Questions tagged [authentication]

A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully asserted their identity. There are three factors (types) of authentication, and a particular authentication process may combine two or more different factors.

Filter by
Sorted by
Tagged with
6 votes
1 answer
2k views

Why are system:nodes, system:masters, etc. not listed under "kubectl get roles -A" or "kubectl get clusterroles"?

I'm really struggling to follow the AWS documentation for "Enabling IAM user and role access to your cluster". When I run kubectl edit -n kube-system configmap/aws-auth, I see this: ...
ndbroadbent's user avatar
0 votes
0 answers
57 views

How to permit only certain e-mail clients for IMAP access

My company is giving out new Android smartphones to employees, and they should be able to manage their e-mail on them. Currently, only access via webmail is enabled, but the mobile webmail client (...
Ben Opp's user avatar
  • 247
1 vote
1 answer
3k views

Error with database authentication in Apache Guacamole

I'm setup a new Ubuntu Server 22.04 VM and am following the documentation here: https://guacamole.apache.org/doc/gug/jdbc-auth.html Guacamole 1.4 installs fine along with Tomcat9 and Nginx proxy; I ...
S3rvant's user avatar
  • 21
1 vote
0 answers
968 views

Is one of Anonymous or Windows Authentication really required for IIS when hosting an ASP.NET CORE application

I have an ASP.NET CORE application hosted in IIS. The application uses OAUTH/OIDC for authenticating API requests. I have observed that if neither Anonymous nor Windows Authentication is activated ...
Tom Carter's user avatar
1 vote
1 answer
659 views

Squid basic auth connection problems

We are using squid proxy with basic authentication. Each user has it's own outgoing ip configured. See parts of our squid.conf: # Authentication Basic Auth auth_param basic program /usr/lib/squid/...
Peter Herold's user avatar
0 votes
1 answer
1k views

Can i use different client certificates for different locations using nginx

I have two different location on my Server: server/locationA server/locationB I want to restrict access to these locations using two client certificates certA and certB. locationA should only be ...
just_some_dude's user avatar
-2 votes
1 answer
272 views

RDP login works when using Android App, but now when using Windows [closed]

I am trying to connect to my work machine using RDP. Using my Android Phone I can connect to it. It shows up in the list and I fill in my details like so: COMPANYNAME\USERNAME. Then I enter the ...
S. ten Brinke's user avatar
0 votes
1 answer
1k views

Strange issue with forwarding auth headers from apache to nginx - Non empty header(se_custid/ein) not found in the request to proceed

On the setup describe below, Looks like apache is not able to forward required headers to nginx or nginx while forwarding initial request is not forwarding full URL but just relative path. The idea ...
Dhanraj B. Sheth's user avatar
1 vote
2 answers
1k views

Hashicorp Vault How Do I Login Headless From STDIN Using Bash Shell?

Given a Bash Shell say in a Docker container running on Gitlab, for example, how would I get the password to get passed in? When I login with this: $ vault login -method=ldap username=myusername It ...
Frederick Ollinger's user avatar
1 vote
1 answer
1k views

Authentication failed: TImeout for cockpit access in CentOS 7

PROBLEM When I try to login to cockpit on CentOS 7 using URL https://localhost:9090 using the root credentials, I get Authentication failed: Timeout error. Have searched the web for solution but not ...
VLSI Silicon's user avatar
0 votes
1 answer
143 views

How to get Gravitee to do recursive group lookups

I have set up Gravitee APIM 3x (gateway, rest-api, console and portal). This work fine. When trying to replace the memory authentication with LDAP (FreeIPA) authentication, I am able to get the ...
Mogget's user avatar
  • 111
1 vote
1 answer
473 views

Requirements for RDP from Azure AD Registered device

We are a small company (4 users, 7 devices) and have recently moved from a mess of local accounts on our PCs to using Azure AD for Office 365. The plan was to have accounts for each user and for ...
Jack B's user avatar
  • 111
0 votes
2 answers
602 views

Do I need to restart my Debian after removing one key in authorized_keys?

I removed a public key in authorized_keys for a computer that I've lost. I have some servers running on the Debian and am afraid that a reboot would cause some trouble. However, I can't verify whether ...
AGamePlayer's user avatar
0 votes
1 answer
328 views

How does Microsoft Exchange determine which mailbox database a mailbox is in upon authenticating via POP3?

Performing a Microsoft Exchange 2010 to 2016 migration and everything is ready for transition besides this one problem. I have an internal CNAME DNS record mail.domain.tld that is pointing to the ...
qroberts's user avatar
  • 285
1 vote
0 answers
3k views

Samba/Winbind domain member authentication issue

In setting up a new Linux Samba fileserver as a AD member I keep running into an issue with authentication. It appears to be triggered by running with selinux in Enforcing mode after joining AD, but ...
codeskipper's user avatar
2 votes
1 answer
3k views

libpam-ldapd - LDAP authentication on Debian 11 not working

I saw several other questions here regarding a similar issue - but I haven't found something that actually worked for me. My goal is to authenticate (mainly for SSH) all Debian maschines against an ...
SecurityWho's user avatar
0 votes
1 answer
666 views

How to show a default page on a protected website running on IIS

I can't figure out the correct syntax in my web.config to allow the general public to see the index.aspx as a default page and for any other page to go thru the login page. If I use www.mywebsite.com/...
Corobori's user avatar
  • 123
1 vote
0 answers
17 views

OpenLDAP: interpreting username@domainname as uid=username,ou=domainname

Is that possible to tweak some settings that would make OpenLDAP always interpreting uid=username@domainname as uid=username,ou=domainname in authentication queries? Of course, making the clients to ...
Volodymyr Melnyk's user avatar
1 vote
2 answers
134 views

HTTPD server does LDAP authentication. How does the mechanism work?

I have a HTTPD apache server which does LDAP authentication. When the user hits the URL http://localhost/, a browser prompt pops up asking for username and password. How are the username and password ...
Vinayak's user avatar
  • 73
1 vote
0 answers
712 views

Keycloak: Difference between Authentication sessions and User Sessions

I was going through the documentation https://www.keycloak.org/docs/latest/server_installation/#cache Here they have described different types of caches. I didn't quite understand the definitions they ...
MrRobot9's user avatar
  • 123
0 votes
1 answer
55 views

What role does session on the Authorization server play?

I was reading about Sessions in this article https://auth0.com/docs/users/sessions It says when a user logs in, two types of sessions are create Two sessions are created: The local session (storezero....
MrRobot9's user avatar
  • 123
0 votes
1 answer
80 views

Switched BizTalk's database domain, but cannot remove DC

I've inherited an older system involving BizTalk (Server 2010) where the application and its database were on separate servers on separate domains. There has been efforts to modernize the systems and ...
Temm's user avatar
  • 1
1 vote
1 answer
5k views

Chrome doesn't prompt to use a local certificate after setting up client certificate authentication on Apache

I have used this guide to set up client certificate authentication on Apache. I verified my certificate using the openssl verify directive (it's valid), I also successfully imported the PFX file into ...
lesssugar's user avatar
  • 121
1 vote
0 answers
2k views

How do I configure apache, so that my client certificate authentication works for two specific URLs only?

I'm following this guide in order to establish client-based, certificate authentication on my website. The goal: Allow 2 users access to 2 specific URLs: /login and /admin. When any of the 2 users ...
lesssugar's user avatar
  • 121
0 votes
0 answers
229 views

Rewrite to https://localhost:8000 rather than https://localhost

I use nginx in my MacOS to test third-party authentications such as Google and Twitter in localhost. As a result, on my local website https://localhost:8000/..., I could engage with www.funfun.io for ...
SoftTimur's user avatar
  • 355
1 vote
0 answers
187 views

More explicit Nginx logs

I use nginx in my MacOS to test third-party authentications such as Google and Twitter in localhost. As a result, on my local website https://localhost:8000/..., I could engage with www.funfun.io for ...
SoftTimur's user avatar
  • 355
0 votes
0 answers
131 views

InspIRCd doesn’t even contact configured LDAP

On Ubuntu 20.04 I've installed InspIRCd (which seems to work fine as-is) and added to its config: <module name="m_ldapauth.so"> <ldapauth baserdn="dc=nodomain" ...
Al Klimov's user avatar
  • 100
1 vote
0 answers
691 views

Unable to log in with AD credentials

I have a DC (Debian) that seems to be working fine. I am able to join the domain but when I join a Fedora member it joins but the DNS isn't registered. I have to manually add the record to the dc. ...
Rob Campbell's user avatar
0 votes
0 answers
239 views

Debug third-party authentications in localhost with docker and nginx

We have a website where we just added third-party authentications such as Google, Twitter. I'm trying to test these authentications in localhost (MacOS). I'm running a docker to run nginx, here is ...
SoftTimur's user avatar
  • 355
0 votes
2 answers
390 views

ADFS as proxy to some IDP

As far as I know, Exchange does support WS-Federation, but it does not support SAML. At the same time I have IDP that does support SAML, but does not support WS-Federation. Is it possible to configure ...
Oleksii's user avatar
  • 145
0 votes
1 answer
125 views

Is it possible to overlay local LDAP attributes on top of a replicated tree?

A central LDAP server provides user data as posixAccount, whereby the attributes homeDirectory and loginShell are empty. I want allow users in this central LDAP server to access a Linux system. If I ...
loris's user avatar
  • 242
0 votes
1 answer
178 views

manual certificate authentication for IMAPS

I'm running an IMAPS service and users are authenticated with an X.509 certificate. It works fine using Thunderbird. But how I can connect to the IMAPS service manually using openssl? I use the same ...
Micha's user avatar
  • 101
0 votes
1 answer
2k views

idmap range on Ubuntu 20.04 (sssd) does not match CentOS 7 winbind idmaps (kinda)

My Active Directory maps in Ubuntu systems are very long compared to my CentOS IDs The last 4 digits match but Ubunutu seems to be adding a lot more to the beginning. In CentOS winbind/samba I used a ...
Ashley Hill's user avatar
1 vote
1 answer
5k views

Ubuntu SSSD Auth Error with child/sub AD Domain

Need help authenticating linux (Ubuntu) server that is joined to child domain. I can see the server name on the Domain Controller and able to run authentication test successfully however I am not ...
AAABL's user avatar
  • 13
1 vote
0 answers
104 views

Authenticating ftp against multiple (postgres) databases

Current State Given is a host with a couple of IPv4 addresses and HTTP & FTP access for each address; each vhost has access to a PostgreSQL database. Web- and ftp-authentication is done against ...
SlowFox's user avatar
  • 11
1 vote
0 answers
192 views

Downgrade Google Identity Platform back to Firebase Authentication

We used Firebase Authentication and were happy about it. Then I clicked the "migrate to Identity Platform" button — but that was a mistake. We don't use any of the advantages but end up ...
Andrey Molchanov's user avatar
1 vote
1 answer
5k views

ADFS: Some Users Cannot Sign-In

I have a new ADFS implementation running on Server 2019. After setup, I tested authentication for various user accounts using the /adfs/ls/IdpInitiatedSignon.aspx. Most of the account I tested worked ...
Jeremy's user avatar
  • 91
1 vote
0 answers
344 views

Temporarily disable minimum password time in FreeIPA after password reset by support

We use FreeIPA 4.6.8 and we have users that of course forget their passwords. However, password policy has a minimum password time of 1 hour. When support resets their password for them and provides ...
Foghorn's user avatar
  • 123
0 votes
1 answer
620 views

Is it possible to limit AWS Account access from corporate devices only

Is it possible to ensure that AWS accounts that have been created by an organisation cannot be logged in to from devices that are not part of the corporate infrastructure? I am struggling to ...
user avatar
0 votes
0 answers
277 views

Can I use AD CS to Authenticate Domain Users Instead of a Password?

I have a number of Active Directory Domain User Accounts, which function essentially as service accounts. I'd like to avoid having to rotate the passwords for all of those domain user accounts, and ...
cuddlydingo's user avatar
0 votes
1 answer
2k views

configure ssh to avoid password prompt when I cannot access remote .ssh directory

I need to programmatically upload and download files via an sftp connection to a remote server. My username has permission to access a certain remote directory through a password, but not the .ssh ...
Marlo's user avatar
  • 105
2 votes
1 answer
953 views

Why is IE showing certificate popup when authentication mode in IIS is anonymous?

I have a website deployed on IIS server. The authentication mode is set to anonymous: enabled. When I enter the website url and hit enter button, IE is showing me a certificate popup asking me to ...
variable's user avatar
  • 209
0 votes
1 answer
469 views

Where does Sendmail get authentication from?

For reasons I can't get into at the moment, I'm authenticating to an SMB domain (using Samba 4.9.5 on a Debian host as the DC, if it matters) with a Mint Linux server in the domain with Samba 4.11.6 ...
tsc_chazz's user avatar
  • 1,791
0 votes
0 answers
95 views

How Iphone choose IP address when it gets multiple IP address in dns response?

I am trying to understand how Iphone decides which IP address to use from 2 IP addresses returned in dns response in this specific scenario below. Scenario is like this: 1- Iphone sends dns query for ...
White11's user avatar
  • 11
1 vote
1 answer
3k views

Apache HTTP with Kerberos not working with Chromium-powered navigators on machines outside of domain

Here is the Apache HTTP Kerberos module configuration in /etc/apache2/sites-available/my.server.tld.conf: # ... <Location /> Authname "SSO Authentication" AuthType Kerberos ...
kagmole's user avatar
  • 113
0 votes
0 answers
34 views

Aliasing a user (id) in CentOS7/8

I am in the process of replacing some apache instances with nginx (for performance, mostly). For some time I will need to switch from one to the other. The packagers, in their infinite wisdom, decided ...
Alien Life Form's user avatar
0 votes
1 answer
2k views

nginx sub-request authentication not working as expected

I want to add access controls to an entire vhost on a reverse proxy. I am using nginx sub-request authentication to do this. The expected interaction is that the user will either get an error message ...
symcbean's user avatar
  • 22.4k
0 votes
1 answer
286 views

Apache2 mod_userdir and mod_authnz_external, how to limit access to own home

Apache2 setup with mod_userdir and mod_authnz_external and pwauth, so that each user can access their home and can be authenticated by their local UNIX credentials. Now I need some kind of ...
mstud's user avatar
  • 101
0 votes
0 answers
213 views

How to set header in request for HAProxy based on script output?

I have haproxy which runs fine, but we have backend, which validate token against our identity service. I want to move that logic to HAProxy, where we can run some python or sh script, and get the ...
Nilesh's user avatar
  • 255
1 vote
1 answer
2k views

System-wide Docker login?

Is there any way to log a whole machine / Docker daemon into a registry? Everything I see about docker login and various proprietary credentials helpers uses ~/.docker/config.json, i.e. is per-user. I ...
Bernd Haug's user avatar

1 2
3
4 5
45