A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

5
votes
2answers
3k views

postfix sasl “cannot connect to saslauthd server: No such file or directory”

I try to setup postfix with smtp authentication. I want to use /etc/shadow as my realm Unfortunately I get a "generic error" when i try to authenticate # nc localhost 25 220 mail.foo ESMTP Postfix ...
-1
votes
1answer
301 views

Squid Proxy does not prompt for authentication and denies every request

I have a problem with a squid proxy that always denies requests. The bad part is, i never get to see an authentication pop-up... Squid is running on an Ubuntu 14.04 vserver. I'll provide you my ...
0
votes
0answers
19 views

SQL 2008 R2 says access denied when logging in remotely

I have an SQL 2008 R2 server and a monitoring server both on the same physical network (but different VLANs). The monitoring server is always connecting to the SQL server to run a query and check the ...
0
votes
1answer
32 views

Kerberos in production on virtual machines

At the moment I am investigating the possibility to use Kerberos as the primary authentication protocol for our cloud structure. We'll probably follow through with this idea and for the sake of HA the ...
1
vote
0answers
53 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
2
votes
0answers
49 views

Samba: Authenticate only local accounts over AD?

I have a samba server where I create all the linux accounts and corresponding SMB accounts via a application I built. I manage all the permissions for all of our shares via ACL's also using the ...
-1
votes
2answers
2k views

Mail server: SASL authentication failure - Postfix + Dovecot + Mysql

I tried to set up my own mail server (postfix, dovecot, mysql, ) and I can connect via imaps/pop3s without any problems. But every time I try to connect to the SMTP server (e.g. with the Apple Mail ...
1
vote
1answer
45 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
4
votes
3answers
443 views

If I join esxi to an Active Directory domain, how does it choose which DC to authenticate to?

I'm familiar to vSphere and large installations, and not at all familiar with the free products. Topology & configuration We have some branch offices that use ESXi and have a DC resident on ...
2
votes
1answer
222 views

Custom Authentication handler for mod_auth_form?

Apache 2.3/2.4 has mod_auth_form that allows to display a HTML form for users to login. Can I, instead of using a plain HTML form use an application server to provide the form (J2EE, node.js, PHP, ...
0
votes
1answer
55 views

Can't get basic plain auth to work on lighttpd win 1.4.35-1-ipv6

I simply can't get Plain Basic auth to work on lighttpd for more than one user. I have this auth.user file formatted like this: [account_1_name]:[account_1_password] ...
0
votes
0answers
36 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
1
vote
2answers
65 views

Issue with sharp in host vars Ansible

Since # is considered as a comment in /etc/ansible/hosts I'm unable to use a password containing a sharp. [hosts] host1 ansible_ssh_user=user ansible_ssh_pass=userpass ansible_su_pass=My#Password ...
0
votes
0answers
11 views

LDAP: Extend database using referral

My company uses an off-site LDAP server to handle authentication. I'm currently working on a local VPN for my branch that needs to use the off-site LDAP to check user's usernames and passwords, but I ...
0
votes
1answer
58 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...
2
votes
1answer
116 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
-2
votes
3answers
250 views

Public Key authentication fails while using the -i parameter on ssh command

I have to do public key based authentication on two Linux servers. Machine 2 (192.168.3.132) username: vfx_30 home dir: /home/vfx_30 ssh keys: /home/vfx_30/.ssh/id_rsa /home/vfx_30/.ssh/id_rsa.pub ...
0
votes
1answer
373 views

Suppress OSSEC email for failed root ssh

I'm running OSSEC as a HIDS on a Ubuntu 12.10 server, and it routinely (3-4x a day) sends me a notification like this: (note the last octet of the IP address has been changed to 'xxx' to protect the ...
0
votes
4answers
3k views

Postfix: Allow SMTP AUTH only from specified IP address ranges

can one implement an IP address based restriction for SMTP AUTH in Postfix? Scenario: I'm running a Postfix mail server that receives mails from all over the Internet. But the server doesn't only ...
1
vote
1answer
57 views

SSH login without recheck all public key

I have several servers and different users. Also i have two different authorize method: via keys and password. When i try login ssh recheck all public keys. Is there method to bind public key and ...
1
vote
2answers
647 views

Nagios admin doesn't have permission

I have installed and configured nagios on CentOS using yum I get "It appears as though you do not have permission to view information for any of the hosts you requested..." on the web interface. I ...
1
vote
1answer
304 views

How can I disable sending mail through postfix smtp with out auth

I just setup a mail server with postfix 2.6.6 and dovecot. I have the auth related config in main.cf like below: smtpd_tls_cert_file=/etc/httpd/ssl/mail.crt ...
1
vote
1answer
245 views

Postfix allows own domains to be sent without asking for logins

Postfix issue, (I asked this yesterday and manged to delete my own post instead of editing it sorry for that) I use Postfix+SASL I got these settings in main.cf: smtpd_sasl_security_options = ...
2
votes
0answers
116 views

What does 'http: getaddrinfo*.gaih_getanswer: got type “46”' mean

Today I got an e-mail from logcheck informing me that the following system event occurred. http: getaddrinfo*.gaih_getanswer: got type "46" Indeed, the above message occurs 4 times in ...
2
votes
1answer
1k views

Ubuntu LDAP auth - offline cache / network init speed

I have configured LDAP auth for Ubuntu using this guide. The authentication works, but I have connection problems after reboot & suspend. Although the PC is configured using a static ip, after ...
2
votes
1answer
183 views

ssh shared key authentication asks for password, unless sshd runs with -d option

My client is Ubuntu, and the server is CentOS. I have shared key authentication set up to login from client to server. When I run the server like: sudo `which sshd` -d Everything works as ...
2
votes
1answer
477 views

Does IIS support HTTP basic auth and form auth at the same time?

preface: I am a web dev who knows apache servers quite well, but I have little to no knowledge of IIS or .NET I work with a developer who has been avoiding a request to add a Basic Auth to a staging ...
4
votes
1answer
234 views

Weird stuff in in my /var/log/auth.log

I just check my logs on my deed server, I spotted some weird log in the auth.log: Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session opened for user user by (uid=0) Jun 17 22:27:01 ...
4
votes
2answers
995 views

How to grant su access to wheel without asking for password on FreeBSD?

I would like to grant users of the wheel group (other sysadmins) su access without being asked for password. I know how to do it with pam in linux, but the question now is for FreeBSD. I am not ...
5
votes
4answers
8k views

Postgres error message: FATAL: Ident authentication failed for user “…”

Say you're seeing this message: FATAL: Ident authentication failed for user "..." What are the causes of this error message?
1
vote
1answer
2k views

How to start Mongo daemon with auth support

I want to start the MongoDB daemon with auth support using the Mongo init script: sudo /etc/init.d/mongod start I have also added db users to the database to authenticate. I'm working with two ...
0
votes
1answer
169 views

Nginx auth only for given location

I'm using Nginx as a reverse proxy for a python WSGI web-app. It looks something like that: location / { #auth_basic "Administrator Login"; #auth_basic_user_file ...
0
votes
1answer
714 views

PAM Errors in auth.log [Debian Squeeze]

Based on the the Securing Debian article on debian.org, I added the following to /etc/pam.d/other. auth required pam_securetty.so auth required pam_unix_auth.so auth required ...
0
votes
1answer
2k views

SMTP auth do not log in on relay server

I'm trying to configure a secondary postfix to enable SMTP AUTH against my main postfix server (postfix + ldap auth + cyrus) I've follow http://www.postfix.org/SASL_README.html#client_sasl adding: ...
0
votes
0answers
118 views

Dante multiple proxies with separate authentication

I have been trying to set up Dante on Debian to create a Socks 5 proxy. So far I have only managed to get it to work with the root user, and would like to know how I can have multiple proxies each ...
0
votes
0answers
21 views

How to place additional access-restrictions on a subdirectory in Apache?

We have a list of "internal" IP-addresses and only allow access to the server (Location /) from that list: <Location /> Require ip x.x.x.x Require ip y.y.y.y </Location> I need ...
0
votes
0answers
49 views

Strange port-by-port connection on SSH git user

I'm facing very strange logs in my /var/log/auth.log. Every single second I can read one or more lines like this: Accepted publickey for git from MY_OWN_IP port 51885 ssh2: RSA ...
0
votes
2answers
683 views

Forward proxy user authentication does not work

I have got a simple forward proxy that needs to have user authentication and a whitelist of IP-adresses. I have created the vhost below: ProxyRequests On ProxyVia On <Proxy xx.xxx.xx.xxx:8888> ...
0
votes
0answers
123 views

WLAN:Deauth: [MAC] STA reason code=2

I use WIFI temperature loggers which are working just fine. However, at one WLAN Access Point they can't connect and get error messages. Here's what I believe to be relevant information from the ...
0
votes
1answer
168 views

Apache mod_proxy with SSL not redirecting

I have a custom server running behind an apache reverse proxy. Since the custom server can only handle HTTP traffic, i am trying to use apache for wrapping proper SSL around it, and for some kind of ...
0
votes
1answer
903 views

warning: /etc/hosts.allow, line xx: host name/name mismatch

I've whitelisted my own domains in /etc/hosts.allow ALL: localhost, .domain.tld plus all of my IP adresses. I also have about 4k lines in /etc/hosts.deny. Everything works but I do not understand ...
-1
votes
2answers
299 views

The Cisco VPN AuthType explained

I've been having trouble finding resources about the AuthType property which appears in many Cisco VPN configurations. In every example I can find, it's set to AuthType=1, but I don't know what other ...
-3
votes
3answers
56 views

united authentication for multiple *nix hosts? [closed]

Something similar to NT domain controller in Linux? E.g. two hosts with one shared authentication. How to?
0
votes
1answer
334 views

How to disable nginx basic_auth for one location but enable it for the rest of the site

I'm trying to get basic_auth disabled for a specific directory (/api/), but still have basic auth for the rest of the site I'm working with. The following is my nginx.conf: server { # base ...
1
vote
1answer
267 views

Danted Socks Proxy with Authentication

I've been trying to set up a SOCKS proxy on linux with danted. I have the proxy working perfectly without authentication, but when I try adding in authentication with both method: username and method: ...
0
votes
1answer
46 views

LDAP Groups in authconfig

In my authconfig setup, I always use : --ldapbasedn='ou=users,o=Directory' I thought by using: --ldapbasedn='o=Directory' groups would also be included, but no luck. My LDAP schema looks ...
-2
votes
2answers
30 views

SSH using ssh_key from a different account

Is there a way for a user to ssh as a different user using ssh_keys? For example, i have host A B and C. User X SSHes from A to B as himself ( A -- as X --> B ) Now the user wants to SSH to C from ...
2
votes
3answers
104 views

How to configure SSH access for key authentication for another client?

I know that if I want to configure SSH access for key authentication, I need to use the following command: ssh-keygen -b 2048 -t rsa -C “mypassphrase” I then need to copy the codes created in ...
0
votes
2answers
93 views

How to clear kerberos config

I am setting my machine as a kerberos client. I have a question on how the kerberos config file actually take effect and how to clear its effect. My experiment is as follow. Step 1, without editing ...
4
votes
1answer
279 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...