A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

1
vote
0answers
4 views

Skip password authentication on Dovecot when client certificate provided

Using Dovecot version 2.1.7, I've gotten client certificates working with fairly little effort, and at this point I can choose between having password authentication after the certificate check or ...
1
vote
0answers
2 views

dovecot userdb passwd-file default_fields uid not expanding %variable

I'm trying to set up a very simple shared mail server, where each 'domain' is a system user, i.e. 'example.com' is a real user with /home/example.com/, a uid of 5001 and gid 'example.com' of 5001. ...
2
votes
0answers
13 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
0
votes
0answers
7 views

IIS two layer authentication for BETA webapp

I have an ASP.NET MVC webapp that has a public area and a member area with login using cookie + oauth, nothing fancy is just a regular webapp. I want to publish a BETA version for testing but I don't ...
1
vote
0answers
8 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
2answers
48 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
0
votes
0answers
14 views

OpenSSL verification failing with CA signed cert but not with self signed one?

First of all, I know there are plenty of related questions but it seems like most of them are due to the lack of issuer certificates on the server. I have been following this guide to enable client ...
0
votes
0answers
74 views

postfix with dovecot : fatal: no SASL authentication mechanisms

I setup a mail server using postfix and dovecot . I used pro linux system administration book by James Turnbull, but I got following error when try to test mail server with swaks command. swaks -tls ...
0
votes
1answer
24 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
0
votes
1answer
28 views

The authenticity of the server when accessing it through a domain name instead of an IP

When I do ssh username@123.123.123.12, I log into the server fine. However, if I do ssh username@example.com, where example.com points to the same IP addrees, I get: The authenticity of host ...
0
votes
1answer
18 views

tacacs+ for Linux authentication/authorization using pam_tacplus

I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues. I have modified the pam_tacplus module to meet some of my custom requirements. I know by ...
2
votes
0answers
25 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
0
votes
3answers
13 views

How to create a digital signature and verify it through a server

I am trying to find out a way to create a digital signature for the employees of my company and place it in a server from where they can retrieve them and attach it with any digital document (Office ...
1
vote
0answers
25 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
2
votes
1answer
26 views

How to prevent browser from prompting for a client certificate and allow the IIS to accept it (not require it)?

In a web application, I have a WCF service uses Client Certificate authentication. I checked "Accept Client Certificate" in IIS - SSL Settings and it works fine. But some times, in some browsers, if a ...
0
votes
1answer
49 views

IIS ARR pass-through Windows authentication does not work

I have a similar problem as described here: ARR 3 IIS 7.5 Windows Authentication not working Unfortunately that solution does not work on our servers. In our test environment we have an ARR server ...
1
vote
2answers
76 views

Is it possible/practical to use a Linux server to authenticate Windows devices?

I am from a small primary school and we are currently looking into getting a server purely for authentication. I do not want to push software to the devices or anything like that. I simply want to ...
2
votes
1answer
48 views

Single forest with multiple domains - authentication?

I have a single forest and a 2 domains in it. Remote sites have a mix of users from both domains. All of my domain controller are global catalogs and trusts are set up. Do I need to have domain ...
2
votes
1answer
113 views

SSH with DSA 2048 bits key

I need to set up secure connection through ssh keys, prerequisites are : DSA type number of bits : 2048 Passphrase : yes On my Linux I can't create this kind of key, the man says : DSA keys ...
3
votes
2answers
96 views

ADFS - Combining Claims from Provider Trusts and AD

As part of implementing a SharePoint 2013 installation, I have configured SSO with ADFS on Windows Server 2012R2. There are two separate AD forests, one as part of the Hosted SharePoint/ADFS and one ...
0
votes
1answer
71 views

sshd on a minimal Linux: “Failed password for invalid user root”

I'm trying to start SSH server on a minimal Fedora installation. And I mean really minimal: one that is produced by diskimage-builder ramdisk builder. It does not even have users (absent /etc/passwd ...
0
votes
2answers
26 views

Adding an SSH public key to a new account without enabling password authentication

On a SSH server, I have the following (truncated) configuration: PubkeyAuthentication yes PasswordAuthentication yes On my client, I have a key pair, and have added my public key on the server ...
0
votes
2answers
38 views

Linux smart card authentication

I am using puttysc to authenticate to a remote Linux server with my smart card . But as I understand, this isn't true PKI authentication - puttysc just unlocks the public key and matches it to a user ...
0
votes
1answer
29 views

Invalid command: 'AuthLDAPAuthoritative', perhaps misspelled

Have apache 2.2.24 running on Gentoo server. I need apache to now authenticate through windows active directory, however, on apache service restart, I am getting this error: Invalid command, ...
0
votes
1answer
21 views

IIS issues challenge on unprotected directory

We've encountered an issue where IIS issues a challenge for all directories on the site, including the ones which are marked to allow anonymous users. This only happens when accessing the site through ...
1
vote
0answers
86 views

500 Internal Server Error: Which is the issue? [closed]

I've configured openldap in my server and also installed and configured mod_ldap but the server throws me a 500 Internal Server Error if I introduce right or bad user. I don't know if it's a bad ...
0
votes
1answer
38 views

SPF Softfail when Txt Record Exists

I am getting softfail for SPF and Sender-ID and I tested it by sending an email to check-auth@verifier.port25.com. My Set-up: 1 VPS hosting 1 website Postfix for Send only emails No incoming ...
1
vote
1answer
21 views

Two factor athentication on SSH server without root privileges

I want to set up two factor authentication on a server, on witch I don't have administrative account. The purpose of this is: I want to give some other people possibility to create SSH tunnels to this ...
1
vote
2answers
50 views

Block Administrators authentication attemps from workstations

My Administrator user once in a while is getting locked-out by the workstations in our lab, due to failed logon attempts. (While this is a problem that should be addressed, because this means there is ...
0
votes
1answer
27 views

Is there a way to change which wireless network is connected to when authenticating windows 7 AD clients using single sign on over wifi?

The situation: Two domains. Two wireless networks. Each domain's users have their own network for security reasons. B is a child domain of A (A = domain.com, B = child.domain.com). Users in domain ...
0
votes
1answer
158 views

Nginx Pagespeed does not Combine or Minify JS or CSS

I am using Mod_Pagespeed Filters for Nginx and the combine and minify javascipt or css is not working. I checked everything and could not find the reason: 1) There are no errors in the error log 2) ...
0
votes
2answers
78 views

Windows Integrated Authentication with IIS Farm and subapplications

Assume the following site layout www.contoso.com - runs as CONTOSO\sitePool www.contoso.com/subSite1 - runs as CONTOSO\subPool1 www.contoso.com/subSite2 - runs as CONTOSO\subPool2 The pages should ...
0
votes
0answers
51 views

pam_tally is not supporting user locking after failed attempts on CentOS

After adding the below configurations in /etc/pam.d/system-auth. The user account is not getting locked after multiple failed attempts. As per the below configuration the account should be locked ...
0
votes
1answer
14 views

SimpleSAMLphp OpenID Consumer

I'm using SimpleSAMLphp as an OpenID Consumer and no openID provider I tried seems to work. I always get the following error: Exception during login: SimpleSAML_Error_BadRequest: ...
0
votes
0answers
29 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
1
vote
1answer
53 views

LDAP authentication using RADIUS server

I have a RADIUS server with a custom authentication method. I have a Mysql-Database with passwords of a Django CMS which are hashed in PBKDF2_SHA256, so I had to write a custom authentication script. ...
0
votes
0answers
45 views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: ...
0
votes
2answers
62 views

Apache/mod_auth_gss authentication failure

Sorry if this is the wrong stackexchange site for this. Based upon the documentation (for reference I also used this blog post) I have this in httpd.conf: # Increase max size of HTTP request headers ...
1
vote
2answers
29 views

Force https before authentification - no access to vhost

I am a beginner when it comes to servers and I have a problem similar to this one. When accessing the desired webpage, .htpasswd prompts me for an authentification before I am redirected to https. ...
10
votes
1answer
207 views

What do the OS X authorization mechanisms actually do?

Background  I'm trying to glean a better understanding of the OS X login process, in order to decide the best way for achieving VPN Single Sign On. Please do correct me if I'm wrong, but I believe ...
0
votes
0answers
22 views

Public key authentication plus challenge authentication

I am trying to setup 2-phase authentication based on this guide, but instead of entering the password I would like public key to be involved. If PubkeyAuthentication yes in /etc/ssh/sshd_conf then 2 ...
2
votes
3answers
166 views

PAM, RADIUS, Google Authenticator and Two Factor Auth

I have setup FreeRADIUS, PAM and the Google Authtenicator. FreeRADIUS calls PAM, which in turn calls the Google pam_google_authenticator.so libary. That all works successfully. However, that's not ...
0
votes
1answer
48 views

monitoring local admin remote login

Using SIEM system, how can I monitor the event of someone remote login into a computer using a local adminstrator account ? By using RDP you can remote login using local adminstrator account into a ...
1
vote
0answers
41 views

why basic auth loops when using nginx and monit

I was trying to configure nginx so that http://example.com/monit will access http://127.0.0.1:2812, which is the url monit is listening. Two authentication was set, via nginx(nginx.conf file) and ...
0
votes
1answer
30 views

How do I restrict certificate authentication to specific users on IIS 8.0?

I am using IIS 8.0 on a Windows Server 2012 box. This is not a domain joined machine so Active Directory is not available to me. I've successfully configured certificate authentication. When ...
0
votes
0answers
59 views

Login using client SSL certificates

I want users to be able to login to say, Jenkins using client SSL certificates without password. Let me rephrase it: The certificate part works fine. I want to find a way for apache to tell web ...
4
votes
1answer
175 views

Postfix SMTP authenticated can send as anyone

The server correctly accepts/rejects the logins though dovecot's authentication mechanism, but after that I can pretend to be anyone when sending emails. smtpd_sender_login_maps = ...
1
vote
0answers
52 views

Nagios 3.2.3 Core web interface login via LDAP using full names for username

First off I've never done any Nagios or LDAP configuration in the past and I've been sort of dumped into this as is so often the case so forgive my inevitable ignorance regarding these things but I've ...
3
votes
0answers
42 views

Setting header based on client certificate

I have Apache running as a reverse proxy for an internal server. Users hitting the proxy are required to use client certificates. On the internal server, there is a web application that can use an ...
2
votes
1answer
50 views

Authentication of saltmaster against salt minions

I am just getting started with salt and I am wondering how the saltmaster is being authenticated against the clients. I know that when connecting a minion the master has to accept the public key of ...