A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
2answers
962 views

Force IIS to prompt for credentials

We have a website that should only be accessed by authenticated active directory users. The first thing that should happen when entering the site is a prompt to enter windows credentials. To ...
1
vote
1answer
78 views

pure ftpd auth using crypt sha512

I've installed pure-ftpd-mysql and it works fine with md5 password hashing. This isn't very secure, so I'd like to use crypt with salted sha512, the way I'm using in dovecot. How to set up this in ...
0
votes
1answer
28 views

how do you query your existing ldap parameters?

ldapsearch -A locked my computer up and upchucked about 3000 unnecessary lines (not one clearly had the information I was looking for). Is their a quick summary search that will upchuck your ou, dn, ...
0
votes
2answers
21 views

LDAP config for Novell export

I am trying to export the email userlist from groupwise via the consoleOne export tool.. In the tool, they ask for some basic LDAP parameters that make little sense in the GUI (I dislike GUIs). ...
0
votes
1answer
504 views

openSUSE 13.1 pam_ldap error trying to bind invalid credentials

Environment: new install of openSUSE 13.1 into a internal network of mostly 10.2 and 10.3 openSUSE. LDAP server (@(#) $OpenLDAP: slapd 2.3.19 (Jul 28 2006 17:00:02)) running on SUSE LE 10 . ...
2
votes
2answers
2k views

pam_ldap and ldaps can't contact ldap server

I'm trying to allow authentication via LDAP on a CentOS host system. But I always get a Can't contact LDAP server error from pam_ldap. The LDAP server is pingable and authentication works perfectly ...
0
votes
1answer
446 views

Dovecot Authentication failed if trying login with @domain

When I try to test my IMAP server functionality using telnet I encounter the following error. If during the test i omit the @domain.ex everything works fine(as you can see below); a login user ...
1
vote
1answer
33 views

How to inhibit repeated checks to mod_auth_basic by mod_autoindex?

In Apache 2.4, When using both mod_autoindex and mod_auth_basic on a directory, the indexing of that directory causes mod_auth_basic to perform a password hash and lookup from scratch once for every ...
0
votes
0answers
143 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
1
vote
0answers
26 views

Dovecot not attempting authentication

I am in the early stages of migrating an OS X mail installation (UW imapd/Exim/mbox) to a Ubuntu cloud VM using Dovecot/Exim/Maildir. I am starting simply: Exim is running fine, receiving mail and ...
1
vote
0answers
27 views

Revoking client certificate two way authentication

can we revoke a client certificate by serial (we are using mutual authentication)? we tried revoking a certificate using the certificate file but the revocation date is not set to the current date . ...
0
votes
1answer
101 views

Nginx still serving static files although website access is blocked

I have nginx installed on my centos server. I have blocked all external access to a test website I am working on. With this code. location / { auth_basic "Administrator Login"; ...
1
vote
1answer
45 views

Browser Authentication Prompt After Server Restart

Details We have an internal website. The authentication mode is windows hence it takes windows logins. It is served from two windows servers running Windows Server 2008 R2. And are connected with ...
8
votes
2answers
527 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
0
votes
1answer
55 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
0
votes
0answers
35 views

SQL 2008 R2 says access denied when logging in remotely

I have an SQL 2008 R2 server and a monitoring server both on the same physical network (but different VLANs). The monitoring server is always connecting to the SQL server to run a query and check the ...
0
votes
1answer
40 views

Kerberos in production on virtual machines

At the moment I am investigating the possibility to use Kerberos as the primary authentication protocol for our cloud structure. We'll probably follow through with this idea and for the sake of HA the ...
1
vote
0answers
102 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
2
votes
0answers
94 views

Samba: Authenticate only local accounts over AD?

I have a samba server where I create all the linux accounts and corresponding SMB accounts via a application I built. I manage all the permissions for all of our shares via ACL's also using the ...
1
vote
1answer
110 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
0
votes
1answer
87 views

Can't get basic plain auth to work on lighttpd win 1.4.35-1-ipv6

I simply can't get Plain Basic auth to work on lighttpd for more than one user. I have this auth.user file formatted like this: [account_1_name]:[account_1_password] ...
0
votes
0answers
50 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
1
vote
2answers
100 views

Issue with sharp in host vars Ansible

Since # is considered as a comment in /etc/ansible/hosts I'm unable to use a password containing a sharp. [hosts] host1 ansible_ssh_user=user ansible_ssh_pass=userpass ansible_su_pass=My#Password ...
0
votes
0answers
13 views

LDAP: Extend database using referral

My company uses an off-site LDAP server to handle authentication. I'm currently working on a local VPN for my branch that needs to use the off-site LDAP to check user's usernames and passwords, but I ...
2
votes
1answer
234 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
-2
votes
2answers
33 views

SSH using ssh_key from a different account

Is there a way for a user to ssh as a different user using ssh_keys? For example, i have host A B and C. User X SSHes from A to B as himself ( A -- as X --> B ) Now the user wants to SSH to C from ...
2
votes
3answers
112 views

How to configure SSH access for key authentication for another client?

I know that if I want to configure SSH access for key authentication, I need to use the following command: ssh-keygen -b 2048 -t rsa -C “mypassphrase” I then need to copy the codes created in ...
0
votes
2answers
311 views

How to clear kerberos config

I am setting my machine as a kerberos client. I have a question on how the kerberos config file actually take effect and how to clear its effect. My experiment is as follow. Step 1, without editing ...
-2
votes
3answers
434 views

Public Key authentication fails while using the -i parameter on ssh command

I have to do public key based authentication on two Linux servers. Machine 2 (192.168.3.132) username: vfx_30 home dir: /home/vfx_30 ssh keys: /home/vfx_30/.ssh/id_rsa /home/vfx_30/.ssh/id_rsa.pub ...
-1
votes
1answer
492 views

Squid Proxy does not prompt for authentication and denies every request

I have a problem with a squid proxy that always denies requests. The bad part is, i never get to see an authentication pop-up... Squid is running on an Ubuntu 14.04 vserver. I'll provide you my ...
-1
votes
2answers
166 views

Add ssh public key to group instead of users on centos 6.5

I am a newbie to linux administration. I have a box with centos 6.5 x64. Ive been configuring ssh access via public/private key. Ive been wondering if I could add the public key to a user group ...
-2
votes
1answer
228 views

configure dovecot 10-auth.conf

i'm going to setup mail server according this guide : https://workaround.org/ispmail/wheezy on setting up dovecot part 10-auth.conf it's says change auth_mechanisms = plain to auth_mechanisms = ...
-3
votes
1answer
501 views

Psql uses .pgpass file however pg_dump does not, and it also does not connect using the correct password [closed]

Using the following command: % pg_dump -h postgres.cs.host.ca -p 5433 -n _cscf_subscription -Fc -f ~/old.dump odyssey_prod Password: pg_dump: [archiver (db)] connection to database "cs-rsub" failed: ...
0
votes
1answer
78 views

Connecting with PostgreSQL 9.1 using the Ubuntu machine user and peer authentication method

I want to connect to my local installation of PostgreSQL 9.1 using my machine user (who is vagrant). So, after reading PostgreSQL documentation, I thought I just needed to: Add username map in ...
1
vote
0answers
253 views

Apache basic auth with IP whitelist

I am trying to add some kind of IP whitelist to one of my HTTP Basic Auth protected directories. I am using Apache 2.2.15 on CentOS 6.5 but I also tried with Apache 2.2.22 on Ubuntu 10.04. I looked ...
0
votes
0answers
64 views

Percona MySQL LDAP authentication fails through .NET MySQL connector

Basically, MySQL uses its native authentication, where usernames and passwords are stored in mysql.user table. MySQL authenticates user against the credentials stored in mysql.user table. Our ...
0
votes
1answer
52 views

Solution for SSL client certificates with user self service

I'm administrating a linux-based small business network. User information is centrally stored in an OpenLDAP directory. There is an existing CA which is currently used to sign server certificates. It ...
0
votes
1answer
322 views

Exim4 require TLS for all hosts but localhost

As my webmailer does not support STARTTLS and I want to enable relaying for everyone at localhost, I would like to have Exim advertise AUTH PLAIN and LOGIN only without TLS if the connection was ...
0
votes
1answer
66 views

Should I still disable root if I disable password authentication and enable only key authentication?

I'm new to the linux world and I've been reading a few tutorials on security. I've seen some questions on StackExchange tackling this subject, but from what I've seen, none of the answers clarified ...
0
votes
2answers
159 views

How to check the connection to remote server with a digital certificate (client authentication)

I got a digital certificate with extensions for server and client authentication and a private key. Now I want to connect to a remote server (REST web services) which should accept my requests ...
0
votes
0answers
129 views

pam-mysql: “Failed password” when using hash methods

today I installed mysql-pam in order to store user credentials for ssh logins in a mysql database. At first I set users.password_crypt = 0, which means that plain passwords are saved in the db. After ...
0
votes
0answers
18 views

<Directory /> doesn't (always) apply its settings to NFS-mounted home directories

Two different machines, a production and a test machine, are running CentOS 6, with the CentOS Apache package installed, and both version 2.2.15. The configuration on the test machine is an exact ...
0
votes
0answers
206 views

Digest authentication keeps asking for credentials

I'm attempting to use Digest Authentication in IIS (7.5 on Server2008R2) - all other authentication options are disabled. In IE (11 on Server 2008R2), the user gets prompted for credentials one time, ...
0
votes
1answer
295 views

Daloradius / Freeradius mac authentication

I setup a centos freeradius mysql with the frontend daloradius using the steps on this site http://linuxdrops.com/install-freeradius-with-web-based-management-daloradius-on-centosrhel-debian-ubuntu/ ...
0
votes
1answer
58 views

AuthDBDUserPWQuery with multiply tables

I have a MySQL authentication for SVN server. Configuration file looks like this: <Location /svn/project> ... AuthDBDUserPWQuery "SELECT Password FROM SVNUsers WHERE Nickname = %s" ...
1
vote
1answer
420 views

Squid3 - Cannot authenticate username/password with Mysql

I am testing both authentication with squid_passwd file and Mysql. This is my configuration auth_param basic program /usr/lib/squid3/basic_ncsa_auth /etc/squid3/squid_passwd # auth_param basic ...
1
vote
0answers
1k views

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up ...
2
votes
1answer
488 views

WiFi deauthentication issue

I would like to find a root of the WiFi issue we've got in our working environment. Few words about WiFi infrastructure We are using now Apple solution. Three brand-new access points from Apple ...
-1
votes
1answer
226 views

Nagios Schedule a Check on Command Line

I use Nagios Core 3.5.1. In order to skip the HTTP authentication (guest user without password could also be tedious), I turn off the Nagios authentication based on this article. (even though turning ...
1
vote
2answers
429 views

IE HTTP Kerberos issues authenticating to site on FQDN not matching AD Domain

I have a site on a corporate domain that authenticates using Kerberos auto-login from IE and Chrome just fine, as long as the DNS being used to access it falls under the AD FQDN The AD domain is not ...