A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

1
vote
1answer
453 views

Enable LDAP client in SLES 12 from command line

I want to enable / configure the LDAP client in SLES 12 without the use of the yast GUI. Before 12 (or 11 sp3 if I remember well) I used to do it with: yast2 ldap configure server="myserver" base="...
1
vote
2answers
60 views

backup postgres database password issue

I've got a postgres database that I want to backup regularly. For that, I'd like to use the automated backup script here Usually I to proceed admin tasks I use these command: > sudo -i -u ...
3
votes
3answers
573 views

Unable to access shared folder using hostname

I'm currently having issues accessing shared folders on a Windows Server. The Architecture: Flat standalone network with 2 Windows Servers (2008 R2 SP1) and 2 Windows Clients (Windows 7 SP1 64bit). ...
0
votes
2answers
302 views

permission denied on authorized_keys

I am attempting to set up SFTP for chrooted users, and use SSH public key authentication. In this example I'll be working with the dummy user "globocorp" who's a member of "sftpusers". This user is ...
0
votes
1answer
38 views

Can I convert an internal user into LDAP user in Foreman?

I've got several users set up in Foreman 1.9, and I've just enabled LDAP authentication. I can get a new user logged in, but lots of machines are owned by older users, and there is editing history for ...
1
vote
1answer
191 views

How can I get sshd to tell me why it's failing public key authentications? [closed]

I'm using OpenSSH 6.9p1 (on Lubuntu) as my SSH server. When trying to connect to it (using an SSH client in Cygwin), I keep being reverted to password authentication, despite having properly generated ...
1
vote
3answers
40 views

How can I verify which DC my ubuntu server is authenticating to?

I have some intermittent authentication issues on my Ubuntu 15.04 servers. I have asked about this issue directly here: Kerberos encryption type error My Windows DCs are mixed versions for now (we're ...
0
votes
0answers
54 views

using FTP over proxy Squid with NTLM auth

I have a Squid 2.7 STABLE9 proxy on a Debian and I have allow 80, 443 & 21 port to my user (user have windows PC). When a user go throught my proxy, he have to authenticate himself with NTLM ...
1
vote
1answer
328 views

Error: KDC has no support for encryption type

I have intermittent authentication issues on my ubuntu 15.04 servers. Periodically, authentication will just stop working. Eventually it will start working again on its own. Or, if I restart both smbd ...
0
votes
2answers
95 views

Not getting credential prompt on Win Server 2012 for Ubuntu Samba share

I set up a share in Ubuntu with read/write permissions using system-config-samba. I configured my user to also be a smbuser. On all of my other systems (2 Win10, 1 Win8, 1 Ubuntu) I am prompted to ...
1
vote
0answers
166 views

Tomcat 8, Kerberos authentication

I'm configuring kerberos for a tomcat server. Before I call the web application support company I would like to know if I'm doing the correct steps since it's my first time. The domain has 2 zones, ...
0
votes
0answers
27 views

Public page directory inside authenticated WebDAV directory

I am trying to set up a web server that treats requests to http://my.domain as requests to http://my.domain/dav/pub/http. /dav should require authentication for both read and write, and /dav/pub ...
1
vote
1answer
175 views

iControl REST Remote Authentication BIG-IP v12

I have an issue while trying to use remote authentication on iControl REST API. I have tried to configure remote authentication using the following article Configuring Remote User Authentication and ...
1
vote
0answers
51 views

How to add authentication to the proxy forward trafficserver

Sorry as I add authentication to a server proxy for trafficserver already investigate and is loading the plugin basic-auth.c I did according to this tutorial https://docs.trafficserver.apache.org/en/4....
0
votes
0answers
105 views

Apache & Radius & OTP

We have a Radius Server which authenticates our Users for our VPN solution. It additionally uses OTPs which are sent to the mobile phone. Im trying to find a way to use Radius Auth & OTP to ...
0
votes
0answers
6 views

Cisco IPSec OSX multiple user accounts

Is it possible to force a Cisco IPSec Connection to prompt for UN/PW before login on OSX 10.10? I want to store the VPN Connection on the OSX machine, but I want users of that device to enter their ...
0
votes
1answer
3k views

Samba NT_STATUS_ACCESS_DENIED error on Ubuntu

I set up a Samba server on Ubuntu. Everything goes fine when I allow guest access, but when I try to setup a configuration for a specific user, I receive the error below: $ smbclient //x.x.x.x/john -...
0
votes
1answer
67 views

Can't connect to FTP with basic auth

We cloned a machine and are trying to set up our FTP server on a new domain. The FTP server is very basic. It is set up to allow basic auth, no anonymous, and allows read and write to all users to ...
3
votes
1answer
156 views

Proxy Kerberos Authentication - Kerberos Service Ticket Issues

I have a BlueCoat ProxySG that is able to authenticate users via Kerberos. It is set to "Proxy" so it requires user authentication for each new TCP connection. Users have a Single Sign On and their ...
1
vote
0answers
40 views

IIS Directory Browsing and forms authentication setting permissions

I have a website in IIS with directory browsing enabled (this is also an ftp site). I have recently switched to forms authentication instead of basic authentication. The root folder is accessible to ...
1
vote
1answer
138 views

NTLM on a Load Balanced Environment

We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos ...
0
votes
0answers
132 views

What is Windows Onex Credential Provider?

My application is conflicting with Windows Onex Credential Provider. This problem appears on remote user's computer. The user cannot bring his computer to me to research this problem. So I need to ...
0
votes
0answers
82 views

PAM - Ignore local user, if LDAP-connection works

I have configured some SLED10SP1 (not allowed to update) machines to use LDAP for user authentication. Because SLED10 doesn't have official packages for pam_ccreds or sssd, I have to find a way to ...
0
votes
0answers
54 views

why a user account with /bin/false shell in directory server is asking for membership in groups?

Firstly, we use ldap for user authentication. I have accidentally deleted a person account(his loginShell is /bin/false)from our directory server(sun DS7) running on red hat enterprise linux, although ...
0
votes
0answers
289 views

Jenkins User Credentials Not Showing In Project

So I have Jenkins-CI running with the plugins: Credentials Credentials Binding Git First what I did in order to authenticate Git with the remote repository, is I added credentials to the server to ...
1
vote
0answers
47 views

Subversion SSPI Authentication

If you want to use SSPI authentication for subversion served by Apache, your users are in multiple domains and users from multiple domains are allowed access to specific repositories but not all ...
0
votes
0answers
16 views

Can Tomcat handle other website basic digest authentication?

I have a SOAP WebService being served with Tomcat, and I want to make a call to another WebService which is protected by a basic digest authentication. Is there any way that Tomcat can kinda ...
0
votes
0answers
284 views

Users need several tries to SSH to a system

It is taking several attempts for users to SSH to several 64-bit Ubuntu machines which are using sssd to authenticate. The following will happen from 0-6 times in a row before the user is allowed to ...
0
votes
1answer
205 views

Disable authentication for OPTIONS requests in Tomcat

I have an API protected by basic auth. When I want to make AJAX requests against the API, the browser send an OPTIONS request which doesn't carry the Authorization header so it gets rejected and thus ...
0
votes
0answers
65 views

Download AD user certificates using PBIS in ubuntu

I am migrating from Centrify to PBIS (likewise-open) tool to join to Active Directory domain from my ubuntu machine. I would like to know if there is some command to download user certificates from AD ...
0
votes
1answer
70 views

Not able to “Run As” any application on a server in the TRUSTING domain using an account from the TRUSTED domain

There are two domains: "dom1" and "dom2". "dom1" is the trusting domain. "dom2" is the trusted domain. I.e. there is a one way trust where domain "dom1" trusts domain "dom2". Servers joined to ...
1
vote
1answer
271 views

Java application authentication using Active Directory

I am working on a third party Java application for which I need to authenticate its users using Active Directory. This application is hosted on RHEL 6.5, and uses LDAP to authenticate with Windows ...
0
votes
2answers
33 views

How do I know if a specific cisco router and IOS support a certain feature?

The reason I'm asking is I'm trying to set up a Cisco Catalyst 2800 series router as an 802.1x supplicant. According to this document, http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/...
0
votes
1answer
37 views

Auth with roles management through apache2 reverse-proxy

Initially posted on SO ,but I guess it belongs more here. Suggestions, comments, and ideally solutions, would be welcome ! (btw, I'll delete SO Thread if it was the wrong place) I need to set-up a ...
0
votes
1answer
213 views

TACACS+ configuration: how to receive priv-lvl value?

I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL). I tried with ...
2
votes
1answer
62 views

How does SSL client authentication work with changing IP address?

From what I understand about SSL authentication, the FQDN of the party I trust has to match the common name or one of the subject alternate names. Does this apply for client certificates as well? So ...
1
vote
1answer
252 views

How can I configure openLDAP to lookup userPassword via FreeRadius?

I am running Ubuntu 12.04 and OpenLDAP 2.4.28-1.1ubuntu4.5. I have users populated in LDAP with userPassword attribute being an {SHA1} hash. Users are able to login over SSH and authenticate to web ...
1
vote
1answer
196 views

Windows Auth in IIS does not work when browsing to the website on the server running IIS using a URL with an A record pointing to the IIS server

I have a website that runs on IIS that uses windows authentication. On the website level, under 'Authentication' I have only Windows Authentication (NTLM only as a provider) enabled. On the virtual ...
0
votes
0answers
86 views

Passing X509 client certificate to CA SiteMinder as a header

I am currently building an environment where our requirements state that we need to terminate SSL on a NetScaler before it is forwarded to one of several IBM HTTP Servers with the SiteMinder module. ...
0
votes
1answer
45 views

login failure on Ubuntu 12.03 when user exists and correct password entered

I manage an IT lab for students.I am experiencing this weird problem on some of our computers in the lab that i can login on some of the computers and can't login on some of the computers. These ...
1
vote
1answer
216 views

How to make Apache trust a client certificate using an unknown CA, without validating the CA

I am in the following situation. I need to set up a 2-way integration with an external system. The admin of the external system required me to send two CSRs, one to be used to generate a client ...
2
votes
1answer
780 views

What does dis=NONE mean in an email's Authentication-Results header?

The following is from an email I received recently: Authentication-Results: mx.google.com; spf=neutral; dkim=pass header.i=@yahoo.com; dmarc=pass (p=REJECT dis=NONE) header.from=...
0
votes
0answers
54 views

How to secure a service with Mutual SSL Authentication and Intermediary CA?

Given: A working SSL mutual authentication setup (a WCF service hosted in IIS) No Intermediary CA In the current setup any client in the world having a certificate signed be one of the well known ...
0
votes
1answer
195 views

FreeIPA ssh auth not working remotle with .k5login file

I cant login to my root and any other account which im not owner with kerberos and ~/.k5login (ksu is working). Here is presentation of problem: root@gwhost:~# ssh user@freeipa01 user@freeipa01's ...
0
votes
1answer
74 views

Truncate Basic authentication username and password in Apache proxy

We need to proxy a request to a server. The sender has an autogenerated username and password, and will use basic authentication. We can't change these how these are generated by the sender. The ...
1
vote
0answers
24 views

Best practices for authentication domains

We are deploying web applications that require username/password logins. We are also managing the infrastructure that supports the web applications. I have researched and have been unable to find any ...
2
votes
1answer
90 views

Can I use a proxy to secure elasticsearch?

I have deployed an open source public web service (elasticsearch) on Ubuntu. Problem is - no security at all (only if you pay). I've researched a bit about blocking ports only to internal requests ...
0
votes
1answer
1k views

SSSD & LDAP authentication

I’m currently working on deploying openldap and SSSD for authentication. When I try to id a user that is stored within ldap I get the response no such user. The user has been added to LDAP correctly ...
0
votes
1answer
96 views

Pass authentication from IIS to JBoss

I am using AJP to redirect users from IIS 8 to a JBOSS (EAP 6) site and relay the authentication details (windows integrated authentication). On JBOSS 5 I could use <connector name="ajp" ...
0
votes
1answer
165 views

Track down source of event 4771: Kerberos pre-authentication failed

Some process on a remote server is generating failed log-on attempts for a specific user account. I want to know what process it is. The account in question started generating these bad password ...