A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

4
votes
0answers
86 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
4
votes
0answers
62 views

Windows server 2012 R2 - delay before certificates start working

I have this weird unexplained delay before the certificates i put in my servers start actually working it goes something like this: I add the certificates snap-in to mmc to manage the computer ...
4
votes
0answers
80 views

Setting header based on client certificate

I have Apache running as a reverse proxy for an internal server. Users hitting the proxy are required to use client certificates. On the internal server, there is a web application that can use an ...
4
votes
0answers
382 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
4
votes
0answers
2k views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
4
votes
0answers
697 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
3
votes
0answers
231 views

NIS client doesn't see group names

I have added a user to libvirt (id = 504) group on NIS server. On the client when I do group <user>, I get <user> groups: cannot find name for group ID 504 What should I do to get my ...
3
votes
0answers
866 views

Redirect user on SSL authentication failure

I configured a VirtualHost with SSL enabled and SSL client authentication, all of that on apache2 2.2.8 (ubuntu server 8.04). All SSL certificates (CA, Server certificate, Client certificate, CRL) ...
2
votes
0answers
73 views

Dovecot: using a separate passdb per service

Situation: one front-facing server running Dovecot as IMAP/POP3/ManageSieve proxy, a mixture of IMAP servers (Dovecot, Exchange, ...) in the back-end. Dovecot's passdb does lookups against MySQL which ...
2
votes
0answers
164 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
2
votes
0answers
207 views

sshd accepting pub key authentication only for root

I have a peculiar problem with a headless linux box. It's a very high level "embedded" system supposed to handle NAS + mail + ftp + svn + a lot of other server stuff. I received it preinstalled and I ...
2
votes
0answers
120 views

Samba: Authenticate only local accounts over AD?

I have a samba server where I create all the linux accounts and corresponding SMB accounts via a application I built. I manage all the permissions for all of our shares via ACL's also using the ...
2
votes
0answers
644 views

Testing NTLM\kerberos against a public url

I am creating a java open source package that makes it easy to connect with httpclient 3.1 to resources that are protected by ntlm v1/v2 and kerberos. I need to test this tool against real world ...
2
votes
0answers
49 views

PIV authentication on redhat

I'm looking for a solution, or set of technologies, (etc) - for setting up a mixed (win 7, rhel 6.5) network with centralized login using smart cards (PIV). I know that this is possible using a ...
2
votes
0answers
77 views

Juniper SSG-5 different vlans authentication

In my network infrastructur I have 2 companies right now. Every company has it own vlan. For example: Company A 192.168.100.0/24 Company B 192.168.101.0/24 I want to use a shared vlan for all ...
2
votes
0answers
196 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
777 views

Authentication Problems with Lync Online Using DirSync/AD credentials

I am in the process of vetting Microsoft Lync Online for use within our organization. I have purchased 2 licenses for testing so far. We will only be using Lync Online Plan 2 and nothing else so we ...
2
votes
0answers
277 views

How do I enable digest auth for Jetty fronting Elastic Search

We've gotten Jetty running the HTTP front end of Elastic Search with BASIC authentication. We would like to use DIGEST authentication instead, but the Jetty documentation is hard to reconcile with the ...
2
votes
0answers
89 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
211 views

Apache SSHA password support

Is there any way for Apache to support SSHA passwords? I have a couple of dozens of user passwords in an OpenLDAP server which are encrypted with SSHA (i.e. salted SHA1). No more users are to be ...
2
votes
0answers
1k views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
2
votes
0answers
160 views

What does 'http: getaddrinfo*.gaih_getanswer: got type “46”' mean

Today I got an e-mail from logcheck informing me that the following system event occurred. http: getaddrinfo*.gaih_getanswer: got type "46" Indeed, the above message occurs 4 times in ...
2
votes
0answers
432 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
1k views

VMM Error: 1604 Cannot Access Virtual Machine Manager

I keep getting the error: You cannot access Virtual Machine Manager server localhost. Cantact the Virtual Machine Manager administrator to verify that your account is a member of a valid user role ...
2
votes
0answers
343 views

How can I password protect an IIS directory with only FTP access?

How can I password protect an IIS directory when I only have FTP access to the server? I can't adjust any IIS settings or add users or anything like that. The answer to: IIS Basic Authorization ala ...
2
votes
0answers
392 views

Why isn't Samba authenticating an Open Directory username that arrives in all caps?

I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
2
votes
0answers
622 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
2
votes
0answers
464 views

Windows Authentication over site-to-site VPN

We have recently opened up a satellite office about 500 Km away from our main office. The office consists of 2 staff, and some of our office workers make their way out to this office every once in a ...
1
vote
0answers
12 views

Make a basic auth client authenticate on a digest auth proxy server

My company has a legacy application which needs to connect to the Internet. Unfortunately, our network staff has changed the proxy settings in order to accept digest authentication only, which this ...
1
vote
0answers
10 views

NIS not respecting files first in nsswitch.conf

Okay, first off, I know NIS is a turd, but it's what we've got until we do a major migration next year. Today we had a NIS server outage which predictably prevents user logins. What surprised me was ...
1
vote
0answers
71 views

Unable to configure CNTLM

I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes- # # Cntlm Authentication Proxy Configuration # # NOTE: all values ...
1
vote
0answers
31 views

IIS 7.5 - Windows Authetication FQDN

Currently, I have to implement an auto login function for my mediawiki and I have enabled windows authentication on my IIS 7.5. It is working on localhost without any prompt. However, when I tried ...
1
vote
0answers
26 views

apache authenication - how to supress or bypass for users from within network

I have below conf to allow users from within our company's network to access access the site without userid or password. <Location /> Require valid-user Order allow,deny ...
1
vote
0answers
181 views

LDAP with SSSD: force user to change password - 'ShadowLastChange' not working

I have CentOS6, with LDAP user authentication, using OpenLDAP and SSSD. I'm trying to force user to change the password. According to this ServerFault question I tried to set ShadowLastChange to 0, ...
1
vote
0answers
74 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
1
vote
0answers
113 views

AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain

The method I use to authenticate a user's credentials on active directory is (Simplified): New DirectorySearcher(New DirectoryEntry(path, user, pass, AuthenticationTypes.Secure)).FindOne() On fail, ...
1
vote
0answers
298 views

IIS 8.5 Windows Authentication failing for some users

I have an application that was installed requiring Windows Authentication under Windows 2012, IIS 8.5. When certain users use the application, they're receiving a 401 error after the ...
1
vote
0answers
196 views

SAMBA/LDAP authentication failed in FreeNAS

I got a FreeNAS server and I am trying to share folders using SAMBA. My users are in an OpenLDAP server. The OpenLDAP has the samba.schema loaded. I checked the sambaSID in my FreeNAS and it is the ...
1
vote
0answers
25 views

Skip password authentication on Dovecot when client certificate provided

Using Dovecot version 2.1.7, I've gotten client certificates working with fairly little effort, and at this point I can choose between having password authentication after the certificate check or ...
1
vote
0answers
184 views

dovecot userdb passwd-file default_fields uid not expanding %variable

I'm trying to set up a very simple shared mail server, where each 'domain' is a system user, i.e. 'example.com' is a real user with /home/example.com/, a uid of 5001 and gid 'example.com' of 5001. ...
1
vote
0answers
52 views

Authenticating devices instead of users via PEAP/Radius

Our Cisco Aironet AP uses Radius to authenticate against our Active Directory via our Network Policy Server (NPS). For my users, on their domain-managed laptops and BYO devices (such as laptops, ...
1
vote
0answers
197 views

OpenSSL verification failing with CA signed cert but not with self signed one?

First of all, I know there are plenty of related questions but it seems like most of them are due to the lack of issuer certificates on the server. I have been following this guide to enable client ...
1
vote
0answers
69 views

SSL Proxying with mutual authentication

I have a bunch of backend servers each them should make https-requests. I want all my https traffic inspected and controled by few number of machines (many times fewer than server farm) - that's why I ...
1
vote
0answers
81 views

why basic auth loops when using nginx and monit

I was trying to configure nginx so that http://example.com/monit will access http://127.0.0.1:2812, which is the url monit is listening. Two authentication was set, via nginx(nginx.conf file) and ...
1
vote
0answers
125 views

Nagios 3.2.3 Core web interface login via LDAP using full names for username

First off I've never done any Nagios or LDAP configuration in the past and I've been sort of dumped into this as is so often the case so forgive my inevitable ignorance regarding these things but I've ...
1
vote
0answers
118 views

How can I maintain a network connection with no users logged into a workstation

EDIT 1 - This is still an issue for us, and I thought I'd bring up the topic of preinstalled software, notably Intel Wireless Manager. I have a feeling this is at the very least contributing to the ...
1
vote
0answers
162 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
1
vote
0answers
62 views

pwauth kerberos authentication specifying default and secondary servers

I am currently using Kerberos authentication for Basic Authentication on Apache using pwauth and mod_auth_external. I would like to add multiple servers to authenticate from, however they would have ...
1
vote
0answers
133 views

How to redirect clients to an external central authorization service (CAS) in web2py app?

I am trying to use an external CAS to authenticate users. I use this to do the task: auth = Auth(db, cas_provider = 'https://some_url') And when accessing the url ...
1
vote
0answers
30 views

Dovecot not attempting authentication

I am in the early stages of migrating an OS X mail installation (UW imapd/Exim/mbox) to a Ubuntu cloud VM using Dovecot/Exim/Maildir. I am starting simply: Exim is running fine, receiving mail and ...