The authorization tag has no wiki summary.
0
votes
0answers
7 views
kadmin: Missing parameters in krb5.conf required for kadmin client while initializing kadmin interface
As I'm trying to run kadmin to generate krb5.keytab file, an error Authenticating as principal administrator/admin@VB1 with password.
kadmin: Missing parameters in krb5.conf required for kadmin client ...
2
votes
2answers
50 views
ssh: allow all users for one IP, and restrict to one user for public IP
I have a server on a VPN. This server has a public address and has a gitlab instance on it.
I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
0
votes
0answers
12 views
How to allow access to a folder in a site just to a specific Application Pool Identity
I have MS Server 2008 R2 and IIS 6.1. In my IIS 6.1 I have several sites each one with its own Application Pool. For the context of this question suppose I have MyDownloads.MyDomain.com (with app pool ...
-1
votes
2answers
124 views
Protect access to static files with Apache & Session [closed]
/assets
- file1.mp3
- file2.mp3
...
- fileX.mp3
(millions of files)
So what I want to prevent is to access the content directly if the user is not logged in
like
...
0
votes
0answers
43 views
Intermittent ProviderException: API failed due to error 'The data area passed to a system call is too small. '
Running IIS 7.5.7600.16385 on Windows Server 2008 R2 Enterprise (7601: SP1). One of our websites is set to globally log errors and we are seeing this every day or two. We're using an authorization ...
0
votes
0answers
137 views
Can't log in to samba share from windows 7 but from ubuntu works fine
I have configured samba server on centos 6. Configuration is very simple almost default. I share only home dirs. After install and configure adding proper user with smbpasswd -a (and starting services ...
0
votes
0answers
33 views
401 error when setting error responses to custom in iis
I was receiving 401 unauthorized access errors on my /account/login page
The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
0
votes
1answer
40 views
Require user based on URL?
I'd like to require user user1 when the URL is /foo/user1/*, user user2 when the URL is /foo/user2/*, etc. Is it possible to do this?
For example, I'd like to do something like this:
AliasMatch ...
2
votes
1answer
178 views
error in system log - Succeeded authorizing right
Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
0
votes
1answer
45 views
IIS: selective access to folders
Site MyGreatCompany.com is served by an IIS webserver through SSL and basic authentication.
The root directory and all subdirectories should be accessible to every authenticated user, except for ...
0
votes
0answers
31 views
Getting apache to use ldap group and filesystem group information
We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
0
votes
1answer
78 views
Kerberos Authentication for workstations not on domain
I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
0
votes
0answers
35 views
Windows file server access control by device
I'm trying to build a system where access to certain resources (file shares) in Windows Server, is limited not only by the username (in a Active Directory domain), but also by the client machine. So ...
0
votes
4answers
341 views
Protect Files from unauthorized access
I have this very big problem I've been trying to solve for last few days with no success. I have some files which are class schedules, these are imported to the server from an external source (html ...
0
votes
1answer
48 views
Can I have Authentication without authorization checks with apache 2.4?
When I do not provide a require directive, apache 2.4 seems to ignore authentication and just lets the user access the url.
Is there way to turn off Authorization checks and only worry about ...
1
vote
0answers
150 views
Apache LDAP auth: denied all time
There is my config (httpd 2.4):
<AuthnProviderAlias ldap zzzldap>
LDAPReferrals Off
AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)"
AuthLDAPBindDN ...
3
votes
1answer
179 views
IIS 6 Denies access to the default document
I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...
0
votes
0answers
346 views
Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)
(Debian Squeeze)
I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
3answers
210 views
Subversion all or nothing access to repo tree
I'm having some problems setting up access to my Subversion repositories on a Linux server.
The problem is that I can only seem to get an all-or-nothing structure going. Either everyone gets read ...
1
vote
2answers
154 views
ISA or IIS removing HTTP Authorization header when published
I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am ...
1
vote
0answers
245 views
Jenkins - Project based authorization + LDAP
Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration?
There are several closed bug reports on the Jenkins Jira site that say users don't need ...
3
votes
2answers
108 views
Subversion authorization
I have installed Apache Subversion on my linux server under /var/svn
Currently we are doing two projects in our company with 2 groups:
The first group is using the Subversion under:
...
1
vote
3answers
814 views
How can I disable Kerberos authentication for only the root of my site?
I have Kerberos-based authentication and I want to disable it on only root url: http://mysite.com/. And I want it to continue to work fine on any other page like http://mysite.com/page1.
I have such ...
0
votes
0answers
174 views
How to get REMOTE_USER or HTTP_AUTHORIZATION headers in autotet/apache/conf/afe-directives for enabling authentication
I have installed autotest from github on ubuntu 11.04 system. When i go to frontend, it logins with debug_user every time and run all the jobs with debug_user as an owner.
I want to add new user in ...
3
votes
1answer
173 views
Apache: Basic auth for root, host-restriction on directory
I want to restrict the access to my Apache HTTPD using basic auth for all files except those in a certain directory.
The following works fine for setting up basic auth for the whole server:
...
0
votes
1answer
640 views
How to debug Samba authorization (authentication) procedure
I'm running a small home network linux-based server which acts as an internet router, torrent client and file server. I have problems connecting Windows clients to server Samba shares ('user name or ...
0
votes
1answer
189 views
Apache2 filtering Auth headers
I'm running PHP 5.3.6 as Apache 2 module (phpinfo ServerAPI says "Apache 2.0 Filter") in a Ubuntu machine. I have a PHP application and I want a iOS client to send it information under https. ...
1
vote
0answers
161 views
SVN server authentication on Mac - users are not recognized
We have a anomaly here, trying to set up SVN authentication. Here is apache configuration:
<Location /repo_main>
DAV svn
SVNPath /svn/repo_main
AuthType Basic
AuthName "svn"
...
0
votes
2answers
110 views
Working out some quirks of a master SSH server
I am starting a web hosting company and there are a few details that I have yet to figure out, one of them being some sort of SSH VPN to connect to our servers running CentOS 6 with cPanel.
So this ...
1
vote
2answers
266 views
Protecting images from direct access by checking current PHP session with mod_rewrite
I'm working on a solution to a problem where users could potentially access images (in this case PDF files) stored in a folder off the server root. Normally, my application validates users through PHP ...
8
votes
3answers
303 views
Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)
The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it.
What we'd like to do is get a ...
1
vote
1answer
291 views
Allow access to one directory when all others require authorisation
I have an Apache config that restricts access to to a website, using the following code -
<Directory /var/www/html/website/test/>
AuthName "Dyne Drewett Test Site"
AuthType ...
1
vote
1answer
808 views
SVN SASL Commit - Authorisation failed
I've been attempting to setup our SVN server to be accessible by both DAV SVN through Apache and now the SVN:// protocol (for better performance)
root@svnvm:~# svnserve --foreground -d --foreground ...
0
votes
1answer
33 views
need not user but ?role? [closed]
Facts:
I'm not a root.
There are few regular ldap users in the system including me.
They can 'su' to technical account.
As a technical user I'd like to have something (maybe a ?role?) that ...
2
votes
1answer
181 views
Eucalyptus Walrus Connection Problems
I'm beginning with Eucalyptus, with some S3 and EC2 background. I have an app for which I use a personal library to interface with S3 and store/retrieve files from there. Now I want to make my app ...
0
votes
1answer
129 views
OpenSSH scp restrictions a-la gitolite
Does anyone know of some software that would allow to restrict/tune the scp experience on a single unix user, based on SSH keys?
Similar to what gitolite does, or more flexible what rssh can do, but ...
3
votes
3answers
3k views
How do you force an update to a user's group membership in Windows 7?
I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
3
votes
1answer
2k views
IIS 7 password protect folder and files
I am using IIS 7 and I would like sombody to tell me how to password protect a folder.
And how would you get the username and password dialog to show when someone tries to download a file in that ...
2
votes
2answers
108 views
Can I set up application specific passwords on Ubuntu?
I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
-1
votes
1answer
62 views
apache crashes after moving to a new server [closed]
I've just moved a bunch of my sites to a new server
Everything seems to work fine except of one site.
I have changed a domain for that one.
The old copy of site on the previous domain works fine.
...
1
vote
1answer
175 views
access control by htaccess and 500 Error Page
i'm trying to protect a Category of my ecommerce with a password, so i'm using htaccess method.
I'm using Prestashop, and generate an .htaccess file with its integrated module, in order to have a ...
1
vote
2answers
308 views
LDAP: entries for services?
(Apologies if I've got the terminology wrong, I'm fairly new to LDAP)
I am setting up a local LDAP server (Apache Directory Server) with the following structure:
o={my organization name} ...
2
votes
1answer
369 views
Apache, SVN and Active Directory: how to avoid duplicate configuration?
I'm trying to linking the SVN hosted on Apache on a Windows Server 2008 to the Active Directory.
I understood what do I need to do to manage the groups of users on repository level:
<Location ...
0
votes
1answer
492 views
Configure auth_basic with Nginx and Passenger
I'm trying to set up a basic authentication with Nginx.
My server configuration look like that:
server {
listen 80;
server_name DOMAIN;
root /var/www/web-front-dev/current/public;
error_log ...
1
vote
1answer
2k views
How to authorize user for a subfolder
Using Windows Server 2003, I would like to give a user full access to a subfolder. Let´s say I have folder A with subfolders B1 and B2. I observed that when granting authorization to B1, the user ...
0
votes
2answers
152 views
I get a message denying access when I try to delete a file that I created
OS client: Windows7 professional
OS server: Windows 2003
I create a new file in my documents folder (on the server). When I try to delete the file later, I get the following error:
Cannot delete the ...
0
votes
1answer
259 views
Can Apache be integrated with 3rd party cookie session authentication/authorization?
I'd like to configure Apache to serve files directly from the file system but authenticate/authorize users. How can Apache be configured so it calls my auth middleware?
Basically:
1) Redirect to ...
0
votes
1answer
2k views
authorization: application pool identity cannot access path
I have two very similar ASP Classic apps that both use Windows Authentication and run on the same development PC (Windows 7/IIS 7.5).
They've been around for years, and have 'travelled' with me as ...
0
votes
2answers
53 views
Restrict access to website
All,
I have developed an internal website for a firm and then need to restrict access to only the internal workers. i.e. connected to their own wireless network. For anyone outside the network, the ...
1
vote
1answer
125 views
What's the advantage of using Grouper over AD or LDAP?
I'm reading the documentation on Grouper, but I can't for the life of me figure out what the benefit of grouper is over storing groups in AD or LDAP. Can anyone shed light?
