A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
21 views

why did pam_tty_audit stop working?

I recently installed the following updates to my system: Upgrade: libpam-runtime:amd64 (1.1.8-3, 1.1.8-3.1), libpam0g:amd64 (1.1.8-3, 1.1.8-3.1), libpam-modules:amd64 (1.1.8-3, 1.1.8-3.1), ...
0
votes
0answers
12 views

SQL 2008 R2 says access denied when logging in remotely

I have an SQL 2008 R2 server and a monitoring server both on the same physical network (but different VLANs). The monitoring server is always connecting to the SQL server to run a query and check the ...
0
votes
1answer
21 views

Kerberos in production on virtual machines

At the moment I am investigating the possibility to use Kerberos as the primary authentication protocol for our cloud structure. We'll probably follow through with this idea and for the sake of HA the ...
1
vote
0answers
13 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
2
votes
0answers
17 views

Samba: Authenticate only local accounts over AD?

I have a samba server where I create all the linux accounts and corresponding SMB accounts via a application I built. I manage all the permissions for all of our shares via ACL's also using the ...
1
vote
1answer
14 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
0
votes
1answer
23 views

Can't get basic plain auth to work on lighttpd win 1.4.35-1-ipv6

I simply can't get Plain Basic auth to work on lighttpd for more than one user. I have this auth.user file formatted like this: [account_1_name]:[account_1_password] ...
0
votes
0answers
13 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
1
vote
2answers
22 views

Issue with sharp in host vars Ansible

Since # is considered as a comment in /etc/ansible/hosts I'm unable to use a password containing a sharp. [hosts] host1 ansible_ssh_user=user ansible_ssh_pass=userpass ansible_su_pass=My#Password ...
0
votes
0answers
8 views

LDAP: Extend database using referral

My company uses an off-site LDAP server to handle authentication. I'm currently working on a local VPN for my branch that needs to use the off-site LDAP to check user's usernames and passwords, but I ...
-1
votes
0answers
21 views

Apache client side SSL authentication using smartcards

I'm trying to build an authentication system for a site using Apache, which I want only to be accessible to users that have a valid UK NHS issue smart card. When a card is inserted into a compatible ...
2
votes
1answer
28 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
-2
votes
2answers
27 views

SSH using ssh_key from a different account

Is there a way for a user to ssh as a different user using ssh_keys? For example, i have host A B and C. User X SSHes from A to B as himself ( A -- as X --> B ) Now the user wants to SSH to C from ...
2
votes
3answers
81 views

How to configure SSH access for key authentication for another client?

I know that if I want to configure SSH access for key authentication, I need to use the following command: ssh-keygen -b 2048 -t rsa -C “mypassphrase” I then need to copy the codes created in ...
0
votes
2answers
16 views

How to clear kerberos config

I am setting my machine as a kerberos client. I have a question on how the kerberos config file actually take effect and how to clear its effect. My experiment is as follow. Step 1, without editing ...
-2
votes
3answers
49 views

Public Key authentication fails while using the -i parameter on ssh command

I have to do public key based authentication on two Linux servers. Machine 2 (192.168.3.132) username: vfx_30 home dir: /home/vfx_30 ssh keys: /home/vfx_30/.ssh/id_rsa /home/vfx_30/.ssh/id_rsa.pub ...
-1
votes
1answer
60 views

Squid Proxy does not prompt for authentication and denies every request

I have a problem with a squid proxy that always denies requests. The bad part is, i never get to see an authentication pop-up... Squid is running on an Ubuntu 14.04 vserver. I'll provide you my ...
-1
votes
2answers
45 views

Add ssh public key to group instead of users on centos 6.5

I am a newbie to linux administration. I have a box with centos 6.5 x64. Ive been configuring ssh access via public/private key. Ive been wondering if I could add the public key to a user group ...
-2
votes
1answer
27 views

configure dovecot 10-auth.conf

i'm going to setup mail server according this guide : https://workaround.org/ispmail/wheezy on setting up dovecot part 10-auth.conf it's says change auth_mechanisms = plain to auth_mechanisms = ...
-3
votes
1answer
52 views

Psql uses .pgpass file however pg_dump does not, and it also does not connect using the correct password [closed]

Using the following command: % pg_dump -h postgres.cs.host.ca -p 5433 -n _cscf_subscription -Fc -f ~/old.dump odyssey_prod Password: pg_dump: [archiver (db)] connection to database "cs-rsub" failed: ...
0
votes
1answer
24 views

Connecting with PostgreSQL 9.1 using the Ubuntu machine user and peer authentication method

I want to connect to my local installation of PostgreSQL 9.1 using my machine user (who is vagrant). So, after reading PostgreSQL documentation, I thought I just needed to: Add username map in ...
1
vote
0answers
47 views

Apache basic auth with IP whitelist

I am trying to add some kind of IP whitelist to one of my HTTP Basic Auth protected directories. I am using Apache 2.2.15 on CentOS 6.5 but I also tried with Apache 2.2.22 on Ubuntu 10.04. I looked ...
0
votes
0answers
32 views

Percona MySQL LDAP authentication fails through .NET MySQL connector

Basically, MySQL uses its native authentication, where usernames and passwords are stored in mysql.user table. MySQL authenticates user against the credentials stored in mysql.user table. Our ...
0
votes
1answer
31 views

Solution for SSL client certificates with user self service

I'm administrating a linux-based small business network. User information is centrally stored in an OpenLDAP directory. There is an existing CA which is currently used to sign server certificates. It ...
0
votes
1answer
26 views

Exim4 require TLS for all hosts but localhost

As my webmailer does not support STARTTLS and I want to enable relaying for everyone at localhost, I would like to have Exim advertise AUTH PLAIN and LOGIN only without TLS if the connection was ...
0
votes
1answer
45 views

Should I still disable root if I disable password authentication and enable only key authentication?

I'm new to the linux world and I've been reading a few tutorials on security. I've seen some questions on StackExchange tackling this subject, but from what I've seen, none of the answers clarified ...
0
votes
2answers
35 views

How to check the connection to remote server with a digital certificate (client authentication)

I got a digital certificate with extensions for server and client authentication and a private key. Now I want to connect to a remote server (REST web services) which should accept my requests ...
0
votes
0answers
22 views

pam-mysql: “Failed password” when using hash methods

today I installed mysql-pam in order to store user credentials for ssh logins in a mysql database. At first I set users.password_crypt = 0, which means that plain passwords are saved in the db. After ...
0
votes
0answers
11 views

<Directory /> doesn't (always) apply its settings to NFS-mounted home directories

Two different machines, a production and a test machine, are running CentOS 6, with the CentOS Apache package installed, and both version 2.2.15. The configuration on the test machine is an exact ...
0
votes
0answers
90 views

Digest authentication keeps asking for credentials

I'm attempting to use Digest Authentication in IIS (7.5 on Server2008R2) - all other authentication options are disabled. In IE (11 on Server 2008R2), the user gets prompted for credentials one time, ...
0
votes
0answers
66 views

Daloradius / Freeradius mac authentication

I setup a centos freeradius mysql with the frontend daloradius using the steps on this site http://linuxdrops.com/install-freeradius-with-web-based-management-daloradius-on-centosrhel-debian-ubuntu/ ...
0
votes
1answer
17 views

AuthDBDUserPWQuery with multiply tables

I have a MySQL authentication for SVN server. Configuration file looks like this: <Location /svn/project> ... AuthDBDUserPWQuery "SELECT Password FROM SVNUsers WHERE Nickname = %s" ...
1
vote
1answer
77 views

Squid3 - Cannot authenticate username/password with Mysql

I am testing both authentication with squid_passwd file and Mysql. This is my configuration auth_param basic program /usr/lib/squid3/basic_ncsa_auth /etc/squid3/squid_passwd # auth_param basic ...
1
vote
0answers
70 views

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up ...
2
votes
1answer
104 views

WiFi deauthentication issue

I would like to find a root of the WiFi issue we've got in our working environment. Few words about WiFi infrastructure We are using now Apple solution. Three brand-new access points from Apple ...
-1
votes
1answer
41 views

Nagios Schedule a Check on Command Line

I use Nagios Core 3.5.1. In order to skip the HTTP authentication (guest user without password could also be tedious), I turn off the Nagios authentication based on this article. (even though turning ...
1
vote
2answers
81 views

IE HTTP Kerberos issues authenticating to site on FQDN not matching AD Domain

I have a site on a corporate domain that authenticates using Kerberos auto-login from IE and Chrome just fine, as long as the DNS being used to access it falls under the AD FQDN The AD domain is not ...
0
votes
1answer
54 views

IIS 7.5: In the “Connect As” dialog, can't set “Specific user” to the application pool identity?

I have a bunch of websites and applications with their own app pools, all using AppPoolIdentity. App pool identities are nice because you can set file system permissions and add SQL Server users based ...
0
votes
0answers
58 views

Dante multiple proxies with separate authentication

I have been trying to set up Dante on Debian to create a Socks 5 proxy. So far I have only managed to get it to work with the root user, and would like to know how I can have multiple proxies each ...
3
votes
0answers
59 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
4
votes
3answers
209 views

If I join esxi to an Active Directory domain, how does it choose which DC to authenticate to?

I'm familiar to vSphere and large installations, and not at all familiar with the free products. Topology & configuration We have some branch offices that use ESXi and have a DC resident on ...
0
votes
0answers
103 views

linux user to authenticate with local samba4 ldap instead of shadow file

I have tried to use sssd to bind user authentication with samba4 ldap. but seeems like is not working. (method 2). example at ...
1
vote
1answer
77 views

Danted Socks Proxy with Authentication

I've been trying to set up a SOCKS proxy on linux with danted. I have the proxy working perfectly without authentication, but when I try adding in authentication with both method: username and method: ...
1
vote
2answers
62 views

Allow only first login to ssh with password

I would like to allow to first remote login via ssh using password for a new users. After that authentication should be restricted to public key. How to deal with that? I mean how to restrict second ...
1
vote
1answer
31 views

Postgres SSPI authentication on Windows

I'm trying to enable windows authentication for Postgresql 9.3 (Windows x64 not in domain, UAC is disabled, my account is local admin). The one click installer set the server running under ...
0
votes
1answer
38 views

Authentication options for staging sites

We're currently authenticating our clients who wants to view their staging environments using windows authentication. That means we have to create their accounts in our local AD and assign them to ...
0
votes
0answers
31 views

User under windows server AD access Linux server using kerberos

I installed AD on windows 2008 r2 sp1 server . And had configured all things follow the issue http://msdn.microsoft.com/en-us/library/ms995329.aspx ...
0
votes
0answers
40 views

Squid auth_param basic program - not allowing network requests?

I'm using auth_param basic program to run a Python script that connects to a database on another server. If I run the script myself it works fine, but when Squid runs it, suddenly authentication ...
1
vote
1answer
130 views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
0
votes
1answer
48 views

Allow ssh access to git pull on remote machine

We have a server with some of our git repositories on and I would like to be able to clone one to our webserver (which runs debian). I ran ssh-keygen on the webserver and copied the public key into ...