A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
5 views

Postfix: Unverified Client host rejected / SASL Logged In

Running Ubuntu, iRedMail, Mysql, Amavis, Spamassassin, Dovecot, Postfix Recently had some unauthorized usage of a postfix server internally from a malware deprecated staging server. I worked on ...
0
votes
1answer
14 views

Varnish with separate auth check or auth check followed by Varnish?

I'm not quite sure if there's a term for the architecture I'm looking to set up, but I'll try to explain. I have an API and clients calling it with a session ID. The session ID is associated with ...
-1
votes
0answers
11 views

Download files from server securly from mobile app [closed]

I am creating a mobile app that need to download some files from a server (AWS S3 or similar). I would like to use a REST API for downloading and authentication. I have read a lot about ...
-1
votes
1answer
12 views

Setting up an ssh authentication server

I have some 30 Media Temple grid servers and I need to manage the access of 15 or so developers to those servers. Is it possible, and more importantly secure, to setup a server who's only job is to ...
0
votes
0answers
14 views

authenticating Cisco IOS against FreeRADIUS not responding

My company's looking to move from local authentication on it's routers and switches to a central RADIUS server which I have been tasked with developing. I have the FreeRADIUS server properly ...
2
votes
0answers
9 views

Secure Graphite installation

I think I misunderstand something here. I've installed Graphite with Docker (sitespeedio/graphite) and set a Basic Auth for the Web-Panel. I opened the Firwall for Port 2003 to get in datapoints from ...
0
votes
0answers
3 views

dante SOCKS5 server handle authentication with external script

I'm currently choosing between using dante or 3proxy for creating a SOCKS5 server. My user login details are stored in a mysql table. Passwords are generated using bcrypt(), so RADIUS won't be an ...
0
votes
0answers
10 views

Apache authentication against custom web service

I would like to have apache that forwards the call to an internal service (a django app) that returns a True/False (and some parameters maybe) if the user is valid or not. This before forwarding the ...
0
votes
0answers
5 views

dante SOCKS5 auth process use custom script

Is there a way I can use my own script for auth process of dante SOCKS server? I store my passwords created with bcrypt(). Free radius isn't able to handle bcrypt() generated passwords I think, so a ...
0
votes
1answer
20 views

Can iis authenticate against two separate AD without trust?

First of all, I have poor experience on IIS, I'm more a linux/apache/nginx guy. Now I have a proprietary app running on an old IIS (w2003, I know is out of support) which is currently authenticating ...
0
votes
0answers
8 views

Postfix: Sender Credentials Password Storage

A few weeks ago I was trying to implement a gmail-like SMTP relay / aliases system on Postfix here: Postfix: SMTP Relay based on alias (from address) After posting a solution for the question one ...
0
votes
0answers
4 views

Permission denied when accessing SSH server [migrated]

So, a little background. I'm trying to host my own git server, and I decided to use SSH to log into it. I started two days ago, trying to configure SSH, to no avail. I'm hosting the server on my home ...
2
votes
2answers
37 views

sshd_config how to allow one user to have full unrestricted sftp and allow ssh

I changed sshd_config to jail users within specific group into their home directory. changed subsystem to sftp internal-sftp and used forcecommand: internal-sftp However, this prevented the admin ...
0
votes
0answers
6 views

IIS - requests login for an ajax request

When I make an AJAX request from a .NET webpage, my local machine instance of IIS causes this to appear: I've tried setting a local admin account on the app pool There's nothing in the IIS logs or ...
0
votes
0answers
9 views

Client Certificate Authentication with IIS from a guest account

I have an IIS 7.5 server that uses client certificate authentication. A typical setup is to create a local user and import the client ssl certificate to that profiles user store. This process works ...
0
votes
0answers
19 views

IIS7 Digest authentication credentials forgotten between pages

I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh. If this is normal behavior for this ...
0
votes
1answer
19 views

IIS 8.5 not accepting authentication settings at app level

I'm trying to set authentication settings directly to the app level and IIS doesn't seem to be accepting it. I'm running IIS 8.5 on 2012 R2. Here's what happen when I disable all authentication ...
0
votes
0answers
19 views

Dovecot static user db and lda user verification

I've got dovecot set up to use a static userdb in my dovecot.conf file: userdb { driver = static args = uid=vmail gid=vmail home=/var/vmail/%u } Now I also do want to verify the users for the ...
-2
votes
0answers
18 views

Log all .htaccess/.htpasswd logins? [duplicate]

I'm wondering how I can view/log all usernames and passwords that are used to attempt to access my directory on that is protected by htaccess basic authorization. How can I set this up on an ...
0
votes
1answer
23 views

What kind of SPN is required to delegate client credentials to a SMB Share?

I'm trying to delegate KERBEROS authentication from an SQL Server to a file server over OLEDB. Is there a particular Service Principle Name that is used to delegate credentials from an SQL Server ...
0
votes
1answer
31 views

Github deploy key to allow a Docker Hub image to pull private gem with

Given repo "A", a Ruby project with a dependency on a gem, contained within another private Github repo, "B", I need to give Docker Hub permission to clone repo "B" when it builds the image. I'm ...
0
votes
0answers
18 views

Custom algorithm for password hashing with vsftpd

Traditionally, when the client logs in, it sends the credentials (username+pw) without any further processing. The server then checks if an entry exists in its user database that matches the supplied ...
1
vote
0answers
26 views

have xmpp (ejabberd) server authenticate with existing user database (MySQL)

Let me start off by stating that I know very little about the XMPP protocol or real-time communication in general. I did however manage to set up an ejabberd server with TLS encryption. I have written ...
6
votes
3answers
148 views

What is DNS TXT record “mailru-verification”?

Sometimes I see this mailru-verification DNS record. I've Googled - and Yandexed ;) - but I found nothing about it. I suspected that is a kind of russian SPF implementation... dig example.com TXT ...
1
vote
0answers
20 views

Unspecified GSS failure. after setting up krb5/ldap authentication

new here, so I recently setup ldap/krb5 authentication on an centos7.2 vm. Krb5/ldap is working correclty as I can login using ldap user account. However, when I check the logs in the client machine ...
-1
votes
0answers
24 views

php-Authentication always fails [migrated]

I am trying to set up a simple athentication with php: <?php if ($PHP_AUTH_USER != "a" or $PHP_AUTH_PW != "b"): header('WWW-Authenticate: Basic realm="Protected Page: ' . 'Enter your ...
1
vote
1answer
21 views

NO [ALERT] Unexpected response from remote authentication server

is what I see when I run testsaslauthd inside an strace socket(PF_LOCAL, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/saslauthd/mux"}, 110) = 0 writev(3, ...
0
votes
0answers
16 views

Thecus N5200PRO NAS Server and Windows 10

I got an Thecus N5200PRO NAS Server which I'd like to use, but I've got strange authentification problems which I can't resolve. What I'm doing: Reset NAS to factory default Create a user Create a ...
0
votes
1answer
11 views

Serve media content only to logged in user using Apache

I recently saw this feature on another site where it would server media files, like uploaded images, only when the user is logged in. It would throw an "ACCESS DENIED" page otherwise. So, I ...
7
votes
2answers
70 views

Same RSA key on multiple PCs

Can I use my RSA private key on multiple computers i.e. my desktop and laptop. Or do I have to create a unique key for each computer I own, and add their respective public keys to necessary ...
1
vote
0answers
23 views

Why was the previous authenticity of the host ignored?

I'm on Ubuntu 14.04 Desktop. I have just logged into other machine (Ubuntu 14.04 Server) using ssh in one terminal. I'm still connected. When I did scp in another terminal (opened earlier) to move a ...
1
vote
0answers
43 views

Can I allow configure Jenkins to use LDAP authentication while still allowing company github accounts to make commits?

We are running Jenkins CI as a critical application in our organisation. I've recently set up an openLDAP server and I am looking to migrate all of our applications to this over time. The LDAP ...
1
vote
0answers
42 views

Authentification methods for non-public facing websites

We have two different kinds of websites in our company, one of those are public-faced websites where users have to have access without serverbased authentication (anonymous auth.) and other websites ...
0
votes
0answers
47 views

Authentication Configuration with IIS 8.5 on Windows Server 2012

I have a site hosted using IIS on a Windows Server 2012 R2 server. The application is configured to use an application pool that uses the NetworkService account as the application pool identity. The ...
2
votes
1answer
32 views

AWS EC2 Server Refused Connection - Unmounted replaced authorized_keys - still cannot connect

So we were working on configurations for a soon to be production server. After making some configuration changes, we rebooted the machine and we got the dreaded "server refused connection" message. I ...
0
votes
0answers
45 views

LDAP user authentication access denied

Currently, I am configuring LDAP client for user authentication on the server. Only SSH key authentication is allowed (Password authentication is not allowed). My SSH configurtion ...
0
votes
1answer
56 views

Authenticated Origin Pulls with CloudFlare and IIS

I'm running Windows Server 2012 R2 with CloudFlare in front and trying to setup authenticated origin pulls as specified here - https://support.cloudflare.com/hc/en-us/articles/204899617 The problem ...
0
votes
1answer
31 views

Force Postfix to ask autentication

If I try to telnet a popular SMTP server I get this messages: telnet smtp.mail.yahoo.it 25 Trying <ip>... Connected to <smtp banner>. Escape character is '^]'. 220 <smtp host> ESMTP ...
3
votes
0answers
87 views

Active Directory + Google Authenticator - Native support in Windows Server? [closed]

Use Case: 2FA to log in to Active Directory (such as logging into a corporate desktop computer that is on AD) Desired Solution: Google Authenticator, because it is RFC based, and widely used for ...
1
vote
2answers
61 views

Force windows to prompt authentication to shared folder/disable “remember my credentials”

Is there a way to force windows to prompt for credentials to a shared folder? We are in a domain environment with 50+ PCs. What I need is to have a shared folder on our server that has specific user ...
0
votes
1answer
8 views

Use LDAP on top of simple mysql hash+salt user table

We have a huge table full of user accounts for our website that are stored in a very simple and standard mysql manner: the user-id is associated with a salted hash that represents the password and ...
6
votes
2answers
448 views

Active Directory + Google Authenticator - AD FS, or how?

(Edited to match the understanding of the answer-writers -- New, fresh, clean question posted here: Active Directory + Google Authenticator - Native support in Windows Server?) Research Done So Far ...
1
vote
1answer
40 views

Attempting to setup ssh authentication on linux - Grants access all the time

I am currently attempting to secure one of my linux box. I would like the device to grant access to only those systems that have the ssh private keys. In order to accomplish that here is what I did ...
0
votes
1answer
36 views

nginx client certificate location block

How can I use client certificate authentication with nginx for a folder? The ssl_client_certificate directive isn't allowed in location blocks. Example: I want my website me.tld to be reachable by all ...
1
vote
0answers
54 views

How to configure Apache direct trust for CA signed certificates

I'm working on a corporate network which unfortunately is flat and has led to an interesting security requirement which I'm sure is possible (I just can't figure out how) The corperation has its own ...
2
votes
2answers
20 views

Do all LDAP servers have anonymous access?

I need to configure programmatic ldap authentication in an application. But I'd rather not hardcode passwords anywhere. So it would be very convenient if ldap servers all have anonymous access for ...
1
vote
1answer
33 views

PAM authentication - Write error: broken pipe

In order to allow the 2FA in my domain, I setup a LinOTP server to manage the map between tokens and users (from LDAP) in my realm. So, I configured the PAM stack to integrate this authentication ...
1
vote
0answers
46 views

linOTP to openVPN authentication ubuntu 12.04

I am working on a project in which I have to install a one-time password authentication. I have successfully installed openVPN to which I can connect without any authentication. I have installed the ...
1
vote
1answer
22 views

Local credentials used when radius server is available sshd pam_radius

I have pam_radius setup and it works (centos6, pam_radius: 1.4.0-2.el6), i can authenticate via the radius server using ssh. What i am trying to accomplish is that when the radius server is ...
0
votes
1answer
15 views

Buildbot access restriction configuration

I'm trying to install buildbot so I can perform automatic stuff like building my latex documents and running unit tests. I wan't it to be available online, so I'm doing it on a VPS (Digital Ocean). ...