0
votes
1answer
24 views

Authentication options for staging sites

We're currently authenticating our clients who wants to view their staging environments using windows authentication. That means we have to create their accounts in our local AD and assign them to ...
3
votes
1answer
29 views

Apache LDAP Authentication with AD Subgroup

I am trying to authenticate using an Active Directory User on a Website running on Apache. My Setup Active Directory: User "steven" is a member of the group "staff". User "cindy" is a member of the ...
1
vote
0answers
40 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
1
vote
1answer
374 views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
2
votes
0answers
67 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
1
vote
0answers
60 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
0
votes
0answers
25 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
0
votes
0answers
253 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
0
votes
1answer
49 views

Authenticating Apache HTTPd against Active Directory

We're using Apache 2.2.12 to authenticate against one Active Directory domain using a .htaccess configuration file. Our current configuration is: AuthBasicProvider ldap AuthType Basic AuthName "AD ...
-1
votes
1answer
74 views

Deploying software on active directory [closed]

I am not sure if this is the right place to post this question but I figured since some users here are familiar with Windows Servers and Active Directories, that I might to get some information about ...
1
vote
0answers
25 views

Remote User Authentication with Active Directory vs. Azure Directory

I am a little confused about the added topological complexities that seem to be advocated when designing remote authentication for Active Directory. I want to have single-sign on for all computers ...
1
vote
1answer
59 views

limit user access in multiple RODC

I have a RODC and a RWDC.i prepopulate some password on RODC cache database. i already read this article How’s User Authentication Working In A Site With A RODC? I want to limit user access in ...
2
votes
1answer
506 views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
4
votes
2answers
78 views

Which field to use when authenticating against Active Directory?

Active Directory user objects include a number of fields that can be considered an identifier. The following lists some of these with their label in ADUC and their attribute name: Full Name - cn ? ...
0
votes
0answers
42 views

Cyrus sasl, Authenticate with Username and Password against Active Directory

I set up a mail server with Postfix and Cyrus IMAP so that the user and password you need to enter are those of AD. I need users can log in from any mail client just put your username and password. ...
1
vote
1answer
92 views

Is it possible to authenticate MS AD users against another MS AD without a trust?

I have two Microsoft active directories, lets call them External and Internal, What I want to do is: Add users to Internal AD without password (Just save some other attributes for them). When a ...
2
votes
1answer
239 views

Disable LDAP authentication on Ubuntu

I have an Ubuntu server that is able to authenticate users against our Domain. I can not contact the person who set this up, but I do find these packages installed: libaprtil1-ldap libldap-2.4-2 ...
1
vote
1answer
79 views

Managing Active Directory account access across multiple forests / customers

We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion. Right now, we manually create ...
5
votes
1answer
72 views

Preventing a Domain Computer from Logging off Causes loss of Authentication

I have a set a domain computer to not require a password on wakeup. This is a strange situation I know but we want the user to never have to login to the computer unless he specifically logs out or ...
1
vote
0answers
115 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
1
vote
1answer
106 views

Configure samba server for Unix group

I'm trying to set up a samba server with access for users in the Linux (RHEL 6) "wheel" group. I am basing smb.conf off of the example here where it goes through the [accounting] example. In my ...
0
votes
1answer
1k views

joining esxi to active directory domain fails due to incorrect credentials even though credentials are correct

VMware vSphere ESXi 5.1.0 patched to 1157734. Using the vSphere Client 5.1.0 1064113 to connect to the ESXi host directly. In ESXi DNS and Routing the Host Identification Domain is set to test.local ...
1
vote
2answers
328 views

VPN to other domain cause local domain authentication stop to work

I have a local domain (let's call it mycorp.local). On one computer, I setup a VPN connexion to a remote domain (let's suppose it's DNS suffix is remote.local). As soon as I establish the remote ...
3
votes
1answer
161 views

Seamless authentication for corporate users on an external website

Background: Global company with multiple locations and disparate networks and IT systems. The majority of the networks are Windows based and running Active Directory and some are connected via ADFS. ...
3
votes
1answer
211 views

Current Best Practice for using AD to auth Linux (2013)

As far as I'm aware, there are 3 (common) ways to use Active Directory as the Authentication and Authorization for Linux hosts: LDAP Kerberos Samba/Winbind Is there a (current) consensus on which ...
0
votes
1answer
111 views

Difference to connect to LDAP by BindDn or by username

We have an application which can only connect to a LDAP (AD) by using the BindDn. When I try to connect from the server which host the application using a simple LDAP client (LDAPAdmin) it connects ...
3
votes
3answers
2k views

Active Directory authentication load balancing and failover

For applications that authenticate against an Active Directory DC, obviously it would be best to just point them to the main domain DNS record rather than a specific DC for failover, load balancing, ...
1
vote
1answer
81 views

Conditional authentication based on group membership in AD

I need to authenticate AD users logging into their workstations only if they belong to the security group AT THE MOMENT OF AUTHENTICATION. They're being added to this privileged group right before ...
3
votes
1answer
297 views

Active Directory authentication with Apache: why I need to use a full name (user at domain)?

We use Apache 2.2 for authentication against Active Directory. The configuration is following: AuthFormLDAPURL ...
2
votes
1answer
80 views

Domain unavailable when resuming from sleep

We have a school library with a bank of computers for students, joined to an active directory domain. I'm investigating an issue with these computers where at some time in the last six to nine months ...
0
votes
1answer
90 views

Role Based Access Control, Where Roles Change Depending on Location In Application

I am tasked with designing a new, role based access model for our system. The requirements are something to the effect of the following: A user can log in, and will have a different role depending ...
0
votes
3answers
227 views

Authenticating Clients against their own Active Directory

We are creating an application that will (hopefully) allow users to authenticate by multiple means. Either cloud-based services (google,facebook, etc.) or--hopefully--by their own company's Active ...
1
vote
1answer
276 views

Powershell - how to Start-Job with an ActiveDirectory credential

My client controls access to their database with ActiveDirectory. I would like to do the following: $cred = Get-Credential Start-Job -Credential $cred { #do some stuff with the db } This works ...
10
votes
1answer
656 views

AD Cross-forest authentication - groups missing from PAC

I have an Active Directory setup consisting of 2 forests: 1 multi-domain forest with 1 forest root domain, and 2 direct child domains 1 single-domain forest for DMZ publishing purposes I have ...
3
votes
2answers
2k views

Active Directory authentication rejected and the bad password count does not increment or reset

There is a strange and confusing (to me and to users) issue plaguing authentication. I do not know how long it has been occurring, but I believe it to be quite a while. Only recently, with the use of ...
1
vote
0answers
150 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
0
votes
1answer
627 views

Debian squeeze auth against AD 2008R2 nslcd said user not found

I'm setting up a debian squeeze to authenticate against Active Directory 2008R2. Part of nslcd.conf is below: uri ldap://bddc.test.local base dc=test,dc=local binddn cn=blah,ou=Public ...
2
votes
1answer
225 views

Authentication failure unless the user account is locked in AD

Have you ever seen authentication failure happening consistently, unless the offending user account is locked in AD? I am entering my credentials to access a network share that I have authorisation ...
0
votes
3answers
331 views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
0
votes
2answers
177 views

What is the correct authentication mechanism when there are users inside and outside the domain?

We have a Windows 7 enterprise desktop data entry app for mobile (laptop) users with local SQL Express 2008 R2 Express db that syncs data with an SQL Server 2008 R2 Server db. Users may go off ...
0
votes
1answer
72 views

How to check authenticated access to MS Windows machines in a batch

I am checking with nessus the vulnerability status of MS Windows machines on a network I do not manage for which I have received appropriate domain-level credentials. It works but the results I get ...
0
votes
1answer
380 views

Seamlessly Authenticate with a Second Active Directory Server (when primary is down) [duplicate]

Possible Duplicate: What is Active Directory and how does it work? How do you get workstations to (seamlessly) authenticate with a secondary Active Directory server when the primary one is ...
0
votes
0answers
193 views

Apache - LDAP: Is auth for subdirectories inherited from the parent directory

We're using the authnz_ldap_module with Apache 2.2.12. Is the authentication configuration for a sub-directory inherited from the parent directory? Considering the following configuration in ...
1
vote
2answers
109 views

Very strange AD authentication issue

I have a domain controller that is Server 2008 and another that is 2008R2. I changed my password two weeks ago, and have been able to log into the domain controllers no problem. When I want to ...
3
votes
1answer
459 views

ADFS v.2.0 transitive trust in a federation scenario

Currently i'm working with ADFS to establish a federated trust between two separated domains. My question is simple: does ADFS v. 2.0 support transitive trust across federated identity providers? ...
1
vote
2answers
1k views

How to automate kinit process to obtain TGT for Kerberos?

I'm currently writing a puppet module to automate the process of joining RHEL servers to an AD domain, with support for Kerberos. Currently I have problems with automatically obtain and cache ...
0
votes
1answer
62 views

Possible to include user IP within application requests to LDAP or Active Directory?

Given the following standard workflow: A user supplies a username and password to an application (ie, webmail). The application authenticates the user against LDAP or AD. LDAP or AD log the ...
2
votes
1answer
141 views

Samba - user auth against AD and local passdb

I have only a short question. Is it possible to set up a samba server, who's able to authenticate some users against Active Directory and some users against a local passdb file? We want to exchange ...
2
votes
1answer
543 views

Failed Account Logon Events

We have a server running SQL 2008 R1. We have a web server in the DMZ that connects through the firewall to the SQL server and executes SQL Reporting Services reports using a domain user account. On ...
2
votes
2answers
1k views

Active Directory Authentication with LDAP proxy

We have a services in a isolated network. These services need to authenticate users against the Active Directory server. However the Active Directory server is not directly available so I have to ...