A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
40 views

Why client with Basic auth cannot work via ISA proxy server

Client application supports only Basic authentication When client application runs from machine in the same domain with the ISA - it's Ok. When client application runs from machine that not belongs ...
1
vote
0answers
168 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
0
votes
1answer
28 views

connection timing out using ssh - “steps to take”?

I can ssh to the server using another machine with an ecdsa key, and that is set up just fine. I generated an ecdsa key on another machine and did a cat of the ecdsa public key to ...
0
votes
0answers
112 views

Authentication problems with cyrus murder

I'm trying to use Cyrus Murder but I have an error which I fail to detect the cause. I have: 1 backend. 1 frontend that is also a mupdate. I have installed the Thunderbird 17.0.8 fronted to test. ...
3
votes
0answers
87 views

NIS client doesn't see group names

I have added a user to libvirt (id = 504) group on NIS server. On the client when I do group <user>, I get <user> groups: cannot find name for group ID 504 What should I do to get my ...
0
votes
0answers
15 views

Combining Location and Directory with BasicAuth

I have set up some basic auth on a site, which is working fine. I get prompted to authorise for all requests except to filea or fileb. <Directory "/var/www/vhosts/domain.com/public"> ...
0
votes
1answer
109 views

windows 2008 R2 add another local administrator account without knowing administrator password

I have physical access to a windows 2008 R2 server, I am trying to add a second local administrator account without knowing the original administrator password. It's important that the original ...
3
votes
2answers
750 views

Apache basic auth for a particular URL

I have a site in production that I want to modify (translate from French to English). The modified part will be placed in the domain.com/en URL location and I want to protect only this part with a ...
0
votes
1answer
318 views

LDAP userPassword only works with plaintext

I have setup openLDAP server on an ubuntu machine. I am trying to test user authentication, but am running into a problem. If, in ldap, the userPassword contains a plaintext password, authentication ...
0
votes
1answer
86 views

Alfresco authentication chain for (MIT) Kerberos only? (no LDAP, no AD)

The Alfresco documentation seems to consider only LDAP or Active Directory cases. In my case, all users are in MIT Kerberos, but I don't use LDAP nor Active Directory. What authentication chain ...
0
votes
1answer
404 views

“getent passwd” enumerates users, “su <username>” fails

I have an LDAP server with two BDB backends. The user accounts are split between the two backends. Backend A has a referral object to Backend B. I have tried to setup LDAP client authentication on ...
1
vote
2answers
328 views

VPN to other domain cause local domain authentication stop to work

I have a local domain (let's call it mycorp.local). On one computer, I setup a VPN connexion to a remote domain (let's suppose it's DNS suffix is remote.local). As soon as I establish the remote ...
2
votes
1answer
115 views

What would cause a user to change userid on login?

I'm trying to diagnose a problem on a CentOS machine in a corporate environment. It's a box someone else configured before leaving the company. The issue is that when we su to the user gitlab, we're ...
0
votes
0answers
102 views

Setting up redis with docker

I have setup a basic redis image based on the following instructions: http://docs.docker.io/en/latest/examples/running_redis_service/ With my snapshot I have also edited the redis.conf file with ...
0
votes
1answer
104 views

After cert replacement, Apache servers on Centos can't ldaps auth

I run a bunch of servers, some run Ubuntu 12.04, and some run Centos 6.3 . Recently, the self-signed SSL certificate on my ldap server expired, so I generated a new one, and distributed it to all the ...
2
votes
1answer
47 views

SSL Client Authentication

I currently have server SSL in place so that clients have a secure connection to my web server. I am looking to implement client SSL certificates IN ADDITION TO regular username/password login, but ...
1
vote
2answers
264 views

SSH Host-based authentication: How can SSH client force to use given key location

Linux man page on ssh say about host based authentication works as SSH server must be able to verify the client's host key (see the description of /etc/ssh/ssh_known_hosts and ~/.ssh/known_hosts, ...
2
votes
1answer
287 views

How can I limit failed sasl2/pam_mysql login retries?

I have Postfix setup serving multiple virtual domains on a CentOS box - and all works as expected. Client's login are authenticated through sasl2 (saslauthd) and pam_mysql. And when a login attempt ...
0
votes
0answers
132 views

Authentication issue in SIP server

I am able to communicate with intranet SIP server and able to perform text chat / video & audio chat without issues. but it did not work at all when i moved the same setup to public domain on ...
0
votes
2answers
1k views

Can't add local user on system using ldap auth for samba [closed]

Trying to add a local user to a CentOS 6.3 system that is using ldap for Samba authentication, but being stymied by the user's existing entry in ldap. [root@samba ~]# adduser wchandy adduser: user ...
0
votes
1answer
112 views

LDAP queries for local users

Recently, in the company where I work, we have had a general system crash and we are figuring out the causes. Our machines are configured for LDAP authentication plus some local users in some of them. ...
1
vote
0answers
338 views

Redirect user on SSL authentication failure

I configured a VirtualHost with SSL enabled and SSL client authentication, all of that on apache2 2.2.8 (ubuntu server 8.04). All SSL certificates (CA, Server certificate, Client certificate, CRL) ...
2
votes
1answer
33 views

postfix HOLD Recieved non authenticated

i'm wondering if is possibile to put on hold emails that not have authenticated in Recieved header . i've tryed with a simple negate operazione with pcre !/^Received:.*Authenticated*/ HOLD but ...
3
votes
1answer
161 views

Seamless authentication for corporate users on an external website

Background: Global company with multiple locations and disparate networks and IT systems. The majority of the networks are Windows based and running Active Directory and some are connected via ADFS. ...
0
votes
1answer
3k views

Puppet server hostname does not match certificate - can't authenticate. How to disable puppet authentication? [duplicate]

I am having issues with getting the puppet agent to authenticate the master. On the agent, I first did sudo puppet agent --test info: Creating a new SSL key for m-agent-2 info: Caching certificate ...
3
votes
1answer
213 views

Current Best Practice for using AD to auth Linux (2013)

As far as I'm aware, there are 3 (common) ways to use Active Directory as the Authentication and Authorization for Linux hosts: LDAP Kerberos Samba/Winbind Is there a (current) consensus on which ...
1
vote
1answer
165 views

Prevent Windows from passing login credentials to Samba server

When I'm trying to access some share from windows explorer, it's sending my current login/password to remote server and im getting access denied, because, for example, my local and remote usernames ...
0
votes
0answers
32 views

How to configure AccessPoints/Switches for PAP,CHAP and other methods of Authentication?

Hope some one could shed some light here. TACACS+ Server gives option of User Authentication by following methods: 1. ASCII 2. PAP 3. CHAP 4. MSCHAP 5. ARAP But how does the server know which one to ...
2
votes
0answers
146 views

How do I enable digest auth for Jetty fronting Elastic Search

We've gotten Jetty running the HTTP front end of Elastic Search with BASIC authentication. We would like to use DIGEST authentication instead, but the Jetty documentation is hard to reconcile with the ...
0
votes
1answer
265 views

Unable to authentication after manual edit of /etc/passwd and /etc/shadow

On Scientific Linux 6.4 ( like CentOs6.4) When configuring a new server I have manually edited the file /etc/shadow so as to copy the password. Now I can only log in as user root and I can not use ...
0
votes
2answers
207 views

PAM LDAP configuration for non-local user authentication

I have a requirement to allow non-local user accounts to be logged in via LDAP authentication. Meaning, the user that is trying to login is allowed access, if the user account exists in LDAP server ...
2
votes
2answers
128 views

What tech. is required to build a firewall that dynamically opens ports after users authenticate through a web form against Active Directory?

I need to expose via Internet an insecure internal web app that can't be modified to be made intrinsically more secure. The most common solution for this problem is to access the web app through VPN. ...
1
vote
1answer
493 views

Can't authenticate users on Windows Server 2012 shares

I've been meddling for a while with a Windows Server 2012 Datacenter copy my university provided me with (via MSDN Academy Alliance) but I'm having an issue with setting up a share with NTFS ...
-2
votes
1answer
72 views

Sendmail relay without authentication

I have an issue:when the email is sent from an address other than 127.0.0.1 the authorization is required even if ip is on the same machine. How can I avoid to make request authorization for a given ...
0
votes
1answer
111 views

Difference to connect to LDAP by BindDn or by username

We have an application which can only connect to a LDAP (AD) by using the BindDn. When I try to connect from the server which host the application using a simple LDAP client (LDAPAdmin) it connects ...
1
vote
1answer
115 views

How can I configure Cyrus IMAP to submit a default realm to SASL?

I have configured Postfix to work with SASL using plain text, where the former automatically submits a default realm to the latter when requesting authentication. Assuming the domain name is ...
3
votes
3answers
141 views

Is there a command line two-factor authentication verification code generator?

I manage a server with two-factor authentication. I have to use the Google Authenticator iPhone app to get the 6-digit verification code to enter after entering the normal server password. The setup ...
2
votes
2answers
1k views

iptables, allow access from certain MAC addresses

Presently, I limit which clients can access my server by using IP addresses via iptables, only approved IP addresses can connect. However, the problem with this is if a client is on a laptop and goes ...
0
votes
1answer
109 views

Postfix SASL SMTP authentication

I installed Postfix & Dovecot on Debian. Then I tried using SMTP authentication according to this guide: http://www.postfix.org/SASL_README.html Unfortunately the following test tails: telnet ...
2
votes
1answer
534 views

CRM 2011 - outlook connector always asking for authentication

In my organization everyone uses the Outlook 2010 connector to access the CRM. After the UR13 update, but not right away, some clients began experiencing a situation where the Outlook connector asks ...
0
votes
1answer
47 views

Authenticate ftp users on mysql through secure channel

I've to face this problem regarding security: some sFTP servers (proftpd) in a dmz that need to authenticate users against a mysql (native cluster|percona cluster|MariaDB cluster) through a secure ...
2
votes
0answers
51 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
4
votes
2answers
321 views

backup and restoration of a freeipa infrastructure

I'm finding the documentation on ipa server backup and restoration sadly lacking, and being so centrally critical it's not something i'm really happy about shooting in the dark with - could some kind ...
0
votes
1answer
38 views

Kerberos authentication between 2 applications

We work on a server 2003 and server 2008 R2 enviroment. I'm familiar with the basic usage of the Kerberos protocol where the protocol authenticates a client when he tries to use a shared resource ...
2
votes
2answers
58 views

Does LDAP fit the role of a user database for an application?

I (my company) run a webservice that integrates pieces of few entreprisey-level software. Most of them offer different type of authentication but all offers at least LDAP. I was wondering if storing ...
-3
votes
1answer
67 views

Guest access through hotspots (proxies with a ToS to accept) don't consistently work [closed]

I've noticed that certain websites (Facebook) don't reliably initiate a hotspot login when compared to others (google.com). In other words, when a user connects for the first time to a hotspot they ...
1
vote
1answer
83 views

sql server 2008 express, how login as admin

I am pretty newbie on sqlserver. I just want to logon by Management Studio on a sqlserver just for backup a db. But it seems that I haven't enough permissions because I am guest. Anyone could explain ...
1
vote
0answers
78 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
6
votes
3answers
143 views

Cisco Dot1x Port Authentication - VLAN selected based on what domain the user logs on to on computer?

Currently my company has been bought out by another. Due to this, another two companies users will be migrating into our office. It would be super handy if we could have the vlan chosen for the user ...
2
votes
1answer
144 views

How to enable two factor authentication

I am using CentOS 6.3 and want to enable ssh RADIUS authentication. Right now my server is directly authenticated with RADIUS server. I want the server to authenticate with unix credentials first and ...