A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

6
votes
0answers
418 views

CentOS requires entering password twice for sudo, login

At every login or sudo prompt, the server always rejects the password when it is first supplied, but accepts it the second time. I found this thread which describes what seems to be the same problem, ...
5
votes
0answers
515 views

ModSecurity on Apache (Debian Wheezy), Authentication logging

I am new to ModSecurity, it works great on the server, but I would like to control the way it logs things. For example as I am troubleshooting my website in order to whitelist or correct php coding ...
3
votes
0answers
59 views

Setting header based on client certificate

I have Apache running as a reverse proxy for an internal server. Users hitting the proxy are required to use client certificates. On the internal server, there is a web application that can use an ...
3
votes
0answers
303 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
3
votes
0answers
1k views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
3
votes
0answers
533 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
3
votes
0answers
195 views

NIS client doesn't see group names

I have added a user to libvirt (id = 504) group on NIS server. On the client when I do group <user>, I get <user> groups: cannot find name for group ID 504 What should I do to get my ...
3
votes
0answers
793 views

Redirect user on SSL authentication failure

I configured a VirtualHost with SSL enabled and SSL client authentication, all of that on apache2 2.2.8 (ubuntu server 8.04). All SSL certificates (CA, Server certificate, Client certificate, CRL) ...
2
votes
0answers
14 views

Skip password authentication on Dovecot when client certificate provided

Using Dovecot version 2.1.7, I've gotten client certificates working with fairly little effort, and at this point I can choose between having password authentication after the certificate check or ...
2
votes
0answers
45 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
2
votes
0answers
82 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
2
votes
0answers
132 views

sshd accepting pub key authentication only for root

I have a peculiar problem with a headless linux box. It's a very high level "embedded" system supposed to handle NAS + mail + ftp + svn + a lot of other server stuff. I received it preinstalled and I ...
2
votes
0answers
108 views

Samba: Authenticate only local accounts over AD?

I have a samba server where I create all the linux accounts and corresponding SMB accounts via a application I built. I manage all the permissions for all of our shares via ACL's also using the ...
2
votes
0answers
480 views

Testing NTLM\kerberos against a public url

I am creating a java open source package that makes it easy to connect with httpclient 3.1 to resources that are protected by ntlm v1/v2 and kerberos. I need to test this tool against real world ...
2
votes
0answers
34 views

PIV authentication on redhat

I'm looking for a solution, or set of technologies, (etc) - for setting up a mixed (win 7, rhel 6.5) network with centralized login using smart cards (PIV). I know that this is possible using a ...
2
votes
0answers
68 views

Juniper SSG-5 different vlans authentication

In my network infrastructur I have 2 companies right now. Every company has it own vlan. For example: Company A 192.168.100.0/24 Company B 192.168.101.0/24 I want to use a shared vlan for all ...
2
votes
0answers
168 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
696 views

Authentication Problems with Lync Online Using DirSync/AD credentials

I am in the process of vetting Microsoft Lync Online for use within our organization. I have purchased 2 licenses for testing so far. We will only be using Lync Online Plan 2 and nothing else so we ...
2
votes
0answers
249 views

How do I enable digest auth for Jetty fronting Elastic Search

We've gotten Jetty running the HTTP front end of Elastic Search with BASIC authentication. We would like to use DIGEST authentication instead, but the Jetty documentation is hard to reconcile with the ...
2
votes
0answers
88 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
193 views

Apache SSHA password support

Is there any way for Apache to support SSHA passwords? I have a couple of dozens of user passwords in an OpenLDAP server which are encrypted with SSHA (i.e. salted SHA1). No more users are to be ...
2
votes
0answers
1k views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
2
votes
0answers
1k views

openvpn refusing connections with freeradius

I installed openvpn and freeradius from yum and I installed the radiusplugin_v2.1a_beta1.tar.gz but I am having connection issues with the error: XML-RPC: ConnectionRefusedError: 10061: No connection ...
2
votes
0answers
147 views

What does 'http: getaddrinfo*.gaih_getanswer: got type “46”' mean

Today I got an e-mail from logcheck informing me that the following system event occurred. http: getaddrinfo*.gaih_getanswer: got type "46" Indeed, the above message occurs 4 times in ...
2
votes
0answers
391 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
1k views

VMM Error: 1604 Cannot Access Virtual Machine Manager

I keep getting the error: You cannot access Virtual Machine Manager server localhost. Cantact the Virtual Machine Manager administrator to verify that your account is a member of a valid user role ...
2
votes
0answers
316 views

How can I password protect an IIS directory with only FTP access?

How can I password protect an IIS directory when I only have FTP access to the server? I can't adjust any IIS settings or add users or anything like that. The answer to: IIS Basic Authorization ala ...
2
votes
0answers
382 views

Why isn't Samba authenticating an Open Directory username that arrives in all caps?

I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
2
votes
0answers
554 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
2
votes
0answers
428 views

Windows Authentication over site-to-site VPN

We have recently opened up a satellite office about 500 Km away from our main office. The office consists of 2 staff, and some of our office workers make their way out to this office every once in a ...
1
vote
0answers
34 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
1
vote
0answers
87 views

IIS 8.5 Windows Authentication failing for some users

I have an application that was installed requiring Windows Authentication under Windows 2012, IIS 8.5. When certain users use the application, they're receiving a 401 error after the ...
1
vote
0answers
21 views

Single row user security in MS SQL 2008 R2

I have a SQL Server 2008R2 question regarding making a single row in an odd way. situation: I have a student records database in which ~ 100 students might in-process in a given day. They enter a ...
1
vote
0answers
63 views

dovecot userdb passwd-file default_fields uid not expanding %variable

I'm trying to set up a very simple shared mail server, where each 'domain' is a system user, i.e. 'example.com' is a real user with /home/example.com/, a uid of 5001 and gid 'example.com' of 5001. ...
1
vote
0answers
27 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
0answers
79 views

OpenSSL verification failing with CA signed cert but not with self signed one?

First of all, I know there are plenty of related questions but it seems like most of them are due to the lack of issuer certificates on the server. I have been following this guide to enable client ...
1
vote
0answers
47 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
1
vote
0answers
57 views

why basic auth loops when using nginx and monit

I was trying to configure nginx so that http://example.com/monit will access http://127.0.0.1:2812, which is the url monit is listening. Two authentication was set, via nginx(nginx.conf file) and ...
1
vote
0answers
77 views

Nagios 3.2.3 Core web interface login via LDAP using full names for username

First off I've never done any Nagios or LDAP configuration in the past and I've been sort of dumped into this as is so often the case so forgive my inevitable ignorance regarding these things but I've ...
1
vote
0answers
103 views

How can I maintain a network connection with no users logged into a workstation

EDIT 1 - This is still an issue for us, and I thought I'd bring up the topic of preinstalled software, notably Intel Wireless Manager. I have a feeling this is at the very least contributing to the ...
1
vote
0answers
115 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
1
vote
0answers
43 views

pwauth kerberos authentication specifying default and secondary servers

I am currently using Kerberos authentication for Basic Authentication on Apache using pwauth and mod_auth_external. I would like to add multiple servers to authenticate from, however they would have ...
1
vote
0answers
84 views

How to redirect clients to an external central authorization service (CAS) in web2py app?

I am trying to use an external CAS to authenticate users. I use this to do the task: auth = Auth(db, cas_provider = 'https://some_url') And when accessing the url ...
1
vote
0answers
29 views

Dovecot not attempting authentication

I am in the early stages of migrating an OS X mail installation (UW imapd/Exim/mbox) to a Ubuntu cloud VM using Dovecot/Exim/Maildir. I am starting simply: Exim is running fine, receiving mail and ...
1
vote
0answers
32 views

Revoking client certificate two way authentication

can we revoke a client certificate by serial (we are using mutual authentication)? we tried revoking a certificate using the certificate file but the revocation date is not set to the current date . ...
1
vote
0answers
149 views

Connecting Dovecot2 to ldap

I'm currently trying to connect dovecot 2 with postfix to an ldap directory. Currently I'm having an issue in the communication itself. Dovecot starts, but does not authorize the users. I'm using the ...
1
vote
0answers
278 views

Apache basic auth with IP whitelist

I am trying to add some kind of IP whitelist to one of my HTTP Basic Auth protected directories. I am using Apache 2.2.15 on CentOS 6.5 but I also tried with Apache 2.2.22 on Ubuntu 10.04. I looked ...
1
vote
0answers
1k views

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up ...
1
vote
0answers
119 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
1
vote
0answers
70 views

HP Command View: Could not find authenticator for Security Domain

I have some HP EVA storage arrays. They are monitored via Command View - the HP management product. Of 8 management servers, a grand total of one will not let me log in using 'domain' credentials - ...