The tag has no usage guidance.

learn more… | top users | synonyms

20
votes
5answers
48k views

What is the difference between authentication and authorization?

Basic question from a novice: What is the difference between authentication and authorization?
13
votes
5answers
25k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
11
votes
4answers
8k views

Linux Central Authentication/Authorization Methods

I have a small but growing network of Linux servers. Ideally I'd like a central place to control User Access, change passwords, etc... I've read a lot about LDAP servers, but I'm still confused about ...
9
votes
2answers
3k views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would like it to have centralized control of user accounts (at least, I ...
9
votes
2answers
6k views

Connection error to mysql database

My application needs to do quite frequent connects to a mysql database on another machine. However I get frequent errors on connection; I can usually eventually connect but after many retries. The ...
8
votes
1answer
4k views

Mixing Subversion “SVNParentPath” and per-repository configurations?

Given a typical Subversion/Apache configuration using SVNParentPath, with repositories hosted under /svn/ like this: <Location /svn> DAV svn SVNParentPath /srv/source/svn/repos ...
8
votes
3answers
365 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
5
votes
1answer
71 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
4
votes
3answers
14k views

How to allow a user in Nagios to view the status of some servers, but not disable/enable anything?

How to allow a user in Nagios to view the status of some servers, but not disable/enable anything?
4
votes
1answer
9k views

IIS 7 password protect folder and files

I am using IIS 7 and I would like sombody to tell me how to password protect a folder. And how would you get the username and password dialog to show when someone tries to download a file in that ...
4
votes
1answer
2k views

How to tweak Gnome user elevation in RHEL/CentOS

So I am attempting to tweak the way GNOME authenticates a desktop user for privileged applications. Out of the box it asks for the root password. For my deployment this is undesirable and I want it ...
4
votes
1answer
442 views

Require membership of more than one group in Apache

I would like to be able to do this: <LocationMatch ^/secret/(.+?)> <Limit GET> Require group member </Limit> <LimitExcept GET> Require group member Require ...
4
votes
1answer
123 views

SVNParentPath directory authorization

The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second ...
4
votes
2answers
571 views

Active Directory, Linux, and User Private Groups

We're in the process of moving from NIS on our Linux systems to binding everything to Active Directory. The NIS environment follows the common standard used by many Linux distributions that a user's ...
4
votes
0answers
276 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
4
votes
1answer
869 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN "uid=zzz,ou=...
3
votes
2answers
111 views

Access rights escalation requiring multiple sysadmin authorisation

I was just wondering if there is a way to give a user root access escalation on a *nix system, kind of like sudo, but which requires more than one sysadmin authorisation. I am thinking of something ...
3
votes
3answers
395 views

Centralized Authentication Method

I have more than 1000 Linux/Unix(Solaris) servers in my network and I want to implement some kind of centralized login server. So that I create users on one server and he can able to login on any of ...
3
votes
1answer
551 views

Using Windows Server, how do I schedule an hourly task that will call a URL WITH an authorization header?

I need to schedule a task that will call a given url hourly. The URL doesn't return anything so it is fairly simple HOWEVER this URL requires an authorization header: Authorization: Basic {SOME AUTH ...
3
votes
2answers
153 views

Subversion authorization

I have installed Apache Subversion on my linux server under /var/svn Currently we are doing two projects in our company with 2 groups: The first group is using the Subversion under: https://www....
3
votes
1answer
834 views

IIS 6 Denies access to the default document

I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...
3
votes
2answers
229 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
3
votes
5answers
3k views

Active Directory Account locks for no apparent reason

I've been troubleshooting this problem for two years and it keeps coming back. Our Mac users authenticate to our Active Directory server which is running Windows Server 2008 Standard. One of the Mac ...
3
votes
1answer
398 views

Apache: Basic auth for root, host-restriction on directory

I want to restrict the access to my Apache HTTPD using basic auth for all files except those in a certain directory. The following works fine for setting up basic auth for the whole server: <...
3
votes
0answers
38 views

Windows Server - Protect websites with AD user

My question is a bit tricky to explain :) We have ASP.NET websites running on Windows Server 2012. Some websites use SqlServer authentication, others use Windows authentication, some don't have any ...
2
votes
2answers
2k views

LDAP: entries for services?

(Apologies if I've got the terminology wrong, I'm fairly new to LDAP) I am setting up a local LDAP server (Apache Directory Server) with the following structure: o={my organization name} [...
2
votes
2answers
811 views

ssh: allow all users for one IP, and restrict to one user for public IP

I have a server on a VPN. This server has a public address and has a gitlab instance on it. I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
2
votes
1answer
1k views

Allow access to one directory when all others require authorisation

I have an Apache config that restricts access to to a website, using the following code - <Directory /var/www/html/website/test/> AuthName "Dyne Drewett Test Site" AuthType ...
2
votes
1answer
67 views

Resolve which public key user uses to access server

Is it possible to resolve, which public key is used to grant user access to a server? For example, there are 5 public keys stored in ~/.ssh/authorized_keys file. I'd like to know which key has the ...
2
votes
1answer
395 views

trac ignores svn authorization settings

I am using VirtualSVN + Trac-plugin on Windows for multi-projects. I have configured users and groups in VirtualSVN, so that only authorized users/groups can access specified resource. For instance: ...
2
votes
4answers
3k views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
2
votes
1answer
12k views

How to debug Samba authorization (authentication) procedure

I'm running a small home network linux-based server which acts as an internet router, torrent client and file server. I have problems connecting Windows clients to server Samba shares ('user name or ...
2
votes
2answers
3k views

Add printer as domain user in Windows 7

In Windows 7, one has to have (local) administrator privileges to install a printer driver, even when this printer is installed from one of the domain servers. The only 'solution' I've read so far is ...
2
votes
1answer
504 views

Apache, SVN and Active Directory: how to avoid duplicate configuration?

I'm trying to linking the SVN hosted on Apache on a Windows Server 2008 to the Active Directory. I understood what do I need to do to manage the groups of users on repository level: <Location "/...
2
votes
2answers
229 views

“Half” ssh authorization to a server with git repository

Currently I have purchased web hosting with ssh access. I have created a git repository on it and if I set my public key in ~/.ssh/authorized_keys file, I have access to that repo, I can push/pull ...
2
votes
3answers
5k views

Configuring SVN Access with Subversion Server

Quick background. We are running Subversion Server 1.6.5 (No Apache just the SVN server) on a Windows box with no web access. We only use TortoiseSVN and AnkhSVN and for continuous integration we use ...
2
votes
1answer
366 views

access control by htaccess and 500 Error Page

i'm trying to protect a Category of my ecommerce with a password, so i'm using htaccess method. I'm using Prestashop, and generate an .htaccess file with its integrated module, in order to have a ...
2
votes
2answers
892 views

X11 for apache user

We are using inkscape to convert SVG images uploaded to our server via a web form. For this inkscape offers a batch mode via the -z option, but this batch mode has a flaw: When inkscape is run by the ...
2
votes
1answer
49 views

Apache Authorization for multiple pages for different users

I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong /var/www/application/user1/user1.html /var/www/...
2
votes
1answer
614 views

error in system log - Succeeded authorizing right

Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
2
votes
1answer
401 views

Eucalyptus Walrus Connection Problems

I'm beginning with Eucalyptus, with some S3 and EC2 background. I have an app for which I use a personal library to interface with S3 and store/retrieve files from there. Now I want to make my app ...
1
vote
1answer
543 views

Can Apache be integrated with 3rd party cookie session authentication/authorization?

I'd like to configure Apache to serve files directly from the file system but authenticate/authorize users. How can Apache be configured so it calls my auth middleware? Basically: 1) Redirect to ...
1
vote
1answer
80 views

Authorizing users to SSH into machine - where to configure?

Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use. I've ...
1
vote
1answer
1k views

Sudoers NOPASSWD how to grant access to a specific ln command

In /etc/sudoers I need to grant passwordless sudo for this command: /usr/bin/env sudo ln -nfs /home/deployer/apps/myapp_staging/shared/config/nginx.conf /etc/nginx/sites-enabled/ to the deployer ...
1
vote
3answers
848 views

Subversion all or nothing access to repo tree

I'm having some problems setting up access to my Subversion repositories on a Linux server. The problem is that I can only seem to get an all-or-nothing structure going. Either everyone gets read ...
1
vote
2answers
873 views

Protecting images from direct access by checking current PHP session with mod_rewrite

I'm working on a solution to a problem where users could potentially access images (in this case PDF files) stored in a folder off the server root. Normally, my application validates users through PHP ...
1
vote
1answer
6k views

Grant Sharepoint Access to all employees

What's the easiest way to grant access to all the employees of our company to sharepoint portal. There are some general sites which all employees have read access. So Do I have to create an AD group ...
1
vote
1answer
2k views

Configure auth_basic with Nginx and Passenger

I'm trying to set up a basic authentication with Nginx. My server configuration look like that: server { listen 80; server_name DOMAIN; root /var/www/web-front-dev/current/public; error_log /...
1
vote
1answer
267 views

What's the advantage of using Grouper over AD or LDAP?

I'm reading the documentation on Grouper, but I can't for the life of me figure out what the benefit of grouper is over storing groups in AD or LDAP. Can anyone shed light?
1
vote
1answer
95 views

Using Web Portal for SSO

I have several (.Net) web apps that are currently hosted on our intranet. I want to expose them to (authorized) external users. I want a web portal that I can use for the authorization with little or ...