A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

-4
votes
1answer
16 views

web program today: why is online web program user =/= Unix user in /etc/passwd [on hold]

History and explanation In the early days of Unix, ... as Unix was invented as a network and multi-user operating system; you could deploy web server programs on Unix where the online user in the ...
0
votes
0answers
4 views

IIs 7.0 intranet server authentication challenge

I probably have no business administering a web server, but there is nobody else in our team to do it. We have a company intranet site that is open to everyone in the enterprise. It is running on a ...
6
votes
2answers
572 views

Receiving a private key from server admin: ok or not?

I am to get access to a remote SFTP server. The admin has created a user for me, and generated a public/private key pair for me. Then he securely sent me the private key file, which I use for ...
0
votes
0answers
14 views

What to choose as NIS replacement? [on hold]

At our company we have about 100 users on NIS. This only works on: Linux Jenkins but just about nothing else we use supports NIS: JIRA Confluence GitLab Office 365 Gerrit Windows 8.1 laptops ...
-1
votes
0answers
11 views

apache on centos not asking for client certificates

I have apache 2.4 on CentOS 7, and I'm trying to use client certificates for authentication. I have the site using comodo positive SSL, and I want to use self signed certs for client authentication, ...
0
votes
0answers
12 views

tacacs+ windows based server Authorization failed, dropping priv-lvl to 0

i'm having a problem with tacacs authorization. I have configured tacacs server as per this blog :tacacsConfig As specified in the blog i made changes exactly, tacacs test/verify works as expected ...
0
votes
0answers
11 views

Apache authentication against FreeIPA's Kerberos

I'm currently trying to set up Apache as an authentication portal. It's supposed to act as a reverse proxy with krb authentication. My apache server is named portal.test.com (debian container) My IPA ...
2
votes
2answers
28 views

What are the disadvantages when using two-factor authentication on SSH like Authy-SSH?

I'm considering to setup Two Factor Authentication on my SSH accounts (OpenSSH, Ubuntu). I was looking into Authy-SSH but I'm wondering what the possible disadvantages are? Also, can I lock myself ...
1
vote
0answers
11 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
0
votes
0answers
17 views

Apache sometimes not starting after reboot

Sometimes, after my server (Cent OS7, default repository) reboots, Apache is not started automatically. To fix this, I reboot the server one more time, and then it works. My Apache error logs shows ...
0
votes
1answer
45 views

Dovecot + Plesk occasional authentication mismatch when using DIGEST-MD5, username used for generating the MD5 hash is wrong [closed]

I am using a dovecot and plesk machine and found that there are occasional login problems for users because of an error during the DIGEST-MD5 hash generation. The debug logs show that the hash ...
0
votes
0answers
37 views

What is the correct way to configure match rules in sshd_config?

I'm configuring Match rules in /etc/ssh/sshd_config . Whenever I add more than 1 match rule and after restarting SSH ofcourse, I'm getting locked outside of the machine with the following error: [...
0
votes
0answers
10 views

Is it possible to have mutual certificate authentication in wpa2-enterprise?

1) Is it possible to have mutual certificate authentication when using WPA2-enterprise so that a) the client identifies the server and b) the server identifies the client through pre-installed ...
0
votes
0answers
19 views

freeradius+ external users database

I need authenticate users with freeradius, these users are located in an existing external database. I think that the rest_module can help me to do that, in that case, which values the rest api ...
0
votes
1answer
37 views

Server allows logging in without supplying a password and no ssh keys were exchanged, what could be the reason?

I'm trying to secure an outbound server with Google 2FA solution. For the time being, I'm first configuring everything on a local Vagrant machine and once everything works as intended I'll run it as ...
1
vote
1answer
24 views

How to configure pam sshd to allow different rules on different users/groups?

I'm configuring google two-factor authentication on an outbound server in the company I work for. Here are the relevant configurations: /etc/ssh/sshd_config: ubuntu@stage-itai-1:~$ egrep -v '^#' /...
0
votes
1answer
47 views

courier-authlib: wrong username enters search query

I am trying to setup smtp authentication using courier, mysql on postfix. My passwords in my db are encrypted. When I attempt to connect, I get an auth failure r2d2 ~ # telnet mail.server.com 25 ...
0
votes
1answer
35 views

random “MongoError: not authorized on XXX to execute command {YYY}” with mongo 3.2

since very recently I have random errors like these: 2016-06-06T18:17:55.386Z pid:2458 worker:3 MongoError: not authorized on db to execute command {...someQuery...} 2016-06-06T18:17:55.386Z pid:...
-1
votes
0answers
35 views

Linux, Kerberos Auth, and LogonWorkstations AD Attribute

When using Kerb Auth on Linux, with a Server 2008 AD Domain for authentication, and nsswitch set to files then ldap: If an ldap user tries to ssh to a server, and they are a member of a group which ...
0
votes
0answers
15 views

Using biometric authentication with rdesktop to Windows machine?

I'm using rdesktop to access windows servers/clients from a linux machine. I can setup biometric access with AD for these windows clients, but is it possible to rdesktop to a windows box and use a ...
0
votes
0answers
19 views

Tomcat6 Client Authentication

I configured a Tomcat6 webserver on CentOS with SSL, and it works fine. Now I want to configure Client Authentication on it too: The server and the clients have their own certs signed by a local ...
0
votes
1answer
51 views

Is it possible to configure a Cisco AnyConnect VPN to use two separate LDAP authentication methods simultaneously?

I have a Cisco ASA 5505 with a Security Plus license along with an AnyConnect Plus license. I don't currently have any VPN configuration on the ASA as I'm still in the planning phase. I would like to ...
0
votes
0answers
30 views

Allow domain group ssh access

Centos 7 joined to 2012 R2 AD domain Joined to AD domain with realm join and now I can ssh in as any domain user (ssh server -l domusr@lab.local) I can also login to the local console via domusr@lab....
0
votes
1answer
23 views

Trying to restrict ssh access to domain groups

Centos 7 joined to 2012 R2 AD domain Joined to AD domain with realm join and now I can ssh in as any domain user (ssh server -l domusr@lab.local) I want to only allow certain domain groups to ssh in ...
0
votes
1answer
26 views

Kafka acl without kerberos

I'm trying to set up a single kafka server with certificate authentication and access controls based on those certificates without the bother of setting up a kerberos service. Setting upp the ...
0
votes
2answers
34 views

apache reverse proxy with basic auth

I am trying to reverse proxy a web site with apache httpd 2.2 on centos 6. Access to part of that site should be restricted via basic auth. To that end, I have the following config: <Location ~ "(/...
0
votes
0answers
17 views

Debian Cyrus SASL LDAP Auth fails

I am in the middle of an emergency server transfer from a server I did not setup to a new piece of hardware. I am running the newest Debian with Postfix and Cyrus. I have copied over the majority of ...
1
vote
1answer
71 views

sAMAccountName requires DOMAIN\ to authenticate

I am trying to ingtegrate SLES with Windows Active directory server for authentication purposes. We need to use sAMAccountName as login name but its unable to bind if we didn't give DOMAIN/...
1
vote
1answer
47 views

How to only allow users and/or groups access to certain client machines that are connected to an openldap server?

I would really like to figure out how I can allow users and/or groups access to certain client machines that are all connected to an OpenLDAP server. I would like to do this whether the user is ...
0
votes
0answers
35 views

Delegating authentication in Windows AD domain

In a Windows AD domain, when the client (user) authenticates against the Domain Controller, is it possible to delegate the authentication to another LDAP/RADIUS server? We have a ton of services in ...
1
vote
1answer
13 views

Lighttpd Skip auth for ip

I have setup a login for a domain with lighttpd 1.4.31, no problem. Now, I would like to skip this login for a single IP address. I have tried a few different configs I found in the documentation ...
0
votes
0answers
54 views

Newly created Windows Domain users can't log in to Samba share joined to Domain

I have a Debian 7.2 server running Samba 3.6.6 joined to a Windows Domain. It all works great, except within the last week, newly created Domain users can't log into the Samba share. Existing accounts ...
0
votes
0answers
19 views

How do authentication servers handle thousands of CPU intensive logins?

Apologies if the answer is obvious, I'm just a little curious and couldn't nail down an answer elsewhere. I'm used to seeing authentication servers use simple SHA-1 or SHA-256 to validate credentials,...
0
votes
1answer
27 views

Why does nginx need an auth_http entry for smtp reverse-proxy?

I'm an apache user normally, but I need to start using nginx as a reverse proxy for smtp (postfix). I've seen tens of examples online. Like this and this. All of them have an auth_http entry, which I ...
1
vote
2answers
48 views

OpenVPN for embedd devices

I'm a newbie in OpenVPN and the related questions, I'm googling for several days without positive answer. I have several linux-based devices located in my town that collects data and sends it for me. ...
4
votes
0answers
39 views

Authentication issues when clients access domain-joined server from non Samba4 subdomain DNS name

We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago. Simplified Current ...
0
votes
1answer
23 views

Postfix: Unverified Client host rejected / SASL Logged In

Running Ubuntu, iRedMail, Mysql, Amavis, Spamassassin, Dovecot, Postfix Recently had some unauthorized usage of a postfix server internally from a malware deprecated staging server. I worked on ...
0
votes
1answer
33 views

Varnish with separate auth check or auth check followed by Varnish?

I'm not quite sure if there's a term for the architecture I'm looking to set up, but I'll try to explain. I have an API and clients calling it with a session ID. The session ID is associated with ...
-1
votes
1answer
24 views

Setting up an ssh authentication server

I have some 30 Media Temple grid servers and I need to manage the access of 15 or so developers to those servers. Is it possible, and more importantly secure, to setup a server who's only job is to ...
0
votes
0answers
44 views

authenticating Cisco IOS against FreeRADIUS not responding

My company's looking to move from local authentication on it's routers and switches to a central RADIUS server which I have been tasked with developing. I have the FreeRADIUS server properly ...
4
votes
0answers
21 views

Secure Graphite installation

I think I misunderstand something here. I've installed Graphite with Docker (sitespeedio/graphite) and set a Basic Auth for the Web-Panel. I opened the Firwall for Port 2003 to get in datapoints from ...
0
votes
0answers
19 views

dante SOCKS5 server handle authentication with external script

I'm currently choosing between using dante or 3proxy for creating a SOCKS5 server. My user login details are stored in a mysql table. Passwords are generated using bcrypt(), so RADIUS won't be an ...
0
votes
1answer
16 views

Apache authentication against custom web service

I would like to have apache that forwards the call to an internal service (a django app) that returns a True/False (and some parameters maybe) if the user is valid or not. This before forwarding the ...
0
votes
0answers
17 views

dante SOCKS5 auth process use custom script

Is there a way I can use my own script for auth process of dante SOCKS server? I store my passwords created with bcrypt(). Free radius isn't able to handle bcrypt() generated passwords I think, so a ...
0
votes
1answer
30 views

Can iis authenticate against two separate AD without trust?

First of all, I have poor experience on IIS, I'm more a linux/apache/nginx guy. Now I have a proprietary app running on an old IIS (w2003, I know is out of support) which is currently authenticating ...
0
votes
0answers
10 views

Postfix: Sender Credentials Password Storage

A few weeks ago I was trying to implement a gmail-like SMTP relay / aliases system on Postfix here: Postfix: SMTP Relay based on alias (from address) After posting a solution for the question one ...
2
votes
2answers
41 views

sshd_config how to allow one user to have full unrestricted sftp and allow ssh

I changed sshd_config to jail users within specific group into their home directory. changed subsystem to sftp internal-sftp and used forcecommand: internal-sftp However, this prevented the admin ...
0
votes
0answers
13 views

IIS - requests login for an ajax request

When I make an AJAX request from a .NET webpage, my local machine instance of IIS causes this to appear: I've tried setting a local admin account on the app pool There's nothing in the IIS logs or ...
0
votes
0answers
10 views

Client Certificate Authentication with IIS from a guest account

I have an IIS 7.5 server that uses client certificate authentication. A typical setup is to create a local user and import the client ssl certificate to that profiles user store. This process works ...