A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

1
vote
0answers
69 views

pwauth kerberos authentication specifying default and secondary servers

I am currently using Kerberos authentication for Basic Authentication on Apache using pwauth and mod_auth_external. I would like to add multiple servers to authenticate from, however they would have ...
1
vote
0answers
146 views

How to redirect clients to an external central authorization service (CAS) in web2py app?

I am trying to use an external CAS to authenticate users. I use this to do the task: auth = Auth(db, cas_provider = 'https://some_url') And when accessing the url ...
1
vote
0answers
30 views

Dovecot not attempting authentication

I am in the early stages of migrating an OS X mail installation (UW imapd/Exim/mbox) to a Ubuntu cloud VM using Dovecot/Exim/Maildir. I am starting simply: Exim is running fine, receiving mail and ...
1
vote
0answers
42 views

Revoking client certificate two way authentication

can we revoke a client certificate by serial (we are using mutual authentication)? we tried revoking a certificate using the certificate file but the revocation date is not set to the current date . ...
1
vote
0answers
244 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
1
vote
0answers
357 views

Apache basic auth with IP whitelist

I am trying to add some kind of IP whitelist to one of my HTTP Basic Auth protected directories. I am using Apache 2.2.15 on CentOS 6.5 but I also tried with Apache 2.2.22 on Ubuntu 10.04. I looked ...
1
vote
0answers
2k views

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up ...
1
vote
0answers
165 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
1
vote
0answers
96 views

HP Command View: Could not find authenticator for Security Domain

I have some HP EVA storage arrays. They are monitored via Command View - the HP management product. Of 8 management servers, a grand total of one will not let me log in using 'domain' credentials - ...
1
vote
0answers
289 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
1
vote
0answers
214 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
1
vote
0answers
300 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
1
vote
0answers
414 views

IIS using ADFS/Saml to Authenticate

Does anyone know if there is a ADFS/SAML Identity Provider for IIS7? Example workflow - the user will go to the directory /private and it will redirect to the provider to login and back if the user ...
1
vote
0answers
92 views

How to enable authentication for cargo webapp in jetty container? (docs does not work for me)

It looks like I'm stuck with a simple and well documented issue, but nevertheless. I'm trying to enable basic authentication in cargo web-app deployed to the Jetty server. I'm following this document ...
1
vote
0answers
69 views

SVN Server with authentication via Github

One of my users wants me to build an SVN server that uses a specific Github community for authentication. Users who are members of this community should be able to use their Github credentials to ...
1
vote
0answers
142 views

Remote User Authentication with Active Directory vs. Azure Directory

I am a little confused about the added topological complexities that seem to be advocated when designing remote authentication for Active Directory. I want to have single-sign on for all computers ...
1
vote
0answers
92 views

Web App login redirecting to homepage on AWS Elastic Beanstalk

I've hosted my application on AWS Elastic Beanstalk. The application behaves itself in a local environment and shared hosting environment, but when on AWS it refuses to login. Instead it redirects ...
1
vote
0answers
273 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
1
vote
0answers
31 views

Suitability of SAML for use case

A user logs into our portal - site 1; We want them to be able to click through to other sites 2 and 3 within our eco-system without having to further login - so no popup box to verify they have ...
1
vote
0answers
359 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
1
vote
0answers
359 views

heimdal error Decrypt integrity check failed for checksum type

when I try to authentication with heimdal-kdc ,I get this error in kdc log : (enctype aes256-cts-hmac-sha1-96) error Decrypt integrity check failed for checksum type hmac-sha1-96-aes256, key type ...
1
vote
0answers
645 views

putty openssh rsa key signature invalid

I'm running a server with Debian Linux 3.2.46-1+deb7u1 with OpenSSH Server 6.0 and secured the login with a 2048 bit RSA key. Although connecting with OpenSSH Client from another machine succeeds, ...
1
vote
0answers
200 views

Device aware multifactor authentication with Citrix environment?

There are many services that advertise themselves as providing multifactor authentication for Citrix. But, most seem to require the additional generated passcode every time. Are there any that can ...
1
vote
0answers
357 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
1
vote
0answers
2k views

Samba standalone server using LDAP for authentication: SID mismatch

I'm trying to get my new samba server running for days now and I start losing my mind over not figuring out what I'm doing wrong. Here's my setup: OpenLDAP 2.4.21 server with ~15 groups and >100 ...
1
vote
0answers
950 views

Sendmail Server Authentication: Certificate based: Error

I have configured my setup for a server certificate based authentication. Both Server and Client are sendmail systems and both have the same set of certificates. However when client communicated ...
1
vote
0answers
368 views

Site-to-Site VPN between Draytek Vigor and ISA 2006 Authentication Issue

I currently have a remote satellite office that has been configured as a site-to-site VPN. There is a Draytek Vigor 2830 router that is connected to an ISA 2006 server. I am having issues with ...
1
vote
0answers
187 views

IIS 7.5 Reverse proxy authenticate requests before forwarding

I have an internal site that I would like to make available externally. But, I would like to make it available only to a mobile app of my making. The internal site cannot be altered unfortunately, ...
1
vote
0answers
129 views

401 error when setting error responses to custom in iis

I was receiving 401 unauthorized access errors on my /account/login page The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
1
vote
0answers
233 views

Authenticating to MySQL with asymmetric key-pair

Is there anyway I can give MySQL a public key to authenticate vs (or in addition to) username/password authentication? It seems that you can switch out the backend of where MySQL stores/checks ...
1
vote
0answers
192 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
1
vote
0answers
251 views

Mixing Redmine and custom authentication method in a single apache virtualhost for Redmine

I developed on Redmine a plugin to automatically log users using the REMOTE_USER given by Apache when its Kerberos ticket is accepted. This plugin works as long as the user has a corporate login, but ...
1
vote
0answers
1k views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
1
vote
0answers
596 views

Dual pppoe isp connection on a Cisco ASA 8.4

Thank you for helping me. I've a Cisco ASA 8.4 with dual isp connection (pppoe authentication on both line). I configure Two vdpn groups for each connection and add two vpdn username to my cisco's ...
1
vote
0answers
185 views

Squid caching proxy authentication digest to basic. Is it possible?

I need to setup a proxy server connecting to another one with digest auth. I would like that my server takes the credentials from the user using basic scheme and then sending them to the upstream ...
1
vote
0answers
198 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...
1
vote
0answers
71 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
0answers
567 views

CentOS PAM+LDAP login and host attribute

My system is CentOS 6.3, openldap is configured well, PAM authorization works fine. But after turning pam_check_host_attr to yes, all LDAP-auths fail with message "Access denied for this host". ...
1
vote
0answers
347 views

stunnel Haproxy ldap authentication

in our setup port 433 is handled by stunnel. After that haproxy will dispatches the request to the appropriate backend. I have managed to enable authentication in haproxy. But the users and passwords ...
1
vote
0answers
174 views

Proxy Authentication Required .NET Application

Here's what I've got setup: Windows Service Account with internet access A .NET application which allows setting the proxy settings Host Port Username Password When running this application the ...
1
vote
0answers
158 views

Apache SSL x509 authentication timeout

I have setup a location to enable client authentication based on x509 certificates: <Location /authenticate> SSLRequireSSL SSLVerifyClient require SSLVerifyDepth 10 </Location> ...
1
vote
0answers
194 views

Apacheauth for svn, websvn, trac: internally show different name from logon name

We have a webserver which offers svn, websvn and trac using ApacheAuth, which we are in the process of moving to a new domain. I am looking for a way to have a translation Logonname -> Username. ...
1
vote
0answers
267 views

SVN server authentication on Mac - users are not recognized

We have a anomaly here, trying to set up SVN authentication. Here is apache configuration: <Location /repo_main> DAV svn SVNPath /svn/repo_main AuthType Basic AuthName "svn" ...
1
vote
0answers
500 views

Reverse proxy with single sign-on and backend authentication modules

Has anyone got any recommendations for reverse proxy software that provides a single sign-on interface to multiple backend websites via various authentication mechanisms? e.g. Login to the frontend ...
1
vote
0answers
102 views

Basic auth in IIS7 without impersonation

I have an IIS 7 site set up with its own app pool. The app pool is running as a specific user, and the site is set to run as the app pool identity. I want to add basic-auth style protection to the ...
1
vote
0answers
267 views

Remote access to IIS 5.1 via NTLM

I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service. I want to access the web service using Java client by ...
1
vote
0answers
2k views

How do i configure a simple dante instance?

I'm trying to set up a simple SOCKS proxy on Amazon EC2, but I'm not able to figure out the documentation and configuration file for dante. For now i've been able to set up a proxy without ...
1
vote
0answers
1k views

Shibboleth SP doesn't redirect, no IdP authentication - Error 403.14 w/ IIS 7.5

I'm trying to get a test server setup as a Shibboleth SP using IIS 7.5 and I'm stuck. I'm using the https://idp.testshib.org/idp/shibboleth IdP but it never asks for credentials or redirects to the ...
1
vote
0answers
847 views

Certificate issue on remote desktop

Please see this link : Certificate issue on remote desktop I have 2 PCs with Windows 7 Ultimate... (both are in NETHOME) PC 1 : computer name = alfa -> (main pc) , IP = 192.168.0.1 PC 2 : computer ...
1
vote
0answers
223 views

microsoft office outlook 12.0 AUTH DIGEST-MD5 disable

How can i disable AUTH method DIGEST-MD5 in Microsoft Office Outlook 12.0. I want MOO 12.0 to only authenticate users using method LOGIN.