A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
1answer
4 views

How to authenticate to CentOS7 using LDAP if the posixAccount objectClass is unavailable?

Aim: authenticate to CentOS7 using LDAP Problems 1) User cannot be found calling ldap_search_ext with ...
-1
votes
0answers
10 views

Active Directory authentication using RADIUS

I'm trying to authenticate linux hosts using a Radius server. For that, I've used this tutorial on youtube. Problem 01: Everything is working and I can authenticate via ssh, but I can't log via user ...
1
vote
3answers
986 views

Keep getting login requests for ASP.NET app running in IIS 7.5

When I try to access an Intranet site from a client I get asked to login all the time. Then I get a 401.3 error. The site works fine locally on the server. The site has its own app pool, Managed ...
1
vote
1answer
38 views

How to work around a “logon workstations” restriction to the Domain Controller stopping authentication via LDAP

I am trying to allow users of an external linux based application server to authenticate with the service using their Active Directory credentials via LDAPS. It works well for admin accounts but fails ...
1
vote
0answers
5 views

NIS not respecting files first in nsswitch.conf

Okay, first off, I know NIS is a turd, but it's what we've got until we do a major migration next year. Today we had a NIS server outage which predictably prevents user logins. What surprised me was ...
0
votes
0answers
9 views

Setting up CORS for a specific method and url

First of all, apologies if you think this should be on stackoverflow.com - it seemed more suitable for this site but it's a bit borderline. We have a partner site, i'll call it http://bob.com. For ...
2
votes
2answers
833 views

pam_exec.so PAM module does not export variable PAM_USER as stated in the documentation

I'm trying to use the pam_exec.so PAM module to execute a script which needs to know the username/password coming from the application (OpenVPN in this case). I have a script that executes printenv ...
1
vote
0answers
12 views
+50

Merging Forms Authentication databases together

I have an ASP.Net-based system; identical copies of the site run on three different servers, all Windows 2008R2 running IIS7.5. Each site has it's own authentication database, with it's own users, ...
13
votes
5answers
6k views

How practical is it to authenticate a Linux server against AD?

We utilise both Windows and Linux server at our software development company. One of the friction points with this setup is that we don't have a single sign-on solution. Being more of a Microsoft ...
1
vote
2answers
791 views

Windows Authentication KRB5KRB_AP_ERR_MODIFIED

Let me preface by saying, I've been on this issue for about a week and a half now and I can't figure it out. I think I'm close, but every time I've thought that so far, I was wrong. I've looked at ...
5
votes
3answers
887 views

backup and restoration of a freeipa infrastructure

I'm finding the documentation on ipa server backup and restoration sadly lacking, and being so centrally critical it's not something i'm really happy about shooting in the dark with - could some kind ...
37
votes
3answers
153k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
2
votes
1answer
1k views

Linux Client Active Directory Authentication stops working when failover

I have an issue with Linux clients trying to AD authentication by targeting a DNS name (corp.example.com). I have 2 Domain Controller servers DC1(10.0.0.3/24), DC2(10.1.0.3/24) both domain controllers ...
0
votes
0answers
16 views

how to get info on failed authentication to domain - security audit?

Setup: 1 Windows Server 2012 box as Domain Controller, named DC1. 2 Windows Server 2012 R2 boxes, S1 and S2, on the same network, same config, joined to the domain. Issue: At random times, S1, S2 or ...
3
votes
1answer
38 views

How to have multiple AuthUserFile directive in proftpd.conf [on hold]

In my CentOS where CPanel is installed in proftpd.conf, I can see directive AuthUserFile /etc/proftpd/passwd.vhosts I wanted to add one more AuthUserFile directive, so Profptd uses one more file to ...
2
votes
1answer
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to NTLM enabled. When clients are not in the ...
4
votes
6answers
7k views

Can I use SSH key authentication to log into a remote system with a different username?

Suppose I have a remote system named "remotesystem", and a user account "foouser" on that system. I know that on my local system, I can generate an SSH key pair as local user "foouser", put the ...
1
vote
1answer
27 views

What authentication protocols are negotiated by HP Printers to Windows Server Shares?

I am trying to find information specifying the protocol negotiation process for newer HP printers that can perform direct scans to Windows-style shared folders - in particular, the HP 8600-series is ...
2
votes
0answers
22 views

Do not use Client Cert Auth when on local network apache2

I'm hoping someone could help me with this question... I am running an Apache 2.4.7 server on my Ubuntu 14.04 box with some public facing sites. For some of those sites I've implemented a Client Cert ...
4
votes
1answer
2k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
0
votes
0answers
6 views

Jenkins AD Auth with extended User search base

I’m trying to use a fairly large Active Directory instance to authenticate Users with Jenkins. This works quite well with the following settings: ...
2
votes
3answers
8k views

PBIS Open AD authentication stops working on ubuntu with errors: “user accout has expired” and “is your account locked?”

We have been using PowerBroker Identity Services Open to authenticate active directory users from ubuntu hosts successfully for six months. Recently AD authentication stopped working on several ...
2
votes
3answers
8k views

How to enable negotiate authentication for winrm

I have disabled negotiate authentication for the winrm service on my server by executing: winrm put winrm/config/service/Auth @{Negotiate="false"} And now I can perform any operation with winrm. I ...
1
vote
1answer
16 views

Privileges when doing sudo to another domain user

Suppose I have a corporate domain mydomain using MS Active Directory. In the domain I have the users myuser and youruser. Now, on one specific Ubuntu machine mymachine, myuser has sudo rights, and ...
1
vote
1answer
45 views

centos 6.6 ldap authentication no longer works after certificate update on ldap host

We recently updated the CA certificates on our LDAP host. There are a couple of CentOS 5.x servers which don't seem to have any issues authenticating against the LDAP host, but there's one Centos 6.6 ...
11
votes
2answers
461 views

What do the OS X authorization mechanisms actually do?

Background  I'm trying to glean a better understanding of the OS X login process, in order to decide the best way for achieving VPN Single Sign On. Please do correct me if I'm wrong, but I believe ...
-1
votes
1answer
21 views

Public Wi-Fi with Individual Authentication and Time limit for Internet Access [closed]

I would like to change the way that my costumers access to the internet. I would like to enable two ways for sharing my internet: With my wireless network as public, I would like to give a username ...
2
votes
1answer
1k views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
1
vote
1answer
3k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
1
vote
0answers
33 views

Unable to configure CNTLM

I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes- # # Cntlm Authentication Proxy Configuration # # NOTE: all values ...
1
vote
1answer
1k views

Apache: redirect to https before AUTH for server-status

I want to force https and basic auth for server-status output (mod_status). If I enable auth and user asks for http://site/server-status apache first asks for pass, then redirects to httpS, then asks ...
1
vote
2answers
373 views

Jersey web-service token based on hostname

I recently built a RESTful service using Jersey and is currently used by 3 other systems internal to the network (not people). How can I make sure the requests to the service are honored only based ...
0
votes
0answers
44 views

Accepting SAML token from third-party to allow access to our RDweb application

We have an RDweb hosted application, which until now has access control performed by a form and username/password authenticated against active directory. A third-party wishes to use their own ...
2
votes
1answer
4k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
3
votes
0answers
59 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
0
votes
0answers
19 views

How to reuse same digest authentication credentials with multiple acls?

I want to apply different access policies to different groups/acls using Squid, which is what I've done. Now I want to set up digest authentication, but I want to use the same digest credentials for ...
1
vote
1answer
1k views

DCOM Authentication Fails to use Kerberos, Falls back to NTLM

I have a webservice that is written in Classic ASP. In this web service it attempts to create a VirtualServer.Application object on another server via DCOM. This fails with Permission Denied. However ...
0
votes
1answer
1k views

Cannot install Perl module Authen::Libwrap

I'm getting this error when trying to install. How can I install it? Webmin depends on it. [root@ip-172-31-15-65 home]# cpan Authen::Libwrap CPAN: Storable loaded ok (v2.20) Going to read ...
5
votes
1answer
557 views

ModSecurity on Apache (Debian Wheezy), Authentication logging

I am new to ModSecurity, it works great on the server, but I would like to control the way it logs things. For example as I am troubleshooting my website in order to whitelist or correct php coding ...
1
vote
1answer
2k views

ASP.NET Website Administration Tool: Unable to connect to SQL Server database

I am trying to get authentication and authorization working with my ASP MVC project. I've run the aspnet_regsql.exe tool without any problem and see the aspnetdb database on my server (using the ...
0
votes
1answer
32 views

Track a machine who is entering bad passwords into a samba3 domain controller

I have a user who is getting its account locked constantly because an other machine is trying to login with an old and bad password and thus locking the user's account... The user doesn't know which ...
1
vote
0answers
29 views

IIS 7.5 - Windows Authetication FQDN

Currently, I have to implement an auto login function for my mediawiki and I have enabled windows authentication on my IIS 7.5. It is working on localhost without any prompt. However, when I tried ...
1
vote
1answer
72 views

Windows 2008R2 Logon Restrictions and LDAP Authentication

We use a Palo Alto firewall (and its GlobalProtect client) for VPN access to our network. The firewall uses LDAP to authenticate VPN logins. I am now trying to setup a user ID for a consultant and I ...
0
votes
1answer
2k views

IIS7 - Restrict access to an intranet site to a specific group of users

I have an ASP.NET site running in IIS7 on a local intranet. I want to restrict access to this site to a specific group of users. I think I should be able to do this by using Windows Authentication ...
0
votes
0answers
38 views

firefox with ssl two way authentication chains

I fall into a never ending trouble with certificate chains and 2-way authentication on my servers; I'll try to describe the problem as best as I can: I have 2 sites on 2 different servers, ...
0
votes
0answers
16 views

specific IP Attribution with isc-dhcp-server with freeradius authentication

I would like to assign specific address to my clients, regarding their radius authentication. For exemple, user1 (group user) authenticate on radius, dhcp gives him 192.168.1.1 as IP user2 (group ...
1
vote
1answer
4k views

Error 4673 audit failure filling security logs

I have an isolated desktop computer in my office that I run weekly security audits on. I check the logs for odd behavior then export and clear them out. The logs are filled with "Audit failure ...
1
vote
0answers
25 views

apache authenication - how to supress or bypass for users from within network

I have below conf to allow users from within our company's network to access access the site without userid or password. <Location /> Require valid-user Order allow,deny ...
0
votes
2answers
1k views

LDAP authentication apache 2.2 error 500

This is my LDAP configuration in Apache2.2.x Order deny,allow AuthType Basic AuthName "Test" AuthBasicProvider ldap AuthLDAPURL "ldap://dc1.domain.com:389/DC=domain,DC=com?sAMAccountName" ...
1
vote
1answer
69 views

Debian Samba share Authentification with RADIUS server

I'm trying to configure Samba (apt-get install samba) to authenticate users using a RADIUS server and i cannot find anything useful. Is it possible ? I tought i could set Samba to use the PAM ...