A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

34
votes
5answers
7k views

Best system for managing ssh keys? [closed]

I've got several client computers (i.e. laptops, desktops, etc.), and I connect to several server machines that I manage, and I log into them all via SSH. I can imagine several schemes of managing ...
11
votes
7answers
45k views

How do I remove login credentials for a network location in Win7?

I just tried to access a folder like so: \\somecomputeronmynetwork\somelocation$ When going to this location I'm prompted for a user name and password. I put one in, and it let me in fine. Now I ...
8
votes
1answer
7k views

Authenticate Linux sshd with TACACS+ (Cisco ACS)

Our network engineering team uses multiple linux servers for syslog collection, configuration backups, tftp, etc... We want to use TACACS+ on a Cisco ACS machine as our central authentication server ...
7
votes
3answers
2k views

Is SSH logging capabilities equivalent to su logging for private/public key authentication?

Here at work, we have a non-root shared login account on UNIX that is used to admin a particular application. The policy is to not allow direct logins to the shared account; you must login as yourself ...
4
votes
2answers
1k views

Understand PAM and NSS

In the last days I have set up some Linux system with LDAP authentication and everything works fine, but there's still something I can't really understand regarding NSS and PAM, also after a lot of ...
1
vote
0answers
1k views

Apache .htaccess trick to authenticate only once for all subdomains? [duplicate]

Possible Duplicate: Apache .htaccess trick to authenticate only once for all subdomains? I'm using something like this in .htaccess file to restrict access to the website: AuthUserFile ...
29
votes
13answers
47k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
12
votes
5answers
5k views

How practical is it to authenticate a Linux server against AD?

We utilise both Windows and Linux server at our software development company. One of the friction points with this setup is that we don't have a single sign-on solution. Being more of a Microsoft ...
21
votes
2answers
56k views

How to grant network access to LocalSystem account?

How do you grant access to network resources to the LocalSystem (NT AUTHORITY\SYSTEM) account? Background When accessing the network, the LocalSystem account acts as the computer on the network: ...
6
votes
3answers
3k views

Managing service passwords with Puppet

I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
17
votes
8answers
5k views

Should we disable the root user?

Should we remove the root password, disable remote login and basically require adminstrators to use sudo to perform administrative actions?
2
votes
3answers
30k views

How can I enable domain authentication over wireless in Windows 7/2k8?

I've got several domain-member laptops which commonly roam to places where there aren't any network ports available. Occasionally, during these times, the laptop may be used by someone who has not ...
6
votes
2answers
2k views

apache auth: combination of LDAP and htpasswd

We're using Apache with mod_svn to serve the subversion repo. Apache is hooked to an LDAP server so all users can use their domain passwords. For the build machine to be able to checkout, I want to ...
3
votes
1answer
3k views

Cookie Authentication in Apache

I'm trying to set up a reverse proxy in Apache. The user will be required to log in, and will then be sent a cookie. I want Apache to check the cookie. Is there a way to do this? EG, right now my ...
1
vote
3answers
2k views

Apache .htaccess trick to authenticate only once for all subdomains?

I'm using something like this in .htaccess file to restrict access to the website: AuthUserFile /some/directory/.passwd AuthGroupFile /dev/null AuthName EnterPassword AuthType Basic require ...
5
votes
4answers
15k views

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5 and I couldn't find any answer to this question, can help me a ...
2
votes
1answer
1k views

Authenticating with Mercurial server without supplying credentials to prompts or in .hgrc file

I have a Windows 2008 R2 IIS7 server with Mercurial under HTTPS. I connect to the Mercurial Repositories using TortoiseHG and via the web interface. If I don't have my username and password in the ...
8
votes
6answers
7k views

Use LDAP for MySQL authentication?

We run a couple dozen different MySQL servers for our users. These use the free/Open Source version of MySQL, not the commercial version. Managing the Account Passwords on these servers is painful. ...
5
votes
4answers
3k views

ubuntu - how can I avoid typing a password on every admin action?

I just set-up ubuntu 9.10 on my computer, and I'm trying to figure out how to avoid typing a password on every action that requires sudo privileges. I just want to type a password once on login and ...
3
votes
1answer
1k views

Squid and Active Directory authentication

I want to integrate a Squid proxy with an Active Directory domain, so that the following is achieved: I can grant/deny access to web sites based on user accounts and/or groups. Domain users don't ...
2
votes
3answers
7k views

IIS Windows Authentication not working in Internet Explorer via host name; works via IP

I'm trying to get a new Windows Server 2003 box working to host an ASP.NET application that uses Windows Authentication. Here's some info: IIS Anonymous Access is diabled IIS Integrated Windows ...
2
votes
3answers
2k views

SFTP server on Windows using LDAP for authentication [closed]

I need to set up an SFTP server on a Windows 2008 Server machine that will be used to recieve large files (~200MB). I need the server to authenticate any users trying to log on, against the company's ...
0
votes
1answer
661 views

Is it possible to configure IIS to always default Anonymous authentication to use application pool identity?

Is it possible to configure IIS to always default the identity settings for Anonymous authentication to use application pool identity? There is never a reason I would want it otherwise so it's ...
7
votes
4answers
18k views

How can I clear cached domain credentials?

Related: How can I enable domain authentication over wireless in Windows 7/2k8? To test the domain login over wireless connection feature I'm trying to set up in the above question, I need an ...
1
vote
2answers
165 views

How to create a new user and exempt the user of key authentication?

1 I have configured Ubuntu server with Key authentication & it is working fine. I have disabled password authentication for key authentication to work. Server is always accessed via remote ...
1
vote
1answer
143 views

Network update solutions for a company of ~20 (5 local, 15 remote)?

This is probably going to be a bit up in the air, because we're still in the "reaching towards solutions" phase, but I figured I'd see what you guys had to say. Plus I honestly know very little about ...
0
votes
4answers
156 views

No longer have to enter a password to SSH into another server?

For some reason, I have a server that if ssh into another server...you don't need to enter the password. How is this done? Can someone give me step by step instructions please?
0
votes
1answer
858 views

Dynamic authentication realms in Apache

I have a front end server acting as a gateway proxy for many (a dynamic 'many') building monitors with embedded webservers. They are accessed with a URL like: http://www.example.com/monitor1/ ...
36
votes
9answers
9k views

Why is SSH password authentication a security risk?

Most guides for OpenSSH configuration advise to disable password authentication in favor of key-based authentication. But in my opinion password authentication has a significant advantage: an ability ...
19
votes
1answer
4k views

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active ...
21
votes
6answers
57k views

How to delete cached temporarily credentials for a network share on a Windows machine without rebooting or logging off [duplicate]

This is more of a curiosity then a real problem, I am just to lazy to reboot or log off my laptop. I have connected to a network share on a Windows server with domain credentials from a non-domain ...
18
votes
2answers
18k views

public key authentication fails ONLY when sshd is daemon

(This question had been erroneously asked in stack overflow -- I'm sorry for that -- and closed as "off topic") I have no clue on how this happens. The distro is Scientific Linux 6.1 and everything ...
7
votes
1answer
3k views

Best practice for authenticating DMZ against AD in LAN

We have few customer facing servers in DMZ that also have user accounts , all accounts are in shadow password file. I am trying to consolidate user logons and thinking about letting LAN users to ...
26
votes
7answers
5k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
25
votes
3answers
104k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
5
votes
2answers
2k views

Easy multi-level authentication for sudo

I have a FreeBSD server with password-based SSH enabled. I would like to enable sudo, but I do not want a potential attacker to be one password away from root access. My current solution is logging ...
3
votes
5answers
10k views

How to use Active Directory to authenticate linux users

What are the best-practices for using Active Directory to authenticate users on linux (Debian) boxes? The way I would like it to work would be to add AD users to a group - say linux administrators or ...
33
votes
5answers
3k views

Is it valid to have part of an IPv4 address set to zero?

I am working on a change in a Java EE application that would authenticate based on the user's IP address using ServletRequest.getRemoteAddr. We store IP address ranges (FROM_IP and TO_IP) in a ...
11
votes
2answers
3k views

The Story of secure user-authentication in squid

once upon a time, there was a beautiful warm virtual-jungle in south america, and a squid server lived there. here is an perceptual image of the network: <the Internet> ...
8
votes
4answers
4k views

Linux Central Authentication/Authorization Methods

I have a small but growing network of Linux servers. Ideally I'd like a central place to control User Access, change passwords, etc... I've read a lot about LDAP servers, but I'm still confused about ...
7
votes
2answers
9k views

Authenticating Apache HTTPd against multiple LDAP servers with expired accounts

We're using mod_authnz_ldap and mod_authn_alias in Apache 2.2.9 (as shipped in Debian 5.0, 2.2.9-10+lenny7) to authenticate against multiple Active Directory domains for hosting a Subversion ...
6
votes
13answers
12k views

can't figure out why apache LDAP auth fails

Suddenly, yesterday, one of my apache servers became unable to connect to my LDAP (AD) server. I have two sites running on that server, both of which use LDAP to auth against my AD server when a user ...
5
votes
2answers
2k views

Network authentication + roaming home directory - which technology should I look into using?

I'm looking into software which provides a user with a single identity across multiple computers. That is, a user should have the same permissions on each computer, and the user should have access to ...
1
vote
2answers
1k views

Kerberos authentication in IIS with .NET app under domain identity not working

Having a hell of a time trying to get a .NET web app to use Kerberos auth successfully, and would appreciate some assistance from the SF community. Currently there is a Win2003/IIS6 server hosting a ...
3
votes
3answers
896 views

Non-IE browsers wont auto-authenticate

We're considering offering Safari (windows), Chrome, Firefox and Opera as optional browsers in our 2500 person organisation. I'm just testing them out now and where IE auto-authenticates with our ...
14
votes
2answers
25k views

Troubleshooting Windows Authentication problems (no challenge) in IIS 7.5?

I know that there are thousands of reports of people having trouble getting Integrated Windows Authentication to work with IIS, but they all seem to lead to web pages that don't apply or solutions ...
10
votes
1answer
29k views

LDAP authentication for SonicWALL VPN

I'm trying to configure my SonicWALL to allow LDAP authentication for VPN users. I've done this before with another device, and I remember it being pretty simple. But I can't get it to work this ...
4
votes
5answers
4k views

Central Authentication For Windows, Linux, Network Devices

I'm trying to find a way to centralize user management & authentication for a large collection of Windows & Linux Servers, including network devices (Cisco, HP, Juniper). Options include ...
4
votes
3answers
6k views

How do accept multiple authentication options in Apache?

I want to protect a path in my VirtualHost but allow users a variety of authentication options (e.g. mod-auth-cas, mod-auth-openid and mod-auth-digest.) How do I set up the virtual host definition to ...
3
votes
1answer
3k views

Nginx - basic http authentication on PHP-script

I added a PHP-Script that serves as "cgi-bin", Configuration: location ~^/cgi-bin/.*\.(cgi|pl|py|rb) { gzip off; fastcgi_pass 127.0.0.1:9000; fastcgi_index cgi-bin.php; ...