0
votes
0answers
5 views

User under windows server AD access Linux server using kerberos

I installed AD on windows 2008 r2 sp1 server . And had configured all things follow the issue http://msdn.microsoft.com/en-us/library/ms995329.aspx ...
0
votes
0answers
18 views

Getting PAM/user info into php - something like Net_Finger instead of a db?

I've got a very small user group who just need to login, upload, check and then move specific files to a different area when ready. Right now, I use the nginx PAM auth module to log them in against ...
0
votes
1answer
54 views

Is it possible to create ssh socks server with authentication required?

I was looking at this question while I was trying to find a good socks server for linux that would be easy to configure. The following command works fine: ssh -f -N -D 0.0.0.0:1080 localhost I ...
4
votes
7answers
986 views

will hosting provider have access to my dedicated server?

I am looking to buy a dedicated server for my web application.But I am concerned about security to my application code and who can access to my server even dedicated server.As hosting provider ...
0
votes
0answers
115 views

How to enable kerberos authentication to a Java web app

I'm currently using Centrify to aid with Kerberos/AD integration in our environment. Right now we have Kerberos enabled on a Centrified version of Apache. We are trying to run jnlp files through ...
-1
votes
1answer
98 views

User authentication; PAM or Radius? [closed]

At college I'm part of a group of students that keep a server infrastructure running for the students. Lately we've been having a lot of trouble with the servers, and we decided that it's probably ...
1
vote
1answer
111 views

Use a PHP script to authenticate users on Linux

I have a web application running built in PHP using MySQL as database. I'm trying to give specific users access to a Linux system via SSH to perform simple command-line tasks. Since I do already have ...
0
votes
0answers
26 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...
0
votes
0answers
33 views

Passwordless Samba access to specific IP addresses

I have a few Samba shares setup on a server where users access with their user/pass. I've been requested to add 3 computers access to a specific share without a password prompt. Is it possible to do ...
0
votes
1answer
30 views

Is it possible to configure a Linux server to use more than one LDAP target?

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating ...
0
votes
0answers
352 views

Load testing HTTPS with Siege (open auth)

I am trying to load test our new website with siege. It is currently behind basic auth. I have edited my .siegerc file to include the right username and password (I've checked many times that it is ...
1
vote
1answer
790 views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
0answers
42 views

Cyrus sasl, Authenticate with Username and Password against Active Directory

I set up a mail server with Postfix and Cyrus IMAP so that the user and password you need to enter are those of AD. I need users can log in from any mail client just put your username and password. ...
-1
votes
2answers
71 views

Not able to login remotely to the custom linux box using root user credentials

I am not able to login to my custom Linux system with the root user credentials as it says access denied. I have reset the root password by logging in via the admin user. The message in the syslog ...
0
votes
0answers
42 views

What's the issue with this Samba setup?

I asked this on superuser, but I realized that may be the wrong place. I am duplicating the question here, I hope this is allowed. I am trying to share a directory through samba. In smb.conf I have ...
0
votes
0answers
120 views

Nginx transparent authentication proxy for jasper

I have a jasper reporting server. It would like to make my own authentication . Jasper has possibility to integrate into iframe but unfortunately logging in is using GET parameters, which i would not ...
1
vote
0answers
112 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
1
vote
0answers
144 views

unknown user in last output

I found a lot of lines (~900) similar to these in the last output of one of my hosts: trustpor ftpd31576 www.trustport.co Tue Oct 1 10:03 - 10:03 (00:00) trustpor ftpd31575 www.trustport.co ...
0
votes
0answers
22 views

I can receive emails but not send in one of the frontend. - Cyrus Murder - lmtp_passwd.db: No such file or directory

I am using Cyrus Murder, I have: 1 frontend which is also mupdate. 1 frontend. 1 backend. From the frontend which is also mupdate I can send and receive. From the other frontend I can only ...
0
votes
0answers
325 views

lmtp: connect(backend) failed: Connection refused

A long time ago I'm trying to fix this error but I'm still locked, I appreciate any help :). I detail all that I have and what I am trying to do. I am using Cyrus Murder and apparently everything ...
0
votes
0answers
22 views

OpenSUSE Won't Authenticate against OpenLDAP Server

I have an OpenBSD LDAP server for single sign on purposes, I know that its working because my Ubuntu client can authenticate against it without any issues. OpenSUSE will not authenticate against my ...
3
votes
1answer
332 views

How to make exception in password locking via pam_tally2 for specific user?

I need to make an exception for a specific user, so that his failed logins are not counted by pam_tally2, and well, this is not a root account (I'd use magic_root then). Is it doable?
2
votes
1answer
115 views

What would cause a user to change userid on login?

I'm trying to diagnose a problem on a CentOS machine in a corporate environment. It's a box someone else configured before leaving the company. The issue is that when we su to the user gitlab, we're ...
1
vote
2answers
260 views

SSH Host-based authentication: How can SSH client force to use given key location

Linux man page on ssh say about host based authentication works as SSH server must be able to verify the client's host key (see the description of /etc/ssh/ssh_known_hosts and ~/.ssh/known_hosts, ...
3
votes
1answer
209 views

Current Best Practice for using AD to auth Linux (2013)

As far as I'm aware, there are 3 (common) ways to use Active Directory as the Authentication and Authorization for Linux hosts: LDAP Kerberos Samba/Winbind Is there a (current) consensus on which ...
0
votes
1answer
264 views

Unable to authentication after manual edit of /etc/passwd and /etc/shadow

On Scientific Linux 6.4 ( like CentOs6.4) When configuring a new server I have manually edited the file /etc/shadow so as to copy the password. Now I can only log in as user root and I can not use ...
0
votes
2answers
205 views

PAM LDAP configuration for non-local user authentication

I have a requirement to allow non-local user accounts to be logged in via LDAP authentication. Meaning, the user that is trying to login is allowed access, if the user account exists in LDAP server ...
-2
votes
1answer
71 views

Sendmail relay without authentication

I have an issue:when the email is sent from an address other than 127.0.0.1 the authorization is required even if ip is on the same machine. How can I avoid to make request authorization for a given ...
1
vote
1answer
115 views

How can I configure Cyrus IMAP to submit a default realm to SASL?

I have configured Postfix to work with SASL using plain text, where the former automatically submits a default realm to the latter when requesting authentication. Assuming the domain name is ...
2
votes
0answers
51 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
1
vote
0answers
78 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
0
votes
0answers
866 views

Samba standalone server using LDAP for authentication: SID mismatch

I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 ...
0
votes
1answer
167 views

How can I map existing LDAP users to users in a different LDAP server?

We set up some Linux machines to use our company's LDAP server for authentication. We were then acquired by another company, and they want us to use their LDAP server and retire the old one. But the ...
-6
votes
2answers
89 views

Authentication of both client and server in subscription based model [closed]

My current business model takes a loss upfront on hardware in the hopes that the service will be paid for continuously. When service is not paid for the instructions are sent to the client hardware to ...
0
votes
0answers
55 views

config squid to set specific acl for username and then set it to the ip addr of username

Assume your executive of corporation, sit on his clerk desk PC, and login to his username on the network (authenticate with Active Directory), of course he wants his full access to internet, but he ...
2
votes
1answer
68 views

Effect Locking a user account with a UID of 0

Currently my organization has in it's linux configuration two accounts with a UID of 0 - Root and Root2. If we were to set a failed login attempts setting for the Root2 account, and the account were ...
1
vote
0answers
69 views

Kerberized SSH Failed

I want to authenticate ssh login with Kerberos, however fail. The following is a snippet of ssh debug information with the command ssh -vvv localhost. debug3: Wrote 80 bytes for a total of 1125 ...
0
votes
1answer
164 views

Enabling DSA key authentification for SFTP while still keeping password login as optional (Ubuntu 12.04)

I have a server running Ubuntu 12.04 Server. I want to be able to use SFTP on the command line with a DSA key, so I don't have to type the password into the terminal. Is this possible to do on the ...
4
votes
2answers
6k views

How to find all ways in which a Unix user account is locked

I occasionally find myself in a situation where an undermaintained system has an account that's been locked out. The problem is that there are a variety of ways in which an account can be locked out, ...
2
votes
2answers
677 views

Is there an easier way to add public-key authentication for new users?

I am in the arduous and painful process of setting up secure users on a new web LEMP server with Ubuntu 12.04. I was initially going to setup something like vsftpd or proftpd but many have suggested ...
2
votes
1answer
3k views

pppd “peer refused to authenticate”

I have a working pptpd+pppd server configured which currently has two Windows 7 clients successfully connecting. However, when I try to connect a linux client I'm getting a really weird exchange that ...
2
votes
0answers
671 views

openvpn refusing connections with freeradius

I installed openvpn and freeradius from yum and I installed the radiusplugin_v2.1a_beta1.tar.gz but I am having connection issues with the error: XML-RPC: ConnectionRefusedError: 10061: No connection ...
0
votes
3answers
5k views

How to change expired LDAP user password under linux?

can somebody give an advice how to change the LDAP password already expired? I have an LDAP user and the password for this user is expired: # su user You are required to change your password ...
1
vote
1answer
97 views

Can't login anymore via sshd

I have been working with SSH for a long time, but recently I have needed to add another user to my set up. I followed some instructions I found on the web and did the folllowing. adduser sam sudo ...
1
vote
1answer
588 views

Linux Client Active Directory Authentication stops working when failover

I have an issue with Linux clients trying to AD authentication by targeting a DNS name (corp.example.com). I have 2 Domain Controller servers DC1(10.0.0.3/24), DC2(10.1.0.3/24) both domain controllers ...
0
votes
1answer
99 views

SS5 <maxcons> limitation issue with <group>

Have an SS5 Socks proxy server running with SS5_RADIUS_AUTH I want to set a max connections users but have run in to a problem. SS5 want's me to define user group for it. <group> define a ...
2
votes
1answer
631 views

How do I disable password complexity in pam

I found tons of articles how to enable password complexity, can someone guide me to how to disable it? (oracle linux) This is my system-auth #%PAM-1.0 # This file is auto-generated. # User changes ...
4
votes
3answers
2k views

SSH: one authorized_keys for multiple service accounts

Is there a way to configure SSH to check a single authorized_keys file for multiple users? I know I can copy the public key into each user's authorized_keys file but for ease of management I'd like an ...
1
vote
3answers
53 views

Rip authentication from LDAP to local

We are taking a small portion of our network offline, and running a separate network using that portion. (By small portion I mean 2 servers, that will be connected to 30 odd boxes that aren't usually ...
1
vote
2answers
3k views

CentOS 5.8 - Can't login to tty1 as root after updates?

I've ran a yum update on my CentOS 5.8 box and now I am unable to log into the console as root. Basically what happens is I receive the login prompt, enter the correct username and password, and am ...