The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
1k views

Access Denied on LAN IIS Access via Integrated Authentication

I have an IIS 7.5 (Win2k8R2) Webserver, which publishes an UNC Share (on a Fileserver) with restricted access. The AppPool Identity is a Domain User-Account with read access to mentioned UNC path. ...
-1
votes
0answers
14 views

Use authorize attribute in windows authentication

Is it important to use authorized attribute in controller or method when login through windows authentication? I am new in active directory and its obvious that any one can not access the system ...
0
votes
0answers
23 views

Configure auth with MySQL in Apache 2.22

I've got a raspberry pi 1 which serves web pages using apache 2.22. I've done some research and I found a way to secure "pages" using a database (mysql in this case). I've found this little guide to ...
1
vote
2answers
1k views

ISA or IIS removing HTTP Authorization header when published

I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am ...
0
votes
0answers
24 views

IIS7 Digest authentication credentials forgotten between pages

I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh. If this is normal behavior for this ...
4
votes
4answers
13k views
0
votes
2answers
4k views

Set up FTP user with ProFTPD on Ubuntu

I want to set up a user "ftp" so they can upload and download files in my /home/httpd/mysite/public_html directory. All files in public_html are owned by user "ftp" and in group "www-data" so the ftp ...
1
vote
0answers
17 views

Directly accessing files through reverse proxy

With my web app I've got to provide files to third party apis that unfortunately only accept file names. The files can be located anywhere, local or on network shares. The files are actually stored on ...
2
votes
4answers
3k views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
19
votes
5answers
46k views

What is the difference between authentication and authorization?

Basic question from a novice: What is the difference between authentication and authorization?
-1
votes
3answers
29 views

Is there a way to allow an apache2 logged in user to access a specific directory dynamically?

This is surprisingly a very difficult problem to solve. I want to allow my Linux users to login to Apache2 and have access to their own directory(ies) only. I've managed to get Linux users to ...
13
votes
5answers
24k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
0
votes
0answers
28 views

Apache - how to match against a variable within regex?

Trying to match a variable against another in a directive does not work: RewriteCond %{REQUEST_URI} /absolute/path/%{REMOTE_USER}/ Trying the If directive in Apache 2.4 doesn't work either: <If ...
1
vote
1answer
5k views

Grant Sharepoint Access to all employees

What's the easiest way to grant access to all the employees of our company to sharepoint portal. There are some general sites which all employees have read access. So Do I have to create an AD group ...
4
votes
1answer
837 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
9
votes
2answers
3k views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would like it to have centralized control of user accounts (at least, I ...
0
votes
1answer
181 views

TACACS+ configuration: how to receive priv-lvl value?

I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL). I tried with ...
0
votes
1answer
98 views

Active directory authentication and authorization for an application

Currently all our applications are web based and our authentication and authorization mechanism is always through the database. eg database logins and access controls defined at database. However now ...
0
votes
0answers
111 views

nginx auth_request configuration

I'm running nginx and I wanna configure it to authenticate via a python script that will look up in my database. I need to receive the password and username in my python script but I can't figure out ...
1
vote
0answers
69 views

Nginx - How to authorize access to repositories using python script

I have set up a local Git server using Nginx ( in Ubuntu ) ,Now I want to authorize users using external python script , which should authorize them against predefined database . AFAIK, I have to ...
0
votes
0answers
34 views

Microsoft AD DS group membership verification when authorizing user

Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
4
votes
0answers
275 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
3
votes
0answers
38 views

Windows Server - Protect websites with AD user

My question is a bit tricky to explain :) We have ASP.NET websites running on Windows Server 2012. Some websites use SqlServer authentication, others use Windows authentication, some don't have any ...
1
vote
1answer
40 views

Subversion Authorization specifics

We have a group of 300 developers. All of them will have rw access to one of the repos, but a small group of them - let's call them contractors - should not be allowed to read any other repo but that ...
0
votes
1answer
399 views

how to translate an Active Directory group into a NIS netgroup?

The goal is to be able to add + : @DL-MyCompany-MyTeam : ALL to /etc/security/access.conf and have it work as expected. This is my sssd.conf: [domain/default] cache_credentials = True [sssd] ...
0
votes
1answer
140 views

nginx location match issue auth_basic

I have this configuration : location / { root /etc/nginx/euchet; } location /app/ { proxy_pass http://172.16.184.2:8080; proxy_redirect off; proxy_set_header Host $host; ...
0
votes
1answer
174 views

How to restrict access to a child SVN directory only?

I'm trying to configure permissions for an SVN repository accessed through Apache 2. What I want is to let anyone access the root directory, while restricting to authenticated users a child directory. ...
8
votes
3answers
365 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
1
vote
0answers
1k views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
0
votes
0answers
39 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
5
votes
1answer
70 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
1
vote
1answer
772 views

WordPress admin password protection not working on Nginx server

I am totally confused with Nginx server password protection. It does not work as we want. This is my Nginx website configuration block. server { listen 80; server_name example.com; ...
3
votes
1answer
516 views

Using Windows Server, how do I schedule an hourly task that will call a URL WITH an authorization header?

I need to schedule a task that will call a given url hourly. The URL doesn't return anything so it is fairly simple HOWEVER this URL requires an authorization header: Authorization: Basic {SOME AUTH ...
4
votes
2answers
570 views

Active Directory, Linux, and User Private Groups

We're in the process of moving from NIS on our Linux systems to binding everything to Active Directory. The NIS environment follows the common standard used by many Linux distributions that a user's ...
0
votes
1answer
360 views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
1
vote
1answer
80 views

Authorizing users to SSH into machine - where to configure?

Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use. I've ...
4
votes
1answer
9k views

IIS 7 password protect folder and files

I am using IIS 7 and I would like sombody to tell me how to password protect a folder. And how would you get the username and password dialog to show when someone tries to download a file in that ...
-1
votes
1answer
3k views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
1
vote
1answer
1k views

Sudoers NOPASSWD how to grant access to a specific ln command

In /etc/sudoers I need to grant passwordless sudo for this command: /usr/bin/env sudo ln -nfs /home/deployer/apps/myapp_staging/shared/config/nginx.conf /etc/nginx/sites-enabled/ to the deployer ...
2
votes
1answer
49 views

Apache Authorization for multiple pages for different users

I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong /var/www/application/user1/user1.html ...
1
vote
1answer
2k views

Apache 2.4: Public Subdirectory with .htaccess

I'm currently upgrading to Apache 2.4. What puzzles me right now is how to create a public subdirectory using .htaccess only. The outer directory is protected by AuthType Basic Previously, the ...
0
votes
1answer
83 views

Can I have Authentication without authorization checks with apache 2.4?

When I do not provide a require directive, apache 2.4 seems to ignore authentication and just lets the user access the url. Is there way to turn off Authorization checks and only worry about ...
1
vote
1answer
113 views

Windows file server access control by device

I'm trying to build a system where access to certain resources (file shares) in Windows Server, is limited not only by the username (in a Active Directory domain), but also by the client machine. So ...
0
votes
0answers
106 views

Multiple CAS servers with Microsoft Exchange and selective authorization

I have a Microsoft Exchange 2010 organization within one Microsoft Windows domain and I have users accessing it through OWA. For simplicity lets say I currently have one CAS server (CAS 1) which is ...
1
vote
1answer
4k views

Enable IIS directory browsing for specific user or group

At home, I have a small server running on Windows Server 2012 and IIS8 (no AD). I want some of the users on my server to be able to access a shared file directory so they can download it via https. I ...
0
votes
1answer
209 views

Windows 2008 server not authorizing vpn traffic

We are struggling to setup windows 2008 server vpn. We have managed to establish a connection to the server from the client pc but cant browse to any url on the same server. We keep getting an ...
4
votes
1answer
121 views

SVNParentPath directory authorization

The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second ...
1
vote
0answers
334 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
9
votes
2answers
6k views

Connection error to mysql database

My application needs to do quite frequent connects to a mysql database on another machine. However I get frequent errors on connection; I can usually eventually connect but after many retries. The ...
2
votes
2answers
788 views

ssh: allow all users for one IP, and restrict to one user for public IP

I have a server on a VPN. This server has a public address and has a gitlab instance on it. I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...