Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

8
votes
3answers
303 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
7
votes
4answers
2k views

Linux Central Authentication/Authorization Methods

I have a small but growing network of Linux servers. Ideally I'd like a central place to control User Access, change passwords, etc... I've read a lot about LDAP servers, but I'm still confused about ...
7
votes
2answers
3k views

Connection error to mysql database

My application needs to do quite frequent connects to a mysql database on another machine. However I get frequent errors on connection; I can usually eventually connect but after many retries. The ...
6
votes
1answer
2k views

Mixing Subversion “SVNParentPath” and per-repository configurations?

Given a typical Subversion/Apache configuration using SVNParentPath, with repositories hosted under /svn/ like this: <Location /svn> DAV svn SVNParentPath /srv/source/svn/repos ...
4
votes
1answer
753 views

How to tweak Gnome user elevation in RHEL/CentOS

So I am attempting to tweak the way GNOME authenticates a desktop user for privileged applications. Out of the box it asks for the root password. For my deployment this is undesirable and I want it ...
4
votes
1answer
364 views

Require membership of more than one group in Apache

I would like to be able to do this: <LocationMatch ^/secret/(.+?)> <Limit GET> Require group member </Limit> <LimitExcept GET> Require group member Require ...
3
votes
2answers
103 views

Access rights escalation requiring multiple sysadmin authorisation

I was just wondering if there is a way to give a user root access escalation on a *nix system, kind of like sudo, but which requires more than one sysadmin authorisation. I am thinking of something ...
3
votes
3answers
221 views

Centralized Authentication Method

I have more than 1000 Linux/Unix(Solaris) servers in my network and I want to implement some kind of centralized login server. So that I create users on one server and he can able to login on any of ...
3
votes
3answers
3k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
3
votes
2answers
108 views

Subversion authorization

I have installed Apache Subversion on my linux server under /var/svn Currently we are doing two projects in our company with 2 groups: The first group is using the Subversion under: ...
3
votes
1answer
179 views

IIS 6 Denies access to the default document

I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...
3
votes
1answer
2k views

IIS 7 password protect folder and files

I am using IIS 7 and I would like sombody to tell me how to password protect a folder. And how would you get the username and password dialog to show when someone tries to download a file in that ...
3
votes
5answers
1k views

Active Directory Account locks for no apparent reason

I've been troubleshooting this problem for two years and it keeps coming back. Our Mac users authenticate to our Active Directory server which is running Windows Server 2008 Standard. One of the Mac ...
3
votes
1answer
173 views

Apache: Basic auth for root, host-restriction on directory

I want to restrict the access to my Apache HTTPD using basic auth for all files except those in a certain directory. The following works fine for setting up basic auth for the whole server: ...
3
votes
1answer
372 views

Active Directory, Linux, and User Private Groups

We're in the process of moving from NIS on our Linux systems to binding everything to Active Directory. The NIS environment follows the common standard used by many Linux distributions that a user's ...
2
votes
2answers
50 views

ssh: allow all users for one IP, and restrict to one user for public IP

I have a server on a VPN. This server has a public address and has a gitlab instance on it. I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
2
votes
1answer
65 views

Resolve which public key user uses to access server

Is it possible to resolve, which public key is used to grant user access to a server? For example, there are 5 public keys stored in ~/.ssh/authorized_keys file. I'd like to know which key has the ...
2
votes
2answers
108 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
2
votes
2answers
2k views

Add printer as domain user in Windows 7

In Windows 7, one has to have (local) administrator privileges to install a printer driver, even when this printer is installed from one of the domain servers. The only 'solution' I've read so far is ...
2
votes
3answers
4k views

How to allow a user in Nagios to view the status of some servers, but not disable/enable anything?

How to allow a user in Nagios to view the status of some servers, but not disable/enable anything?
2
votes
1answer
369 views

Apache, SVN and Active Directory: how to avoid duplicate configuration?

I'm trying to linking the SVN hosted on Apache on a Windows Server 2008 to the Active Directory. I understood what do I need to do to manage the groups of users on repository level: <Location ...
2
votes
2answers
174 views

“Half” ssh authorization to a server with git repository

Currently I have purchased web hosting with ssh access. I have created a git repository on it and if I set my public key in ~/.ssh/authorized_keys file, I have access to that repo, I can push/pull ...
2
votes
3answers
2k views

Configuring SVN Access with Subversion Server

Quick background. We are running Subversion Server 1.6.5 (No Apache just the SVN server) on a Windows box with no web access. We only use TortoiseSVN and AnkhSVN and for continuous integration we use ...
2
votes
2answers
594 views

X11 for apache user

We are using inkscape to convert SVG images uploaded to our server via a web form. For this inkscape offers a batch mode via the -z option, but this batch mode has a flaw: When inkscape is run by the ...
2
votes
1answer
178 views

error in system log - Succeeded authorizing right

Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
2
votes
1answer
181 views

Eucalyptus Walrus Connection Problems

I'm beginning with Eucalyptus, with some S3 and EC2 background. I have an app for which I use a personal library to interface with S3 and store/retrieve files from there. Now I want to make my app ...
1
vote
2answers
308 views

LDAP: entries for services?

(Apologies if I've got the terminology wrong, I'm fairly new to LDAP) I am setting up a local LDAP server (Apache Directory Server) with the following structure: o={my organization name} ...
1
vote
1answer
291 views

Allow access to one directory when all others require authorisation

I have an Apache config that restricts access to to a website, using the following code - <Directory /var/www/html/website/test/> AuthName "Dyne Drewett Test Site" AuthType ...
1
vote
3answers
210 views

Subversion all or nothing access to repo tree

I'm having some problems setting up access to my Subversion repositories on a Linux server. The problem is that I can only seem to get an all-or-nothing structure going. Either everyone gets read ...
1
vote
2answers
265 views

Protecting images from direct access by checking current PHP session with mod_rewrite

I'm working on a solution to a problem where users could potentially access images (in this case PDF files) stored in a folder off the server root. Normally, my application validates users through PHP ...
1
vote
1answer
296 views

trac ignores svn authorization settings

I am using VirtualSVN + Trac-plugin on Windows for multi-projects. I have configured users and groups in VirtualSVN, so that only authorized users/groups can access specified resource. For instance: ...
1
vote
1answer
125 views

What's the advantage of using Grouper over AD or LDAP?

I'm reading the documentation on Grouper, but I can't for the life of me figure out what the benefit of grouper is over storing groups in AD or LDAP. Can anyone shed light?
1
vote
1answer
1k views

Grant Sharepoint Access to all employees

What's the easiest way to grant access to all the employees of our company to sharepoint portal. There are some general sites which all employees have read access. So Do I have to create an AD group ...
1
vote
1answer
88 views

Using Web Portal for SSO

I have several (.Net) web apps that are currently hosted on our intranet. I want to expose them to (authorized) external users. I want a web portal that I can use for the authorization with little or ...
1
vote
1answer
808 views

SVN SASL Commit - Authorisation failed

I've been attempting to setup our SVN server to be accessible by both DAV SVN through Apache and now the SVN:// protocol (for better performance) root@svnvm:~# svnserve --foreground -d --foreground ...
1
vote
1answer
2k views

How to authorize user for a subfolder

Using Windows Server 2003, I would like to give a user full access to a subfolder. Let´s say I have folder A with subfolders B1 and B2. I observed that when granting authorization to B1, the user ...
1
vote
0answers
150 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
1
vote
2answers
154 views

ISA or IIS removing HTTP Authorization header when published

I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am ...
1
vote
0answers
245 views

Jenkins - Project based authorization + LDAP

Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration? There are several closed bug reports on the Jenkins Jira site that say users don't need ...
1
vote
3answers
812 views

How can I disable Kerberos authentication for only the root of my site?

I have Kerberos-based authentication and I want to disable it on only root url: http://mysite.com/. And I want it to continue to work fine on any other page like http://mysite.com/page1. I have such ...
1
vote
0answers
161 views

SVN server authentication on Mac - users are not recognized

We have a anomaly here, trying to set up SVN authentication. Here is apache configuration: <Location /repo_main> DAV svn SVNPath /svn/repo_main AuthType Basic AuthName "svn" ...
1
vote
1answer
175 views

access control by htaccess and 500 Error Page

i'm trying to protect a Category of my ecommerce with a password, so i'm using htaccess method. I'm using Prestashop, and generate an .htaccess file with its integrated module, in order to have a ...
1
vote
1answer
435 views

Authorisation in mod_wsgi

I have the following setup, WSGIScriptAlias /i C:/Project/Scripts/hello.wsgi WSGIScriptAlias /hello C:/Project/Scripts/hello.wsgi <Directory "C:/Project/Scripts"> Order deny,allow Allow from ...
1
vote
0answers
192 views

Strange IIS authorization issue for administrator

I am using VSTS 2008 + C# + .Net 3.5 + IIS 6.0 + Windows Server 2003 Enterprise x64 SP2 + ASP.Net. I am using anynomous authentication + Windows authentication mode in IIS web site, and I map the user ...
0
votes
3answers
2k views

Quick way to password-protect Tomcat?

I'm looking for a quick way to protect a Tomcat instance and all webapps running on it, so that accessing any page requires credentials (simple username/passwd). I guess Realm is the "proper" way to ...
0
votes
1answer
259 views

Can Apache be integrated with 3rd party cookie session authentication/authorization?

I'd like to configure Apache to serve files directly from the file system but authenticate/authorize users. How can Apache be configured so it calls my auth middleware? Basically: 1) Redirect to ...
0
votes
1answer
45 views

IIS: selective access to folders

Site MyGreatCompany.com is served by an IIS webserver through SSL and basic authentication. The root directory and all subdirectories should be accessible to every authenticated user, except for ...
0
votes
2answers
110 views

Working out some quirks of a master SSH server

I am starting a web hosting company and there are a few details that I have yet to figure out, one of them being some sort of SSH VPN to connect to our servers running CentOS 6 with cPanel. So this ...
0
votes
2answers
53 views

Restrict access to website

All, I have developed an internal website for a firm and then need to restrict access to only the internal workers. i.e. connected to their own wireless network. For anyone outside the network, the ...
0
votes
1answer
112 views

Can I use authorized keys for user not 'root'

I used this tutorial to login into root without using password. Is there any way to make this work for normal user , not root user

1 2