Authentication is critical to systems security. It is the mechanism an authoritative system uses to validate a given entity's asserted identity (who they claim to be) is the same as that entity's stored credentials. Credentials must be previously stored for an entity either by the authoritative ...
0
votes
0answers
25 views
SSL Handshake, Cannot Pinpoint Problem
When attemting to communicate with an Alfresco Server to perform a file upload the client receives the following error in their logs.
SSLPeerUnverifiedException:
Indicates that the peer's ...
1
vote
0answers
13 views
All client browsers repeatedly asking for NTLM authentication when running through local proxy server
All client browsers repeatedly asking for NTLM authentication when running through local proxy server.
When pointing browsers through the local proxy to the internet, some but not all clients are ...
1
vote
0answers
15 views
Remote access to IIS 5.1 via NTLM
I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service.
I want to access the web service using Java client by ...
0
votes
0answers
13 views
Squid Digest Authentication keeps asking the password
I have this setup: a squid3 server, and ldap server for squid authentication using Digest.
The only problem is that browsers keeps asking the users for authentication against the proxy every 5-10 ...
0
votes
1answer
15 views
libapache2-mod-auth-pgsql and ssl-cert equivalent in CentOS
I switched this a time ago from Ubuntu to CentOS. Now, I faced this problem:
Trying to install a software that I installed before in Ubuntu, I stopped at the point where I need to install the above ...
0
votes
2answers
34 views
How to allow just one user to login in special computer in Server 2003
I want to just allow one user to login to a special computer in domain.
how can i do that ?
0
votes
0answers
17 views
MAIL SERVER configuration for more than 10 user with authentication. (NOT using original email password)
we have a work group network of approx 15 user.
Application server: windows server 2008 standard edition.
file server: FREENAS 8.
mail server and domain setup has been avoided for easy ...
2
votes
2answers
110 views
Change the SSH authentication method depending on the IP address
How can I setup my SSH server so that the authentication method depends upon the client IP address?
internal network -> password login enabled
request from WAN -> only passkeys enabled
I ...
0
votes
1answer
48 views
Is this considered 2 Factor Authentication?
Trying to create a 2 Factor Authentication for users to access data remotely.
Here my scenario:
We have a Watchguard to VPN into the network - If we use it's internal DB to store authentication ...
0
votes
1answer
30 views
Sudo: selectively using NOPASSWD
I'm currently struggling to give a particular user access to run a certain subset of commands without a password using sudo. From what I've read, my syntax should be working, however, when I try and ...
-7
votes
0answers
90 views
How to Setup SOCKS Proxy Server in CentOS? [closed]
I'm setting up a server that users can connect to it by using the username and password.
I used the Linux CentOS operating system and I want my users to connect through a SOCKS proxy.
I have not ever ...
0
votes
1answer
34 views
Two factor mechanism to differentiate lan from wan side users
I'm in a situation where a customer of mine would like 2-factor authentication (e.g. log in and receive e-mail with access URL) according to the following rules:
If the users is on the LAN, do not ...
0
votes
4answers
52 views
MySQL wants a password but it's empty
mysql -uroot
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
mysql -uroot -p
Enter password: <-- leave blank, hit enter without entering anything
...
4
votes
1answer
121 views
Managing service passwords with Puppet
I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
2
votes
1answer
52 views
How can I protect a Tomcat webapp that's reverse proxied in an Apache2 virtual host using basic authentication?
I'm having trouble figuring out how to adding basic HTTP authentication to password-protect a development testing environment running on a production web server. Both the main site and the testing ...
1
vote
1answer
87 views
Multiple authentication backends in lighttpd
I have some users in a LDAP directory and I'd like to have another user in a plain or htpasswd file that can login although the connection with the LDAP server is not available.
Is it possible to ...
1
vote
0answers
40 views
Why isn't Samba authenticating an Open Directory username that arrives in all caps?
I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
2
votes
1answer
28 views
Can UNIX/MSAD LDAP/Kerberos authentication work without matching usernames?
It looks as though there is a solid requirement for usernames on the UNIX client and in the MSAD to match for kerberos authentication to function (I think LDAP authentication too).
Is this absolutely ...
0
votes
0answers
9 views
How to configure SSL socket for the javax.xml.ws.Service? [migrated]
I have a tomcat application that invokes an IIS hosted ssl enabled, client auth enabled Webservice
This Tomcat application talks to multiple wenservices and probably each of them require client auth ...
-1
votes
1answer
42 views
SFTP authentication with credentials in Wordpress MySQL database?
I'm trying to find a solution that will allow for a user to connect to a server via SFTP using a provided username/key combination (stored in a Wordpress installation's MySQL database), without ...
0
votes
1answer
40 views
How to use Open Directory login credentials when offline?
When using Active Directory, I can log into a machine while on the network using my AD credentials, then later take that machine offline and still be able to log into it.
I'd like to do the same ...
2
votes
2answers
121 views
How to allow RDP access based on client certificate
How can I limit (RDP) access to a Windows Server not only by username/password but also with a client certificate?
Imagine creating a certificate and copying this to all computers from which I want ...
0
votes
1answer
25 views
How to implement squid authentication for LAN
I am doing my final year project using squid as my proxy server, i need to implement some secure way of authentication before anyone can have access to the internet. How do i go about that? I am using ...
0
votes
1answer
129 views
How to solve authentication error in sendmail relay through gmail [closed]
I followed the steps in http://www.linuxha.com/other/sendmail/gmail.html to setup gmail in send mail. But when I try to send mail I got the authentication failure message.
—– Transcript of session ...
2
votes
4answers
123 views
IIS 7.5 basic authentication and Active Directory validation
I'm not an IIS or Active Directory expert by any means so I want to present a scenario here and see if what we want to accomplish is feasible.
We have an application hosted on Windows Server 2008 R2 ...
0
votes
1answer
48 views
Is it possible to get svn to authentication with windows/sspi, but with username aliases?
I have a VisualSVN server running on Windows 2008 R2 x64 using basic authentication.
I want to upgrade to use windows authentication.
However, some of the usernames set up do not match the domain ...
2
votes
1answer
81 views
Is a PKI required when authenticating a Cisco Aironet AP via radius against AD
We're a small office and have a Cisco Aironet 1250 access point set to WPA-PSK. Now that we've deployed Active Directory I'd like start authenticating my users via radius instead of a PSK.
To this ...
7
votes
1answer
189 views
802.1x computer authentication using hostname instead of cert
My configuration includes: Cisco ACS as RADIUS server, MS AD, MS PKI, Cisco 2960G switches. Workstations are 95% XP Pro SP3 fully patched, some 7 pro fully patched.
Computer cert autoenrollment ...
0
votes
1answer
123 views
unable to connect to the aws ec2 instance,Host key verification failed
I had set up a ubuntu instance with rails package and also deployed my app, it is working fine.
But when i try to do SSH I its not allowing me for the remote login and throws errors like host key ...
2
votes
1answer
128 views
openvpn: auth-user-pass or (and?) passphrase?
I'm setting up OpenVPN on PfSense 2.0, and now i wonder if should use the "auth-user-pass" option, set an passphrase on the openssl keys or both.
Both require an extra password beside of the valid ...
5
votes
1answer
297 views
Troubleshooting Windows Authentication problems (no challenge) in IIS 7.5?
I know that there are thousands of reports of people having trouble getting Integrated Windows Authentication to work with IIS, but they all seem to lead to web pages that don't apply or solutions ...
2
votes
1answer
173 views
Authentication with specific subdomains
Basically I'm trying to enable the authentication module when accessing to a specific part of a subdomain, which are dev.domain.com and pma.domain.com, they both must have the authentication module ...
1
vote
1answer
27 views
Apache authentication requirement based on location
I am trying to configure my apache server to have the following rule. If the request comes from 192.168.., no authentication is required. But from anywhere else, I want to require them to log in.
So ...
1
vote
0answers
47 views
Creating domain accounts via a VPN and using them to log in on the local machine
The environment is a pc that has joined a domain, but has been disconnected from the domain's network and put on an external network. However since the domain login is cached then you can still log ...
0
votes
0answers
33 views
PostFix SASL with saslauthd and shadow
On debian, I got postfix SMTP authentication almost working :
I do :
perl -MMIME::Base64 -e 'print encode_base64("username\0username@domain.com\0password");'
and get my encoded indentification
...
0
votes
1answer
88 views
Squid and AD authentication
I've tried to setup AD authentication according to instructions found at this link , but it wasn't successful, AD authentication didn't work.
In cache.log, I've got:
squid_ldap_auth: WARNING, LDAP ...
3
votes
1answer
148 views
Google Chrome and kerberos authentication against Apache
I've managed to get kerberos authentication to work now with Apache and Likewise Open but so far, Google Chrome doesn't seem to play fair.
Unless I start it with chrome.exe ...
1
vote
2answers
60 views
Control IIS website access to users with Active Directory
Basic authentication question. I have my website up and it is set up to be used by Windows Active Directory users.
How can I control access to the website within AD users so that some have access ...
4
votes
3answers
77 views
Can I set up a different method of authentication on Nagios?
Nagios is a wonderful too for monitoring servers. Their web interface is not bad, either. However I am not crazy about using the HTTP Authentication that comes standard.
Is there a way to use another ...
1
vote
1answer
45 views
Windows XP NTP client authentication
I'm trying to configure a Windows XP NTP client to authenticate to a local NTP server on our closed network. How can I make this happen?
One article I've found for configuring the client to talk to a ...
0
votes
2answers
48 views
Kerberos unknown code krb 147, failed to verify krb5 credentials with LikeWise Open
I've followed this guide to get Apache Single-Sign-On to work, but so far all I get is strange kerberos errors.
...
0
votes
2answers
78 views
Postfix - Is there a way to reject invalid authentication (even for mynetworks)?
I got a working postfix/dovecot configuration running with the following rule for recipients rejection:
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject
This works ...
2
votes
2answers
61 views
How to implement successive LDAP authentications on an Apache site?
I have a small Apache site which I've successfully implemented basic LDAP authentication using mod_authz_ldap. However, I am having a problem trying to implement two levels of successive ...
0
votes
1answer
66 views
Can't access aspx page after IIS reset using computer name only ip and localhost
After installing a fix in a site, and doing a iis reset we are unable to access (gets 401) the site using the computer name. Accessing using the ip-adress or localhost works fine, and it worked fine ...
0
votes
4answers
81 views
Currently no logon servers available to service the logon request (VPN and file share)
I have a remote user with a laptop joined to our domain.
He can successfully log onto the machine.
While he is out of the office, he connects using SSL VPN, which connects and passes traffic.
When ...
2
votes
1answer
150 views
choosing Red Hat Directory Server vs FreeIPA vs Other
I'm setting up a new, small network. About 10 servers at 3 sites with just 3 users total. All are running RHEL 6.1. I was hoping to have centralized user management, especially having a single ...
1
vote
1answer
62 views
Not being prompted for credentials when connecting to a share on different domain
We are a computer repair shop. When working on client machines, we connect them to our network and map a network share that resides inside our domain to store an image of the hard drive. Up until ...
0
votes
0answers
71 views
How do i configure a simple dante instance?
I'm trying to set up a simple SOCKS proxy on Amazon EC2, but I'm not able to figure out the documentation and configuration file for dante. For now i've been able to set up a proxy without ...
2
votes
3answers
75 views
How to send authentication credentials to a published web site without prepending the AD domain name?
ISA Server 2006 publishing a web site; ISA does forms-based authentication against an Active Directory domain (which ISA itself is joined to), then, if the user is authorized, ISA sends the user's ...
1
vote
0answers
51 views
Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server
I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
