Questions tagged [authentication]
A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully asserted their identity. There are three factors (types) of authentication, and a particular authentication process may combine two or more different factors.
2,236
questions
0
votes
1
answer
9k
views
Authentication failed while git clone
I created a VM and installed docker and git and then tried to clone a github project.
git clone "project_url"
Gave correct username and pwd but after that I am getting below error
remote: ...
0
votes
0
answers
298
views
Why is my Default Apache Guacamole Web Client Admin Login Creds Invalid?
I'm currently setting up an Ubuntu server to run an Apache Guacamole RDP Gateway, and for some reason, when I try to login to the web client, it's giving me an invalid login error when I use the ...
- 1
-1
votes
1
answer
79
views
How can i certify cabling with a cat5 certifyer if the cabling is mixed cat5 and cat6 thanks
Hello I'm getting ready to certify some cabling and realized it is mix matched cat5 and 6 but my certifier is only for cat5. So I wonder if I needed a speacial certifier to do that thanks.
- 21
0
votes
0
answers
110
views
SSPI, Treat wrong credentials as anonymous user
I'm running apache 2.4 with xampp, and so far my sspi works well with mod_authnz_sspi.
I would like to accept all users, but get their name in $_SERVER['REMOTE_USER'] if they are in my active ...
- 101
0
votes
1
answer
4k
views
How does userPassword attribute work in LDAP?
I'm just learning about LDAP, and there's something I don't quite understand.
When we create users in a directory, we define their password using the userPassword. When we use for example the {SSHA} ...
- 143
0
votes
0
answers
17
views
github auhentication method to access only all my organization's repos
I've been reading the official documentation and various articles but it's unclear to me. My organization has multiple users and multiple repos. It would not be right to merely authenticate as a ...
github
- 186
0
votes
1
answer
75
views
How to prevent postfix from sending e-mails without authentication
my first post here.
I had a postfix that I'm using as a relay.
I configured to use authentication with the following main.cf: https://pastebin.com/TQfmAQp2
The problem is: when I try to send an e-mail ...
5
votes
0
answers
13k
views
What is the meaning of this line from ssh output: 'Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling'?
Everything works, ssh connects using private-public ssh key pair.
Just few things in ssh -v Ora2 output isn't clear for me.
This is complete ssh -v Ora2 output:
PS C:\Users\roeslermichal> ssh -v ...
- 165
1
vote
0
answers
299
views
How to setup pam on debian 11
I have installed debian 11 and pam-ldapd.
Now, I want to setup authenticating for openvpn with pam. When I wanted to test it with 'getent passwd' command, I got only local users response.
Can you help ...
- 25
1
vote
1
answer
819
views
Disabling password authentication
Suppose I want to allow SSH authentication only, and disable password authentication.
In /etc/ssh/sshd_config I've typically done this:
PasswordAuthentication no
But in some answers people recommend ...
- 978
0
votes
0
answers
398
views
Ubuntu20.04 : How to give non root user access to systemctl
The ubuntu version is 20.04
I am running a http service on port 6000.
I have created the service and as a user root i can run the service successfully
I have created a account svc_auto_bm and wanted ...
3
votes
1
answer
2k
views
Let's Encrypt certificate on SQL Server 2019 - "The target principal name is incorrect"
Summary
I'm having trouble getting a certificate issued by Let's Encrypt R3 to work on SQL Server 2019. When using the certificate for SSL but not trusting the server certificate explicitly (In SSMS, ...
- 31
0
votes
1
answer
405
views
Detected LanMan/NTLMv1 Authentication method on Windows Server 2016
After running a security scan, I have this vulnerability showing up: Detected LanMan/NTLMv1 Authentication method.
I can only find information about Windows Server 2008, or Windows XP online regarding ...
- 1
0
votes
0
answers
604
views
azure app registration redirect uri not working for a spa application but only for one server
m a little stumped on this and just wondering if anyone had any ideas.
I have registered in azure an application with 3 spa redirects It is a .net core react application
http://localhost:3000/eem/ (...
- 101
0
votes
0
answers
30
views
Exchanging AD user groups with an external -not trusted- server for authentication and authorization
I'm not really sure how to short and precisely describe my problem. Thus, I was unable to find a solution or at least a hint via google.
We have a Microsoft AD domain and are currently planning to use ...
- 1
0
votes
0
answers
598
views
Can't config certificate-based authentication in WinRM / WSMan
I'm trying to configure certificate-based authentication in WinRM. I need this to source-initiated subscription of WEF from non-domain machine.
I use manual published by MS: https://learn.microsoft....
- 1
0
votes
0
answers
55
views
IIS with alternate name in SAN Cert prompts for Credentials
I have a server (server01) running IIS with a Web certificate installed. The certificate has the following SANs -
server01.companyname.com
server02.companyname.com
The binding on Default Web Site ...
- 101
0
votes
1
answer
539
views
sssd.service restarting every 1 minute 50 seconds
I have 5 workstations that have been joined to a freeipa domain. I've noticed some weird authentication related issues on 3 of the workstations. I've discovered that all 3 workstations will restart ...
- 249
1
vote
1
answer
224
views
FreeIPA authentication issues across high latency link?
We recently setup a FreeIPA server. We're using it for central user management, DNS, and CA. It's been working great with one exception.
Some of the workstations that authenticate with this FreeIPA ...
- 249
0
votes
1
answer
3k
views
Authenticating via SSSD but Unix Auth logs a failure
I have WinAD authentication working on all 20+ of our Debian 11 servers. We also have a handful of CentOS/Rocky servers working correctly.
Login to one of the Debian machines causes the following logs:...
- 1
0
votes
0
answers
115
views
openconnect client hello dropped by DPI
I've installed openconnect server (ocserv) and works perfectly when I tunnel (SSH) to the server through another server that is inside country. But when I try to connect directly, the "client ...
0
votes
2
answers
303
views
AWS Cloudformation template - user pool app client hosted ui login url?
Is there a way to retrieve the login page url for a cognito user pool app client from the cloudformation template?
I currently have two projects: one for a spa webapp end one for the aws stack to host ...
- 151
0
votes
2
answers
492
views
Understanding HPE/MicroFocus Data Protector's user authentication (Windows GUI)
Following the manual to install a new Cell Manager (CM) for Micro Focus Data Protector 11.02, I got stuck at the point when configuration should start using the Windows GUI:
First The PC being used ...
- 391
0
votes
1
answer
1k
views
couldn't find key MYSQL_KEY in Secret default/mysql-secret
I have the following file that creates a mysql-secret for mysql deployment pod.
apiVersion: v1
kind: Secret
metadata:
name: mysql-secret
type: Opaque
data:
mysql-password: MTExMTEx
mysql-root-...
- 417
0
votes
1
answer
716
views
Best practices to completely disable LDAP users' access to mixed services with mixed authentication methods?
Background
We use LDAP in our department to authenticate users to various services including web apps as well as Linux servers (via SSH). When a user leaves the department, we should disable their ...
- 48
0
votes
2
answers
732
views
Nginx - How to return 404 if authentication headers are present?
I've got an nginx instance on the Internet that proxies an application. I would like to return 404 on any request from the Internet that attempts to authenticate to the application, as all of the ...
- 111
0
votes
1
answer
323
views
LDAP auth for hosts : same user should have different posixgroup memberships while login to different machines(hosts)
Any idea on how to achieve following objective with openLDAP server with unix clients
Objective :
a) Each user should have separate access restrictions to different hosts(unix servers) through LDAP ...
- 1
0
votes
1
answer
1k
views
How to change Microsoft Azure MFA from "enter code" to "approve request"
We have a M365 tenant with MFA enforced for all users.
We can use either text message (SMS) or Microsoft Authenticator app on smartphone with a Time Based code (6 digit TOTP code).
We would like for ...
- 2,028
1
vote
1
answer
12k
views
Encryption type requested is not supported by the KDC
I am having intermittent issues with RDP'ing from a Windows 11 Enterprise PC to another Windows 11 Enterpise PC.
Both PC's are domain joined and on the same subnet.
Both PC's have a GPO applied to ...
- 123
0
votes
1
answer
265
views
Azure Function App - Azure Defender compliance
Azure Defender on Azure has two policies for Azure Function authentication that I'm not able to implement from other azure resources that support http calls.
Function apps should have Client ...
0
votes
1
answer
123
views
Enabling Cephx In cephadm depolyment
Hello i am trying to enable cephx in my ceph cluster
i added this three lines to /etc/ceph/ceph.conf
auth_cluster_required = cephx
auth_service_required = cephx
auth_client_required = cephx
i didn'...
- 109
0
votes
2
answers
487
views
can't automate the authentication process with PowerShell on Linux
On Debian 11, I have installed PowerShell 7.3.0. I am testing if I can run commands on a remote Windows computer. This is a simple example to get the remote computer hostname.
#!/usr/bin/env pwsh
$...
- 3
1
vote
1
answer
407
views
TLS 1.2 client ignoring "Acceptable CA" list for Apache ClientCertificateRequest
I have TLS 1.2 mutual authentication working on Apache 2.4.54 with a self-signed CA and test clients on iOS and MacOS. Everything works, except the clients do not recognize the "Acceptable ...
- 131
1
vote
0
answers
15
views
Setup Authentication for landingpage fetching data from proxy via access restriction?
Imagine the scenario where you have a client who wants you to implement calls to an external API on a landingpage that you've setup for them. The external API works based on a contract and API keys ...
- 187
1
vote
1
answer
882
views
SSH will always authenticate as root
# ssh -l admin 10.1.0.2
Warning: Permanently added '10.1.0.2' (RSA) to the list of known hosts.
[email protected]'s password:
Using "OpenSSH_8.4p1 Debian-5+deb11u1, OpenSSL 1.1.1n" I want to ...
- 21
0
votes
0
answers
1k
views
sssd/ldap does not authenticate against LDAP
I have configured SSSD with AD as ID and Auth providers. I am not caching credentials, so I expect connections to AD for authentication when I ssh to the host, but I do not see any. The user account ...
- 101
2
votes
3
answers
6k
views
SSH authenticate with publickey,password or publickey,none
On my SFTP-Server I want to allow only login via public key AND password
OR (if and ONLY IF user has no password) by only public key
I set the following in the the sshd_config:
AuthenticationMethods ...
- 31
1
vote
0
answers
129
views
PAM "remember me" with timeout option for 2FA?
Is it possible for PAM to remember that a second factor authentication has passed for a short period of time, e.g. an hour? This would have to be keyed to a user and IP address.
For example:
Log in ...
- 743
0
votes
2
answers
133
views
SSSD direct bind
I use openldap with the following structure:
dc=example,dc=org
├── ou=groups
│ ├── cn=wheel
│ └── cn=adm
└── ou=users
├── uid=firstname.lastname
└── uid=firstname.lastname
Every setup of ...
- 33
1
vote
3
answers
3k
views
OpenSSH server reporting conflicting authentication methods
We're having problems connecting to a server using a password over SSH. What makes the situation strange is that I see contradictory authentication methods available:
$ ssh -v [email protected] -o ...
- 113
1
vote
0
answers
1k
views
How to confgure multi realm Kerberos
Intention
I want to set up 2 Kerberos realms where one can authenticate the users in the other.
Current Setup
I have 2 Kerberos Servers (ad.somedomain.com and kerb.foo.bar)
I have my users on kerb.foo....
- 11
1
vote
0
answers
818
views
Nginx basic_auth for entire site (reverse proxy) except for a "hidden" URL which should access all content without basic_auth
TL'DR
set a gibberish URL in nginx site definition that would bypass basic-auth to reverse-proxy
More details:
I have a setup with Grafana running on a VPS and an nginx reverse proxy directing towards ...
- 185
1
vote
1
answer
471
views
LDAP SSSD SHA-512 authentication failure
I have a server with helm-openldap and a debian client.
I can't login to a user who has a SHA-512 encrypted password. If i store it in clear or MD5, it works perfectly.
$ id tuser
uid=5000(tuser) gid=...
- 33
2
votes
1
answer
3k
views
SSH2 fails authentication with a working key converted with PuttyGen (due to deprecated ssh-rsa?)
I have an EC2 instance authenticated with a key-pair generated by AWS.
With Putty, I can connect to the instance by providing the private key in a PPK file.
When I try to use SSH2 (via one of the ...
- 123
1
vote
2
answers
452
views
Connect Access 2016 to remote SQL Server - SQL Server Error 17
Good morning,
I am trying to connect to a SQL server from a remote machine, with ACCESS 2016, using the "External data" option. Both are on the same network.
It is important to note that I ...
- 125
0
votes
1
answer
432
views
Samba domain server worked - once
For reasons that would take a while to explain, I am trying to get a Samba AD domain controller working with a domain member which acts as a mail server; I am trying to get the mail server to ...
- 1,893
1
vote
1
answer
8k
views
Kerberos failures with accountname "host"
Since May, our reporting tools are showing lots of failed authentication attempts against some of our DCs, for an account named host (which does not exist).
Event Viewer shows those failures as ID ...
- 163
1
vote
2
answers
1k
views
ssh ProxyJump and Port Forwarding with hostbased authentication
I am trying to access a compute node on a cluster via the head node of the cluster and a public entry node. The user is known on both the entry node and the head node, but not and also on the compute ...
- 242
0
votes
1
answer
614
views
pam radius bypass same local user (exception user)
Pam Radius login works with the following configuration.
However, it would be necessary for some users to perform local authentication. How can I solve this?
[xxxxxxxxxxx ~]# cat /etc/pam.d/sshd
#%PAM-...
- 1
1
vote
0
answers
45
views
How to configure group based LDAP access to Mercurial
I currently have LDAP authentication configured for Mercurial using the following Apache configuration:
<Location /hg>
AuthBasicProvider ldap
AuthType basic
AuthName "...
- 143