Questions tagged [authentication]
A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully asserted their identity. There are three factors (types) of authentication, and a particular authentication process may combine two or more different factors.
2,236
questions
15
votes
2
answers
10k
views
Simple, centralized user management on a small LAN - NIS or LDAP?
I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would like it to have centralized control of user accounts (at least, I ...
- 1,722
15
votes
3
answers
44k
views
Which field to use when authenticating against Active Directory?
Active Directory user objects include a number of fields that can be considered an identifier. The following lists some of these with their label in ADUC and their attribute name:
Full Name - cn
? - ...
- 9,714
15
votes
4
answers
65k
views
Apache authentication : allow public access to a subdirectory
This is probably a simple problem, but I cant find the solution in the documentation.
I want to password protect my website using BASIC authentication. But I want a subdirectory to be non protected :
...
- 1,063
15
votes
2
answers
4k
views
What do the OS X authorization mechanisms actually do?
Background
I'm trying to glean a better understanding of the OS X login process, in order to decide the best way for achieving VPN Single Sign On.
Please do correct me if I'm wrong, but I believe ...
- 412
14
votes
4
answers
112k
views
How to find all ways in which a Unix user account is locked
I occasionally find myself in a situation where an undermaintained system has an account that's been locked out. The problem is that there are a variety of ways in which an account can be locked out, ...
- 6,958
14
votes
3
answers
9k
views
libpam-ldap or libpam-ldapd?
I'm setting up LDAP authentication on my personal VPS, and Ubuntu has two packages for the same purpose: libpam-ldap and libpam-ldapd. Which should I use?
- 14.5k
14
votes
5
answers
37k
views
/var/log/auth.log not logging failed ssh attempts
I'm trying to go failed (either incorrect username, password, or both) on my server.
I changed /etc/ssh/sshd_config from
# Logging
SyslogFacility AUTH
LogLevel INFO
to
# Logging
SyslogFacility ...
- 251
14
votes
2
answers
18k
views
What does dis=NONE mean in an email's Authentication-Results header?
The following is from an email I received recently:
Authentication-Results: mx.google.com;
spf=neutral;
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=...
- 264
13
votes
7
answers
3k
views
is it okay to use random URLs instead of passwords? [closed]
Is it considered "safe" to use URL constructed from random characters like this?
http://example.com/EU3uc654/Photos
I'd like to put some files/picture galleries on a webserver that are only to be ...
- 241
13
votes
3
answers
50k
views
How to automate kinit process to obtain TGT for Kerberos?
I'm currently writing a puppet module to automate the process of joining RHEL servers to an AD domain, with support for Kerberos.
Currently, I have problems with automatically obtain and cache ...
- 1,396
13
votes
2
answers
18k
views
Why can't I log in to a Windows-protected IIS 7.5 directory on the server?
I have a web site with an admin subdirectory that is protected by integrated Windows authentication. Works flawlessly from remote PCs. But when I attempt to access these pages on the server itself, ...
- 367
13
votes
5
answers
95k
views
How can I clear cached domain credentials?
Related: How can I enable domain authentication over wireless in Windows 7/2k8?
To test the domain login over wireless connection feature I'm trying to set up in the above question, I need an ...
- 2,466
13
votes
1
answer
8k
views
auth.log indicates error with JSchException?
I have a fairly minimal setup server, and it doesn't allow password authentication, only using keys. And it definitely doesn't have Java installed. Normally I don't pay any attention to the thousands ...
- 5,235
13
votes
2
answers
15k
views
How does DKIM work when sending emails from multiple sources/servers?
So if I'm understanding DKIM correctly, it basically is a public/private key type of service. However, how does this work if you send emails from multiple servers/sources? For instance, I have a ...
- 141
13
votes
2
answers
54k
views
getent passwd dosen't show users of LDAP server
I have made the LDAP authentification configurations and I try to authenticate to the LDAP server on Ubuntu 14.04 TLS.
This is the file nsswitch.conf :
# /etc/nsswitch.conf
#
# Example configuration ...
- 246
13
votes
2
answers
12k
views
apache auth: combination of LDAP and htpasswd
We're using Apache with mod_svn to serve the subversion repo. Apache is hooked to an LDAP server so all users can use their domain passwords.
For the build machine to be able to checkout, I want to ...
- 339
13
votes
2
answers
3k
views
SSH only works after intentionally failed password
So, I'm having a rather weird problem. I have a server, that when I try to SSH into, immediately closes the connection if I type in the correct password on the first attempt. However, if I ...
- 161
13
votes
4
answers
4k
views
OpenLDAP, Samba and password aging
I'm configuring a system in which all IT resources are available through a single user-password pair, be it access to shell on the servers, logging to Samba domain, WiFi, OpenVPN, Mantis, etc. (with ...
- 6,401
13
votes
1
answer
10k
views
Why is Mac OSX Lion losing login/network credentials?
Symptoms
At work we have OSX 10.7.3 installed and every once in a while I will see the following behaviors:
If the the screen is locked, then multiple tries of the same user/pass are not accepted.
...
- 231
13
votes
4
answers
4k
views
Web Deploy to IIS 7 with Pass-through authentication
After much trial and error configuration, I'm currently able to script msdeploy.exe to deploy a package built in Visual Studio 2010 to a remote server running IIS 7.5 with a command line like:
Basic ...
- 2,183
12
votes
6
answers
84k
views
How can I check if my IIS site is using NTLM or Kerberos?
How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5.
- 223
12
votes
2
answers
15k
views
SSSD rejects LDAP login with su: incorrect password
I've set up an LDAP server with user accounts. I've successfully configured a Rails application to authenticate against this LDAP server. I'm now trying to configure SSSD to authenticate against LDAP, ...
- 983
12
votes
1
answer
50k
views
LDAP authentication on CentOS 7
After upgrading to CentOS 7 it's no longer possible to login via LDAP. With CentOS 6 I used the package pam_ldap which worked fine, but now pam_ldap is no longer available for the new version of ...
- 683
11
votes
4
answers
18k
views
SSH: one authorized_keys for multiple service accounts
Is there a way to configure SSH to check a single authorized_keys file for multiple users? I know I can copy the public key into each user's authorized_keys file but for ease of management I'd like an ...
- 141
11
votes
5
answers
118k
views
How to use Active Directory to authenticate linux users
What are the best-practices for using Active Directory to authenticate users on linux (Debian) boxes?
The way I would like it to work would be to add AD users to a group - say linux administrators or ...
- 23.3k
11
votes
1
answer
22k
views
How to specify multiple root certificates for nginx client certificate verification?
For a project as part of the European Grid Infrastructure (EGI) we need SSL client certificate verification for a service running on nginx. As there are several root CAs allowed within EGI, we need ...
- 251
11
votes
3
answers
2k
views
Is SSH logging capabilities equivalent to su logging for private/public key authentication?
Here at work, we have a non-root shared login account on UNIX that is used to admin a particular application. The policy is to not allow direct logins to the shared account; you must login as yourself ...
- 211
11
votes
4
answers
33k
views
How can I enable both password and public key authentication with OpenSSH
I would like for sshd to verify the users' public key and then prompt for their password, rather than just one or the other. Is this possible?
- 213
11
votes
4
answers
37k
views
Active Directory + Google Authenticator - AD FS, or how?
(Edited to match the understanding of the answer-writers -- New, fresh, clean question posted here: Active Directory + Google Authenticator - Native support in Windows Server?)
Research Done So Far
...
11
votes
1
answer
31k
views
How can I get sshd to tell me why it's failing public key authentications? [closed]
I'm using OpenSSH 6.9p1 (on Lubuntu) as my SSH server. When trying to connect to it (using an SSH client in Cygwin), I keep being reverted to password authentication, despite having properly generated ...
- 1,722
11
votes
1
answer
31k
views
Definition of BUILTIN\Users?
For a server on a Windows Domain, what is the membership of "BUILTIN\Users" exactly?
(I figure this has an obvious answer, but googling hasn't given me any clear definitions)
- 1,008
11
votes
4
answers
52k
views
home dir and shell for Active Directory authenticated users
I have successfully configured sssd and can ssh into a system with AD credentials what I am missing is the creation of a home directory and bash set as the shell.
My assumption is that if I log on to ...
- 981
11
votes
1
answer
5k
views
U2F (YubiKey, etc) and Active Directory
I'm searching for information about how to integrate U2F (using YubiKey or similar devices) into an Active Directory Windows Domain (Will be a Windows 2016 Server). Especially I'm interested in ...
- 475
11
votes
0
answers
6k
views
How can a Cognito user initialize TOTP on first login when MFA is required?
I am setting up Amazon Cognito for authentication to use a Kibana instance. I only permit administrators to create users, and I permit only the Cognito User Pool identity provider. When creating the ...
- 186
11
votes
2
answers
13k
views
Create user in gitlab without e-mail?
I'm testing out omnibus gitlab on a local VM. After disabling anonymous signup, I tried adding a new user via the /admin/users/new page.
It requires I associate an e-mail with the new user account, ...
- 1,185
10
votes
6
answers
10k
views
Enforce SSH key passwords?
I'm looking at removing password-based logins for SSH. However, I don't want to allow passwordless ssh keys, as that would be even worse.
How can I make sure that only SSH keys which have passwords ...
- 3,470
10
votes
5
answers
37k
views
How can I set up Redmine => Active Directory authentication?
First, I'm not an AD admin on site, but my manager has asked me to try to get my personal Redmine installation to integrate with ActiveDirectory in order to test-drive it for a larger-scale rollout.
...
- 533
10
votes
6
answers
60k
views
How to enable negotiate authentication for winrm
I have disabled negotiate authentication for the winrm service on my server by executing:
winrm put winrm/config/service/Auth @{Negotiate="false"}
And now I can perform any operation with winrm. I ...
- 223
10
votes
3
answers
33k
views
iptables, allow access from certain MAC addresses
Presently, I limit which clients can access my server by using IP addresses via iptables, only approved IP addresses can connect.
However, the problem with this is if a client is on a laptop and goes ...
- 279
10
votes
4
answers
11k
views
OpenSSH : Key-based authorization, maximum key length
I'am using Putty on windows with key-based authentication to access some of mine servers.
It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on client-...
- 754
10
votes
4
answers
65k
views
Which ports are required in order to authenticate against a ldap server in another domain which is behind a firewall?
I have a Linux domain running with sssd, let's call this domain NJ.
I'd like machines on the NJ domain to be able to authenticate against an Active Directory ldap server which resides on a different ...
- 10.8k
10
votes
3
answers
29k
views
Enable password login for SFTP while keeping authentication by SSH keys
How do I keep a password login enabled for SFTP transactions (made by Drupal, if this is important) while keeping it disabled for all other SSH key based authentications? Currently all the existing ...
- 113
10
votes
1
answer
57k
views
LDAP authentication for SonicWALL VPN
I'm trying to configure my SonicWALL to allow LDAP authentication for VPN users. I've done this before with another device, and I remember it being pretty simple. But I can't get it to work this ...
- 659
10
votes
2
answers
47k
views
How to debug Samba authorization (authentication) procedure
I'm running a small home network linux-based server which acts as an internet router, torrent client and file server. I have problems connecting Windows clients to server Samba shares ('user name or ...
- 355
10
votes
2
answers
15k
views
How to stop Outlook 2007 asking for credentials when using RPC over HTTPS
I've configured several of our outlook 2007 clients (connected to Exchange 2003) to use RPC over HTTPS. This allows our users to connect to the Exchange server remotely without having to connect using ...
- 7,658
10
votes
2
answers
31k
views
get the authenticated user under apache
Using Apache 2.2 on Windows with mod_auth_sspi and mod_headers. I'm trying to pass the current authenticated user through to the proxy target in the X-Remote-User header.
I expect that this is ...
- 270
10
votes
5
answers
17k
views
How to secure a directory in Apache using a PHP session
I have a site that uses PHP session for authentication. There is one directory that I would like to restrict access to that does not use any PHP, it's just full of static content.
I just don't know ...
- 237
10
votes
3
answers
15k
views
Easiest way to get an Active Directory server for testing
We're developing a .net application, and are about to add authentication to it. We'd like to use Active Directory for this, but are aiming to make this as simple as possible for the test-server used ...
- 203
10
votes
2
answers
20k
views
Active Directory Authentication with LDAP proxy
We have a services in a isolated network.
These services need to authenticate users against the Active Directory server.
However the Active Directory server is not directly available so I have to ...
- 1,366
10
votes
1
answer
3k
views
AD Cross-forest authentication - groups missing from PAC
I have an Active Directory setup consisting of 2 forests:
1 multi-domain forest with 1 forest root domain, and 2 direct child domains
1 single-domain forest for DMZ publishing purposes
I have ...
- 25.4k