A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
11 views

application basic authentication behind nginx

I need some hard setup: I have nginx->ruby_app and my ruby_app must authenticate users with basic auth. How I can deliver user:pass to backed and perform authentication? Ruby app is querying mysql. I ...
0
votes
1answer
16 views

OpenSSH: allow users with writeable HOME to use publick key authentication

On a local workstation I need to have a handful of users to be able to freely write in each other $HOME. I KNOW this is a security breach and, in the specific situation, I do not care at all. I have ...
1
vote
1answer
19 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
-1
votes
0answers
15 views

Active Directory authentication using RADIUS

I'm trying to authenticate linux hosts using a Radius server. For that, I've used this tutorial on youtube. Problem 01: Everything is working and I can authenticate via ssh, but I can't log via user ...
1
vote
0answers
8 views

NIS not respecting files first in nsswitch.conf

Okay, first off, I know NIS is a turd, but it's what we've got until we do a major migration next year. Today we had a NIS server outage which predictably prevents user logins. What surprised me was ...
1
vote
1answer
50 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...
0
votes
0answers
12 views

Setting up CORS for a specific method and url

First of all, apologies if you think this should be on stackoverflow.com - it seemed more suitable for this site but it's a bit borderline. We have a partner site, i'll call it http://bob.com. For ...
0
votes
0answers
17 views

how to get info on failed authentication to domain - security audit?

Setup: 1 Windows Server 2012 box as Domain Controller, named DC1. 2 Windows Server 2012 R2 boxes, S1 and S2, on the same network, same config, joined to the domain. Issue: At random times, S1, S2 or ...
1
vote
0answers
15 views
+50

Merging Forms Authentication databases together

I have an ASP.Net-based system; identical copies of the site run on three different servers, all Windows 2008R2 running IIS7.5. Each site has it's own authentication database, with it's own users, ...
3
votes
1answer
38 views

How to have multiple AuthUserFile directive in proftpd.conf [on hold]

In my CentOS where CPanel is installed in proftpd.conf, I can see directive AuthUserFile /etc/proftpd/passwd.vhosts I wanted to add one more AuthUserFile directive, so Profptd uses one more file to ...
0
votes
0answers
7 views

Jenkins AD Auth with extended User search base

I’m trying to use a fairly large Active Directory instance to authenticate Users with Jenkins. This works quite well with the following settings: ...
2
votes
1answer
23 views

Do not use Client Cert Auth when on local network apache2

I'm hoping someone could help me with this question... I am running an Apache 2.4.7 server on my Ubuntu 14.04 box with some public facing sites. For some of those sites I've implemented a Client Cert ...
1
vote
1answer
27 views

What authentication protocols are negotiated by HP Printers to Windows Server Shares?

I am trying to find information specifying the protocol negotiation process for newer HP printers that can perform direct scans to Windows-style shared folders - in particular, the HP 8600-series is ...
1
vote
1answer
16 views

Privileges when doing sudo to another domain user

Suppose I have a corporate domain mydomain using MS Active Directory. In the domain I have the users myuser and youruser. Now, on one specific Ubuntu machine mymachine, myuser has sudo rights, and ...
-1
votes
1answer
22 views

Public Wi-Fi with Individual Authentication and Time limit for Internet Access [closed]

I would like to change the way that my costumers access to the internet. I would like to enable two ways for sharing my internet: With my wireless network as public, I would like to give a username ...
1
vote
1answer
50 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
1
vote
0answers
35 views

Unable to configure CNTLM

I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes- # # Cntlm Authentication Proxy Configuration # # NOTE: all values ...
3
votes
0answers
61 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
0
votes
1answer
32 views

Track a machine who is entering bad passwords into a samba3 domain controller

I have a user who is getting its account locked constantly because an other machine is trying to login with an old and bad password and thus locking the user's account... The user doesn't know which ...
0
votes
0answers
19 views

How to reuse same digest authentication credentials with multiple acls?

I want to apply different access policies to different groups/acls using Squid, which is what I've done. Now I want to set up digest authentication, but I want to use the same digest credentials for ...
1
vote
0answers
29 views

IIS 7.5 - Windows Authetication FQDN

Currently, I have to implement an auto login function for my mediawiki and I have enabled windows authentication on my IIS 7.5. It is working on localhost without any prompt. However, when I tried ...
1
vote
1answer
73 views

Windows 2008R2 Logon Restrictions and LDAP Authentication

We use a Palo Alto firewall (and its GlobalProtect client) for VPN access to our network. The firewall uses LDAP to authenticate VPN logins. I am now trying to setup a user ID for a consultant and I ...
0
votes
0answers
16 views

specific IP Attribution with isc-dhcp-server with freeradius authentication

I would like to assign specific address to my clients, regarding their radius authentication. For exemple, user1 (group user) authenticate on radius, dhcp gives him 192.168.1.1 as IP user2 (group ...
0
votes
0answers
38 views

firefox with ssl two way authentication chains

I fall into a never ending trouble with certificate chains and 2-way authentication on my servers; I'll try to describe the problem as best as I can: I have 2 sites on 2 different servers, ...
1
vote
0answers
25 views

apache authenication - how to supress or bypass for users from within network

I have below conf to allow users from within our company's network to access access the site without userid or password. <Location /> Require valid-user Order allow,deny ...
1
vote
1answer
74 views

Debian Samba share Authentification with RADIUS server

I'm trying to configure Samba (apt-get install samba) to authenticate users using a RADIUS server and i cannot find anything useful. Is it possible ? I tought i could set Samba to use the PAM ...
1
vote
1answer
24 views

Powershell to non-domain machine

I'm writing a small script that needs at one point to connect to a machine that is not a domain member. The machine the script is run from will always be a domain member. I've found that using the ...
0
votes
0answers
15 views

How do you setup pass through authentication for a hyper-v enhanced session?

I have tried the solution on this Technet article but there is no user credentials section in the "Hyper-v Setting" dialog. I have also tried the way I normally setup auto login, when I need it, with ...
0
votes
0answers
47 views

SSH 'Permission denied' on one host but not on another even though they're the same using the same keys

Both Server A and Server B has the same private keys under /root/.ssh/id_rsa. Both public keys are on the git repo. Both have the same sshd_config and ssh_config. However one gets Permission denied ...
-3
votes
1answer
58 views

IIS Windows Authentication - Change Password at next login

I have set windows authentication and forms based authentication (FBA) in IIS for my web application. I added users to windows so they can login using the windows prompt. I set the checkbox to force ...
0
votes
0answers
25 views

Mac OS X Server authenticate Samba agains external LDAP

Here's our current situation; We have 2 networks that are connected to each other with a router. The first network in an Microsoft Active Directory based network. The second network is an Apple Mac OS ...
3
votes
0answers
47 views

Windows server 2012 R2 - delay before certificates start working

I have this weird unexplained delay before the certificates i put in my servers start actually working it goes something like this: I add the certificates snap-in to mmc to manage the computer ...
0
votes
1answer
27 views

mod_wsgi authorization with Django users from postgres database

I am trying to protect a url path with basic auth and want to use the users from my Django application which are stored in a Postgres database. The user app is allowed to access this database, the web ...
0
votes
2answers
37 views

Is it possible to delegate AD FS admin functions via a web interface? [closed]

I am looking at IAM for a SaaS application. The application will have client organisations accessing it and each organisation will want to manage their own users, permissions and roles. Of course only ...
0
votes
1answer
29 views

Stormpath and saltstack

Does anyone use stormpath to authenticate against user/password with saltstack? Instead of creating new users and/or getting it from db, I was wondering if someone is using stormpath to get the ...
0
votes
0answers
44 views

Accepting SAML token from third-party to allow access to our RDweb application

We have an RDweb hosted application, which until now has access control performed by a form and username/password authenticated against active directory. A third-party wishes to use their own ...
3
votes
1answer
87 views

LDAP authentication fails

I try to set up an LDAP directory that will allow me to authenticate Debian users. Once the configuration of the LDAP server and PAM files is done, the authentication fails. I think the client doesn't ...
1
vote
0answers
128 views

LDAP with SSSD: force user to change password - 'ShadowLastChange' not working

I have CentOS6, with LDAP user authentication, using OpenLDAP and SSSD. I'm trying to force user to change the password. According to this ServerFault question I tried to set ShadowLastChange to 0, ...
2
votes
1answer
53 views

LDAP authentication - avoid duplicate uidNumber

I have just successfully configured OpenLDAP Users authentication in a single CentOS6 box, based on SSSD. Took some time and many trials, but it's working. Now, I want to start adding users. I'm ...
1
vote
0answers
70 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
2
votes
1answer
54 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
2
votes
1answer
28 views

SSH authentication based on existing OpenVPN tunnel

I have a single CentOS server, and several Windows clients that should connect to it, from remote. I've successfully setup OpenVPN (with Public Keys), with which the clients connect to the server; and ...
2
votes
2answers
124 views

OpenSSH two factor authentication combined with Kerberos / public key

I'm trying to implement two-factor authentication for OpenSSH. The environment is Centos 7 (kernel: 3.10.0-229.1.2.el7.x86_64) with OpenSSH_6.6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013. We have Active ...
1
vote
1answer
72 views

authentication error on WS2012 (trust relationship failed)

Given the following lab setup: HOST1 on Windows Server 2012 R2 (host running Hyper-V, joined test.local domain, static IP) DC1 on Windows Server 2012 (VM under Hyper-V on HOST1, AD and DNS roles, all ...
0
votes
0answers
55 views

how to use ldap user account on samba share?

I have ldap user existing on ldap server. And now I want to authenticate that user on samba share to give permission for share folder. How that is possible that Ldap user act as samba user using some ...
0
votes
0answers
27 views

connect server via ssh using ldap account anywhere

I'm new in using openldap I'm using centOS7 to be my openldap server my question is, can I login server via ssh using ldap account without any client settings? something like when I done setting ...
0
votes
0answers
28 views

SSH-FTP Authentication Fail and MySQL Database Error on Debian VPS Until Reboot

The last few days I'm having an issue with a VPS which is part of a cluster setup. The VPS with the problem is used as a MySQL and a nameserver. All other machines in cluster behaving as should. I ...
2
votes
4answers
124 views

How to get Microsoft license authentication for all machines on a network?

We have a small network (~150 desktops, ~20 servers) much of which is Linux. MS keeps wanting to audit our MS products every 3 years or so. I really don't have time to go around to 80-90 desktops and ...
1
vote
1answer
136 views

Disable authentication for HTTP OPTIONS method (preflight request)

One recurring problem with CORS is that the spec prescribes request headers get stripped from the preflight request (HTTP OPTIONS). However if the server requires authentication, this means the ...
0
votes
1answer
40 views

Authentication using ADFS 2.0 is not woking

I'm trying to configure ADFS 2.0 with thinktecute STS as an SP. The relying party has been configured successfully using the RP metadata. But when an authentication request is being sent to the ADFS ...