A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

2
votes
2answers
3k views

pam_ldap and ldaps can't contact ldap server

I'm trying to allow authentication via LDAP on a CentOS host system. But I always get a Can't contact LDAP server error from pam_ldap. The LDAP server is pingable and authentication works perfectly ...
0
votes
1answer
625 views

Dovecot Authentication failed if trying login with @domain

When I try to test my IMAP server functionality using telnet I encounter the following error. If during the test i omit the @domain.ex everything works fine(as you can see below); a login user ...
1
vote
1answer
45 views

How to inhibit repeated checks to mod_auth_basic by mod_autoindex?

In Apache 2.4, When using both mod_autoindex and mod_auth_basic on a directory, the indexing of that directory causes mod_auth_basic to perform a password hash and lookup from scratch once for every ...
0
votes
0answers
153 views

Root and child domain authentication through one LDAP path

I have a webapp and in the web.config file, there is an LDAP path to allow AD token lookup for users to login. The app also requires users to be in a specific group to login. In my case red\appadmins ...
1
vote
0answers
28 views

Dovecot not attempting authentication

I am in the early stages of migrating an OS X mail installation (UW imapd/Exim/mbox) to a Ubuntu cloud VM using Dovecot/Exim/Maildir. I am starting simply: Exim is running fine, receiving mail and ...
1
vote
0answers
31 views

Revoking client certificate two way authentication

can we revoke a client certificate by serial (we are using mutual authentication)? we tried revoking a certificate using the certificate file but the revocation date is not set to the current date . ...
0
votes
1answer
113 views

Nginx still serving static files although website access is blocked

I have nginx installed on my centos server. I have blocked all external access to a test website I am working on. With this code. location / { auth_basic "Administrator Login"; ...
1
vote
1answer
56 views

Browser Authentication Prompt After Server Restart

Details We have an internal website. The authentication mode is windows hence it takes windows logins. It is served from two windows servers running Windows Server 2008 R2. And are connected with ...
8
votes
2answers
570 views

Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?

We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most. Thus, we are installing: a wiki (dokuwiki) ...
0
votes
1answer
59 views

Intranet AD login for External Website

Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
0
votes
0answers
41 views

SQL 2008 R2 says access denied when logging in remotely

I have an SQL 2008 R2 server and a monitoring server both on the same physical network (but different VLANs). The monitoring server is always connecting to the SQL server to run a query and check the ...
0
votes
1answer
44 views

Kerberos in production on virtual machines

At the moment I am investigating the possibility to use Kerberos as the primary authentication protocol for our cloud structure. We'll probably follow through with this idea and for the sake of HA the ...
1
vote
0answers
137 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
2
votes
0answers
107 views

Samba: Authenticate only local accounts over AD?

I have a samba server where I create all the linux accounts and corresponding SMB accounts via a application I built. I manage all the permissions for all of our shares via ACL's also using the ...
1
vote
1answer
151 views

Setting up NPS with a certificate that is valid to both AD and non-AD machines

I'm trying to setup an AD server running the NPS service so that both AD and non-AD machines see the certificate as valid when authenticating to the wireless network. I picked up a cert from GoDaddy ...
0
votes
1answer
105 views

Can't get basic plain auth to work on lighttpd win 1.4.35-1-ipv6

I simply can't get Plain Basic auth to work on lighttpd for more than one user. I have this auth.user file formatted like this: [account_1_name]:[account_1_password] ...
0
votes
0answers
53 views

Multiple Domain Authentication for app with One LDAP path

I have a forest with a root and 2 child domains. main.com child1.com child2.com I have a third party application that has a web UI for users to login to. In the config files for this application, ...
1
vote
2answers
116 views

Issue with sharp in host vars Ansible

Since # is considered as a comment in /etc/ansible/hosts I'm unable to use a password containing a sharp. [hosts] host1 ansible_ssh_user=user ansible_ssh_pass=userpass ansible_su_pass=My#Password ...
0
votes
0answers
15 views

LDAP: Extend database using referral

My company uses an off-site LDAP server to handle authentication. I'm currently working on a local VPN for my branch that needs to use the off-site LDAP to check user's usernames and passwords, but I ...
2
votes
1answer
318 views

OpenLDAP gives duplicate attributeType error

I am setting up a login node and am using openLDAP from the repository on Ubuntu 14.04 and I am running into an issue of duplicate attributeTypes. The problem seems to lie in the "gecos" field ...
-2
votes
2answers
34 views

SSH using ssh_key from a different account

Is there a way for a user to ssh as a different user using ssh_keys? For example, i have host A B and C. User X SSHes from A to B as himself ( A -- as X --> B ) Now the user wants to SSH to C from ...
2
votes
3answers
114 views

How to configure SSH access for key authentication for another client?

I know that if I want to configure SSH access for key authentication, I need to use the following command: ssh-keygen -b 2048 -t rsa -C “mypassphrase” I then need to copy the codes created in ...
0
votes
2answers
479 views

How to clear kerberos config

I am setting my machine as a kerberos client. I have a question on how the kerberos config file actually take effect and how to clear its effect. My experiment is as follow. Step 1, without editing ...
-3
votes
3answers
512 views

Public Key authentication fails while using the -i parameter on ssh command

I have to do public key based authentication on two Linux servers. Machine 2 (192.168.3.132) username: vfx_30 home dir: /home/vfx_30 ssh keys: /home/vfx_30/.ssh/id_rsa /home/vfx_30/.ssh/id_rsa.pub ...
-1
votes
1answer
626 views

Squid Proxy does not prompt for authentication and denies every request

I have a problem with a squid proxy that always denies requests. The bad part is, i never get to see an authentication pop-up... Squid is running on an Ubuntu 14.04 vserver. I'll provide you my ...
-1
votes
2answers
190 views

Add ssh public key to group instead of users on centos 6.5

I am a newbie to linux administration. I have a box with centos 6.5 x64. Ive been configuring ssh access via public/private key. Ive been wondering if I could add the public key to a user group ...
-2
votes
1answer
333 views

configure dovecot 10-auth.conf

i'm going to setup mail server according this guide : https://workaround.org/ispmail/wheezy on setting up dovecot part 10-auth.conf it's says change auth_mechanisms = plain to auth_mechanisms = ...
-3
votes
1answer
632 views

Psql uses .pgpass file however pg_dump does not, and it also does not connect using the correct password [closed]

Using the following command: % pg_dump -h postgres.cs.host.ca -p 5433 -n _cscf_subscription -Fc -f ~/old.dump odyssey_prod Password: pg_dump: [archiver (db)] connection to database "cs-rsub" failed: ...
0
votes
1answer
94 views

Connecting with PostgreSQL 9.1 using the Ubuntu machine user and peer authentication method

I want to connect to my local installation of PostgreSQL 9.1 using my machine user (who is vagrant). So, after reading PostgreSQL documentation, I thought I just needed to: Add username map in ...
1
vote
0answers
276 views

Apache basic auth with IP whitelist

I am trying to add some kind of IP whitelist to one of my HTTP Basic Auth protected directories. I am using Apache 2.2.15 on CentOS 6.5 but I also tried with Apache 2.2.22 on Ubuntu 10.04. I looked ...
0
votes
0answers
69 views

Percona MySQL LDAP authentication fails through .NET MySQL connector

Basically, MySQL uses its native authentication, where usernames and passwords are stored in mysql.user table. MySQL authenticates user against the credentials stored in mysql.user table. Our ...
0
votes
1answer
59 views

Solution for SSL client certificates with user self service

I'm administrating a linux-based small business network. User information is centrally stored in an OpenLDAP directory. There is an existing CA which is currently used to sign server certificates. It ...
0
votes
1answer
430 views

Exim4 require TLS for all hosts but localhost

As my webmailer does not support STARTTLS and I want to enable relaying for everyone at localhost, I would like to have Exim advertise AUTH PLAIN and LOGIN only without TLS if the connection was ...
0
votes
1answer
73 views

Should I still disable root if I disable password authentication and enable only key authentication?

I'm new to the linux world and I've been reading a few tutorials on security. I've seen some questions on StackExchange tackling this subject, but from what I've seen, none of the answers clarified ...
0
votes
2answers
181 views

How to check the connection to remote server with a digital certificate (client authentication)

I got a digital certificate with extensions for server and client authentication and a private key. Now I want to connect to a remote server (REST web services) which should accept my requests ...
0
votes
0answers
143 views

pam-mysql: “Failed password” when using hash methods

today I installed mysql-pam in order to store user credentials for ssh logins in a mysql database. At first I set users.password_crypt = 0, which means that plain passwords are saved in the db. After ...
0
votes
0answers
18 views

<Directory /> doesn't (always) apply its settings to NFS-mounted home directories

Two different machines, a production and a test machine, are running CentOS 6, with the CentOS Apache package installed, and both version 2.2.15. The configuration on the test machine is an exact ...
0
votes
0answers
221 views

Digest authentication keeps asking for credentials

I'm attempting to use Digest Authentication in IIS (7.5 on Server2008R2) - all other authentication options are disabled. In IE (11 on Server 2008R2), the user gets prompted for credentials one time, ...
0
votes
1answer
361 views

Daloradius / Freeradius mac authentication

I setup a centos freeradius mysql with the frontend daloradius using the steps on this site http://linuxdrops.com/install-freeradius-with-web-based-management-daloradius-on-centosrhel-debian-ubuntu/ ...
0
votes
1answer
63 views

AuthDBDUserPWQuery with multiply tables

I have a MySQL authentication for SVN server. Configuration file looks like this: <Location /svn/project> ... AuthDBDUserPWQuery "SELECT Password FROM SVNUsers WHERE Nickname = %s" ...
1
vote
1answer
498 views

Squid3 - Cannot authenticate username/password with Mysql

I am testing both authentication with squid_passwd file and Mysql. This is my configuration auth_param basic program /usr/lib/squid3/basic_ncsa_auth /etc/squid3/squid_passwd # auth_param basic ...
1
vote
0answers
1k views

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up ...
2
votes
1answer
597 views

WiFi deauthentication issue

I would like to find a root of the WiFi issue we've got in our working environment. Few words about WiFi infrastructure We are using now Apple solution. Three brand-new access points from Apple ...
-1
votes
1answer
269 views

Nagios Schedule a Check on Command Line

I use Nagios Core 3.5.1. In order to skip the HTTP authentication (guest user without password could also be tedious), I turn off the Nagios authentication based on this article. (even though turning ...
1
vote
2answers
493 views

IE HTTP Kerberos issues authenticating to site on FQDN not matching AD Domain

I have a site on a corporate domain that authenticates using Kerberos auto-login from IE and Chrome just fine, as long as the DNS being used to access it falls under the AD FQDN The AD domain is not ...
0
votes
1answer
197 views

IIS 7.5: In the “Connect As” dialog, can't set “Specific user” to the application pool identity?

I have a bunch of websites and applications with their own app pools, all using AppPoolIdentity. App pool identities are nice because you can set file system permissions and add SQL Server users based ...
0
votes
0answers
196 views

Dante multiple proxies with separate authentication

I have been trying to set up Dante on Debian to create a Socks 5 proxy. So far I have only managed to get it to work with the root user, and would like to know how I can have multiple proxies each ...
3
votes
0answers
297 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
4
votes
3answers
871 views

If I join esxi to an Active Directory domain, how does it choose which DC to authenticate to?

I'm familiar to vSphere and large installations, and not at all familiar with the free products. Topology & configuration We have some branch offices that use ESXi and have a DC resident on ...
0
votes
0answers
372 views

linux user to authenticate with local samba4 ldap instead of shadow file

I have tried to use sssd to bind user authentication with samba4 ldap. but seeems like is not working. (method 2). example at ...