Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
29 views

how to make squid revere proxy with authentication send remote_user header

OS CentOS 6.4 - squid 3.1 I currently have squid running as a reverse proxy, performing NTML authentication succesfully. This is working as expected. If I enter valid AD username and password, it ...
0
votes
0answers
24 views

Apache Authentication failed, VtigerCRM customer portal cannot connect to server

We have installed VtigerCRM on the server which is protected by Apache authentication via LDAP. There is another machine running Vtiger customer portal. This machine needs to connect to the server ...
0
votes
1answer
221 views

How to disable nginx basic_auth for one location but enable it for the rest of the site

I'm trying to get basic_auth disabled for a specific directory (/api/), but still have basic auth for the rest of the site I'm working with. The following is my nginx.conf: server { # base ...
0
votes
0answers
20 views

Change tomcat security-roles by editing web.xml from PHP

When a user buys a product, I set up a new domain on the fly (by calling some API from PHP), and then I come to a point where I need to specify certain security roles in TomCat, preferably still from ...
0
votes
1answer
239 views

Add custom headers to HTTP 401 responses from Kerberos mod_auth_kerb

I'm using Apache with mod_auth_kerb to perform HTTP authentication. How do I add custom headers to the 401 Authorization Required response generated by the auth module? The relevant sections of my ...
1
vote
1answer
91 views

Nginx ignores HTTP Authentication for WordPress login directory

I am running WordPress in a subfolder of my domain for testing and development purposes on a VPS LEMP-stack. In order to password-protect the wp-login.php with an etxra layer, I used HTTP ...
0
votes
1answer
151 views

Apache mod_proxy with SSL not redirecting

I have a custom server running behind an apache reverse proxy. Since the custom server can only handle HTTP traffic, i am trying to use apache for wrapping proper SSL around it, and for some kind of ...
0
votes
1answer
57 views

Restricting access from the internet to a website in beta conflicting with the website's own authentication

I have a java website that runs on Apache Tomcat. As the website is in Beta, I don't want it to be publicly accessible to anyone on the internet and I want a restricted group of beta testers to ...
0
votes
1answer
1k views

nginx http auth only working on folders, not on files

I am new to nginx and I really enjoy how fast it is in combination with php-fpm. I want to protect a folder with location / { try_files $uri $uri/ $uri.php /; auth_basic ...
2
votes
0answers
199 views

How do I enable digest auth for Jetty fronting Elastic Search

We've gotten Jetty running the HTTP front end of Elastic Search with BASIC authentication. We would like to use DIGEST authentication instead, but the Jetty documentation is hard to reconcile with the ...
2
votes
0answers
155 views

Apache SSHA password support

Is there any way for Apache to support SSHA passwords? I have a couple of dozens of user passwords in an OpenLDAP server which are encrypted with SSHA (i.e. salted SHA1). No more users are to be ...
0
votes
1answer
159 views

Nginx auth only for given location

I'm using Nginx as a reverse proxy for a python WSGI web-app. It looks something like that: location / { #auth_basic "Administrator Login"; #auth_basic_user_file ...
0
votes
1answer
295 views

Cannot setting up path based authentication in subversion

I've followed the subversion book countless times to try and set proper path authorization on our subversion server, but I haven't been able to make this work. Here is my access rules file : ...
1
vote
1answer
172 views

nginx, apache http authentication

I have an nginx reverse proxy server which feeds into a varnish cache with an apache backend. The php is running as a fastcgi process started from apache. I was attempting to get some php software ...
2
votes
1answer
73 views

static big files and a way to serve them securely (central authentication CDN)

I need to serve few static big files(about 4GB each) to several users, using 5 servers that are in different geographical regions. The idea is that nobody else gets the content as there's ...
-1
votes
1answer
75 views

Intercept server port to request a password [closed]

There's a Java application running on my server that creates a page on a certain port on the server. Is there any way I can sit in the middle of that page being served by Java and the user to first ...
0
votes
0answers
111 views

Apache asks for auth on symlinked directory, but not on others

I have an Apache2 vhost with the following Directory config: <Directory /path/to/docroot> AuthType Basic AuthName styleguide AuthUserFile /etc/apache2/extras/ok_users Require ...
3
votes
1answer
63 views

How do you http-auth all sites on a server?

I'm setting up a development server and need to apply these basic rules to all virtual hosts on the server in the /var/www/html directory. AuthType Basic AuthName "Development Area" AuthUserFile ...
0
votes
1answer
37 views

Allow Site and Server acces from single computer?

I have a local site that I use to run a web application for my business. Only one or two computers need to be able to access the site. I want to allow access to only those computers (not by IP) with ...
2
votes
1answer
463 views

Does IIS support HTTP basic auth and form auth at the same time?

preface: I am a web dev who knows apache servers quite well, but I have little to no knowledge of IIS or .NET I work with a developer who has been avoiding a request to add a Basic Auth to a staging ...
1
vote
0answers
127 views

Apache Authentication Still Accepts the old password in the htpasswd

I run Apache on Ubuntu and use basic HTTP authentication. I have a htpasswd file and there is a user named scott with the password of tiger. However I changed the password to tiger1. Now I can login ...
2
votes
1answer
747 views

IIS 401.3 - Unauthorized on only 1 server out of 3 set up for network load balancing

Over the weekend our Server Admin set up two virtual Windows 2008 machines with IIS installed and set them up under NLB. I came in and changed the application pool the website was running under to ...
1
vote
2answers
2k views

How does one configure squid3 proxy to support http auth - quick and dirty

I am interested in the the easiest solution, authentication doesn't actually have to even test user/pass pairs... it just has to do the http auth challenge. I am trying to test http auth on a proxy ...
1
vote
0answers
155 views

How to set up custom 401 error page or redirect in WSS3 SP2

I've got a WSS3 sharepoint site that requires windows authentication both in IIS and via the Sharepoint site. What I would like to do is in the case that a user does not provide valid AD credentials ...
14
votes
2answers
23k views

Troubleshooting Windows Authentication problems (no challenge) in IIS 7.5?

I know that there are thousands of reports of people having trouble getting Integrated Windows Authentication to work with IIS, but they all seem to lead to web pages that don't apply or solutions ...
2
votes
1answer
362 views

Many HTTP 401's with Kerberos authentication via mod_auth_kerb

I've got an Apache2 httpd running in front of a Tomcat, doing authentication via mod_auth_kerb. When I open the console in Firebug, I see lots of 401's (see screenshot: ...
-1
votes
2answers
539 views

Sharing www folder breaks IIS sites

I would like to share my www folder on my local machine with others in my office but when I do this and try navigate back to my localhost sites, I get the error HTTP Error 401.3 - Unauthorized. Now I ...
1
vote
2answers
301 views

Subversion subdomain Digest authentication shows blank page as response

I'm trying to configure my subversion server using apache2, mod_dav_svn and a basically digest authenticaton (for now). I've setup the subdomain svn.example.com to serve the repos and created the ...
-1
votes
1answer
139 views

Apache .htaccess set different password for symlink

I got a domain with a website that can be reached by two urls, mydomain.com/pathA and mydomain.com/pathB. But they are actually the same directory on the server. It contains a MediaWiki ...
0
votes
1answer
200 views

Apache2 require authentication for directory

I'm trying to secure my phpmemcachedadmin installation. (It doesn't come with any sort of security, not even a login system) I've added this to the .htaccess file: AuthName "For admins only" ...
1
vote
2answers
794 views

Apache whitelist a single location, but require basic auth for everything else

I'm sure this is simple, but Google is not my friend this morning. The goal is: /public... is openly accessible everything else (including /) requires basic auth. This is a WSGI app, with a single ...
10
votes
3answers
8k views

Possible to add basic HTTP access authentication via HAProxy?

I've successfully setup HAProxy in front of an HTTP server which I have no control over. Is it possible to configure HAProxy to add Simple HTTP Authentication to all sites, bearing in mind I can't ...
0
votes
1answer
1k views

What's the easiest way to create an HTTP proxy which adds basic authentication to requests?

I am trying to use a service provided by a server which requires basic HTTP authentication, however the application I am using does not support authentication. What I'd like to do is create a proxy ...
1
vote
1answer
399 views

IIS 6 - Integrated Authentication - requires a daily restart to recognise extra domain users

We have sub webpage (classic ASP) set up with Windows Authentication and no anonymous access. Permissions to the target directory are set as Read/Execute for a domain local group. This group ...
0
votes
1answer
375 views

Apache 2.2, changing DocumentRoot depending on the HTTP auth credentials provided by client

Is this even possible? Say I have a server, devbox.local, which has several HTTP auth users: alan, bill, carl. What I'm trying to do is tell Apache to use a different DocumentRoot depending on who is ...
1
vote
2answers
2k views

How to use basic auth for single file in otherwise forbidden Apache directory?

I want to allow access to a single file in a directory that is otherwise forbidden. This did not work: <VirtualHost 10.10.10.10:80> ServerName example.com DocumentRoot /var/www/html ...
1
vote
1answer
510 views

What does this error mean in my IIS7 Failed Request Tracing report?

when I attempt to goto any page in my web application (i'm migrating the code from an asp.net web site to web application, and now testing it) .. i keep getting some not authenticated error(s) . So, ...
26
votes
6answers
72k views

How to configure basic authentication in Apache httpd virtual hosts?

I'm trying to configure mercurial access using Apache http. It requires authentication. My /etc/apache2/sites-enabled/mercurial looks like this: NameVirtualHost *:8080 <VirtualHost *:8080> ...
2
votes
3answers
297 views

How does “password protection” works in apache?

I have a website (http://mywebsite.com.) for a client, and I would like to create some subdomains like (http://trac.mywebsite.com). I would like to create a password protection for this subdomain, ...
4
votes
1answer
182 views

Are there possible problems with long htaccess passwords or symbols in htaccess passwords?

We have a directory we've protected using an .htaccess password. Both the username and password are long, complex, with various symbols. I can log in from my machines (I've tried IE, Firefox, ...
2
votes
2answers
778 views

Apache, mod_auth and AuthGroupFile: how to allow access for all the users in an AD domain?

I have a working Kerberos authentication on my Apache. My AuthGroupFile directive points to a file where there is one group called rnd (rnd: user@my.domain.com). This works just fine, but I don't ...
0
votes
1answer
180 views

How to use htaccess to restrict access to script when rewriting?

I have a php script that relies on the following rewrite rules: RewriteEngine on RewriteCond %{REQUEST_URI} !^/script.*$ [NC] RewriteRule (.*)$ script.php/go [QSA,L] So when someone visits ...
7
votes
4answers
4k views

Apache - Redirect to https before AUTH

I have a development site up that requires a username and password (basic http auth) before the user can see the site. I'd like to redirect to a secure protocol first, before the user can send in the ...
0
votes
4answers
180 views

Site-wide protection for standalone trac

I'd like to setup Trac as a standalone daemon, but as an internal service. I.e. I want people to do a http authentication before even entering wiki. Both --auth and --basic-auth give me user ...
6
votes
3answers
2k views

Using Mod_rewrite and Authentication on ALL incoming URLs

I have a need to make sure that my url, call it www.domain.com is always protected at least via Basic HTTP authentication. Also, I want to use mod_rewrite to send my users to one of two OC4j instances ...