The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
36 views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
0
votes
1answer
57 views

Authorizing users to SSH into machine - where to configure?

Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use. I've ...
0
votes
0answers
23 views

How can I use accounting records on cisco ise authorization?

I'm going to switch from windows NPS to cisco ISE for central authorization on the network. I implemented 802.1x & other needed authentications using it. However, on some points, I need to control ...
-2
votes
1answer
352 views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
1
vote
1answer
122 views

Sudoers NOPASSWD how to grant access to a specific ln command

In /etc/sudoers I need to grant passwordless sudo for this command: /usr/bin/env sudo ln -nfs /home/deployer/apps/myapp_staging/shared/config/nginx.conf /etc/nginx/sites-enabled/ to the deployer ...
2
votes
1answer
28 views

Apache Authorization for multiple pages for different users

I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong /var/www/application/user1/user1.html ...
0
votes
1answer
632 views

Apache 2.4: Public Subdirectory with .htaccess

I'm currently upgrading to Apache 2.4. What puzzles me right now is how to create a public subdirectory using .htaccess only. The outer directory is protected by AuthType Basic Previously, the ...
5
votes
0answers
48 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
0
votes
0answers
45 views

Multiple CAS servers with Microsoft Exchange and selective authorization

I have a Microsoft Exchange 2010 organization within one Microsoft Windows domain and I have users accessing it through OWA. For simplicity lets say I currently have one CAS server (CAS 1) which is ...
8
votes
1answer
487 views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would it to have centralized control of user accounts (at least, I think I'd ...
0
votes
1answer
1k views

Enable IIS directory browsing for specific user or group

At home, I have a small server running on Windows Server 2012 and IIS8 (no AD). I want some of the users on my server to be able to access a shared file directory so they can download it via https. I ...
0
votes
1answer
114 views

Windows 2008 server not authorizing vpn traffic

We are struggling to setup windows 2008 server vpn. We have managed to establish a connection to the server from the client pc but cant browse to any url on the same server. We keep getting an ...
3
votes
1answer
84 views

SVNParentPath directory authorization

The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second ...
1
vote
0answers
190 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
2
votes
2answers
227 views

ssh: allow all users for one IP, and restrict to one user for public IP

I have a server on a VPN. This server has a public address and has a gitlab instance on it. I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
-1
votes
2answers
697 views

Protect access to static files with Apache & Session [closed]

/assets - file1.mp3 - file2.mp3 ... - fileX.mp3 (millions of files) So what I want to prevent is to access the content directly if the user is not logged in like ...
0
votes
0answers
189 views

Intermittent ProviderException: API failed due to error 'The data area passed to a system call is too small. '

Running IIS 7.5.7600.16385 on Windows Server 2008 R2 Enterprise (7601: SP1). One of our websites is set to globally log errors and we are seeing this every day or two. We're using an authorization ...
1
vote
0answers
88 views

401 error when setting error responses to custom in iis

I was receiving 401 unauthorized access errors on my /account/login page The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
0
votes
1answer
62 views

Require user based on URL?

I'd like to require user user1 when the URL is /foo/user1/*, user user2 when the URL is /foo/user2/*, etc. Is it possible to do this? For example, I'd like to do something like this: AliasMatch ...
2
votes
1answer
454 views

error in system log - Succeeded authorizing right

Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
0
votes
1answer
71 views

IIS: selective access to folders

Site MyGreatCompany.com is served by an IIS webserver through SSL and basic authentication. The root directory and all subdirectories should be accessible to every authenticated user, except for ...
1
vote
0answers
55 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
0
votes
3answers
555 views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
1
vote
1answer
81 views

Windows file server access control by device

I'm trying to build a system where access to certain resources (file shares) in Windows Server, is limited not only by the username (in a Active Directory domain), but also by the client machine. So ...
0
votes
4answers
775 views

Protect Files from unauthorized access

I have this very big problem I've been trying to solve for last few days with no success. I have some files which are class schedules, these are imported to the server from an external source (html ...
0
votes
1answer
69 views

Can I have Authentication without authorization checks with apache 2.4?

When I do not provide a require directive, apache 2.4 seems to ignore authentication and just lets the user access the url. Is there way to turn off Authorization checks and only worry about ...
4
votes
1answer
269 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
3
votes
1answer
348 views

IIS 6 Denies access to the default document

I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...
1
vote
1answer
978 views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
3answers
485 views

Subversion all or nothing access to repo tree

I'm having some problems setting up access to my Subversion repositories on a Linux server. The problem is that I can only seem to get an all-or-nothing structure going. Either everyone gets read ...
1
vote
2answers
509 views

ISA or IIS removing HTTP Authorization header when published

I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am ...
1
vote
0answers
535 views

Jenkins - Project based authorization + LDAP

Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration? There are several closed bug reports on the Jenkins Jira site that say users don't need ...
3
votes
2answers
127 views

Subversion authorization

I have installed Apache Subversion on my linux server under /var/svn Currently we are doing two projects in our company with 2 groups: The first group is using the Subversion under: ...
1
vote
3answers
2k views

How can I disable Kerberos authentication for only the root of my site?

I have Kerberos-based authentication and I want to disable it on only root url: http://mysite.com/. And I want it to continue to work fine on any other page like http://mysite.com/page1. I have such ...
3
votes
1answer
281 views

Apache: Basic auth for root, host-restriction on directory

I want to restrict the access to my Apache HTTPD using basic auth for all files except those in a certain directory. The following works fine for setting up basic auth for the whole server: ...
1
vote
1answer
4k views

How to debug Samba authorization (authentication) procedure

I'm running a small home network linux-based server which acts as an internet router, torrent client and file server. I have problems connecting Windows clients to server Samba shares ('user name or ...
0
votes
1answer
376 views

Apache2 filtering Auth headers

I'm running PHP 5.3.6 as Apache 2 module (phpinfo ServerAPI says "Apache 2.0 Filter") in a Ubuntu machine. I have a PHP application and I want a iOS client to send it information under https. ...
1
vote
0answers
226 views

SVN server authentication on Mac - users are not recognized

We have a anomaly here, trying to set up SVN authentication. Here is apache configuration: <Location /repo_main> DAV svn SVNPath /svn/repo_main AuthType Basic AuthName "svn" ...
0
votes
2answers
140 views

Working out some quirks of a master SSH server

I am starting a web hosting company and there are a few details that I have yet to figure out, one of them being some sort of SSH VPN to connect to our servers running CentOS 6 with cPanel. So this ...
1
vote
2answers
500 views

Protecting images from direct access by checking current PHP session with mod_rewrite

I'm working on a solution to a problem where users could potentially access images (in this case PDF files) stored in a folder off the server root. Normally, my application validates users through PHP ...
8
votes
3answers
344 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
1
vote
1answer
736 views

Allow access to one directory when all others require authorisation

I have an Apache config that restricts access to to a website, using the following code - <Directory /var/www/html/website/test/> AuthName "Dyne Drewett Test Site" AuthType ...
1
vote
1answer
2k views

SVN SASL Commit - Authorisation failed

I've been attempting to setup our SVN server to be accessible by both DAV SVN through Apache and now the SVN:// protocol (for better performance) root@svnvm:~# svnserve --foreground -d --foreground ...
2
votes
1answer
304 views

Eucalyptus Walrus Connection Problems

I'm beginning with Eucalyptus, with some S3 and EC2 background. I have an app for which I use a personal library to interface with S3 and store/retrieve files from there. Now I want to make my app ...
0
votes
1answer
170 views

OpenSSH scp restrictions a-la gitolite

Does anyone know of some software that would allow to restrict/tune the scp experience on a single unix user, based on SSH keys? Similar to what gitolite does, or more flexible what rssh can do, but ...
5
votes
3answers
8k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
3
votes
1answer
5k views

IIS 7 password protect folder and files

I am using IIS 7 and I would like sombody to tell me how to password protect a folder. And how would you get the username and password dialog to show when someone tries to download a file in that ...
3
votes
2answers
173 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
-1
votes
1answer
65 views

apache crashes after moving to a new server [closed]

I've just moved a bunch of my sites to a new server Everything seems to work fine except of one site. I have changed a domain for that one. The old copy of site on the previous domain works fine. ...
1
vote
1answer
247 views

access control by htaccess and 500 Error Page

i'm trying to protect a Category of my ecommerce with a password, so i'm using htaccess method. I'm using Prestashop, and generate an .htaccess file with its integrated module, in order to have a ...