0
votes
1answer
31 views

In apache how do you validate that the logged in username matches the directory name?

Sometimes you want to setup a directory structure in apache such that logged in users can only see their own directory. (i.e. the directory name and the username match.) What do you put in the ...
0
votes
0answers
57 views

User using our client to authenticate with our servers are met with the 4XX errors

I am currently debugging an issue with one user unable to communicate with our auth servers. This issue is important to us because it's one user, which likely could stem to more users as we grow. ...
0
votes
0answers
69 views

Intermittent HTTP 401 errors

I am using an Intranet solution which requires basic HTTP login. However, there is an intermittent error which requires me to log in again, and then the server says "Forbidden" whether I give the ...
0
votes
0answers
25 views

Troubleshooting Basic auth loop

I have a HTTP basic auth PHP script that I know works as I have tried on a local LAMP server. When I try it on my shared host, regardless of credentials (non are actually required) the login and ...
2
votes
1answer
604 views

Why can't I log in to a Windows-protected IIS 7.5 directory on the server?

I have a web site with an admin subdirectory that is protected by integrated Windows authentication. Works flawlessly from remote PCs. But when I attempt to access these pages on the server itself, ...
2
votes
0answers
104 views

What does 'http: getaddrinfo*.gaih_getanswer: got type “46”' mean

Today I got an e-mail from logcheck informing me that the following system event occurred. http: getaddrinfo*.gaih_getanswer: got type "46" Indeed, the above message occurs 4 times in ...
0
votes
1answer
47 views

How to implement a secure authentication over HTTP?

I know that we have HTTPS, but I would like to know if there's an algorithm/approach/strategy that grants a reasonable security level without using SSL. I have read many solution on the internet. ...
2
votes
1answer
444 views

Does IIS support HTTP basic auth and form auth at the same time?

preface: I am a web dev who knows apache servers quite well, but I have little to no knowledge of IIS or .NET I work with a developer who has been avoiding a request to add a Basic Auth to a staging ...
19
votes
3answers
79k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
0
votes
2answers
786 views

Allow from referer for HTTP-basic protected SSL apache site

I have an apache site protected by HTTP basic authentication. The authentication is working fine. Now I would like to bypass authentication for users that are coming from a particular website by ...
1
vote
2answers
99 views

I want to get header response of a url using a proxy with a username, password, host and port?

I want to get header response of a URL by using proxy username, password, host and port? is there any Linux command to get the same response?
4
votes
2answers
411 views

Basic HTTP Authentication in IIS

Forgive my lack of IIS experience, but I have a user on a hosted server running IIS with Plesk. He uses protected folders, and I'm looking for a way to: Allow him to protect folders using a simple ...
1
vote
2answers
205 views

basic http authentication

I am using apache's basic http authentication to control access, however, I only want to control one level of directory access, meaning, I only want directory a to be authenticated, but not a's ...
4
votes
3answers
625 views

Setup mercurial over HTTP

Can you give some pointers to setup Mercurial over HTTP/HTTPS? I am setting up a development server (Debian), where i want to create a mercurial repository and push the changes to the server. I need ...
15
votes
2answers
6k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
2
votes
1answer
330 views

HTTP Authentication Exceptions

I need to create an authentication exception for specific folders on my Apache server. We have a blanket password protection across our whole domain, but this prevents Wordpress from uploading files ...
0
votes
1answer
2k views

Kerberos Authentication for Webservers

Before I blindly jump on "trial an error" tests, I'd like to ask some general questions on Kerberos Authentication for Webservers. I want to evaluate what's possible with Kerberos. The main benefit ...
1
vote
4answers
3k views

Apache basic authentication - auth not required for some files

I'm trying to allow unauthenticated access to certain scripts within a Nagios installation. Although the question is not specifically about Nagios nor the CGI handling that's also illustrated below. ...
1
vote
1answer
83 views

Apache HTTP authentication fault

It's weird that I only need to type in the first 70% part of the password to be cleared for access. I used .htaccess and .htpasswd to set up the authentication. And it's more weird that when the ...
1
vote
6answers
340 views

Lightweight, simple MITM protection for HTTP?

TO BE CLEAR: I'm NOT looking to write my own protocol, or my own client-side implementation. I'm looking for an EXISTING protocol, part of the HTTP standards, that is generally ALREADY supported by ...
5
votes
3answers
2k views

Squid, authentication, Outlook Anywhere, Windows 7 and HTTP 1.1 = NIGHTMARE

I'm running a Squid proxy (latest version, 3.1.4) on Linux CentOS 5.4 with Samba 3.5.4, in order to allow authenticated web access for domain users; everything works fine, and even Windows 7 clients ...
0
votes
1answer
329 views

Can Apache be configured to require authentication based on the query string?

I've configured basic Apache authentication for certain areas of a website that only administrators should have access to. Most web applications make this convenient by putting their admin pages in a ...
1
vote
2answers
4k views

Nginx - Reverse proxy to IIS6 with auth

for testing purpose, i've setup a nginx reverse proxy for an IIS6 server, this works OK. But when i try to use "windows authentication" on the IIS6 web site, the browser auth input doesn't get's ...