A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

4
votes
0answers
290 views

ModSecurity on Apache (Debian Wheezy), Authentication logging

I am new to ModSecurity, it works great on the server, but I would like to control the way it logs things. For example as I am troubleshooting my website in order to whitelist or correct php coding ...
3
votes
0answers
87 views

NIS client doesn't see group names

I have added a user to libvirt (id = 504) group on NIS server. On the client when I do group <user>, I get <user> groups: cannot find name for group ID 504 What should I do to get my ...
3
votes
0answers
218 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
2
votes
0answers
87 views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
2
votes
0answers
67 views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
2
votes
0answers
18 views

PIV authentication on redhat

I'm looking for a solution, or set of technologies, (etc) - for setting up a mixed (win 7, rhel 6.5) network with centralized login using smart cards (PIV). I know that this is possible using a ...
2
votes
0answers
42 views

Juniper SSG-5 different vlans authentication

In my network infrastructur I have 2 companies right now. Every company has it own vlan. For example: Company A 192.168.100.0/24 Company B 192.168.101.0/24 I want to use a shared vlan for all ...
2
votes
0answers
87 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
260 views

Authentication Problems with Lync Online Using DirSync/AD credentials

I am in the process of vetting Microsoft Lync Online for use within our organization. I have purchased 2 licenses for testing so far. We will only be using Lync Online Plan 2 and nothing else so we ...
2
votes
0answers
144 views

How do I enable digest auth for Jetty fronting Elastic Search

We've gotten Jetty running the HTTP front end of Elastic Search with BASIC authentication. We would like to use DIGEST authentication instead, but the Jetty documentation is hard to reconcile with the ...
2
votes
0answers
51 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
125 views

Apache SSHA password support

Is there any way for Apache to support SSHA passwords? I have a couple of dozens of user passwords in an OpenLDAP server which are encrypted with SSHA (i.e. salted SHA1). No more users are to be ...
2
votes
0answers
162 views

Custom Authentication handler for mod_auth_form?

Apache 2.3/2.4 has mod_auth_form that allows to display a HTML form for users to login. Can I, instead of using a plain HTML form use an application server to provide the form (J2EE, node.js, PHP, ...
2
votes
0answers
659 views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
2
votes
0answers
673 views

openvpn refusing connections with freeradius

I installed openvpn and freeradius from yum and I installed the radiusplugin_v2.1a_beta1.tar.gz but I am having connection issues with the error: XML-RPC: ConnectionRefusedError: 10061: No connection ...
2
votes
0answers
279 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
717 views

VMM Error: 1604 Cannot Access Virtual Machine Manager

I keep getting the error: You cannot access Virtual Machine Manager server localhost. Cantact the Virtual Machine Manager administrator to verify that your account is a member of a valid user role ...
2
votes
0answers
282 views

How can I password protect an IIS directory with only FTP access?

How can I password protect an IIS directory when I only have FTP access to the server? I can't adjust any IIS settings or add users or anything like that. The answer to: IIS Basic Authorization ala ...
2
votes
0answers
335 views

Why isn't Samba authenticating an Open Directory username that arrives in all caps?

I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
2
votes
0answers
443 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
1
vote
0answers
39 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
1
vote
0answers
20 views

HP Command View: Could not find authenticator for Security Domain

I have some HP EVA storage arrays. They are monitored via Command View - the HP management product. Of 8 management servers, a grand total of one will not let me log in using 'domain' credentials - ...
1
vote
0answers
52 views

Testing NTLM\kerberos against a public url

I am creating a java open source package that makes it easy to connect with httpclient 3.1 to resources that are protected by ntlm v1/v2 and kerberos. I need to test this tool against real world ...
1
vote
0answers
67 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
1
vote
0answers
57 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
1
vote
0answers
71 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
1
vote
0answers
149 views

IIS using ADFS/Saml to Authenticate

Does anyone know if there is a ADFS/SAML Identity Provider for IIS7? Example workflow - the user will go to the directory /private and it will redirect to the provider to login and back if the user ...
1
vote
0answers
22 views

SVN Server with authentication via Github

One of my users wants me to build an SVN server that uses a specific Github community for authentication. Users who are members of this community should be able to use their Github credentials to ...
1
vote
0answers
24 views

Remote User Authentication with Active Directory vs. Azure Directory

I am a little confused about the added topological complexities that seem to be advocated when designing remote authentication for Active Directory. I want to have single-sign on for all computers ...
1
vote
0answers
54 views

Web App login redirecting to homepage on AWS Elastic Beanstalk

I've hosted my application on AWS Elastic Beanstalk. The application behaves itself in a local environment and shared hosting environment, but when on AWS it refuses to login. Instead it redirects ...
1
vote
0answers
81 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
1
vote
0answers
39 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
1
vote
0answers
374 views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
1
vote
0answers
151 views

LDAP authentication very slow on production server

We are developing a Spring MVC application which does LDAP authentication using Spring Security framework. The problem we are facing is that the authentication works just fine on our development ...
1
vote
0answers
24 views

Suitability of SAML for use case

A user logs into our portal - site 1; We want them to be able to click through to other sites 2 and 3 within our eco-system without having to further login - so no popup box to verify they have ...
1
vote
0answers
118 views

Cant find Forms Based Authentication Service

I installed Exchange 2013 on Windows Server 2012. After restarting the Host I could not login into owa or ecp the login screen showed up but after entering my correct credentials I would get a HTTP ...
1
vote
0answers
113 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
1
vote
0answers
112 views

heimdal error Decrypt integrity check failed for checksum type

when I try to authentication with heimdal-kdc ,I get this error in kdc log : (enctype aes256-cts-hmac-sha1-96) error Decrypt integrity check failed for checksum type hmac-sha1-96-aes256, key type ...
1
vote
0answers
244 views

putty openssh rsa key signature invalid

I'm running a server with Debian Linux 3.2.46-1+deb7u1 with OpenSSH Server 6.0 and secured the login with a 2048 bit RSA key. Although connecting with OpenSSH Client from another machine succeeds, ...
1
vote
0answers
106 views

Device aware multifactor authentication with Citrix environment?

There are many services that advertise themselves as providing multifactor authentication for Citrix. But, most seem to require the additional generated passcode every time. Are there any that can ...
1
vote
0answers
146 views

unknown user in last output

I found a lot of lines (~900) similar to these in the last output of one of my hosts: trustpor ftpd31576 www.trustport.co Tue Oct 1 10:03 - 10:03 (00:00) trustpor ftpd31575 www.trustport.co ...
1
vote
0answers
168 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
1
vote
0answers
338 views

Redirect user on SSL authentication failure

I configured a VirtualHost with SSL enabled and SSL client authentication, all of that on apache2 2.2.8 (ubuntu server 8.04). All SSL certificates (CA, Server certificate, Client certificate, CRL) ...
1
vote
0answers
78 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
1
vote
0answers
362 views

Sendmail Server Authentication: Certificate based: Error

I have configured my setup for a server certificate based authentication. Both Server and Client are sendmail systems and both have the same set of certificates. However when client communicated ...
1
vote
0answers
70 views

Kerberized SSH Failed

I want to authenticate ssh login with Kerberos, however fail. The following is a snippet of ssh debug information with the command ssh -vvv localhost. debug3: Wrote 80 bytes for a total of 1125 ...
1
vote
0answers
821 views

Dovecot Mysql Auth Mechanism

First time poster, long time lurker. I am currently rebuilding my postfix/dovecot mail server for support with MYSQL and am unable to figure out which auth mechanism to use. dovecot: auth: Fatal: No ...
1
vote
0answers
268 views

Site-to-Site VPN between Draytek Vigor and ISA 2006 Authentication Issue

I currently have a remote satellite office that has been configured as a site-to-site VPN. There is a Draytek Vigor 2830 router that is connected to an ISA 2006 server. I am having issues with ...
1
vote
0answers
163 views

IIS 7.5 Reverse proxy authenticate requests before forwarding

I have an internal site that I would like to make available externally. But, I would like to make it available only to a mobile app of my making. The internal site cannot be altered unfortunately, ...
1
vote
0answers
69 views

401 error when setting error responses to custom in iis

I was receiving 401 unauthorized access errors on my /account/login page The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...