The tag has no wiki summary.

learn more… | top users | synonyms

8
votes
5answers
21k views

What is the difference between authentication and authorization?

Basic question from a novice: What is the difference between authentication and authorization?
8
votes
1answer
577 views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would it to have centralized control of user accounts (at least, I think I'd ...
8
votes
4answers
4k views

Linux Central Authentication/Authorization Methods

I have a small but growing network of Linux servers. Ideally I'd like a central place to control User Access, change passwords, etc... I've read a lot about LDAP servers, but I'm still confused about ...
8
votes
3answers
345 views

Join ActiveDirectory (Win 2k8R2) to OpenDirectory(Snow Leopard)

The vast majority of questions and so on regarding the interoperability of Active and Open directories involves getting Mac clients to see an AD and auth against it. What we'd like to do is get a ...
7
votes
2answers
5k views

Connection error to mysql database

My application needs to do quite frequent connects to a mysql database on another machine. However I get frequent errors on connection; I can usually eventually connect but after many retries. The ...
7
votes
1answer
3k views

Mixing Subversion “SVNParentPath” and per-repository configurations?

Given a typical Subversion/Apache configuration using SVNParentPath, with repositories hosted under /svn/ like this: <Location /svn> DAV svn SVNParentPath /srv/source/svn/repos ...
5
votes
3answers
9k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
5
votes
1answer
55 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
4
votes
1answer
1k views

How to tweak Gnome user elevation in RHEL/CentOS

So I am attempting to tweak the way GNOME authenticates a desktop user for privileged applications. Out of the box it asks for the root password. For my deployment this is undesirable and I want it ...
4
votes
1answer
414 views

Require membership of more than one group in Apache

I would like to be able to do this: <LocationMatch ^/secret/(.+?)> <Limit GET> Require group member </Limit> <LimitExcept GET> Require group member Require ...
4
votes
1answer
93 views

SVNParentPath directory authorization

The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second ...
4
votes
2answers
502 views

Active Directory, Linux, and User Private Groups

We're in the process of moving from NIS on our Linux systems to binding everything to Active Directory. The NIS environment follows the common standard used by many Linux distributions that a user's ...
4
votes
1answer
279 views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN ...
3
votes
2answers
106 views

Access rights escalation requiring multiple sysadmin authorisation

I was just wondering if there is a way to give a user root access escalation on a *nix system, kind of like sudo, but which requires more than one sysadmin authorisation. I am thinking of something ...
3
votes
3answers
261 views

Centralized Authentication Method

I have more than 1000 Linux/Unix(Solaris) servers in my network and I want to implement some kind of centralized login server. So that I create users on one server and he can able to login on any of ...
3
votes
2answers
127 views

Subversion authorization

I have installed Apache Subversion on my linux server under /var/svn Currently we are doing two projects in our company with 2 groups: The first group is using the Subversion under: ...
3
votes
3answers
8k views

How to allow a user in Nagios to view the status of some servers, but not disable/enable anything?

How to allow a user in Nagios to view the status of some servers, but not disable/enable anything?
3
votes
1answer
392 views

IIS 6 Denies access to the default document

I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...
3
votes
2answers
180 views

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. ...
3
votes
1answer
5k views

IIS 7 password protect folder and files

I am using IIS 7 and I would like sombody to tell me how to password protect a folder. And how would you get the username and password dialog to show when someone tries to download a file in that ...
3
votes
5answers
2k views

Active Directory Account locks for no apparent reason

I've been troubleshooting this problem for two years and it keeps coming back. Our Mac users authenticate to our Active Directory server which is running Windows Server 2008 Standard. One of the Mac ...
3
votes
1answer
288 views

Apache: Basic auth for root, host-restriction on directory

I want to restrict the access to my Apache HTTPD using basic auth for all files except those in a certain directory. The following works fine for setting up basic auth for the whole server: ...
2
votes
2answers
254 views

ssh: allow all users for one IP, and restrict to one user for public IP

I have a server on a VPN. This server has a public address and has a gitlab instance on it. I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
2
votes
1answer
65 views

Resolve which public key user uses to access server

Is it possible to resolve, which public key is used to grant user access to a server? For example, there are 5 public keys stored in ~/.ssh/authorized_keys file. I'd like to know which key has the ...
2
votes
1answer
78 views

Using Windows Server, how do I schedule an hourly task that will call a URL WITH an authorization header?

I need to schedule a task that will call a given url hourly. The URL doesn't return anything so it is fairly simple HOWEVER this URL requires an authorization header: Authorization: Basic {SOME AUTH ...
2
votes
2answers
2k views

Add printer as domain user in Windows 7

In Windows 7, one has to have (local) administrator privileges to install a printer driver, even when this printer is installed from one of the domain servers. The only 'solution' I've read so far is ...
2
votes
1answer
465 views

Apache, SVN and Active Directory: how to avoid duplicate configuration?

I'm trying to linking the SVN hosted on Apache on a Windows Server 2008 to the Active Directory. I understood what do I need to do to manage the groups of users on repository level: <Location ...
2
votes
2answers
185 views

“Half” ssh authorization to a server with git repository

Currently I have purchased web hosting with ssh access. I have created a git repository on it and if I set my public key in ~/.ssh/authorized_keys file, I have access to that repo, I can push/pull ...
2
votes
3answers
3k views

Configuring SVN Access with Subversion Server

Quick background. We are running Subversion Server 1.6.5 (No Apache just the SVN server) on a Windows box with no web access. We only use TortoiseSVN and AnkhSVN and for continuous integration we use ...
2
votes
2answers
760 views

X11 for apache user

We are using inkscape to convert SVG images uploaded to our server via a web form. For this inkscape offers a batch mode via the -z option, but this batch mode has a flaw: When inkscape is run by the ...
2
votes
1answer
30 views

Apache Authorization for multiple pages for different users

I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong /var/www/application/user1/user1.html ...
2
votes
1answer
474 views

error in system log - Succeeded authorizing right

Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
2
votes
1answer
318 views

Eucalyptus Walrus Connection Problems

I'm beginning with Eucalyptus, with some S3 and EC2 background. I have an app for which I use a personal library to interface with S3 and store/retrieve files from there. Now I want to make my app ...
1
vote
2answers
797 views

LDAP: entries for services?

(Apologies if I've got the terminology wrong, I'm fairly new to LDAP) I am setting up a local LDAP server (Apache Directory Server) with the following structure: o={my organization name} ...
1
vote
1answer
792 views

Allow access to one directory when all others require authorisation

I have an Apache config that restricts access to to a website, using the following code - <Directory /var/www/html/website/test/> AuthName "Dyne Drewett Test Site" AuthType ...
1
vote
1answer
172 views

Sudoers NOPASSWD how to grant access to a specific ln command

In /etc/sudoers I need to grant passwordless sudo for this command: /usr/bin/env sudo ln -nfs /home/deployer/apps/myapp_staging/shared/config/nginx.conf /etc/nginx/sites-enabled/ to the deployer ...
1
vote
3answers
499 views

Subversion all or nothing access to repo tree

I'm having some problems setting up access to my Subversion repositories on a Linux server. The problem is that I can only seem to get an all-or-nothing structure going. Either everyone gets read ...
1
vote
2answers
543 views

Protecting images from direct access by checking current PHP session with mod_rewrite

I'm working on a solution to a problem where users could potentially access images (in this case PDF files) stored in a folder off the server root. Normally, my application validates users through PHP ...
1
vote
1answer
358 views

trac ignores svn authorization settings

I am using VirtualSVN + Trac-plugin on Windows for multi-projects. I have configured users and groups in VirtualSVN, so that only authorized users/groups can access specified resource. For instance: ...
1
vote
1answer
1k views

Configure auth_basic with Nginx and Passenger

I'm trying to set up a basic authentication with Nginx. My server configuration look like that: server { listen 80; server_name DOMAIN; root /var/www/web-front-dev/current/public; error_log ...
1
vote
1answer
148 views

What's the advantage of using Grouper over AD or LDAP?

I'm reading the documentation on Grouper, but I can't for the life of me figure out what the benefit of grouper is over storing groups in AD or LDAP. Can anyone shed light?
1
vote
1answer
2k views

Grant Sharepoint Access to all employees

What's the easiest way to grant access to all the employees of our company to sharepoint portal. There are some general sites which all employees have read access. So Do I have to create an AD group ...
1
vote
1answer
94 views

Using Web Portal for SSO

I have several (.Net) web apps that are currently hosted on our intranet. I want to expose them to (authorized) external users. I want a web portal that I can use for the authorization with little or ...
1
vote
1answer
40 views

WordPress admin password protection not working on Nginx server

I am totally confused with Nginx server password protection. It does not work as we want. This is my Nginx website configuration block. server { listen 80; server_name example.com; ...
1
vote
1answer
82 views

Windows file server access control by device

I'm trying to build a system where access to certain resources (file shares) in Windows Server, is limited not only by the username (in a Active Directory domain), but also by the client machine. So ...
1
vote
1answer
4k views

How to debug Samba authorization (authentication) procedure

I'm running a small home network linux-based server which acts as an internet router, torrent client and file server. I have problems connecting Windows clients to server Samba shares ('user name or ...
1
vote
1answer
2k views

SVN SASL Commit - Authorisation failed

I've been attempting to setup our SVN server to be accessible by both DAV SVN through Apache and now the SVN:// protocol (for better performance) root@svnvm:~# svnserve --foreground -d --foreground ...
1
vote
1answer
2k views

How to authorize user for a subfolder

Using Windows Server 2003, I would like to give a user full access to a subfolder. Let´s say I have folder A with subfolders B1 and B2. I observed that when granting authorization to B1, the user ...
1
vote
0answers
194 views

Scientific linux 6.4 SSHD UseLPK Bad configuration file

i try setup openldap and openssh that last take keys from openldap base. I installed openldap-server-5.3p1 and configured him. Also I install openss-ldap-5.3p1. Added scheme openssh-lpk to cn=config ...
1
vote
0answers
97 views

401 error when setting error responses to custom in iis

I was receiving 401 unauthorized access errors on my /account/login page The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...