Tagged Questions

A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
1answer
98 views

Allow ssh access to git pull on remote machine

We have a server with some of our git repositories on and I would like to be able to clone one to our webserver (which runs debian). I ran ssh-keygen on the webserver and copied the public key into ...
3
votes
1answer
143 views

Apache LDAP Authentication with AD Subgroup

I am trying to authenticate using an Active Directory User on a Website running on Apache. My Setup Active Directory: User "steven" is a member of the group "staff". User "cindy" is a member of the ...
0
votes
1answer
152 views

Can't access secure site using Windows Authentication from server 2012

I apologize if this is the wrong site for this question, but I honestly don't know what component of this setup is causing the problem. I have a server running Windows Server 2012. It is running TFS ...
0
votes
0answers
130 views

Apache ErrorDocument 401 not prompting for credentials unless set to default or string

I am attempting to throw together a dynamic customer errordocument (php) which looks at $_SERVER['REDIRECT_STATUS'] to determine the error message to display. At the moment I am utilizing ...
-2
votes
1answer
56 views

Two-factor authentication via mobile phone on Windows Server

Is it possible to set up two factor VPN authentication on Windows Server 2008 R2? In other words: when someone tries to connect to a corporate VPN, they are sent an SMS with a code, which they then ...
1
vote
1answer
682 views

IIS 7.5 Windows authentication not working externally

I'm trying to connect to a asp.net website we have created. It uses Windows authentication and it denies access to non authenticated users web.config: <authentication mode="Windows" /> ...
2
votes
2answers
387 views

Apache 2.4 + SVN authz authentication with mixed authenticated/anonymous access

I'm using Apache 2.4, and I wish to use it without mod_access_compat. I'm trying to serve SVN repositories, with access control handled by mod_authz_svn. I want some repos or locations within repos ...
3
votes
1answer
78 views

SSH authentication mode selection

I am trying to figure out the SSH mechanism used while I try to ssh onto a production host. I see that the SSH client can choose among the available modes. But I'm not sure which mode is chosen and ...
0
votes
1answer
79 views

OpenLDAP server network architecture and hardware requierments [closed]

I would like to know your opinions and experience while setting-up a centralized authentication server using OpenLDAP. Currently a have a few hosted servers running a few services (email, webapps, ...
0
votes
1answer
46 views

LDAP Groups in authconfig

In my authconfig setup, I always use : --ldapbasedn='ou=users,o=Directory' I thought by using: --ldapbasedn='o=Directory' groups would also be included, but no luck. My LDAP schema looks ...
2
votes
1answer
180 views

ssh shared key authentication asks for password, unless sshd runs with -d option

My client is Ubuntu, and the server is CentOS. I have shared key authentication set up to login from client to server. When I run the server like: sudo `which sshd` -d Everything works as ...
1
vote
1answer
132 views

Basic username-password authentication on gitorious

I recently set up my own server that is supposed to host some git repositories. I installed gitorious there. It is almost perfect. The one thing that I am struggling with right now is how can I make ...
1
vote
0answers
79 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
0
votes
0answers
73 views

Can't match up timeout of session and forms authentication in IIS 6

I've got a site running on IIS6. The session timeout in web.config is set to 720. The forms authentication timeout in web.config is set to 720. I'm using SQL Server session state. Despite this, I ...
1
vote
0answers
50 views

HP Command View: Could not find authenticator for Security Domain

I have some HP EVA storage arrays. They are monitored via Command View - the HP management product. Of 8 management servers, a grand total of one will not let me log in using 'domain' credentials - ...
1
vote
1answer
2k views

Authenticating Active Directory Users to Mac OS X Mavericks Server L2TP VPN Service

We have a Windows Server 2012 Active Directory Infrastructure that consists of two domain controllers. Bound to the Active Directory Domain is a Mac OS X Mavericks Server 10.9.3. The server runs ...
0
votes
0answers
18 views

How to place additional access-restrictions on a subdirectory in Apache?

We have a list of "internal" IP-addresses and only allow access to the server (Location /) from that list: <Location /> Require ip x.x.x.x Require ip y.y.y.y </Location> I need ...
0
votes
0answers
39 views

Getting PAM/user info into php - something like Net_Finger instead of a db?

I've got a very small user group who just need to login, upload, check and then move specific files to a different area when ready. Right now, I use the nginx PAM auth module to log them in against ...
7
votes
1answer
314 views

Is there a way for iSeries AS400 sessions not get disconnected or locked

I have to deal with this in a daily basis: For some reason, maybe due to input error, our users get their sessions disconnected from our iSeries AS400 and I have to manually enter the command: ...
1
vote
1answer
24 views

Access domain A while authenticated against domain B [closed]

In my school, there are 2 domains; A (primary) and B (secondary). A contains the resources required by staff and students. Connecting to the wireless network requires authentication with an account ...
3
votes
1answer
406 views

Understanding PAM authentication procedure on FreeBSD with security/sssd

I'm trying to understand what's behaving errantly on my PAM configuration on FreeBSD 10.0 The machine is configured with two different authentication realms, one is the default Unix authentication ...
0
votes
0answers
173 views

authenticating and authorizing linux users kept in mysql database using pam and nss

I am not able to authenticate and authorize users present in my mysql database. If someone can point out where I am wrong it would be very helpful.Following are the steps that I followed. Firstly I ...
1
vote
1answer
133 views

Multiple SSH keys per user on the server

Say I run a server which accepts SSH connections, and being a wise person, I use SSH keys instead of passwords to connect to it. There is one user, webmaster, which has access to and controls the ...
3
votes
0answers
805 views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
2
votes
0answers
303 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
0
votes
2answers
1k views

SMB vs NFS authentication

Can anyone briefly describe me what is the biggest difference between SMB authentication and NFS v.3 authentication? I think that in SMB it is based on user's login and password whereas in NFS it is ...
2
votes
2answers
468 views

SSH authentication between my VPS and Bitbucket fail

I'm trying to setup SSH authentication between my VPS and Bitbucket for configure later automatic deployment via Capistrano (for web projects) and Capifony (for Symfony2 projects) so I follow this ...
0
votes
0answers
173 views

mongodb replication with admin authentication

I have three nodes of mongodb replication set 2 servers have the data and the third is an arbiter 54.83.20.44 : 27017 (primary) 54.197.243.55 : 40000 (secondary) 23.21.148.73 : ...
0
votes
1answer
299 views

How to disable nginx basic_auth for one location but enable it for the rest of the site

I'm trying to get basic_auth disabled for a specific directory (/api/), but still have basic auth for the rest of the site I'm working with. The following is my nginx.conf: server { # base ...
1
vote
1answer
162 views

Pam is unable to make users home directory

I have an ubuntu 12.04 LTS server that is tied to Active Directory. This is a git server running gitlab. Rather than using gitolite it uses the gitlab shell In the logs I notice that every time the ...
2
votes
1answer
850 views

nginx: understanding the purpose of auth_http (IMAP proxy)

I would like to send IMAP client requests to an IMAP back-end via an nginx proxy. According to the the mail_auth_http module, a directive auth_http has to be used in order to authenticate the clients. ...
2
votes
0answers
328 views

Testing NTLM\kerberos against a public url

I am creating a java open source package that makes it easy to connect with httpclient 3.1 to resources that are protected by ntlm v1/v2 and kerberos. I need to test this tool against real world ...
0
votes
0answers
91 views

Domain PC Logon Server not correct

my production environment I have one parent domain controller three additional domain controllers (ad.domain.com, bjpdc.domain.com, dlpdc.domain.com) and multiple child domain controllers ...
1
vote
1answer
2k views

How to start Mongo daemon with auth support

I want to start the MongoDB daemon with auth support using the Mongo init script: sudo /etc/init.d/mongod start I have also added db users to the database to authenticate. I'm working with two ...
0
votes
0answers
160 views

Java HTTPClient Proxy Authentication

I need to setup a local dev environment behind an authenticated proxy. I'm using Squid as the proxy and have written a java program using Apache Java HTTP client to ensure I can connect outside of the ...
0
votes
1answer
196 views

Create two users with access to privilege level 15 on Cisco IOS

I have a Cisco router running IOS 12.4. What's the simplest way to: have two users (e.g. user1 and user2), each with his own password both of which can log in via telnet remotely both of which have ...
3
votes
2answers
863 views

OpenSSH and PAM authentication using a public key

I'm looking for a way to authenticate users using a public key which is stored in a db (MongoDB). Similar questions usually resulted with a suggestion to installed a patched version of OpenSSH ...
-1
votes
1answer
35 views

apache restrict directory based on unix group

I have an apache server hosting a website with three main directories. Currently two of the directories are restricted to a subset of users with a group file. But for the third directory, I need to ...
2
votes
2answers
351 views

freeradius two factor without factor concatenation

I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN. All ...
0
votes
0answers
21 views

dovecot username reformatting / translation

I have usernames in the format user@domain.com and my install of dovecot under virtualmin currently expects and works with the format username.domain . Is it possible to use the settings: ...
0
votes
0answers
49 views

Strange port-by-port connection on SSH git user

I'm facing very strange logs in my /var/log/auth.log. Every single second I can read one or more lines like this: Accepted publickey for git from MY_OWN_IP port 51885 ssh2: RSA ...
1
vote
0answers
186 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
1
vote
0answers
118 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
0
votes
1answer
95 views

Is it possible to create ssh socks server with authentication required?

I was looking at this question while I was trying to find a good socks server for linux that would be easy to configure. The following command works fine: ssh -f -N -D 0.0.0.0:1080 localhost I ...
0
votes
0answers
27 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
5
votes
7answers
1k views

will hosting provider have access to my dedicated server?

I am looking to buy a dedicated server for my web application.But I am concerned about security to my application code and who can access to my server even dedicated server.As hosting provider ...
1
vote
0answers
2k views

Error 4673 audit failure filling security logs

I have an isolated desktop computer in my office that I run weekly security audits on. I check the logs for odd behavior then export and clear them out. The logs are filled with "Audit failure ...
1
vote
1answer
396 views

Windows Authentication KRB5KRB_AP_ERR_MODIFIED

Let me preface by saying, I've been on this issue for about a week and a half now and I can't figure it out. I think I'm close, but every time I've thought that so far, I was wrong. I've looked at ...
1
vote
0answers
164 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
2
votes
0answers
26 views

PIV authentication on redhat

I'm looking for a solution, or set of technologies, (etc) - for setting up a mixed (win 7, rhel 6.5) network with centralized login using smart cards (PIV). I know that this is possible using a ...