A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
3 views

Remove Lighttpd password auth for one path

I have a lighttpd server that I want to serve some files from. Unfortunately the server is currently set up to require password authentication and I want these files to be available publicly. How can ...
0
votes
1answer
11 views

how to translate an Active Directory group into a NIS netgroup?

The goal is to be able to add + : @DL-MyCompany-MyTeam : ALL to /etc/security/access.conf and have it work as expected. This is my sssd.conf: [domain/default] cache_credentials = True [sssd] ...
1
vote
1answer
21 views

How to set the username and password for smtpd in Postfix?

I've set up Postfix as SMTP server by adding this configuration to main.cf: myhostname = foo.com mydomain = foo.com myorigin = $mydomain smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes ...
0
votes
0answers
12 views

Forms authentication with URL rewriting

I've got forms authentication set on the top level of my site via the web.config, and I also have a URL rewrite rule to go from mysite.com/plex/ via a reverse proxy to another localhost server; ...
0
votes
0answers
14 views

SAMBA/LDAP authentication failed in FreeNAS

I got a FreeNAS server and I am trying to share folders using SAMBA. My users are in an OpenLDAP server. The OpenLDAP has the samba.schema loaded. I checked the sambaSID in my FreeNAS and it is the ...
0
votes
1answer
33 views

Solution to Implement/Realize Two(Multi)-Factor Authentication within Microsoft Windows Server 2012 R2 Domains [on hold]

I'm currently looking for a way to implement a secure Two(Multi)-Factor Authentication within a Windows Domain Network (all Servers/Clients are at least Windows Server 2012R2/Windows 8.1) utilizing a ...
2
votes
1answer
21 views

require two-step verification for Azure subscription administrators

How can I enforce that all Azure subscription administrators have two-step verification enabled. For example, as an owner of a private GitHub repository, I can audit if everyone is using two-factor ...
0
votes
0answers
18 views

Combined Windows and Anonymous authentication in IIS combined with Tomcat ISAPI filter

I have Apache Tomcat (version 7.0) running with an AJP-connector. I have configured the IIS (version 8.5) with an ISAPI-filter to forward all the calls to Tomcat's AJP and have enabled Windows ...
1
vote
2answers
38 views

Multiple Domain realmd/sssd Configuration on RHEL7?

I've configured our RHEL7 instance to support Active Directory login integration by using the documentation HERE. This describes using the "realm" command to configure the "sssd" service allowing for ...
3
votes
1answer
52 views

Disable two step SSH authentication for trusted addresses

I'm using libpam-google-authenticator for two step SSH authentication which is great and adds another level of security to my server. My question: Is it possible to disable this for certain addresses. ...
-1
votes
0answers
15 views

How does session crypto work in Apache 2.4?

I am trying to understand how Apache encrypts a cookie. When the passphrase is not specified my cookie looks like session=ExtAuth-user=myUser&ExtAuth-pw=myPass;. But when I specify a passPhrase I ...
0
votes
1answer
30 views

SSH public/private authentication failing in Google compute engine instances

I have two instances (host names are namenode and datanode1 ) of Ubuntu 14.04 LTS running on Google compute engine. I am struggling setting up ssh root access to between them. I am providing some ...
3
votes
3answers
68 views

home dir and shell for Active Directory authenticated users

I have successfully configured sssd and can ssh into a system with AD credentials what I am missing is the creation of a home directory and bash set as the shell. My assumption is that if I log on to ...
0
votes
0answers
49 views

How to download files from my MSDN subscription using Powershell?

In order to install Microsoft software in my Azure labs, I'd like to grab the ISO files directly from Microsoft, as speed is so much better than downloading from my own repository. One example is ...
1
vote
0answers
15 views

Single row user security in MS SQL 2008 R2

I have a SQL Server 2008R2 question regarding making a single row in an odd way. situation: I have a student records database in which ~ 100 students might in-process in a given day. They enter a ...
0
votes
1answer
25 views

Authenticate WLAN using Hostname in Access Group

The hardware is Cisco APs and Windows 7 Enterprise clients, which currently allows users to authenticate based on an Access Group in AD. We're looking at instead of users account, using the actual ...
0
votes
0answers
14 views

Strange behaviour of domain administrator credentials on windows server 2008 r2 domain

So, my problem: if i try to log into a client PC (Windows 7 Professional) with the administrator credentials with the network cable plugged in, it will respond with the error message "The user name or ...
0
votes
0answers
15 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
0
votes
1answer
17 views

Deployed IPA-server, created replica, then fed production data only to replica. How to fix?

At some point, I deployed ipa-server on a CentOS 6 machine. Being asked to better move it into a VM, I used ipa-replica-prepare / ipa-replica-install . This resulted as wanted, and I got a working ...
0
votes
0answers
12 views

Automatic LAN authentication for HTTPS/HTTP sevice via Proxy

This is my situation: I have a LAN in my office that I want to connect entirely to an internet server via HTTPS. I want to log all the LAN's host injecting the session cookie in the header of ...
0
votes
0answers
12 views

Allowing IUSR to access a page anonymously windows server 2000

I am migrating a web app from a windows 2000 server to a windows 2008 server. In several places, the app is trying to convert a webpage to a PDF. To do this, it has the server access a url and convert ...
3
votes
1answer
20 views

Use more complex AND/OR structure with PAM

PAM allows to use sufficent and required for some logic, like auth sufficient pam_a.so auth required pam_b.so auth required pam_c.so which would mean "either a is true, or b must be true and then c ...
0
votes
1answer
48 views

getent passwd dosen't show users of LDAP server

I have made the LDAP authentification configurations and I try to authenticate to the LDAP server on Ubuntu 14.04 TLS. This is the file nsswitch.conf : # /etc/nsswitch.conf # # Example configuration ...
-2
votes
3answers
94 views

Is there any standard for DNS <-> IP authentication?

I'm looking to implement an authentication mechanism which allows to enforce access policies based on the domain name of the client. The authentication server uses the information available in the DNS ...
0
votes
1answer
56 views

Unable to authenticate LDAP client with PAM when pwdReset = TRUE

I have searched tons of webs and tutorials but I couldn't find an answer to my problem. I have set up OpenLDAP 2.4 on a OpenSUSE 12.3 machine with a password policy overlay. The client is a Linux ...
0
votes
0answers
34 views

Tomcat client certificate authentication, client certificate not sent

I've add client certificate based authentication on our Tomcat servers. Both client and server are tomcat servers with internal CA issued certificates. Each tomcat has its own keystore (PKCS12) ...
2
votes
0answers
10 views

Skip password authentication on Dovecot when client certificate provided

Using Dovecot version 2.1.7, I've gotten client certificates working with fairly little effort, and at this point I can choose between having password authentication after the certificate check or ...
1
vote
0answers
33 views

dovecot userdb passwd-file default_fields uid not expanding %variable

I'm trying to set up a very simple shared mail server, where each 'domain' is a system user, i.e. 'example.com' is a real user with /home/example.com/, a uid of 5001 and gid 'example.com' of 5001. ...
2
votes
0answers
33 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
0
votes
0answers
7 views

IIS two layer authentication for BETA webapp

I have an ASP.NET MVC webapp that has a public area and a member area with login using cookie + oauth, nothing fancy is just a regular webapp. I want to publish a BETA version for testing but I don't ...
1
vote
0answers
18 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
2answers
64 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
1
vote
0answers
39 views

OpenSSL verification failing with CA signed cert but not with self signed one?

First of all, I know there are plenty of related questions but it seems like most of them are due to the lack of issuer certificates on the server. I have been following this guide to enable client ...
0
votes
0answers
122 views

postfix with dovecot : fatal: no SASL authentication mechanisms

I setup a mail server using postfix and dovecot . I used pro linux system administration book by James Turnbull, but I got following error when try to test mail server with swaks command. swaks -tls ...
0
votes
1answer
27 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
0
votes
1answer
30 views

The authenticity of the server when accessing it through a domain name instead of an IP

When I do ssh username@123.123.123.12, I log into the server fine. However, if I do ssh username@example.com, where example.com points to the same IP addrees, I get: The authenticity of host ...
0
votes
1answer
39 views

tacacs+ for Linux authentication/authorization using pam_tacplus

I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues. I have modified the pam_tacplus module to meet some of my custom requirements. I know by ...
2
votes
0answers
67 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
0
votes
3answers
38 views

How to create a digital signature and verify it through a server

I am trying to find out a way to create a digital signature for the employees of my company and place it in a server from where they can retrieve them and attach it with any digital document (Office ...
1
vote
0answers
39 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
2
votes
1answer
38 views

How to prevent browser from prompting for a client certificate and allow the IIS to accept it (not require it)?

In a web application, I have a WCF service uses Client Certificate authentication. I checked "Accept Client Certificate" in IIS - SSL Settings and it works fine. But some times, in some browsers, if a ...
0
votes
1answer
116 views

IIS ARR pass-through Windows authentication does not work

I have a similar problem as described here: ARR 3 IIS 7.5 Windows Authentication not working Unfortunately that solution does not work on our servers. In our test environment we have an ARR server ...
1
vote
2answers
78 views

Is it possible/practical to use a Linux server to authenticate Windows devices?

I am from a small primary school and we are currently looking into getting a server purely for authentication. I do not want to push software to the devices or anything like that. I simply want to ...
2
votes
1answer
58 views

Single forest with multiple domains - authentication?

I have a single forest and a 2 domains in it. Remote sites have a mix of users from both domains. All of my domain controller are global catalogs and trusts are set up. Do I need to have domain ...
2
votes
1answer
165 views

SSH with DSA 2048 bits key

I need to set up secure connection through ssh keys, prerequisites are : DSA type number of bits : 2048 Passphrase : yes On my Linux I can't create this kind of key, the man says : DSA keys ...
3
votes
2answers
196 views

ADFS - Combining Claims from Provider Trusts and AD

As part of implementing a SharePoint 2013 installation, I have configured SSO with ADFS on Windows Server 2012R2. There are two separate AD forests, one as part of the Hosted SharePoint/ADFS and one ...
0
votes
1answer
204 views

sshd on a minimal Linux: “Failed password for invalid user root”

I'm trying to start SSH server on a minimal Fedora installation. And I mean really minimal: one that is produced by diskimage-builder ramdisk builder. It does not even have users (absent /etc/passwd ...
0
votes
2answers
31 views

Adding an SSH public key to a new account without enabling password authentication

On a SSH server, I have the following (truncated) configuration: PubkeyAuthentication yes PasswordAuthentication yes On my client, I have a key pair, and have added my public key on the server ...
0
votes
2answers
50 views

Linux smart card authentication

I am using puttysc to authenticate to a remote Linux server with my smart card . But as I understand, this isn't true PKI authentication - puttysc just unlocks the public key and matches it to a user ...
0
votes
1answer
47 views

Invalid command: 'AuthLDAPAuthoritative', perhaps misspelled

Have apache 2.2.24 running on Gentoo server. I need apache to now authenticate through windows active directory, however, on apache service restart, I am getting this error: Invalid command, ...