A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

learn more… | top users | synonyms

4
votes
0answers
207 views

ModSecurity on Apache (Debian Wheezy), Authentication logging

I am new to ModSecurity, it works great on the server, but I would like to control the way it logs things. For example as I am troubleshooting my website in order to whitelist or correct php coding ...
3
votes
0answers
70 views

NIS client doesn't see group names

I have added a user to libvirt (id = 504) group on NIS server. On the client when I do group <user>, I get <user> groups: cannot find name for group ID 504 What should I do to get my ...
3
votes
0answers
206 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
2
votes
0answers
14 views

PIV authentication on redhat

I'm looking for a solution, or set of technologies, (etc) - for setting up a mixed (win 7, rhel 6.5) network with centralized login using smart cards (PIV). I know that this is possible using a ...
2
votes
0answers
31 views

Juniper SSG-5 different vlans authentication

In my network infrastructur I have 2 companies right now. Every company has it own vlan. For example: Company A 192.168.100.0/24 Company B 192.168.101.0/24 I want to use a shared vlan for all ...
2
votes
0answers
48 views

Sharing authentication data between servers in nginx

I got an http server that uses the ports 9200 and 9292 (for logstash). Since the server doesn't support authentication, I'd like to set an nginx reverse proxy to handle the authentication. This is ...
2
votes
0answers
50 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
2
votes
0answers
142 views

Authentication Problems with Lync Online Using DirSync/AD credentials

I am in the process of vetting Microsoft Lync Online for use within our organization. I have purchased 2 licenses for testing so far. We will only be using Lync Online Plan 2 and nothing else so we ...
2
votes
0answers
103 views

Seamless authentication for corporate users on an external website

Background: Global company with multiple locations and disparate networks and IT systems. The majority of the networks are Windows based and running Active Directory and some are connected via ADFS. ...
2
votes
0answers
45 views

Rsyslog : copy with changing the facility

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because ...
2
votes
0answers
109 views

Apache SSHA password support

Is there any way for Apache to support SSHA passwords? I have a couple of dozens of user passwords in an OpenLDAP server which are encrypted with SSHA (i.e. salted SHA1). No more users are to be ...
2
votes
0answers
130 views

Custom Authentication handler for mod_auth_form?

Apache 2.3/2.4 has mod_auth_form that allows to display a HTML form for users to login. Can I, instead of using a plain HTML form use an application server to provide the form (J2EE, node.js, PHP, ...
2
votes
0answers
571 views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
2
votes
0answers
236 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
2
votes
0answers
594 views

VMM Error: 1604 Cannot Access Virtual Machine Manager

I keep getting the error: You cannot access Virtual Machine Manager server localhost. Cantact the Virtual Machine Manager administrator to verify that your account is a member of a valid user role ...
2
votes
0answers
322 views

Why isn't Samba authenticating an Open Directory username that arrives in all caps?

I have a Mac OS X 10.6 server that acts as an Open Directory master and allows file sharing from the Open Directory users' home directories. Today, for unknown reasons, it's stopped permitting our ...
2
votes
0answers
422 views

Windows 7 / Windows Vista won't connect to 802.1x RADIUS Server

I've deployed Radius and have no problems connecting with TTLS, PEAP, or MD5 using linux, mac, and windows xp. For Windows 7 and Vista, I'm never prompted with the dialog box to enter username & ...
1
vote
0answers
8 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
1
vote
0answers
14 views

Samba Authentication

I know it's going to seem like I haven't done the research here, because I have done it, and I know how many related questions and tutorials there are. I have read every tutorial I can find online for ...
1
vote
0answers
38 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
1
vote
0answers
25 views

IIS using ADFS/Saml to Authenticate

Does anyone know if there is a ADFS/SAML Identity Provider for IIS7? Example workflow - the user will go to the directory /private and it will redirect to the provider to login and back if the user ...
1
vote
0answers
17 views

SVN Server with authentication via Github

One of my users wants me to build an SVN server that uses a specific Github community for authentication. Users who are members of this community should be able to use their Github credentials to ...
1
vote
0answers
31 views

Web App login redirecting to homepage on AWS Elastic Beanstalk

I've hosted my application on AWS Elastic Beanstalk. The application behaves itself in a local environment and shared hosting environment, but when on AWS it refuses to login. Instead it redirects ...
1
vote
0answers
51 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
1
vote
0answers
29 views

Samba authentication using read-only LDAP server without samba attributes

I have read-only access to an LDAP server which only stores unix account information (no samba attributes). I’d like to grant the users in the LDAP directory access to the samba shares on my server. ...
1
vote
0answers
209 views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
1
vote
0answers
76 views

LDAP authentication very slow on production server

We are developing a Spring MVC application which does LDAP authentication using Spring Security framework. The problem we are facing is that the authentication works just fine on our development ...
1
vote
0answers
18 views

Suitability of SAML for use case

A user logs into our portal - site 1; We want them to be able to click through to other sites 2 and 3 within our eco-system without having to further login - so no popup box to verify they have ...
1
vote
0answers
46 views

Cant find Forms Based Authentication Service

I installed Exchange 2013 on Windows Server 2012. After restarting the Host I could not login into owa or ecp the login screen showed up but after entering my correct credentials I would get a HTTP ...
1
vote
0answers
63 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
1
vote
0answers
69 views

heimdal error Decrypt integrity check failed for checksum type

when I try to authentication with heimdal-kdc ,I get this error in kdc log : (enctype aes256-cts-hmac-sha1-96) error Decrypt integrity check failed for checksum type hmac-sha1-96-aes256, key type ...
1
vote
0answers
169 views

putty openssh rsa key signature invalid

I'm running a server with Debian Linux 3.2.46-1+deb7u1 with OpenSSH Server 6.0 and secured the login with a 2048 bit RSA key. Although connecting with OpenSSH Client from another machine succeeds, ...
1
vote
0answers
92 views

Device aware multifactor authentication with Citrix environment?

There are many services that advertise themselves as providing multifactor authentication for Citrix. But, most seem to require the additional generated passcode every time. Are there any that can ...
1
vote
0answers
90 views

unknown user in last output

I found a lot of lines (~900) similar to these in the last output of one of my hosts: trustpor ftpd31576 www.trustport.co Tue Oct 1 10:03 - 10:03 (00:00) trustpor ftpd31575 www.trustport.co ...
1
vote
0answers
132 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
1
vote
0answers
215 views

Redirect user on SSL authentication failure

I configured a VirtualHost with SSL enabled and SSL client authentication, all of that on apache2 2.2.8 (ubuntu server 8.04). All SSL certificates (CA, Server certificate, Client certificate, CRL) ...
1
vote
0answers
124 views

How do I enable digest auth for Jetty fronting Elastic Search

We've gotten Jetty running the HTTP front end of Elastic Search with BASIC authentication. We would like to use DIGEST authentication instead, but the Jetty documentation is hard to reconcile with the ...
1
vote
0answers
71 views

openldap make sure password does not contain username

Is there a way using openldap to ensure that a user's password does not contain their name or their username? I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do ...
1
vote
0answers
289 views

Sendmail Server Authentication: Certificate based: Error

I have configured my setup for a server certificate based authentication. Both Server and Client are sendmail systems and both have the same set of certificates. However when client communicated ...
1
vote
0answers
54 views

Kerberized SSH Failed

I want to authenticate ssh login with Kerberos, however fail. The following is a snippet of ssh debug information with the command ssh -vvv localhost. debug3: Wrote 80 bytes for a total of 1125 ...
1
vote
0answers
665 views

Dovecot Mysql Auth Mechanism

First time poster, long time lurker. I am currently rebuilding my postfix/dovecot mail server for support with MYSQL and am unable to figure out which auth mechanism to use. dovecot: auth: Fatal: No ...
1
vote
0answers
240 views

Site-to-Site VPN between Draytek Vigor and ISA 2006 Authentication Issue

I currently have a remote satellite office that has been configured as a site-to-site VPN. There is a Draytek Vigor 2830 router that is connected to an ISA 2006 server. I am having issues with ...
1
vote
0answers
156 views

IIS 7.5 Reverse proxy authenticate requests before forwarding

I have an internal site that I would like to make available externally. But, I would like to make it available only to a mobile app of my making. The internal site cannot be altered unfortunately, ...
1
vote
0answers
53 views

401 error when setting error responses to custom in iis

I was receiving 401 unauthorized access errors on my /account/login page The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
1
vote
0answers
95 views

testsaslauthd - permission denied

Running: Ubuntu 12.10 32bits server version. I'm trying to connect to the saslauthd and getting the error I mentioned on the title (permission denied). $ /usr/sbin/testsaslauthd -u myuser -p ...
1
vote
0answers
124 views

Authenticating to MySQL with asymmetric key-pair

Is there anyway I can give MySQL a public key to authenticate vs (or in addition to) username/password authentication? It seems that you can switch out the backend of where MySQL stores/checks ...
1
vote
0answers
609 views

openvpn refusing connections with freeradius

I installed openvpn and freeradius from yum and I installed the radiusplugin_v2.1a_beta1.tar.gz but I am having connection issues with the error: XML-RPC: ConnectionRefusedError: 10061: No connection ...
1
vote
0answers
138 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
1
vote
0answers
152 views

Mixing Redmine and custom authentication method in a single apache virtualhost for Redmine

I developed on Redmine a plugin to automatically log users using the REMOTE_USER given by Apache when its Kerberos ticket is accepted. This plugin works as long as the user has a corporate login, but ...
1
vote
0answers
464 views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...