A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
1answer
49 views

tacacs+ for Linux authentication/authorization using pam_tacplus

I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues. I have modified the pam_tacplus module to meet some of my custom requirements. I know by ...
1
vote
0answers
79 views

OpenSSL verification failing with CA signed cert but not with self signed one?

First of all, I know there are plenty of related questions but it seems like most of them are due to the lack of issuer certificates on the server. I have been following this guide to enable client ...
0
votes
0answers
183 views

postfix with dovecot : fatal: no SASL authentication mechanisms

I setup a mail server using postfix and dovecot . I used pro linux system administration book by James Turnbull, but I got following error when try to test mail server with swaks command. swaks -tls ...
0
votes
1answer
27 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
0
votes
1answer
30 views

The authenticity of the server when accessing it through a domain name instead of an IP

When I do ssh username@123.123.123.12, I log into the server fine. However, if I do ssh username@example.com, where example.com points to the same IP addrees, I get: The authenticity of host ...
0
votes
3answers
57 views

How to create a digital signature and verify it through a server

I am trying to find out a way to create a digital signature for the employees of my company and place it in a server from where they can retrieve them and attach it with any digital document (Office ...
2
votes
0answers
82 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
10
votes
2answers
4k views

How does Kerberos work with SSH?

Suppose I have four computers, Laptop, Server1, Server2, Kerberos server: I log in using PuTTY or SSH from L to S1, giving my username / password From S1 I then SSH to S2. No password is needed as ...
1
vote
0answers
47 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
2
votes
1answer
45 views

How to prevent browser from prompting for a client certificate and allow the IIS to accept it (not require it)?

In a web application, I have a WCF service uses Client Certificate authentication. I checked "Accept Client Certificate" in IIS - SSL Settings and it works fine. But some times, in some browsers, if a ...
1
vote
1answer
494 views

IIS Forms Authentication (php, asp.net server side login)

We have multiple applications running on a single "site". For example: www.site.com/ www.site.com/app1 www.site.com/app2 etc... Of these sites, some run PHP and some run ASP.net. We've got Windows ...
1
vote
1answer
836 views

Apache ProxyPass/ProxyPassReverse to IIS

We have an ASP.NET web application which is mapped to a folder on an apache hosted php site using ProxyPass.ProxyPassReverse. A couple of problems being encountered. cookies are being lost which ...
0
votes
1answer
260 views

IIS7: Is it possible to use Forms Authentication and IP Restrictions at the same time?

I am managing a web application that uses forms authentication. Most of it (including the login functionality) was written by a 3rd party so I cannot change it's architecture. The web application uses ...
0
votes
1answer
196 views

IIS ARR pass-through Windows authentication does not work

I have a similar problem as described here: ARR 3 IIS 7.5 Windows Authentication not working Unfortunately that solution does not work on our servers. In our test environment we have an ARR server ...
1
vote
2answers
31 views

Force https before authentification - no access to vhost

I am a beginner when it comes to servers and I have a problem similar to this one. When accessing the desired webpage, .htpasswd prompts me for an authentification before I am redirected to https. ...
31
votes
3answers
134k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
2
votes
1answer
204 views

testsaslauthd - permission denied

Running: Ubuntu 12.10 32bits server version. I'm trying to connect to the saslauthd and getting the error I mentioned on the title (permission denied). $ /usr/sbin/testsaslauthd -u myuser -p ...
2
votes
1answer
185 views

SSH with DSA 2048 bits key

I need to set up secure connection through ssh keys, prerequisites are : DSA type number of bits : 2048 Passphrase : yes On my Linux I can't create this kind of key, the man says : DSA keys ...
1
vote
2answers
79 views

Is it possible/practical to use a Linux server to authenticate Windows devices?

I am from a small primary school and we are currently looking into getting a server purely for authentication. I do not want to push software to the devices or anything like that. I simply want to ...
2
votes
1answer
67 views

Single forest with multiple domains - authentication?

I have a single forest and a 2 domains in it. Remote sites have a mix of users from both domains. All of my domain controller are global catalogs and trusts are set up. Do I need to have domain ...
3
votes
3answers
840 views

SSH Public Key Format

I have a public key in the format: ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "somename-20060227" AAAAB3NzaC1yc2EAAAABJQAAAIBmhLUTJiP[and so on]== ---- END SSH2 PUBLIC KEY ---- Usually I see keys ...
3
votes
2answers
227 views

ADFS - Combining Claims from Provider Trusts and AD

As part of implementing a SharePoint 2013 installation, I have configured SSO with ADFS on Windows Server 2012R2. There are two separate AD forests, one as part of the Hosted SharePoint/ADFS and one ...
0
votes
1answer
3k views

FreeRadius MSCHAP Authentication With Realm Fails

I have FreeRadius 2.0 server with AD as user store. Authenticating using EAP-PEAP-MSCHAP2.Local realm is defined in proxy.conf. Authentications works fine without realm added to the username. As soon ...
0
votes
1answer
29 views

IIS issues challenge on unprotected directory

We've encountered an issue where IIS issues a challenge for all directories on the site, including the ones which are marked to allow anonymous users. This only happens when accessing the site through ...
0
votes
1answer
367 views

sshd on a minimal Linux: “Failed password for invalid user root”

I'm trying to start SSH server on a minimal Fedora installation. And I mean really minimal: one that is produced by diskimage-builder ramdisk builder. It does not even have users (absent /etc/passwd ...
0
votes
2answers
32 views

Adding an SSH public key to a new account without enabling password authentication

On a SSH server, I have the following (truncated) configuration: PubkeyAuthentication yes PasswordAuthentication yes On my client, I have a key pair, and have added my public key on the server ...
0
votes
2answers
64 views

Linux smart card authentication

I am using puttysc to authenticate to a remote Linux server with my smart card . But as I understand, this isn't true PKI authentication - puttysc just unlocks the public key and matches it to a user ...
0
votes
1answer
59 views

Invalid command: 'AuthLDAPAuthoritative', perhaps misspelled

Have apache 2.2.24 running on Gentoo server. I need apache to now authenticate through windows active directory, however, on apache service restart, I am getting this error: Invalid command, ...
6
votes
3answers
3k views

libpam-ldap or libpam-ldapd?

I'm setting up LDAP authentication on my personal VPS, and Ubuntu has two packages for the same purpose: libpam-ldap and libpam-ldapd. Which should I use?
2
votes
2answers
6k views

How to enable negotiate authentication for winrm

I have disabled negotiate authentication for the winrm service on my server by executing: winrm put winrm/config/service/Auth @{Negotiate="false"} And now I can perform any operation with winrm. I ...
11
votes
1answer
358 views

What do the OS X authorization mechanisms actually do?

Background  I'm trying to glean a better understanding of the OS X login process, in order to decide the best way for achieving VPN Single Sign On. Please do correct me if I'm wrong, but I believe ...
1
vote
0answers
113 views

500 Internal Server Error: Which is the issue? [closed]

I've configured openldap in my server and also installed and configured mod_ldap but the server throws me a 500 Internal Server Error if I introduce right or bad user. I don't know if it's a bad ...
2
votes
1answer
645 views

IIS 7: Disable authentication for certain client IPs

I have a virtual directory that's protected with basic authentication. I'd like to disable authentication for certain IPs, so that all requests from e.g. 127.0.0.1 are allowed without asking for ...
0
votes
2answers
96 views

Windows Integrated Authentication with IIS Farm and subapplications

Assume the following site layout www.contoso.com - runs as CONTOSO\sitePool www.contoso.com/subSite1 - runs as CONTOSO\subPool1 www.contoso.com/subSite2 - runs as CONTOSO\subPool2 The pages should ...
3
votes
2answers
5k views

unable to connect to the aws ec2 instance,Host key verification failed

I had set up a ubuntu instance with rails package and also deployed my app, it is working fine. But when i try to do SSH I its not allowing me for the remote login and throws errors like host key ...
0
votes
1answer
577 views

Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect

I setup cassandra with inter-node SSL and client-to-server SSL and basic password auth. No problem using cqlsh or python to connect to cassandra with any certificate as certificate_validation is ...
9
votes
1answer
1k views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would it to have centralized control of user accounts (at least, I think I'd ...
0
votes
1answer
73 views

SPF Softfail when Txt Record Exists

I am getting softfail for SPF and Sender-ID and I tested it by sending an email to check-auth@verifier.port25.com. My Set-up: 1 VPS hosting 1 website Postfix for Send only emails No incoming ...
1
vote
2answers
4k views

How do you authenticate over http/web for Wi-Fi Access?

If you've used Wi-Fi at any cafe and other various hot spot places around town you might notice that sometimes in order to access the wi-fi you have to go to a login page or an agreements page before ...
1
vote
1answer
25 views

Two factor athentication on SSH server without root privileges

I want to set up two factor authentication on a server, on witch I don't have administrative account. The purpose of this is: I want to give some other people possibility to create SSH tunnels to this ...
0
votes
2answers
84 views

Apache/mod_auth_gss authentication failure

Sorry if this is the wrong stackexchange site for this. Based upon the documentation (for reference I also used this blog post) I have this in httpd.conf: # Increase max size of HTTP request headers ...
2
votes
1answer
2k views

OpenLDAP Authentication UID vs CN issues

I'm having trouble authenticating services using uid for authentication, which I thought was the standard method for authentication on the user. So basically, my users are added in ldap like this: # ...
1
vote
2answers
52 views

Block Administrators authentication attemps from workstations

My Administrator user once in a while is getting locked-out by the workstations in our lab, due to failed logon attempts. (While this is a problem that should be addressed, because this means there is ...
0
votes
1answer
38 views

Is there a way to change which wireless network is connected to when authenticating windows 7 AD clients using single sign on over wifi?

The situation: Two domains. Two wireless networks. Each domain's users have their own network for security reasons. B is a child domain of A (A = domain.com, B = child.domain.com). Users in domain ...
1
vote
1answer
500 views

Nginx Pagespeed does not Combine or Minify JS or CSS

I am using Mod_Pagespeed Filters for Nginx and the combine and minify javascipt or css is not working. I checked everything and could not find the reason: 1) There are no errors in the error log 2) ...
33
votes
5answers
3k views

Is it valid to have part of an IPv4 address set to zero?

I am working on a change in a Java EE application that would authenticate based on the user's IP address using ServletRequest.getRemoteAddr. We store IP address ranges (FROM_IP and TO_IP) in a ...
0
votes
0answers
87 views

pam_tally is not supporting user locking after failed attempts on CentOS

After adding the below configurations in /etc/pam.d/system-auth. The user account is not getting locked after multiple failed attempts. As per the below configuration the account should be locked ...
0
votes
1answer
38 views

SimpleSAMLphp OpenID Consumer

I'm using SimpleSAMLphp as an OpenID Consumer and no openID provider I tried seems to work. I always get the following error: Exception during login: SimpleSAML_Error_BadRequest: ...
0
votes
0answers
32 views

Authenticating Debian against AD using only LDAP

I have been trying to set up a number of Debian machines to authenticate and authorize users against the Company AD. I am facing a problem however, the IT department will only allow connectivity ...
1
vote
1answer
85 views

LDAP authentication using RADIUS server

I have a RADIUS server with a custom authentication method. I have a Mysql-Database with passwords of a Django CMS which are hashed in PBKDF2_SHA256, so I had to write a custom authentication script. ...