A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
2answers
743 views

Forward proxy user authentication does not work

I have got a simple forward proxy that needs to have user authentication and a whitelist of IP-adresses. I have created the vhost below: ProxyRequests On ProxyVia On <Proxy xx.xxx.xx.xxx:8888> ...
-1
votes
2answers
332 views

The Cisco VPN AuthType explained

I've been having trouble finding resources about the AuthType property which appears in many Cisco VPN configurations. In every example I can find, it's set to AuthType=1, but I don't know what other ...
0
votes
1answer
42 views

Is it possible to configure a Linux server to use more than one LDAP target?

We have an environment that we are tasked with managing while also giving access to projects that run the applications on the servers. Some of those projects have stood up LDAP for authenticating ...
2
votes
1answer
32 views

Apache Authorization for multiple pages for different users

I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong /var/www/application/user1/user1.html ...
5
votes
4answers
92 views

sshd logging attempts to login without a private key

On my VPS, running Debian 7, I have ssh enabled on the default port 22 with only private key authentication enabled, all other ports are filtered with iptables. I am frequently getting login attempts ...
0
votes
0answers
847 views

Load testing HTTPS with Siege (open auth)

I am trying to load test our new website with siege. It is currently behind basic auth. I have edited my .siegerc file to include the right username and password (I've checked many times that it is ...
1
vote
1answer
83 views

limit user access in multiple RODC

I have a RODC and a RWDC.i prepopulate some password on RODC cache database. i already read this article How’s User Authentication Working In A Site With A RODC? I want to limit user access in ...
0
votes
0answers
83 views

User using our client to authenticate with our servers are met with the 4XX errors

I am currently debugging an issue with one user unable to communicate with our auth servers. This issue is important to us because it's one user, which likely could stem to more users as we grow. ...
2
votes
1answer
83 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
1
vote
1answer
1k views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
0
votes
1answer
241 views

Immediate logout after login

I have copied VM with Red Hat 6.4 in VMware vSphere Client, move it to another network and change configs for connecting to ldap servers. And now I have a problem with logging procedure through LDAP. ...
1
vote
2answers
518 views

Allow outgoing mail without authentication in MS Exchange

We have a legacy application that needs to send notification email to users using SMTP. It runs on a dedicated server with static IP. It has configuration for SMTP USer and SMTP Server IP, but no ...
0
votes
1answer
53 views

POSTFIX auth can't get logged in

I try to setup my postfix smtp with sasl auth. It seems to be working when I check it with telnet on the local server. ouput: # telnet mail.domain.tld smtp Trying 37.34.52.199... Connected to ...
2
votes
1answer
3k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
1
vote
1answer
718 views

Exim4 SMTP server allows unauthenticated users to send emails

I use Debian 7.x amd64 + Exim 4.82 on a dedicated server, I also have a working SMTP server on a shared hosting. I would like to setup an SMTP on my VPS that will have some special delivery ...
0
votes
1answer
46 views

Authentication for SIP

I am reading about authentication protocols for SIP. I found that all protocols transfer the id/Username during the mutual authentication phase, directly with the message. Is it necessary to have the ...
1
vote
0answers
73 views

Web App login redirecting to homepage on AWS Elastic Beanstalk

I've hosted my application on AWS Elastic Beanstalk. The application behaves itself in a local environment and shared hosting environment, but when on AWS it refuses to login. Instead it redirects ...
2
votes
1answer
329 views

Git github not working with google authenticator OSX

So I had git running on my computer just fine. My password was saved with the osxkeychain thingy and everything ran smoothly. Today I decided I should be safe and enable google authenticator 2-step ...
0
votes
1answer
924 views

IIS7 - Restrict access to an intranet site to a specific group of users

I have an ASP.NET site running in IIS7 on a local intranet. I want to restrict access to this site to a specific group of users. I think I should be able to do this by using Windows Authentication ...
0
votes
0answers
56 views

Tomcat container managed global security and second authentication in webapp

I like to secure all webapps deployed to Tomcat with a single (form based) login. Hence I successfully configured a security-constraint in Tomcat's conf/web.xml with the url-pattern /*. User ...
1
vote
2answers
44 views

Authentication / Encryption methods for distributed nodes?

I've got a project that will see a bunch of nodes [Raspberry Pis] being distributed to various geographically distributed clients. Naturally, I am wanting to deploy an authentication / encryption ...
2
votes
0answers
60 views

Juniper SSG-5 different vlans authentication

In my network infrastructur I have 2 companies right now. Every company has it own vlan. For example: Company A 192.168.100.0/24 Company B 192.168.101.0/24 I want to use a shared vlan for all ...
0
votes
1answer
449 views

Opscenter 4.0.2 and Cassandra 2.0.4 with SSL and Auth : agent can't connect

I setup cassandra with inter-node SSL and client-to-server SSL and basic password auth. No problem using cqlsh or python to connect to cassandra with any certificate as certificate_validation is ...
2
votes
2answers
1k views

NPS - RADIUS - Active Directory Authentication

Is it possible to use NPS RADIUS as an intermediary between an application that only supports RADIUS authentication and an active directory server which is used for authentication across the network? ...
1
vote
1answer
31 views

Apache Authentication: Wrong ErrorDocument after user provided wrong credentials and canceled afterwards

We've configured Apache HTTPd to use Basic Authentication Serve a custom error document Now, the user gets different results, when canceling the authentication in the first step or after ...
3
votes
2answers
364 views

Mongo Sharding - Config Server and Mongo Authentication

I am needing to shard a database fairly soon, and am unclear on what the best practice is for enabling authentication on the mongos and config servers. I would like to have everything be secured with ...
0
votes
1answer
380 views

Authentication to Squid proxy with a RADIUS-authenticated client

I want to set up a wireless environment where WPA2-Enterprise is used for authentication to a FreeRADIUS server (using EAP-TTLS or PEAP), and the wireless client is seamlessly routed through and ...
0
votes
0answers
435 views

Netatalk authentication randomly fails over WiFi

Background info: I have an Ubuntu 12.04 server on which I have Samba (v3.6.3) and Netatalk (v3.1.0) installed. I use TimeMachine on my Mac to backup to the Ubuntu server over AFP provided by ...
3
votes
3answers
5k views

How to troubleshoot Cisco VPN Client Authentication Error 413?

I'm a software developer contractor, and I've been given Cisco VPN access to a customer's network. It's a typical set up, using an RSA SecureID soft token, and I'm successfully able to connect ...
0
votes
0answers
9 views

Limit esmtp authentication on courier mailserver to certain IP addresses

I would like to limit authentication for users outside of our company network. It is possible to block authentication based on networks or by selected users? Thank you for any tips.
2
votes
2answers
148 views

SSH access for hundreds of thousands of users

I need to setup a solution similar to GitHub, where users can SSH to their git repository. This should scale for hundreds of thousands of users, so my idea is to use a distributed filesystem for the ...
2
votes
1answer
153 views

What is the difference between IIS and non-IIS Client Certificate Mapping Authentication

I want to enable certificate based authentication on my Windows 2012 Server. I see two different types of authentication possible: Client Certificate Mapping Authentication IIS Client Certificate ...
4
votes
2answers
218 views

Which field to use when authenticating against Active Directory?

Active Directory user objects include a number of fields that can be considered an identifier. The following lists some of these with their label in ADUC and their attribute name: Full Name - cn ? ...
1
vote
1answer
689 views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
1
vote
0answers
155 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
2
votes
1answer
2k views

How to use Calling-Station-Id on a per user basis in freeRADIUS?

I am trying to limit every user to a small set of Mac-IDs in RADIUS, by directly including the appropriate information in the users file. It would be acceptable even if every user was limited to one ...
1
vote
0answers
68 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
0
votes
0answers
129 views

WLAN:Deauth: [MAC] STA reason code=2

I use WIFI temperature loggers which are working just fine. However, at one WLAN Access Point they can't connect and get error messages. Here's what I believe to be relevant information from the ...
0
votes
1answer
330 views

psremoting and credssp authentication to localhost

I have two machines A and B. both have: psremoting enabled, credssp enables as both client and server. from machine A I can create a new pssession to B with -Authentication credssp from machine B I ...
1
vote
0answers
670 views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
1
vote
0answers
324 views

LDAP authentication very slow on production server

We are developing a Spring MVC application which does LDAP authentication using Spring Security framework. The problem we are facing is that the authentication works just fine on our development ...
0
votes
1answer
577 views

Apache reverse proxy keeps demanding basic auth credentials

I'm configuring Apache in front of Hawtio - a Karaf-hosted JVM management console. Although Hawtio is served by Jetty and protected by Karaf's JAAS implementation, we want Apache to add Basic Auth ...
1
vote
1answer
101 views

Is it possible to authenticate MS AD users against another MS AD without a trust?

I have two Microsoft active directories, lets call them External and Internal, What I want to do is: Add users to Internal AD without password (Just save some other attributes for them). When a ...
0
votes
1answer
78 views

FTP asks for authentication on every directory change

I'm setting a virtual web test server for the company I work for. They want to access the different directories using FTP and their Linux accounts. So far, that works well. They want the ftp-root to ...
2
votes
2answers
241 views

Postfix doesn't require authentication for local emails?

I've got a Postfix/Courier mail server (Authenticated with SASL/MySQL) all according to this tutorial. I'm currently running my server on Debian 6, it is a VPS. It works well as far as I can see but I ...
-1
votes
2answers
95 views

Not able to login remotely to the custom linux box using root user credentials

I am not able to login to my custom Linux system with the root user credentials as it says access denied. I have reset the root password by logging in via the admin user. The message in the syslog ...
2
votes
1answer
751 views

Disable LDAP authentication on Ubuntu

I have an Ubuntu server that is able to authenticate users against our Domain. I can not contact the person who set this up, but I do find these packages installed: libaprtil1-ldap libldap-2.4-2 ...
1
vote
1answer
135 views

Managing Active Directory account access across multiple forests / customers

We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion. Right now, we manually create ...
2
votes
1answer
137 views

Sharing authentication data between servers in nginx

I got an http server that uses the ports 9200 and 9292 (for logstash). Since the server doesn't support authentication, I'd like to set an nginx reverse proxy to handle the authentication. This is ...
5
votes
2answers
566 views

Overriding Parameters in Previously Declared Puppet Resource

I'm attempting to rebuild nwaller's sssd puppet module to be entirely LDAP based and to be a little cleaner. In it we have a resource defined for each authentication domain of the form define ...