A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

1
vote
1answer
138 views

Disable authentication for HTTP OPTIONS method (preflight request)

One recurring problem with CORS is that the spec prescribes request headers get stripped from the preflight request (HTTP OPTIONS). However if the server requires authentication, this means the ...
0
votes
1answer
49 views

How to set auth_basic for one file in NGINX? [duplicate]

Here is my config: server { #... location ^~ /wp-login.php { auth_basic "Restricted"; auth_basic_user_file /var/www/.htpasswd; } ...
0
votes
1answer
40 views

Authentication using ADFS 2.0 is not woking

I'm trying to configure ADFS 2.0 with thinktecute STS as an SP. The relying party has been configured successfully using the RP metadata. But when an authentication request is being sent to the ADFS ...
0
votes
1answer
24 views

Squid upgrade stops authentication

Recently we installed a squid proxy server for a customer who was using an older server. New server is ubuntu 14.04.2 with squid 3.3.8. We used the same password file to authenticate users. The ...
0
votes
0answers
16 views

mod_authnz_external and password expired

I configured mod_authnz_external with mod_auth_form and everything works fine. The script I made to authenticate the user returns 0 if the username and password combination is correct, and 1 if it is ...
2
votes
0answers
84 views

How to configure LDAP client without Yast - SLES 11 SP3 [closed]

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. I did it on RHEL, Debian, and ...
4
votes
4answers
312 views

Which ports are required in order to authenticate against a ldap server in another domain which is behind a firewall?

I have a Linux domain running with sssd, let's call this domain NJ. I'd like machines on the NJ domain to be able to authenticate against an Active Directory ldap server which resides on a different ...
0
votes
1answer
27 views

Make an authenticated SIP call via URI

I'm trying to redirect a phone number to a SIP address that's only accessible when authenticated. Given the following, how would the SIP URI look like (if possible) ? SIP Server: sip.example.com Auth ...
0
votes
1answer
1k views

lmtp: connect(backend) failed: Connection refused

A long time ago I'm trying to fix this error but I'm still locked, I appreciate any help :). I detail all that I have and what I am trying to do. I am using Cyrus Murder and apparently everything ...
2
votes
2answers
125 views

Single sign on with Apache and LDAP

I have a server running two web applications: Gerrit and Mantis BT. Now, these applications connect to an LDAP server to authenticate users and it works fine. But the user has to authenticate for each ...
1
vote
0answers
90 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
0
votes
1answer
187 views

.htaccess file is not working on Apache 2.4.12 and Windows Server 2008 R2

I am trying to add Authentication window to a section of the site using .htaccess file. But It is not working "the site is acting that the ".htaccess" files does not exists. here is that content of ...
0
votes
0answers
115 views

How do I connect a SoftEther bridge to a server without getting an authentication error?

I've been playing around with SoftEther, and I'm trying to use the VPNCMD utility to create a site to site VPN. However, when I try to get the Cascade connection up between the bridge and the server, ...
5
votes
3answers
373 views

Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]

How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos? I know that ...
0
votes
4answers
2k views

Allowing LDAP users to change password

How to allow LDAP users to change password from client machines ?
1
vote
0answers
230 views

IIS 8.5 Windows Authentication failing for some users

I have an application that was installed requiring Windows Authentication under Windows 2012, IIS 8.5. When certain users use the application, they're receiving a 401 error after the ...
0
votes
1answer
36 views

IIS: logging client certificate's thumbprint

On IIS 7.5, with client authentication by certificate, how to enable logging of client certificate's thumbprint (or serial, or subject dn) to IIS log?
0
votes
1answer
62 views

LDAP auth fails for some users

Something weird is happening, some users are not able to authenticate via our LDAP to access services (SSH connection, Samba, etc.). Their entries are in the LDAP and everything seems to be fine, I ...
0
votes
0answers
56 views

active directory simple bind always anonymous (event 1219)

I am getting event 1219: "Active Directory could not initialize simple bind authentication. Therefore, simple bind authentication against this LDAP interface will result in binding as an ...
0
votes
1answer
48 views

Remove Lighttpd password auth for one path

I have a lighttpd server that I want to serve some files from. Unfortunately the server is currently set up to require password authentication and I want these files to be available publicly. How can ...
0
votes
1answer
120 views

how to translate an Active Directory group into a NIS netgroup?

The goal is to be able to add + : @DL-MyCompany-MyTeam : ALL to /etc/security/access.conf and have it work as expected. This is my sssd.conf: [domain/default] cache_credentials = True [sssd] ...
0
votes
0answers
63 views

ProFTPD with AD LDAP dont retrieve right usergroup

I am struggling with a ProFTPD with AD LDAP auth. I have everything configured and the AUTH works, it retrieves de user from the AD and if it exist, it creates the home folder and let he user in. The ...
0
votes
0answers
15 views

dovecot authentication failures from valid clients

I get a lot of dovecot authentication failures like this in my logs: authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=USER rhost=IP : 21 Time(s) for some of the IPs i am sure, that ...
2
votes
4answers
12k views

Authentication issues using NTLM, SSL, and SharePoint

I am currently experiencing problems with authentication on a SharePoint site. Routinely, user accounts(only one or so at a time) will be locked out and they will get 401 unauthorized errors. The ...
2
votes
1answer
224 views

auth.log indicates error with JSchExcpetion?

I have a fairly minimal setup server, and it doesn't allow password authentication, only using keys. And it definitely doesn't have Java installed. Normally I don't pay any attention to the thousands ...
1
vote
1answer
49 views

How to set the username and password for smtpd in Postfix?

I've set up Postfix as SMTP server by adding this configuration to main.cf: myhostname = foo.com mydomain = foo.com myorigin = $mydomain smtpd_sasl_path = private/auth smtpd_sasl_auth_enable = yes ...
7
votes
1answer
1k views

WPA2 Enterprise without a Client-End Certificate

This question is practically identical to this question, but the difference being that the authentication server is freeRADIUS on Ubuntu and the access-points are DD-WRT. Additionally, I would like ...
0
votes
0answers
61 views

Forms authentication with URL rewriting

I've got forms authentication set on the top level of my site via the web.config, and I also have a URL rewrite rule to go from mysite.com/plex/ via a reverse proxy to another localhost server; ...
1
vote
0answers
165 views

SAMBA/LDAP authentication failed in FreeNAS

I got a FreeNAS server and I am trying to share folders using SAMBA. My users are in an OpenLDAP server. The OpenLDAP has the samba.schema loaded. I checked the sambaSID in my FreeNAS and it is the ...
2
votes
1answer
31 views

require two-step verification for Azure subscription administrators

How can I enforce that all Azure subscription administrators have two-step verification enabled. For example, as an owner of a private GitHub repository, I can audit if everyone is using two-factor ...
1
vote
1answer
2k views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
5
votes
4answers
2k views

OpenSSH : Key-based authorization, maximum key length

I'am using Putty on windows with key-based authentication to access some of mine servers. It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on ...
0
votes
0answers
90 views

Combined Windows and Anonymous authentication in IIS combined with Tomcat ISAPI filter

I have Apache Tomcat (version 7.0) running with an AJP-connector. I have configured the IIS (version 8.5) with an ISAPI-filter to forward all the calls to Tomcat's AJP and have enabled Windows ...
1
vote
2answers
233 views

Multiple Domain realmd/sssd Configuration on RHEL7?

I've configured our RHEL7 instance to support Active Directory login integration by using the documentation HERE. This describes using the "realm" command to configure the "sssd" service allowing for ...
3
votes
1answer
70 views

Disable two step SSH authentication for trusted addresses

I'm using libpam-google-authenticator for two step SSH authentication which is great and adds another level of security to my server. My question: Is it possible to disable this for certain addresses. ...
1
vote
1answer
322 views

Configure Apache to forward requests to proxy with NTLM2 authentication

I'm trying to call a REST API over the internet using SoapUI but I'm behind a corporate firewall that uses NTLM2 authentication which is not supported by SoapUI. Is it possible to run a local Apache ...
3
votes
3answers
147 views

home dir and shell for Active Directory authenticated users

I have successfully configured sssd and can ssh into a system with AD credentials what I am missing is the creation of a home directory and bash set as the shell. My assumption is that if I log on to ...
0
votes
1answer
88 views

SSH public/private authentication failing in Google compute engine instances

I have two instances (host names are namenode and datanode1 ) of Ubuntu 14.04 LTS running on Google compute engine. I am struggling setting up ssh root access to between them. I am providing some ...
2
votes
2answers
281 views

Apache Authentication / LDAP Group based on URL

I'm working on LDAP authentication for Apache2 HTTPD, and was wondering if it's possible to get Apache to authenticate to LDAP based on groups, but also depending on the URL that is provided. For ...
0
votes
0answers
141 views

How to download files from my MSDN subscription using Powershell?

In order to install Microsoft software in my Azure labs, I'd like to grab the ISO files directly from Microsoft, as speed is so much better than downloading from my own repository. One example is ...
0
votes
1answer
35 views

Authenticate WLAN using Hostname in Access Group

The hardware is Cisco APs and Windows 7 Enterprise clients, which currently allows users to authenticate based on an Access Group in AD. We're looking at instead of users account, using the actual ...
2
votes
4answers
575 views

PAM, RADIUS, Google Authenticator and Two Factor Auth

I have setup FreeRADIUS, PAM and the Google Authtenicator. FreeRADIUS calls PAM, which in turn calls the Google pam_google_authenticator.so libary. That all works successfully. However, that's not ...
0
votes
0answers
19 views

Strange behaviour of domain administrator credentials on windows server 2008 r2 domain

So, my problem: if i try to log into a client PC (Windows 7 Professional) with the administrator credentials with the network cable plugged in, it will respond with the error message "The user name or ...
2
votes
3answers
3k views

How to automate kinit process to obtain TGT for Kerberos?

I'm currently writing a puppet module to automate the process of joining RHEL servers to an AD domain, with support for Kerberos. Currently I have problems with automatically obtain and cache ...
0
votes
1answer
42 views

Deployed IPA-server, created replica, then fed production data only to replica. How to fix?

At some point, I deployed ipa-server on a CentOS 6 machine. Being asked to better move it into a VM, I used ipa-replica-prepare / ipa-replica-install . This resulted as wanted, and I got a working ...
1
vote
2answers
256 views

Postfix, Dovecot - connection from outside, authentication

I want to run postfix + dovecot on my server. I'm doing it for first time. Postfix and Dovecot works on local - I can connect through telnet, and send/receive e-mails using commands. When I try to ...
0
votes
0answers
28 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
0
votes
0answers
32 views

Automatic LAN authentication for HTTPS/HTTP sevice via Proxy

This is my situation: I have a LAN in my office that I want to connect entirely to an internet server via HTTPS. I want to log all the LAN's host injecting the session cookie in the header of ...
0
votes
0answers
20 views

Allowing IUSR to access a page anonymously windows server 2000

I am migrating a web app from a windows 2000 server to a windows 2008 server. In several places, the app is trying to convert a webpage to a PDF. To do this, it has the server access a url and convert ...
3
votes
1answer
24 views

Use more complex AND/OR structure with PAM

PAM allows to use sufficent and required for some logic, like auth sufficient pam_a.so auth required pam_b.so auth required pam_c.so which would mean "either a is true, or b must be true and then c ...