer
108 views

.htaccess file is not working on Apache 2.4.12 and Windows Server 2008 R2

I am trying to add Authentication window to a section of the site using .htaccess file. But It is not working "the site is acting that the ".htaccess" files does not exists. here is that content of ...
0
votes
0answers
69 views

How do I connect a SoftEther bridge to a server without getting an authentication error?

I've been playing around with SoftEther, and I'm trying to use the VPNCMD utility to create a site to site VPN. However, when I try to get the Cascade connection up between the bridge and the server, ...
5
votes
3answers
224 views

Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]

How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos? I know that ...
0
votes
1answer
26 views

IIS: logging client certificate's thumbprint

On IIS 7.5, with client authentication by certificate, how to enable logging of client certificate's thumbprint (or serial, or subject dn) to IIS log?
0
votes
1answer
47 views

LDAP auth fails for some users

Something weird is happening, some users are not able to authenticate via our LDAP to access services (SSH connection, Samba, etc.). Their entries are in the LDAP and everything seems to be fine, I ...
0
votes
0answers
44 views

active directory simple bind always anonymous (event 1219)

I am getting event 1219: "Active Directory could not initialize simple bind authentication. Therefore, simple bind authentication against this LDAP interface will result in binding as an ...
1
vote
0answers
140 views

IIS 8.5 Windows Authentication failing for some users

I have an application that was installed requiring Windows Authentication under Windows 2012, IIS 8.5. When certain users use the application, they're receiving a 401 error after the ...
1
vote
2answers
112 views

Permission Denied (Publickey) from OS X to Ubuntu

I know this question has been asked more than a few times, but I can't work it out on my machine and I feel like I have tried everything. I want to log into my ubuntu machine with ssh using a public ...
0
votes
0answers
36 views

ProFTPD with AD LDAP dont retrieve right usergroup

I am struggling with a ProFTPD with AD LDAP auth. I have everything configured and the AUTH works, it retrieves de user from the AD and if it exist, it creates the home folder and let he user in. The ...
0
votes
0answers
12 views

dovecot authentication failures from valid clients

I get a lot of dovecot authentication failures like this in my logs: authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=USER rhost=IP : 21 Time(s) for some of the IPs i am sure, that ...
0
votes
1answer
31 views

Remove Lighttpd password auth for one path

I have a lighttpd server that I want to serve some files from. Unfortunately the server is currently set up to require password authentication and I want these files to be available publicly. How can ...
0
votes
1answer
61 views

how to translate an Active Directory group into a NIS netgroup?

The goal is to be able to add + : @DL-MyCompany-MyTeam : ALL to /etc/security/access.conf and have it work as expected. This is my sssd.conf: [domain/default] cache_credentials = True [sssd] ...
1
vote
1answer
33 views

How to set the username and password for smtpd in Postfix?

I've set up Postfix as SMTP server by adding this configuration to main.cf: myhostname = foo.com mydomain = foo.com myorigin = $mydomain smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes ...
0
votes
0answers
42 views

Forms authentication with URL rewriting

I've got forms authentication set on the top level of my site via the web.config, and I also have a URL rewrite rule to go from mysite.com/plex/ via a reverse proxy to another localhost server; ...
1
vote
0answers
111 views

SAMBA/LDAP authentication failed in FreeNAS

I got a FreeNAS server and I am trying to share folders using SAMBA. My users are in an OpenLDAP server. The OpenLDAP has the samba.schema loaded. I checked the sambaSID in my FreeNAS and it is the ...
2
votes
1answer
29 views

require two-step verification for Azure subscription administrators

How can I enforce that all Azure subscription administrators have two-step verification enabled. For example, as an owner of a private GitHub repository, I can audit if everyone is using two-factor ...
0
votes
0answers
54 views

Combined Windows and Anonymous authentication in IIS combined with Tomcat ISAPI filter

I have Apache Tomcat (version 7.0) running with an AJP-connector. I have configured the IIS (version 8.5) with an ISAPI-filter to forward all the calls to Tomcat's AJP and have enabled Windows ...
1
vote
2answers
128 views

Multiple Domain realmd/sssd Configuration on RHEL7?

I've configured our RHEL7 instance to support Active Directory login integration by using the documentation HERE. This describes using the "realm" command to configure the "sssd" service allowing for ...
3
votes
1answer
63 views

Disable two step SSH authentication for trusted addresses

I'm using libpam-google-authenticator for two step SSH authentication which is great and adds another level of security to my server. My question: Is it possible to disable this for certain addresses. ...