A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

5
votes
1answer
17k views

LDAP authentication on CentOS 7

After upgrading to CentOS 7 it's no longer possible to login via LDAP. With CentOS 6 I used the package pam_ldap which worked fine, but now pam_ldap is no longer available for the new version of ...
5
votes
1answer
3k views

Configuring RADIUS or LDAP on Supermicro (ATEN) IPMI

I'm trying to get our new server, a X8DTN+-F's IMPI configured to talk to our authentication servers. The two choices are LDAP and RADIUS. I'm debugging this by looking at packet captures, as it ...
4
votes
4answers
3k views

How can I enable both password and public key authentication with OpenSSH

I would like for sshd to verify the users' public key and then prompt for their password, rather than just one or the other. Is this possible?
4
votes
5answers
5k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
3
votes
1answer
6k views

Nginx - basic http authentication on PHP-script

I added a PHP-Script that serves as "cgi-bin", Configuration: location ~^/cgi-bin/.*\.(cgi|pl|py|rb) { gzip off; fastcgi_pass 127.0.0.1:9000; fastcgi_index cgi-bin.php; ...
3
votes
0answers
314 views

Active Directory + Google Authenticator - Native support in Windows Server? [closed]

Use Case: 2FA to log in to Active Directory (such as logging into a corporate desktop computer that is on AD) Desired Solution: Google Authenticator, because it is RFC based, and widely used for ...
3
votes
3answers
396 views

Centralized Authentication Method

I have more than 1000 Linux/Unix(Solaris) servers in my network and I want to implement some kind of centralized login server. So that I create users on one server and he can able to login on any of ...
2
votes
1answer
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to NTLM enabled. When clients are not in the ...
1
vote
3answers
2k views

A script to geo-locate ip addresses in auth.log

Is there a way to automatically geo-locate an ip-address on Ubuntu linux? I'm looking to do this for errors in my auth.log.
6
votes
3answers
17k views

How to automatically configure username/password with proxy PAC file?

I have rather complex proxy setup and one of those proxies requires username/password. Is there a way to configure the username/password so that users don't have to enter them when traffic is ...
5
votes
2answers
7k views

IIS Basic Authorization ala .htaccess/.htpasswd in apache

How do I implement the protection of the pages (asp.net mvc app), so when I hit the home page or any other pages within the application I get a login dialog popup in the browser I'm looking for ...
5
votes
3answers
8k views

How can I password prompt certain IPs and allow all others free access using Apache?

SOLVED: The idea is that if the visitor comes from China they have to pass a basic authentication. If you have any other IP address you can visit the site without being hassled (including proxies) //...
4
votes
2answers
3k views

Is there an easier way to add public-key authentication for new users?

I am in the arduous and painful process of setting up secure users on a new web LEMP server with Ubuntu 12.04. I was initially going to setup something like vsftpd or proftpd but many have suggested ...
3
votes
2answers
1k views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify http://httpd.apache.org/dev/...
3
votes
1answer
471 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost 37.187.96.147:443&...
2
votes
1answer
559 views

SSH - slow authentication

This is more of a curiosity question then a problem at this point. I have resolved my problem which i'll post the solution that worked for me. problem I was getting rather slow authentication times ...
2
votes
2answers
3k views

Authenticate CVS users against Active Directory

I have a mixed Linux/Windows software development environment where the Linux clients are migrating to a system where they are able to authenticate against Active Directory. (That part I figured out) ...
2
votes
2answers
160 views

Windows takes long to access other PCs over network

why does windows (from xp to 7) take so long to access other machines over network? In detail: if I do Start -> run -> \machineinLocalNet\c$ oder \machineinLocalNet\share it always takes long to ...
1
vote
4answers
2k views

Windows Security Dialog not showing when logging on to my server through remote desktop

I can't seem to figure out how to enable the Windows Security Dialog when logging on to my server. It works for another server we have: I know it was somewhere in the settings, but right now it ...
1
vote
1answer
834 views

How can I disable sending mail through postfix smtp with out auth

I just setup a mail server with postfix 2.6.6 and dovecot. I have the auth related config in main.cf like below: smtpd_tls_cert_file=/etc/httpd/ssl/mail.crt smtpd_tls_key_file=/etc/httpd/ssl/mail....
0
votes
2answers
2k views

Postfix - Is there a way to reject invalid authentication (even for mynetworks)?

I got a working postfix/dovecot configuration running with the following rule for recipients rejection: smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject This works ...
0
votes
2answers
4k views

Cyrus on CentOS with sasl / pam / ldap

SASL/PAM/LDAP is driving me crazy... that's what I read a lot when googling for problems in this area, and what I experience myself :-S I'm trying to get Cyrus imap working for virtual hosting on ...
0
votes
1answer
1k views

Is it possible to configure IIS to always default Anonymous authentication to use application pool identity?

Is it possible to configure IIS to always default the identity settings for Anonymous authentication to use application pool identity? There is never a reason I would want it otherwise so it's ...
-1
votes
1answer
660 views

Opscenter 4.1 - ssl agent communication vs internal authentication

My question relates to Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect. The provided answer does help, but creates another problem. To summarize, everything runs find ...
5
votes
2answers
2k views

Overriding Parameters in Previously Declared Puppet Resource

I'm attempting to rebuild nwaller's sssd puppet module to be entirely LDAP based and to be a little cleaner. In it we have a resource defined for each authentication domain of the form define sssd::...
4
votes
4answers
2k views

Enforce SSH key passwords?

I'm looking at removing password-based logins for SSH. However, I don't want to allow passwordless ssh keys, as that would be even worse. How can I make sure that only SSH keys which have passwords ...
4
votes
4answers
6k views

Authenticating Windows 7 against MIT Kerberos 5

I've been wracking my brains trying to get Windows 7 authenticating against a MIT Kerberos 5 Realm (which is running on an Arch Linux server). I've done the following on the server (aka dc1): ...
3
votes
1answer
540 views

Seamless authentication for corporate users on an external website

Background: Global company with multiple locations and disparate networks and IT systems. The majority of the networks are Windows based and running Active Directory and some are connected via ADFS. ...
3
votes
1answer
7k views

Postfix + SASL = “Relay Access Denied” when sending from outside the network

I have in /etc/postfix/main.cf: smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination and SASL seems to be working: $ ...
3
votes
1answer
2k views

How exactly does “silent” authentication using matching local accounts on a Windows network work?

Imagine a Windows workgroup network where two computers each have a local account with the same username/password combination. If I log on to one computer, and try to connect to a non-public shared ...
3
votes
4answers
4k views

OS X Login Authentication Against Leopard Server

I am doing a few tests with OS X Server before I have to do a deploy in a few months. I have configured Open Directory, and created a few users. I've configured Directory Utility on a 10.5 client, ...
3
votes
1answer
2k views

All client browsers repeatedly asking for NTLM authentication when running through local proxy server

All client browsers repeatedly asking for NTLM authentication when running through local proxy server. When pointing browsers through the local proxy to the internet, some but not all clients are ...
3
votes
4answers
280 views

ssh: can still use password after setting the key

I followed this tutorial to set up SSH. Now it prompts for the passphrase, but when I type nothing and hit return, it asks for the password and I can use it to login. How can I prevent that? My ...
2
votes
2answers
745 views

Snow Leopard Hangs when Using OpenLDAP on Linux for Authentication

We have a new iMac on Snow Leopard authenticating against an OpenLDAP directory. Homes are on (automounted) NFSv3 (Linux, kernel-server). NFS seems to work pretty well (if a bit slow, but we don't ...
2
votes
3answers
7k views

How to use Linux username and password with Subversion?

I'd like to setup Subversion repository so that same username and password could be used to access repository as in ssh login. I managed to get login work so that correct username is required, but it ...
2
votes
1answer
2k views

Moving my website to different server changes authentication from Kerberos to NTLM

I have a webservice that is configured for Windows Authentication. The client code that invokes the WS passes along the credentials to the WS as follows: myWebService.Credentials = System.Net....
2
votes
2answers
28k views

How to force machines in an AD site to authenticate against a GC in their own site

Is there any specific way of getting machines to authenticate against the Global Catalog in their own site? I've got a site where the machines are often being authenticated by a GC in a remote site (...
2
votes
1answer
1k views

phpMyAdmin doesn't allow users to log on [closed]

When the auth_type is set to cookie, phpMyAdmin won't allow anyone access. Putting the same credentials we are trying on the form into the config file works. Does anyone have any ideas what could be ...
2
votes
1answer
2k views

openvpn: auth-user-pass or (and?) passphrase?

I'm setting up OpenVPN on PfSense 2.0, and now i wonder if should use the "auth-user-pass" option, set an passphrase on the openssl keys or both. Both require an extra password beside of the valid ...
1
vote
1answer
3k views

LDAP authentication … Log in fail on the LDAP client

I can get the password and group from the LDAP client getent passwd getent group work sucessfully But when I try 'su USERNAME' the name from the LDAP server or 'ssh USERNAME@localhost' it prompt me a ...
1
vote
3answers
2k views

Avoid user lookup in active directory trusted domains from samba

Trying to set up a linux server to authenticate users on the corporate active directory we're facing a problem. We're using SAMBA, winbind, krb5 and PAM. The problem arises when trying to list users ...
1
vote
3answers
9k views

Postfix rejecting mail from authenticated clients

I am trying to configure Postfix so that it would accept mail from authenticated clients outside $mynetworks. When I try to send a test email from my iPhone, which is configured to use port 25, SSL ...
1
vote
5answers
157 views

computer authentication

I have a server and several clients (The technology is not important in the moment. It can be any.). I need to authenticate the computers. They are located in several offices geographically allocated ...
1
vote
2answers
2k views

Postfix “SASL authentication failure: No worthy mechs found”

Trying to use postfix with smtp to connect to google's smtp. When trying to send mail, I get this error: Sep 15 14:04:41 zedsaid postfix/smtp[20271]: certificate verification failed for smtp.gmail....
1
vote
1answer
1k views

Postfix + Dovecot with MySQL backend: md5-hashed passwords and CRAM-MD5 auth

My question What are the risks of switching from MD5 to CRAM-MD5 passwords in the database, especially considering the following, and how to approach that for an existing installation (provided I ...
1
vote
3answers
1k views

ssh via public key authentication for users administered with NIS

I'm experimenting with using NIS for centralizing the user management for a network of approx 20 servers. I've got an NIS client and server working, and can ssh to the client machine and successfully ...
1
vote
1answer
329 views

Error: KDC has no support for encryption type

I have intermittent authentication issues on my ubuntu 15.04 servers. Periodically, authentication will just stop working. Eventually it will start working again on its own. Or, if I restart both smbd ...
1
vote
2answers
2k views

Windows Authentication KRB5KRB_AP_ERR_MODIFIED

Let me preface by saying, I've been on this issue for about a week and a half now and I can't figure it out. I think I'm close, but every time I've thought that so far, I was wrong. I've looked at ...
1
vote
1answer
6k views

Why won't my Apache ldap authentication work (Password Mismatch)?

I think I have my .conf file settings correct, but it seems that I can't validate my password. I know the password is correct because I've logged in with it. Looking at the Apache logs, it looks as ...
1
vote
1answer
780 views

Disable authentication for HTTP OPTIONS method (preflight request)

One recurring problem with CORS is that the spec prescribes request headers get stripped from the preflight request (HTTP OPTIONS). However if the server requires authentication, this means the ...