A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

3
votes
1answer
316 views

Understanding PAM authentication procedure on FreeBSD with security/sssd

I'm trying to understand what's behaving errantly on my PAM configuration on FreeBSD 10.0 The machine is configured with two different authentication realms, one is the default Unix authentication ...
0
votes
0answers
167 views

authenticating and authorizing linux users kept in mysql database using pam and nss

I am not able to authenticate and authorize users present in my mysql database. If someone can point out where I am wrong it would be very helpful.Following are the steps that I followed. Firstly I ...
1
vote
1answer
105 views

Multiple SSH keys per user on the server

Say I run a server which accepts SSH connections, and being a wise person, I use SSH keys instead of passwords to connect to it. There is one user, webmaster, which has access to and controls the ...
3
votes
0answers
672 views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
2
votes
0answers
251 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
-1
votes
2answers
600 views

SMB vs NFS authentication

Can anyone briefly describe me what is the biggest difference between SMB authentication and NFS v.3 authentication? I think that in SMB it is based on user's login and password whereas in NFS it is ...
2
votes
2answers
349 views

SSH authentication between my VPS and Bitbucket fail

I'm trying to setup SSH authentication between my VPS and Bitbucket for configure later automatic deployment via Capistrano (for web projects) and Capifony (for Symfony2 projects) so I follow this ...
0
votes
0answers
141 views

mongodb replication with admin authentication

I have three nodes of mongodb replication set 2 servers have the data and the third is an arbiter 54.83.20.44 : 27017 (primary) 54.197.243.55 : 40000 (secondary) 23.21.148.73 : ...
0
votes
1answer
184 views

How to disable nginx basic_auth for one location but enable it for the rest of the site

I'm trying to get basic_auth disabled for a specific directory (/api/), but still have basic auth for the rest of the site I'm working with. The following is my nginx.conf: server { # base ...
1
vote
1answer
125 views

Pam is unable to make users home directory

I have an ubuntu 12.04 LTS server that is tied to Active Directory. This is a git server running gitlab. Rather than using gitolite it uses the gitlab shell In the logs I notice that every time the ...
2
votes
1answer
633 views

nginx: understanding the purpose of auth_http (IMAP proxy)

I would like to send IMAP client requests to an IMAP back-end via an nginx proxy. According to the the mail_auth_http module, a directive auth_http has to be used in order to authenticate the clients. ...
2
votes
0answers
271 views

Testing NTLM\kerberos against a public url

I am creating a java open source package that makes it easy to connect with httpclient 3.1 to resources that are protected by ntlm v1/v2 and kerberos. I need to test this tool against real world ...
0
votes
0answers
89 views

Domain PC Logon Server not correct

my production environment I have one parent domain controller three additional domain controllers (ad.domain.com, bjpdc.domain.com, dlpdc.domain.com) and multiple child domain controllers ...
1
vote
1answer
1k views

How to start Mongo daemon with auth support

I want to start the MongoDB daemon with auth support using the Mongo init script: sudo /etc/init.d/mongod start I have also added db users to the database to authenticate. I'm working with two ...
0
votes
0answers
159 views

Java HTTPClient Proxy Authentication

I need to setup a local dev environment behind an authenticated proxy. I'm using Squid as the proxy and have written a java program using Apache Java HTTP client to ensure I can connect outside of the ...
0
votes
1answer
163 views

Create two users with access to privilege level 15 on Cisco IOS

I have a Cisco router running IOS 12.4. What's the simplest way to: have two users (e.g. user1 and user2), each with his own password both of which can log in via telnet remotely both of which have ...
3
votes
2answers
655 views

OpenSSH and PAM authentication using a public key

I'm looking for a way to authenticate users using a public key which is stored in a db (MongoDB). Similar questions usually resulted with a suggestion to installed a patched version of OpenSSH ...
-1
votes
1answer
33 views

apache restrict directory based on unix group

I have an apache server hosting a website with three main directories. Currently two of the directories are restricted to a subset of users with a group file. But for the third directory, I need to ...
2
votes
2answers
276 views

freeradius two factor without factor concatenation

I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN. All ...
0
votes
0answers
18 views

dovecot username reformatting / translation

I have usernames in the format user@domain.com and my install of dovecot under virtualmin currently expects and works with the format username.domain . Is it possible to use the settings: ...
0
votes
0answers
46 views

Strange port-by-port connection on SSH git user

I'm facing very strange logs in my /var/log/auth.log. Every single second I can read one or more lines like this: Accepted publickey for git from MY_OWN_IP port 51885 ssh2: RSA ...
1
vote
0answers
169 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
1
vote
0answers
109 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
0
votes
1answer
90 views

Is it possible to create ssh socks server with authentication required?

I was looking at this question while I was trying to find a good socks server for linux that would be easy to configure. The following command works fine: ssh -f -N -D 0.0.0.0:1080 localhost I ...
0
votes
0answers
27 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
5
votes
7answers
1k views

will hosting provider have access to my dedicated server?

I am looking to buy a dedicated server for my web application.But I am concerned about security to my application code and who can access to my server even dedicated server.As hosting provider ...
1
vote
0answers
2k views

Error 4673 audit failure filling security logs

I have an isolated desktop computer in my office that I run weekly security audits on. I check the logs for odd behavior then export and clear them out. The logs are filled with "Audit failure ...
1
vote
1answer
332 views

Windows Authentication KRB5KRB_AP_ERR_MODIFIED

Let me preface by saying, I've been on this issue for about a week and a half now and I can't figure it out. I think I'm close, but every time I've thought that so far, I was wrong. I've looked at ...
1
vote
0answers
144 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
2
votes
0answers
25 views

PIV authentication on redhat

I'm looking for a solution, or set of technologies, (etc) - for setting up a mixed (win 7, rhel 6.5) network with centralized login using smart cards (PIV). I know that this is possible using a ...
1
vote
1answer
262 views

How can I disable sending mail through postfix smtp with out auth

I just setup a mail server with postfix 2.6.6 and dovecot. I have the auth related config in main.cf like below: smtpd_tls_cert_file=/etc/httpd/ssl/mail.crt ...
0
votes
1answer
1k views

How to I authenticate with Dovecot + IMAP + PAM on CentOS?

I set up Dovecot IMAP to use PAM as suggested here: http://wiki2.dovecot.org/PasswordDatabase/PAM PAM/dovecot [root@ip-172-31-15-65 pam.d]# cat dovecot #%PAM-1.0 auth required ...
0
votes
1answer
519 views

Cannot install Perl module Authen::Libwrap

I'm getting this error when trying to install. How can I install it? Webmin depends on it. [root@ip-172-31-15-65 home]# cpan Authen::Libwrap CPAN: Storable loaded ok (v2.20) Going to read ...
0
votes
1answer
151 views

Where do I specify the Bind DN and password for sss+ldap?

I'm trying sssd for LDAP authentication, and while it can show user IDs with the id command, getent group and getent passwd do not show LDAP names, and while I can chown files to ldap users, they ls ...
0
votes
1answer
145 views

Unable to login with Windows Auth on server but can externally IIS 7

I'm running Windows Server 2008 Standard Edition with IIS 7.5. I have TFS 2013 Update 2 installed and for whatever reason I cannot connect to my web site which requires Windows Auth while remote ...
0
votes
2answers
785 views

Samba 4 OpenLDAP authentication issue

What I've done so far Installed DHCP server and bind9 for the local network of clients (the server should act as a gateway) built Samba4 from source with bind9_dlz as dns backend installed OpenLDAP ...
0
votes
1answer
595 views

make nginx not log “no user/password was provided for basic authentication” in error logs

I've added password protection to a lot of my domain via nginx by adding: auth_basic "Restricted"; auth_basic_user_file /usr/ssl/htpasswd; to the nginx vhosts. I log all errors ...
1
vote
1answer
118 views

Postfix, Dovecot - connection from outside, authentication

I want to run postfix + dovecot on my server. I'm doing it for first time. Postfix and Dovecot works on local - I can connect through telnet, and send/receive e-mails using commands. When I try to ...
0
votes
2answers
677 views

IIS / kerberos not prompting for credentials from Mac clients

I have an IIS server (Server 2008R2/IIS 7.5) configured for kerberos authentication. The kerberos authentication works from clients on Windows (IE and Opera both tested), but when I access the site ...
0
votes
0answers
323 views

How to enable kerberos authentication to a Java web app

I'm currently using Centrify to aid with Kerberos/AD integration in our environment. Right now we have Kerberos enabled on a Centrified version of Apache. We are trying to run jnlp files through ...
1
vote
0answers
302 views

IIS using ADFS/Saml to Authenticate

Does anyone know if there is a ADFS/SAML Identity Provider for IIS7? Example workflow - the user will go to the directory /private and it will redirect to the provider to login and back if the user ...
-1
votes
1answer
235 views

User authentication; PAM or Radius? [closed]

At college I'm part of a group of students that keep a server infrastructure running for the students. Lately we've been having a lot of trouble with the servers, and we decided that it's probably ...
0
votes
0answers
28 views

Program / Service to Allow Multiple Users to use a Single Shared Account

I've found it very common for teams to share a single username / password for online services, such as domain registrars. Clearly, giving multiple people access to a single account by passing around ...
0
votes
0answers
81 views

Exchange Server 2013 and RADIUS server(freeRADIUS2)

I am a student and doing an internship. I have to test Microsoft Exchange Server 2013. I am using Windows Server 2012, I already installed Exchange Server 2013 on it and everything works as intended. ...
0
votes
0answers
25 views

libnss-pgsql logging transaction on screen

I've been configuring a pg database to authenticate user against pam. I installed libpam_pgsql and libnss_pgsql2. After I finish configuring the libnss_pgsql2, creating and editing the nss-pgsql.conf ...
1
vote
1answer
245 views

Use a PHP script to authenticate users on Linux

I have a web application running built in PHP using MySQL as database. I'm trying to give specific users access to a Linux system via SSH to perform simple command-line tasks. Since I do already have ...
1
vote
0answers
53 views

How to enable authentication for cargo webapp in jetty container? (docs does not work for me)

It looks like I'm stuck with a simple and well documented issue, but nevertheless. I'm trying to enable basic authentication in cargo web-app deployed to the Jetty server. I'm following this document ...
1
vote
1answer
196 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
1
vote
0answers
30 views

SVN Server with authentication via Github

One of my users wants me to build an SVN server that uses a specific Github community for authentication. Users who are members of this community should be able to use their Github credentials to ...
0
votes
1answer
56 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...