A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
31 views

Custom algorithm for password hashing with vsftpd

Traditionally, when the client logs in, it sends the credentials (username+pw) without any further processing. The server then checks if an entry exists in its user database that matches the supplied ...
1
vote
0answers
78 views

have xmpp (ejabberd) server authenticate with existing user database (MySQL)

Let me start off by stating that I know very little about the XMPP protocol or real-time communication in general. I did however manage to set up an ejabberd server with TLS encryption. I have written ...
6
votes
3answers
198 views

What is DNS TXT record “mailru-verification”?

Sometimes I see this mailru-verification DNS record. I've Googled - and Yandexed ;) - but I found nothing about it. I suspected that is a kind of russian SPF implementation... dig example.com TXT ...
1
vote
0answers
30 views

Unspecified GSS failure. after setting up krb5/ldap authentication

new here, so I recently setup ldap/krb5 authentication on an centos7.2 vm. Krb5/ldap is working correclty as I can login using ldap user account. However, when I check the logs in the client machine /...
2
votes
1answer
32 views

NO [ALERT] Unexpected response from remote authentication server

is what I see when I run testsaslauthd inside an strace socket(PF_LOCAL, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/saslauthd/mux"}, 110) = 0 writev(3, [{"\0\34a....
0
votes
0answers
31 views

Thecus N5200PRO NAS Server and Windows 10

I got an Thecus N5200PRO NAS Server which I'd like to use, but I've got strange authentification problems which I can't resolve. What I'm doing: Reset NAS to factory default Create a user Create a ...
0
votes
1answer
16 views

Serve media content only to logged in user using Apache

I recently saw this feature on another site where it would server media files, like uploaded images, only when the user is logged in. It would throw an "ACCESS DENIED" page otherwise. So, I ...
7
votes
2answers
72 views

Same RSA key on multiple PCs

Can I use my RSA private key on multiple computers i.e. my desktop and laptop. Or do I have to create a unique key for each computer I own, and add their respective public keys to necessary servers/...
1
vote
0answers
24 views

Why was the previous authenticity of the host ignored?

I'm on Ubuntu 14.04 Desktop. I have just logged into other machine (Ubuntu 14.04 Server) using ssh in one terminal. I'm still connected. When I did scp in another terminal (opened earlier) to move a ...
1
vote
0answers
74 views

Can I allow configure Jenkins to use LDAP authentication while still allowing company github accounts to make commits?

We are running Jenkins CI as a critical application in our organisation. I've recently set up an openLDAP server and I am looking to migrate all of our applications to this over time. The LDAP ...
1
vote
0answers
47 views

Authentification methods for non-public facing websites

We have two different kinds of websites in our company, one of those are public-faced websites where users have to have access without serverbased authentication (anonymous auth.) and other websites ...
0
votes
0answers
75 views

Authentication Configuration with IIS 8.5 on Windows Server 2012

I have a site hosted using IIS on a Windows Server 2012 R2 server. The application is configured to use an application pool that uses the NetworkService account as the application pool identity. The ...
2
votes
1answer
46 views

AWS EC2 Server Refused Connection - Unmounted replaced authorized_keys - still cannot connect

So we were working on configurations for a soon to be production server. After making some configuration changes, we rebooted the machine and we got the dreaded "server refused connection" message. I ...
0
votes
0answers
111 views

LDAP user authentication access denied

Currently, I am configuring LDAP client for user authentication on the server. Only SSH key authentication is allowed (Password authentication is not allowed). My SSH configurtion (/etc/ssh/...
0
votes
1answer
89 views

Authenticated Origin Pulls with CloudFlare and IIS

I'm running Windows Server 2012 R2 with CloudFlare in front and trying to setup authenticated origin pulls as specified here - https://support.cloudflare.com/hc/en-us/articles/204899617 The problem ...
0
votes
1answer
38 views

Force Postfix to ask autentication

If I try to telnet a popular SMTP server I get this messages: telnet smtp.mail.yahoo.it 25 Trying <ip>... Connected to <smtp banner>. Escape character is '^]'. 220 <smtp host> ESMTP ...
3
votes
0answers
302 views

Active Directory + Google Authenticator - Native support in Windows Server? [closed]

Use Case: 2FA to log in to Active Directory (such as logging into a corporate desktop computer that is on AD) Desired Solution: Google Authenticator, because it is RFC based, and widely used for ...
1
vote
2answers
131 views

Force windows to prompt authentication to shared folder/disable “remember my credentials”

Is there a way to force windows to prompt for credentials to a shared folder? We are in a domain environment with 50+ PCs. What I need is to have a shared folder on our server that has specific user ...
0
votes
1answer
11 views

Use LDAP on top of simple mysql hash+salt user table

We have a huge table full of user accounts for our website that are stored in a very simple and standard mysql manner: the user-id is associated with a salted hash that represents the password and ...
6
votes
2answers
782 views

Active Directory + Google Authenticator - AD FS, or how?

(Edited to match the understanding of the answer-writers -- New, fresh, clean question posted here: Active Directory + Google Authenticator - Native support in Windows Server?) Research Done So Far ...
1
vote
1answer
41 views

Attempting to setup ssh authentication on linux - Grants access all the time

I am currently attempting to secure one of my linux box. I would like the device to grant access to only those systems that have the ssh private keys. In order to accomplish that here is what I did (...
0
votes
1answer
38 views

nginx client certificate location block

How can I use client certificate authentication with nginx for a folder? The ssl_client_certificate directive isn't allowed in location blocks. Example: I want my website me.tld to be reachable by all ...
1
vote
0answers
59 views

How to configure Apache direct trust for CA signed certificates

I'm working on a corporate network which unfortunately is flat and has led to an interesting security requirement which I'm sure is possible (I just can't figure out how) The corperation has its own ...
2
votes
2answers
20 views

Do all LDAP servers have anonymous access?

I need to configure programmatic ldap authentication in an application. But I'd rather not hardcode passwords anywhere. So it would be very convenient if ldap servers all have anonymous access for ...
1
vote
1answer
53 views

PAM authentication - Write error: broken pipe

In order to allow the 2FA in my domain, I setup a LinOTP server to manage the map between tokens and users (from LDAP) in my realm. So, I configured the PAM stack to integrate this authentication ...
1
vote
0answers
80 views

linOTP to openVPN authentication ubuntu 12.04

I am working on a project in which I have to install a one-time password authentication. I have successfully installed openVPN to which I can connect without any authentication. I have installed the ...
1
vote
1answer
44 views

Local credentials used when radius server is available sshd pam_radius

I have pam_radius setup and it works (centos6, pam_radius: 1.4.0-2.el6), i can authenticate via the radius server using ssh. What i am trying to accomplish is that when the radius server is ...
0
votes
1answer
17 views

Buildbot access restriction configuration

I'm trying to install buildbot so I can perform automatic stuff like building my latex documents and running unit tests. I wan't it to be available online, so I'm doing it on a VPS (Digital Ocean). I'...
0
votes
1answer
50 views

Linux excessive USER_ACCT and USER_AUTH entries in /var/log/messages

I am running a Fedora 23 email server using sendmail & dovecot and am getting a daily flood of success entries like the ones below. Is there any way to shut off the success and only log the fail? ...
1
vote
1answer
113 views

NGINX does not prompt for client ssl certificate

On our setup we want to promt a user for a client ssl certificate. All certificates are issued by StartSSL. The problem is that even though ssl_verify_client on; is set 'on', the website / browser ...
0
votes
2answers
23 views

Securing a forward proxy connection

I have a huge network with around 1000 users. We use squid(3.1.x) as forward caching proxy server, and we also authenticate our users to allow them access to the internet (helps us log what a ...
1
vote
1answer
74 views

Error Pushing Docker Windows Image into Docker Hub - Error parsing HTTP response: invalid character / Request forbidden by administrative rules

Notice: This is a repost from StackOverflow. I am trying to push a Windows Core Docker Image into my Docker Hub account. The error message (1) I am getting is: $ docker push <...
0
votes
1answer
621 views

mysql authentification plugin is not loaded

Problem: I am encountering an login problem when setting up users in mysql. Old users can login as expected, for newly created users I cannot login and get an error message. Executed SQL: CREATE ...
0
votes
1answer
26 views

Enable gateway only for authenticated clients [closed]

I want my server to be usable as a gateway to the internet by certain clients. Enabling forwarding is not my concern, rather to restrict it only to certain clients. I don't want hardcoded iptables ...
0
votes
0answers
37 views

NTLM Authentication fails on SSRS 2008 R2 across trusted domains

I've got 2 domains that are fully trusted. SSRS is on domain1 and my users are on domain2. Can reach SSRS from D2 without an issue, and use my D1 credentials to authenticate. In SSRS\Reports I ...
3
votes
2answers
99 views

Postfix sender address rejected / using multiple addresses

I have an email server running Postfix that generally works great. I'm trying to use this server as the SMTP server for outgoing mail in a CRM/Marketing platform installation. I've entered the ...
1
vote
0answers
117 views

Create user in gitlab without e-mail?

I'm testing out omnibus gitlab on a local VM. After disabling anonymous signup, I tried adding a new user via the /admin/users/new page. It requires I associate an e-mail with the new user account, ...
0
votes
0answers
13 views

What happens using SASL plaintext on an openldap server on the server side?

I have an OpenLDAP server and I use SASL with the login authentication mechanism. My user passwords are securely hashed and stored within my LDAP database. I understand that the login credentials are ...
0
votes
0answers
16 views

802.1X Authentication Wifi

Here at our workplace we are experimenting with 802.1x WIFI I have set up a NPS and our Unifi point to allow it. While testing, it allows phones to be connected if credentials are correct but when a ...
0
votes
1answer
20 views

Can a Windows box authenticate with Samba without username/password?

Is there a way to authenticate a machine to Samba without relying on a username/password? I have a couple of Windows web servers using a third machine hosting Samba for common files. I would like not ...
1
vote
1answer
164 views

git pull: Permission denied (publickey)

So I am trying to get git to work with my repo server (1.2.3.4) (debian) on my new server on AWS (4.5.6.7 / 10.0.0.111). My repo's .git/config [core] repositoryformatversion = 0 filemode = ...
0
votes
1answer
62 views

Trying to execute a script with pam authentication

I want to be able to execute a custom script when pam does the authentication but I get an error out that I can't seem to pass: Feb 20 17:39:47 DC03R07DS25-08 sockd[2874]: pam_exec(sockd:auth): send ...
1
vote
0answers
43 views

Why does svn look for cached credentials in the wrong place when run as a scheduled task?

I run a daily Powershell script via Windows Scheduler under a service account that updates a local svn working copy and commits changes. The svn client is sliksvn and is run by command line only. When ...
0
votes
1answer
57 views

Debian: How to lock root account AND still use cron. (cron does not work while locked account :( )

I'm setting up a small private server which is connected to internet. For security reasons I would like to lock my root account after setting everything up and then use a sudo user for further ...
0
votes
0answers
65 views

Postfix SASL server said: 535 5.7.8 Error: authentication failed:

I have a mail server (running on Ubuntu server 12.04) that worked fine until a couple of months ago. After I forgot to renew my cacert.org free certificate, I created a new certificate and loaded it ...
2
votes
0answers
333 views

Mac OSX - SSHD partially broken after El Capitan Upgrade

I recently upgraded my firm's Mac Mini device to El Capitan from Yosemite, and encountered several issues during the upgrade. I've gotten most of them resolved but one that's still failing is the SSH ...
0
votes
0answers
18 views

Apache 2.2 authentication without default window pop up

I have a static website and I wish to make use Apache 2.2 authentication. I want the user to be redirected to my custom login page(Instead of the default windows pop up that appears) if they try to ...
0
votes
0answers
31 views

Samba on Simply Mepis 1.5G can't join Active Directory domain

As a proof of concept I have Simply Mepis 1.5G (the Linux Box) running on an Oracle VirtualBox. Also on the Network I have a Windows Vista for Business Laptop and a Windows 7 Professional Laptop. I ...
-1
votes
1answer
23 views

Is it possible to authencticating/login for WPA2-Enterprise using web portal?

I just wondering is it possible using WPA2-Enterprise with authentication using web just like captive portal? If possible I think it would be really cool though the setup will take time.
0
votes
1answer
21 views

exim remote dovecot auth

I'm trying to setup dovecot authenticator in exim. I have followed this howto (http://wiki2.dovecot.org/HowTo/EximAndDovecotSASL) and it works perfect on local server. Now I need to use that method on ...