The tag has no wiki summary.

learn more… | top users | synonyms

-2
votes
1answer
34 views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
1
vote
1answer
65 views

Sudoers NOPASSWD how to grant access to a specific ln command

In /etc/sudoers I need to grant passwordless sudo for this command: /usr/bin/env sudo ln -nfs /home/deployer/apps/myapp_staging/shared/config/nginx.conf /etc/nginx/sites-enabled/ to the deployer ...
2
votes
1answer
21 views

Apache Authorization for multiple pages for different users

I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong /var/www/application/user1/user1.html ...
0
votes
1answer
311 views

Apache 2.4: Public Subdirectory with .htaccess

I'm currently upgrading to Apache 2.4. What puzzles me right now is how to create a public subdirectory using .htaccess only. The outer directory is protected by AuthType Basic Previously, the ...
4
votes
0answers
36 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
0
votes
0answers
30 views

Multiple CAS servers with Microsoft Exchange and selective authorization

I have a Microsoft Exchange 2010 organization within one Microsoft Windows domain and I have users accessing it through OWA. For simplicity lets say I currently have one CAS server (CAS 1) which is ...
6
votes
1answer
292 views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would it to have centralized control of user accounts (at least, I think I'd ...
0
votes
1answer
424 views

Enable IIS directory browsing for specific user or group

At home, I have a small server running on Windows Server 2012 and IIS8 (no AD). I want some of the users on my server to be able to access a shared file directory so they can download it via https. I ...
0
votes
0answers
17 views

Apache HTTP authorization modules order

My httpf.conf file looks like this: ... LoadModule authz_user_module LoadModule authz_my_module ... And my .htaccess file looks like this: AuthType Basic AuthNam "private ares" AuthBasicProvider ...
0
votes
0answers
29 views

environment=“NAME=value” in authorized_keys file leading to “Server refused our key”

In "man sshd" one can find that several options can be used for given key in .ssh/authorized_keys. I wanted to use environment="NAME=value" for determining which key was used for authentication. But ...
0
votes
1answer
92 views

Windows 2008 server not authorizing vpn traffic

We are struggling to setup windows 2008 server vpn. We have managed to establish a connection to the server from the client pc but cant browse to any url on the same server. We keep getting an ...
3
votes
1answer
70 views

SVNParentPath directory authorization

The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second ...
1
vote
0answers
161 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
2
votes
2answers
139 views

ssh: allow all users for one IP, and restrict to one user for public IP

I have a server on a VPN. This server has a public address and has a gitlab instance on it. I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
-1
votes
2answers
544 views

Protect access to static files with Apache & Session [closed]

/assets - file1.mp3 - file2.mp3 ... - fileX.mp3 (millions of files) So what I want to prevent is to access the content directly if the user is not logged in like ...
0
votes
0answers
147 views

Intermittent ProviderException: API failed due to error 'The data area passed to a system call is too small. '

Running IIS 7.5.7600.16385 on Windows Server 2008 R2 Enterprise (7601: SP1). One of our websites is set to globally log errors and we are seeing this every day or two. We're using an authorization ...
1
vote
0answers
69 views

401 error when setting error responses to custom in iis

I was receiving 401 unauthorized access errors on my /account/login page The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
0
votes
1answer
61 views

Require user based on URL?

I'd like to require user user1 when the URL is /foo/user1/*, user user2 when the URL is /foo/user2/*, etc. Is it possible to do this? For example, I'd like to do something like this: AliasMatch ...
2
votes
1answer
404 views

error in system log - Succeeded authorizing right

Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
0
votes
1answer
66 views

IIS: selective access to folders

Site MyGreatCompany.com is served by an IIS webserver through SSL and basic authentication. The root directory and all subdirectories should be accessible to every authenticated user, except for ...
1
vote
0answers
49 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
0
votes
3answers
331 views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
1
vote
1answer
74 views

Windows file server access control by device

I'm trying to build a system where access to certain resources (file shares) in Windows Server, is limited not only by the username (in a Active Directory domain), but also by the client machine. So ...
0
votes
4answers
591 views

Protect Files from unauthorized access

I have this very big problem I've been trying to solve for last few days with no success. I have some files which are class schedules, these are imported to the server from an external source (html ...
0
votes
1answer
65 views

Can I have Authentication without authorization checks with apache 2.4?

When I do not provide a require directive, apache 2.4 seems to ignore authentication and just lets the user access the url. Is there way to turn off Authorization checks and only worry about ...
3
votes
0answers
219 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
3
votes
1answer
297 views

IIS 6 Denies access to the default document

I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...
1
vote
1answer
834 views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
3answers
446 views

Subversion all or nothing access to repo tree

I'm having some problems setting up access to my Subversion repositories on a Linux server. The problem is that I can only seem to get an all-or-nothing structure going. Either everyone gets read ...
1
vote
2answers
409 views

ISA or IIS removing HTTP Authorization header when published

I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am ...
1
vote
0answers
414 views

Jenkins - Project based authorization + LDAP

Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration? There are several closed bug reports on the Jenkins Jira site that say users don't need ...
3
votes
2answers
122 views

Subversion authorization

I have installed Apache Subversion on my linux server under /var/svn Currently we are doing two projects in our company with 2 groups: The first group is using the Subversion under: ...
1
vote
3answers
2k views

How can I disable Kerberos authentication for only the root of my site?

I have Kerberos-based authentication and I want to disable it on only root url: http://mysite.com/. And I want it to continue to work fine on any other page like http://mysite.com/page1. I have such ...
3
votes
1answer
254 views

Apache: Basic auth for root, host-restriction on directory

I want to restrict the access to my Apache HTTPD using basic auth for all files except those in a certain directory. The following works fine for setting up basic auth for the whole server: ...
1
vote
1answer
3k views

How to debug Samba authorization (authentication) procedure

I'm running a small home network linux-based server which acts as an internet router, torrent client and file server. I have problems connecting Windows clients to server Samba shares ('user name or ...
0
votes
1answer
297 views

Apache2 filtering Auth headers

I'm running PHP 5.3.6 as Apache 2 module (phpinfo ServerAPI says "Apache 2.0 Filter") in a Ubuntu machine. I have a PHP application and I want a iOS client to send it information under https. ...
1
vote
0answers
200 views

SVN server authentication on Mac - users are not recognized

We have a anomaly here, trying to set up SVN authentication. Here is apache configuration: <Location /repo_main> DAV svn SVNPath /svn/repo_main AuthType Basic AuthName "svn" ...
0
votes
2answers
133 views

Working out some quirks of a master SSH server

I am starting a web hosting company and there are a few details that I have yet to figure out, one of them being some sort of SSH VPN to connect to our servers running CentOS 6 with cPanel. So this ...
1
vote
2answers
445 views

Protecting images from direct access by checking current PHP session with mod_rewrite

I'm working on a solution to a problem where users could potentially access images (in this case PDF files) stored in a folder off the server root. Normally, my application validates users through PHP ...
8
votes
3answers
334 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
1
vote
1answer
559 views

Allow access to one directory when all others require authorisation

I have an Apache config that restricts access to to a website, using the following code - <Directory /var/www/html/website/test/> AuthName "Dyne Drewett Test Site" AuthType ...
1
vote
1answer
1k views

SVN SASL Commit - Authorisation failed

I've been attempting to setup our SVN server to be accessible by both DAV SVN through Apache and now the SVN:// protocol (for better performance) root@svnvm:~# svnserve --foreground -d --foreground ...
2
votes
1answer
257 views

Eucalyptus Walrus Connection Problems

I'm beginning with Eucalyptus, with some S3 and EC2 background. I have an app for which I use a personal library to interface with S3 and store/retrieve files from there. Now I want to make my app ...
0
votes
1answer
163 views

OpenSSH scp restrictions a-la gitolite

Does anyone know of some software that would allow to restrict/tune the scp experience on a single unix user, based on SSH keys? Similar to what gitolite does, or more flexible what rssh can do, but ...
5
votes
3answers
7k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
3
votes
1answer
4k views

IIS 7 password protect folder and files

I am using IIS 7 and I would like sombody to tell me how to password protect a folder. And how would you get the username and password dialog to show when someone tries to download a file in that ...
2
votes
2answers
159 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
-1
votes
1answer
64 views

apache crashes after moving to a new server [closed]

I've just moved a bunch of my sites to a new server Everything seems to work fine except of one site. I have changed a domain for that one. The old copy of site on the previous domain works fine. ...
1
vote
1answer
220 views

access control by htaccess and 500 Error Page

i'm trying to protect a Category of my ecommerce with a password, so i'm using htaccess method. I'm using Prestashop, and generate an .htaccess file with its integrated module, in order to have a ...
1
vote
2answers
614 views

LDAP: entries for services?

(Apologies if I've got the terminology wrong, I'm fairly new to LDAP) I am setting up a local LDAP server (Apache Directory Server) with the following structure: o={my organization name} ...