A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

0
votes
0answers
8 views

Is it possible to authenticate through two ldap servers?

Is it possible to have a little linux ldap server VM in dept1 that authenticates valid employees from company.com ldap, but allocates membership to dept1 resources without making any new associations ...
0
votes
0answers
8 views

Multi user passwordless directory specific ssh login

I am running Ubuntu 14.04 LTS. I want to allow multi user passwordless ssh login. But I want to give directory specific ssh access. For example: My home directory(server home) has two folders user1 ...
0
votes
1answer
1k views

Exim4 require TLS for all hosts but localhost

As my webmailer does not support STARTTLS and I want to enable relaying for everyone at localhost, I would like to have Exim advertise AUTH PLAIN and LOGIN only without TLS if the connection was ...
0
votes
1answer
14 views

Apache authentication against FreeIPA's Kerberos

I'm currently trying to set up Apache as an authentication portal. It's supposed to act as a reverse proxy with krb authentication. My apache server is named portal.example.com (debian container) My ...
-4
votes
1answer
21 views

web program today: why is online web program user =/= Unix user in /etc/passwd [on hold]

History and explanation In the early days of Unix, ... as Unix was invented as a network and multi-user operating system; you could deploy web server programs on Unix where the online user in the ...
0
votes
0answers
7 views

IIs 7.0 intranet server authentication challenge

I probably have no business administering a web server, but there is nobody else in our team to do it. We have a company intranet site that is open to everyone in the enterprise. It is running on a ...
17
votes
2answers
2k views

Receiving a private key from server admin: ok or not?

I am to get access to a remote SFTP server. The admin has created a user for me, and generated a public/private key pair for me. Then he securely sent me the private key file, which I use for ...
1
vote
1answer
72 views

Gitlab and LDAP against CommuniGate Pro Server

I'm currently trying to make our GitLab authenticate to LDAP that is provided by CommuniGate Pro server. When using command line tests (like ldapsearch) I'm successfully authenticating and getting ...
1
vote
2answers
1k views

LDAP authentication apache 2.2 error 500

This is my LDAP configuration in Apache2.2.x Order deny,allow AuthType Basic AuthName "Test" AuthBasicProvider ldap AuthLDAPURL "ldap://dc1.domain.com:389/DC=domain,DC=com?sAMAccountName" ...
0
votes
0answers
15 views

What to choose as NIS replacement? [on hold]

At our company we have about 100 users on NIS. This only works on: Linux Jenkins but just about nothing else we use supports NIS: JIRA Confluence GitLab Office 365 Gerrit Windows 8.1 laptops ...
-1
votes
0answers
11 views

apache on centos not asking for client certificates

I have apache 2.4 on CentOS 7, and I'm trying to use client certificates for authentication. I have the site using comodo positive SSL, and I want to use self signed certs for client authentication, ...
1
vote
1answer
7k views

Authenticate users with Zimbra LDAP Server from other CentOS clients

I'am wondering that how can integrate my database,web,backup etc.. centos servers with Zimbra LDAP Server. Does it require more advanced configuration than standart ldap authentication ? My zimbra ...
0
votes
0answers
13 views

tacacs+ windows based server Authorization failed, dropping priv-lvl to 0

i'm having a problem with tacacs authorization. I have configured tacacs server as per this blog :tacacsConfig As specified in the blog i made changes exactly, tacacs test/verify works as expected ...
0
votes
1answer
219 views

TACACS+ configuration: how to receive priv-lvl value?

I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL). I tried with ...
1
vote
2answers
3k views

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up ...
0
votes
1answer
36 views

random “MongoError: not authorized on XXX to execute command {YYY}” with mongo 3.2

since very recently I have random errors like these: 2016-06-06T18:17:55.386Z pid:2458 worker:3 MongoError: not authorized on db to execute command {...someQuery...} 2016-06-06T18:17:55.386Z pid:...
2
votes
2answers
29 views

What are the disadvantages when using two-factor authentication on SSH like Authy-SSH?

I'm considering to setup Two Factor Authentication on my SSH accounts (OpenSSH, Ubuntu). I was looking into Authy-SSH but I'm wondering what the possible disadvantages are? Also, can I lock myself ...
3
votes
1answer
1k views

CRM 2011 - outlook connector always asking for authentication

In my organization everyone uses the Outlook 2010 connector to access the CRM. After the UR13 update, but not right away, some clients began experiencing a situation where the Outlook connector asks ...
0
votes
1answer
3k views

Samba NT_STATUS_ACCESS_DENIED error on Ubuntu

I set up a Samba server on Ubuntu. Everything goes fine when I allow guest access, but when I try to setup a configuration for a specific user, I receive the error below: $ smbclient //x.x.x.x/john -...
30
votes
7answers
6k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
0
votes
1answer
45 views

Dovecot + Plesk occasional authentication mismatch when using DIGEST-MD5, username used for generating the MD5 hash is wrong [closed]

I am using a dovecot and plesk machine and found that there are occasional login problems for users because of an error during the DIGEST-MD5 hash generation. The debug logs show that the hash ...
0
votes
0answers
17 views

Apache sometimes not starting after reboot

Sometimes, after my server (Cent OS7, default repository) reboots, Apache is not started automatically. To fix this, I reboot the server one more time, and then it works. My Apache error logs shows ...
1
vote
0answers
11 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
0
votes
0answers
37 views

What is the correct way to configure match rules in sshd_config?

I'm configuring Match rules in /etc/ssh/sshd_config . Whenever I add more than 1 match rule and after restarting SSH ofcourse, I'm getting locked outside of the machine with the following error: [...
2
votes
2answers
6k views

How to access a SQL Anywhere database?

Currently I have a SQL Anywhere (version 10) database (.db and .log files) - the idea is to extract the data and utilize it for a MS SQL database. The problem is that I start a SQL Anywhere server ...
37
votes
6answers
120k views

How to configure basic authentication in Apache httpd virtual hosts?

I'm trying to configure mercurial access using Apache http. It requires authentication. My /etc/apache2/sites-enabled/mercurial looks like this: NameVirtualHost *:8080 <VirtualHost *:8080> ...
0
votes
0answers
10 views

Is it possible to have mutual certificate authentication in wpa2-enterprise?

1) Is it possible to have mutual certificate authentication when using WPA2-enterprise so that a) the client identifies the server and b) the server identifies the client through pre-installed ...
0
votes
1answer
1k views

GitLab & OpenLDAP: Invalid credentials

I have two machines with CentOS 7.0 on each one. The first one is domain controller with OpenLDAP only. I configured OpenLDAP according this tutorial: http://www.server-world.info/en/note?os=CentOS_7&...
2
votes
1answer
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to NTLM enabled. When clients are not in the ...
0
votes
0answers
19 views

freeradius+ external users database

I need authenticate users with freeradius, these users are located in an existing external database. I think that the rest_module can help me to do that, in that case, which values the rest api ...
0
votes
1answer
37 views

Server allows logging in without supplying a password and no ssh keys were exchanged, what could be the reason?

I'm trying to secure an outbound server with Google 2FA solution. For the time being, I'm first configuring everything on a local Vagrant machine and once everything works as intended I'll run it as ...
1
vote
1answer
25 views

How to configure pam sshd to allow different rules on different users/groups?

I'm configuring google two-factor authentication on an outbound server in the company I work for. Here are the relevant configurations: /etc/ssh/sshd_config: ubuntu@stage-itai-1:~$ egrep -v '^#' /...
2
votes
2answers
1k views

Google Authenticator PAM for specific users

My current sshd PAM config: #%PAM-1.0 auth include system-auth account required pam_nologin.so account include system-auth password include system-auth session ...
5
votes
1answer
3k views

A single AD user can't log into a single Mac bound to the domain (DirectoryServices error). How can I resolve this?

On our campus, we have about 60 Macs joined to our Active Directory domain. Most users have no problems logging into Macs, as long as their accounts are configured correctly. However, we have one ...
1
vote
1answer
1k views

Apache2 with basic auth: exclude one location from auth (weird behaviour)

I have basic auth set for Directory / and want to exclude Location /assets/upload, but it just won't work, I have tried several options and tutorials. This Location directive clears the Directory ...
0
votes
3answers
2k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
3
votes
1answer
2k views

Require ldap-group on apache 2 vhost fails when trying to log in

I have a vhost which I'm trying to get to work with LDAP-authentication. My configuration looks like this: <VirtualHost 0.0.0.0:80> DocumentRoot "/var/www/root/" ServerName ...
1
vote
3answers
1k views

Keep getting login requests for ASP.NET app running in IIS 7.5

When I try to access an Intranet site from a client I get asked to login all the time. Then I get a 401.3 error. The site works fine locally on the server. The site has its own app pool, Managed ...
3
votes
1answer
2k views

Linux Client Active Directory Authentication stops working when failover

I have an issue with Linux clients trying to AD authentication by targeting a DNS name (corp.example.com). I have 2 Domain Controller servers DC1(10.0.0.3/24), DC2(10.1.0.3/24) both domain controllers ...
0
votes
1answer
53 views

Is it possible to configure a Cisco AnyConnect VPN to use two separate LDAP authentication methods simultaneously?

I have a Cisco ASA 5505 with a Security Plus license along with an AnyConnect Plus license. I don't currently have any VPN configuration on the ASA as I'm still in the planning phase. I would like to ...
0
votes
1answer
47 views

courier-authlib: wrong username enters search query

I am trying to setup smtp authentication using courier, mysql on postfix. My passwords in my db are encrypted. When I attempt to connect, I get an auth failure r2d2 ~ # telnet mail.server.com 25 ...
0
votes
1answer
16 views

Apache authentication against custom web service

I would like to have apache that forwards the call to an internal service (a django app) that returns a True/False (and some parameters maybe) if the user is valid or not. This before forwarding the ...
0
votes
1answer
1k views

Apache reverse proxy keeps demanding basic auth credentials

I'm configuring Apache in front of Hawtio - a Karaf-hosted JVM management console. Although Hawtio is served by Jetty and protected by Karaf's JAAS implementation, we want Apache to add Basic Auth ...
0
votes
2answers
82 views

Need SOCKS Solution

I need a SOCKS/Proxy server that is capable of using SSL certs. Additionally, I want it to ONLY be able to connect to 2 domains. User authentication is not mandatory.
0
votes
1answer
28 views

Kafka acl without kerberos

I'm trying to set up a single kafka server with certificate authentication and access controls based on those certificates without the bother of setting up a kerberos service. Setting upp the ...
-1
votes
0answers
35 views

Linux, Kerberos Auth, and LogonWorkstations AD Attribute

When using Kerb Auth on Linux, with a Server 2008 AD Domain for authentication, and nsswitch set to files then ldap: If an ldap user tries to ssh to a server, and they are a member of a group which ...
0
votes
0answers
15 views

Using biometric authentication with rdesktop to Windows machine?

I'm using rdesktop to access windows servers/clients from a linux machine. I can setup biometric access with AD for these windows clients, but is it possible to rdesktop to a windows box and use a ...
1
vote
1answer
2k views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
0
votes
0answers
19 views

Tomcat6 Client Authentication

I configured a Tomcat6 webserver on CentOS with SSL, and it works fine. Now I want to configure Client Authentication on it too: The server and the clients have their own certs signed by a local ...
1
vote
1answer
9k views

Error 4673 audit failure filling security logs

I have an isolated desktop computer in my office that I run weekly security audits on. I check the logs for odd behavior then export and clear them out. The logs are filled with "Audit failure ...