The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
13 views

nginx auth_request configuration

I'm running nginx and I wanna configure it to authenticate via a python script that will look up in my database. I need to receive the password and username in my python script but I can't figure out ...
1
vote
0answers
24 views

Nginx - How to authorize access to repositories using python script

I have set up a local Git server using Nginx ( in Ubuntu ) ,Now I want to authorize users using external python script , which should authorize them against predefined database . AFAIK, I have to ...
0
votes
0answers
10 views

Microsoft AD DS group membership verification when authorizing user

Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
4
votes
0answers
65 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
2
votes
0answers
25 views

Windows Server - Protect websites with AD user

My question is a bit tricky to explain :) We have ASP.NET websites running on Windows Server 2012. Some websites use SqlServer authentication, others use Windows authentication, some don't have any ...
1
vote
1answer
23 views

Subversion Authorization specifics

We have a group of 300 developers. All of them will have rw access to one of the repos, but a small group of them - let's call them contractors - should not be allowed to read any other repo but that ...
0
votes
1answer
119 views

how to translate an Active Directory group into a NIS netgroup?

The goal is to be able to add + : @DL-MyCompany-MyTeam : ALL to /etc/security/access.conf and have it work as expected. This is my sssd.conf: [domain/default] cache_credentials = True [sssd] ...
0
votes
1answer
50 views

nginx location match issue auth_basic

I have this configuration : location / { root /etc/nginx/euchet; } location /app/ { proxy_pass http://172.16.184.2:8080; proxy_redirect off; proxy_set_header Host $host; ...
0
votes
0answers
47 views

Application-role based access with nginx?

What are some different ways to configure nginx to allow static file access based on application-defined roles that a user belongs to? (Not local system user groups or roles, just roles defined at the ...
0
votes
1answer
97 views

How to restrict access to a child SVN directory only?

I'm trying to configure permissions for an SVN repository accessed through Apache 2. What I want is to let anyone access the root directory, while restricting to authenticated users a child directory. ...
0
votes
0answers
32 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
1
vote
1answer
516 views

WordPress admin password protection not working on Nginx server

I am totally confused with Nginx server password protection. It does not work as we want. This is my Nginx website configuration block. server { listen 80; server_name example.com; ...
3
votes
1answer
241 views

Using Windows Server, how do I schedule an hourly task that will call a URL WITH an authorization header?

I need to schedule a task that will call a given url hourly. The URL doesn't return anything so it is fairly simple HOWEVER this URL requires an authorization header: Authorization: Basic {SOME AUTH ...
0
votes
1answer
169 views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
0
votes
1answer
61 views

Authorizing users to SSH into machine - where to configure?

Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use. I've ...
0
votes
0answers
64 views

How can I use accounting records on cisco ise authorization?

I'm going to switch from windows NPS to cisco ISE for central authorization on the network. I implemented 802.1x & other needed authentications using it. However, on some points, I need to control ...
-2
votes
1answer
2k views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
1
vote
1answer
587 views

Sudoers NOPASSWD how to grant access to a specific ln command

In /etc/sudoers I need to grant passwordless sudo for this command: /usr/bin/env sudo ln -nfs /home/deployer/apps/myapp_staging/shared/config/nginx.conf /etc/nginx/sites-enabled/ to the deployer ...
2
votes
1answer
38 views

Apache Authorization for multiple pages for different users

I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong /var/www/application/user1/user1.html ...
0
votes
1answer
1k views

Apache 2.4: Public Subdirectory with .htaccess

I'm currently upgrading to Apache 2.4. What puzzles me right now is how to create a public subdirectory using .htaccess only. The outer directory is protected by AuthType Basic Previously, the ...
5
votes
1answer
65 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
0
votes
0answers
69 views

Multiple CAS servers with Microsoft Exchange and selective authorization

I have a Microsoft Exchange 2010 organization within one Microsoft Windows domain and I have users accessing it through OWA. For simplicity lets say I currently have one CAS server (CAS 1) which is ...
9
votes
1answer
1k views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would it to have centralized control of user accounts (at least, I think I'd ...
0
votes
1answer
2k views

Enable IIS directory browsing for specific user or group

At home, I have a small server running on Windows Server 2012 and IIS8 (no AD). I want some of the users on my server to be able to access a shared file directory so they can download it via https. I ...
0
votes
1answer
171 views

Windows 2008 server not authorizing vpn traffic

We are struggling to setup windows 2008 server vpn. We have managed to establish a connection to the server from the client pc but cant browse to any url on the same server. We keep getting an ...
4
votes
1answer
108 views

SVNParentPath directory authorization

The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second ...
1
vote
0answers
251 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
2
votes
2answers
467 views

ssh: allow all users for one IP, and restrict to one user for public IP

I have a server on a VPN. This server has a public address and has a gitlab instance on it. I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
-1
votes
2answers
1k views

Protect access to static files with Apache & Session [closed]

/assets - file1.mp3 - file2.mp3 ... - fileX.mp3 (millions of files) So what I want to prevent is to access the content directly if the user is not logged in like ...
0
votes
0answers
300 views

Intermittent ProviderException: API failed due to error 'The data area passed to a system call is too small. '

Running IIS 7.5.7600.16385 on Windows Server 2008 R2 Enterprise (7601: SP1). One of our websites is set to globally log errors and we are seeing this every day or two. We're using an authorization ...
1
vote
0answers
125 views

401 error when setting error responses to custom in iis

I was receiving 401 unauthorized access errors on my /account/login page The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
0
votes
1answer
74 views

Require user based on URL?

I'd like to require user user1 when the URL is /foo/user1/*, user user2 when the URL is /foo/user2/*, etc. Is it possible to do this? For example, I'd like to do something like this: AliasMatch ...
2
votes
1answer
544 views

error in system log - Succeeded authorizing right

Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
0
votes
1answer
81 views

IIS: selective access to folders

Site MyGreatCompany.com is served by an IIS webserver through SSL and basic authentication. The root directory and all subdirectories should be accessible to every authenticated user, except for ...
1
vote
0answers
60 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
0
votes
3answers
1k views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
1
vote
1answer
100 views

Windows file server access control by device

I'm trying to build a system where access to certain resources (file shares) in Windows Server, is limited not only by the username (in a Active Directory domain), but also by the client machine. So ...
0
votes
4answers
1k views

Protect Files from unauthorized access

I have this very big problem I've been trying to solve for last few days with no success. I have some files which are class schedules, these are imported to the server from an external source (html ...
0
votes
1answer
75 views

Can I have Authentication without authorization checks with apache 2.4?

When I do not provide a require directive, apache 2.4 seems to ignore authentication and just lets the user access the url. Is there way to turn off Authorization checks and only worry about ...
4
votes
1answer
463 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
3
votes
1answer
612 views

IIS 6 Denies access to the default document

I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...
1
vote
0answers
1k views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
3answers
672 views

Subversion all or nothing access to repo tree

I'm having some problems setting up access to my Subversion repositories on a Linux server. The problem is that I can only seem to get an all-or-nothing structure going. Either everyone gets read ...
1
vote
2answers
756 views

ISA or IIS removing HTTP Authorization header when published

I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am ...
1
vote
0answers
923 views

Jenkins - Project based authorization + LDAP

Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration? There are several closed bug reports on the Jenkins Jira site that say users don't need ...
3
votes
2answers
131 views

Subversion authorization

I have installed Apache Subversion on my linux server under /var/svn Currently we are doing two projects in our company with 2 groups: The first group is using the Subversion under: ...
1
vote
3answers
2k views

How can I disable Kerberos authentication for only the root of my site?

I have Kerberos-based authentication and I want to disable it on only root url: http://mysite.com/. And I want it to continue to work fine on any other page like http://mysite.com/page1. I have such ...
3
votes
1answer
335 views

Apache: Basic auth for root, host-restriction on directory

I want to restrict the access to my Apache HTTPD using basic auth for all files except those in a certain directory. The following works fine for setting up basic auth for the whole server: ...
2
votes
1answer
7k views

How to debug Samba authorization (authentication) procedure

I'm running a small home network linux-based server which acts as an internet router, torrent client and file server. I have problems connecting Windows clients to server Samba shares ('user name or ...
0
votes
1answer
554 views

Apache2 filtering Auth headers

I'm running PHP 5.3.6 as Apache 2 module (phpinfo ServerAPI says "Apache 2.0 Filter") in a Ubuntu machine. I have a PHP application and I want a iOS client to send it information under https. ...