A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

14
votes
2answers
3k views

The Story of secure user-authentication in squid

once upon a time, there was a beautiful warm virtual-jungle in south america, and a squid server lived there. here is an perceptual image of the network: <the Internet> ...
6
votes
13answers
18k views

can't figure out why apache LDAP auth fails

Suddenly, yesterday, one of my apache servers became unable to connect to my LDAP (AD) server. I have two sites running on that server, both of which use LDAP to auth against my AD server when a user ...
3
votes
1answer
7k views

How do I connect my FreeNAS File Server to my Mac OS X Directory Server?

I am trying to connect my File Server (FreeNAS 8.0.1 / 8.2-RELEASE-p7) with my Mac OS X 10.7 Lion Directory Server's Open Directory... I know that Mac OS X provides an LDAP service via which other ...
3
votes
3answers
920 views

Non-IE browsers wont auto-authenticate

We're considering offering Safari (windows), Chrome, Firefox and Opera as optional browsers in our 2500 person organisation. I'm just testing them out now and where IE auto-authenticates with our ...
10
votes
1answer
41k views

LDAP authentication for SonicWALL VPN

I'm trying to configure my SonicWALL to allow LDAP authentication for VPN users. I've done this before with another device, and I remember it being pretty simple. But I can't get it to work this ...
5
votes
2answers
2k views

Apache 2.4 + SVN authz authentication with mixed authenticated/anonymous access

I'm using Apache 2.4, and I wish to use it without mod_access_compat. I'm trying to serve SVN repositories, with access control handled by mod_authz_svn. I want some repos or locations within repos ...
5
votes
3answers
8k views

How do accept multiple authentication options in Apache?

I want to protect a path in my VirtualHost but allow users a variety of authentication options (e.g. mod-auth-cas, mod-auth-openid and mod-auth-digest.) How do I set up the virtual host definition to ...
4
votes
5answers
5k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
3
votes
1answer
6k views

Nginx - basic http authentication on PHP-script

I added a PHP-Script that serves as "cgi-bin", Configuration: location ~^/cgi-bin/.*\.(cgi|pl|py|rb) { gzip off; fastcgi_pass 127.0.0.1:9000; fastcgi_index cgi-bin.php; ...
3
votes
4answers
3k views

How can I enable both password and public key authentication with OpenSSH

I would like for sshd to verify the users' public key and then prompt for their password, rather than just one or the other. Is this possible?
3
votes
3answers
342 views

Centralized Authentication Method

I have more than 1000 Linux/Unix(Solaris) servers in my network and I want to implement some kind of centralized login server. So that I create users on one server and he can able to login on any of ...
2
votes
1answer
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to NTLM enabled. When clients are not in the ...
1
vote
3answers
2k views

A script to geo-locate ip addresses in auth.log

Is there a way to automatically geo-locate an ip-address on Ubuntu linux? I'm looking to do this for errors in my auth.log.
0
votes
2answers
822 views

How can I tell Apache to force client authentication but to authorized based on a listed of trusted certificates rather than a CA?

I am trying to create an Apache SSL server to be used in pre-production testing and that even in production would be accessed by less than 5 or so users. Because of the small user base, I felt that ...
5
votes
3answers
8k views

How can I password prompt certain IPs and allow all others free access using Apache?

SOLVED: The idea is that if the visitor comes from China they have to pass a basic authentication. If you have any other IP address you can visit the site without being hassled (including proxies) ...
4
votes
1answer
3k views

Configuring RADIUS or LDAP on Supermicro (ATEN) IPMI

I'm trying to get our new server, a X8DTN+-F's IMPI configured to talk to our authentication servers. The two choices are LDAP and RADIUS. I'm debugging this by looking at packet captures, as it ...
3
votes
1answer
420 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
3
votes
2answers
1k views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify ...
2
votes
1answer
533 views

SSH - slow authentication

This is more of a curiosity question then a problem at this point. I have resolved my problem which i'll post the solution that worked for me. problem I was getting rather slow authentication times ...
2
votes
2answers
3k views

Authenticate CVS users against Active Directory

I have a mixed Linux/Windows software development environment where the Linux clients are migrating to a system where they are able to authenticate against Active Directory. (That part I figured out) ...
2
votes
2answers
159 views

Windows takes long to access other PCs over network

why does windows (from xp to 7) take so long to access other machines over network? In detail: if I do Start -> run -> \machineinLocalNet\c$ oder \machineinLocalNet\share it always takes long to ...
1
vote
1answer
651 views

How can I disable sending mail through postfix smtp with out auth

I just setup a mail server with postfix 2.6.6 and dovecot. I have the auth related config in main.cf like below: smtpd_tls_cert_file=/etc/httpd/ssl/mail.crt ...
1
vote
4answers
2k views

Windows Security Dialog not showing when logging on to my server through remote desktop

I can't seem to figure out how to enable the Windows Security Dialog when logging on to my server. It works for another server we have: I know it was somewhere in the settings, but right now it ...
1
vote
3answers
5k views

Biometeric authentication with Active Directory

There has been various blogs, MSDN pages, posts, etc. about Windows 7 and Windows 2008 R2 supporting biometric authentication built-in (or so it seems). ...
0
votes
2answers
2k views

Postfix - Is there a way to reject invalid authentication (even for mynetworks)?

I got a working postfix/dovecot configuration running with the following rule for recipients rejection: smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject This works ...
0
votes
2answers
4k views

Cyrus on CentOS with sasl / pam / ldap

SASL/PAM/LDAP is driving me crazy... that's what I read a lot when googling for problems in this area, and what I experience myself :-S I'm trying to get Cyrus imap working for virtual hosting on ...
-1
votes
1answer
636 views

Opscenter 4.1 - ssl agent communication vs internal authentication

My question relates to Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect. The provided answer does help, but creates another problem. To summarize, everything runs find ...
5
votes
2answers
2k views

Overriding Parameters in Previously Declared Puppet Resource

I'm attempting to rebuild nwaller's sssd puppet module to be entirely LDAP based and to be a little cleaner. In it we have a resource defined for each authentication domain of the form define ...
4
votes
2answers
6k views

IIS Basic Authorization ala .htaccess/.htpasswd in apache

How do I implement the protection of the pages (asp.net mvc app), so when I hit the home page or any other pages within the application I get a login dialog popup in the browser I'm looking for ...
4
votes
4answers
6k views

Authenticating Windows 7 against MIT Kerberos 5

I've been wracking my brains trying to get Windows 7 authenticating against a MIT Kerberos 5 Realm (which is running on an Arch Linux server). I've done the following on the server (aka dc1): ...
3
votes
1answer
1k views

Danted Socks Proxy with Authentication

I've been trying to set up a SOCKS proxy on linux with danted. I have the proxy working perfectly without authentication, but when I try adding in authentication with both method: username and method: ...
3
votes
1answer
474 views

Seamless authentication for corporate users on an external website

Background: Global company with multiple locations and disparate networks and IT systems. The majority of the networks are Windows based and running Active Directory and some are connected via ADFS. ...
3
votes
2answers
2k views

Is there an easier way to add public-key authentication for new users?

I am in the arduous and painful process of setting up secure users on a new web LEMP server with Ubuntu 12.04. I was initially going to setup something like vsftpd or proftpd but many have suggested ...
3
votes
1answer
2k views

All client browsers repeatedly asking for NTLM authentication when running through local proxy server

All client browsers repeatedly asking for NTLM authentication when running through local proxy server. When pointing browsers through the local proxy to the internet, some but not all clients are ...
3
votes
1answer
7k views

Postfix + SASL = “Relay Access Denied” when sending from outside the network

I have in /etc/postfix/main.cf: smtpd_sasl_auth_enable = yes smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination and SASL seems to be working: $ ...
3
votes
4answers
278 views

ssh: can still use password after setting the key

I followed this tutorial to set up SSH. Now it prompts for the passphrase, but when I type nothing and hit return, it asks for the password and I can use it to login. How can I prevent that? My ...
3
votes
4answers
4k views

OS X Login Authentication Against Leopard Server

I am doing a few tests with OS X Server before I have to do a deploy in a few months. I have configured Open Directory, and created a few users. I've configured Directory Utility on a 10.5 client, ...
2
votes
1answer
245 views

How to enable two factor authentication

I am using CentOS 6.3 and want to enable ssh RADIUS authentication. Right now my server is directly authenticated with RADIUS server. I want the server to authenticate with unix credentials first and ...
2
votes
1answer
1k views

openvpn: auth-user-pass or (and?) passphrase?

I'm setting up OpenVPN on PfSense 2.0, and now i wonder if should use the "auth-user-pass" option, set an passphrase on the openssl keys or both. Both require an extra password beside of the valid ...
2
votes
1answer
1k views

phpMyAdmin doesn't allow users to log on [closed]

When the auth_type is set to cookie, phpMyAdmin won't allow anyone access. Putting the same credentials we are trying on the form into the config file works. Does anyone have any ideas what could be ...
2
votes
1answer
2k views

Moving my website to different server changes authentication from Kerberos to NTLM

I have a webservice that is configured for Windows Authentication. The client code that invokes the WS passes along the credentials to the WS as follows: myWebService.Credentials = ...
2
votes
2answers
736 views

Snow Leopard Hangs when Using OpenLDAP on Linux for Authentication

We have a new iMac on Snow Leopard authenticating against an OpenLDAP directory. Homes are on (automounted) NFSv3 (Linux, kernel-server). NFS seems to work pretty well (if a bit slow, but we don't ...
2
votes
2answers
1k views

Lock down a site using Forms Auth in IIS7 with Windows Auth

I have an ASP.NET MVC 1.0 application that uses Forms Authentication. We are using Windows Server 2008. I need to lock down the site so that only certain users (in AD Groups) can access the site. ...
2
votes
3answers
7k views

How to use Linux username and password with Subversion?

I'd like to setup Subversion repository so that same username and password could be used to access repository as in ssh login. I managed to get login work so that correct username is required, but it ...
1
vote
1answer
160 views

Error: KDC has no support for encryption type

I have intermittent authentication issues on my ubuntu 15.04 servers. Periodically, authentication will just stop working. Eventually it will start working again on its own. Or, if I restart both smbd ...
1
vote
1answer
634 views

Postfix + Dovecot with MySQL backend: md5-hashed passwords and CRAM-MD5 auth

My question What are the risks of switching from MD5 to CRAM-MD5 passwords in the database, especially considering the following, and how to approach that for an existing installation (provided I ...
1
vote
1answer
539 views

Disable authentication for HTTP OPTIONS method (preflight request)

One recurring problem with CORS is that the spec prescribes request headers get stripped from the preflight request (HTTP OPTIONS). However if the server requires authentication, this means the ...
1
vote
1answer
705 views

Cannot Connect to MsSql2008 R2 Database Engine, While Connecting to Other Services

I have installed MsSQL 2008 R2 on my computer as I have installed always before. But unfortunately this time, I cannot connect to Database Engine while I can easily connect to the other services like ...
1
vote
0answers
201 views

Squid caching proxy authentication digest to basic. Is it possible?

I need to setup a proxy server connecting to another one with digest auth. I would like that my server takes the credentials from the user using basic scheme and then sending them to the upstream ...
1
vote
1answer
898 views

Credentials caching in OpenLDAP proxy

I am creating LDAP proxy server using OpenLDAP, server will be used for user authentication (using simple bind over SSL/TLS). Is there a way to make OpenLDAP proxy to cache simple bind credentials and ...