The tag has no wiki summary.

learn more… | top users | synonyms

-2
votes
0answers
18 views

I am getting authentication page twice on opening browser for first time

I am getting authentication page twice on opening any browser for first time. I am using tomcat authentication. On opening fresh browser (not new tab) when i try my url, Authentication page gets ...
1
vote
2answers
23 views

Persist basic authentication across protocols

I maintain a website that uses basic authentication to prevent outside users from viewing it (It's a staging/test environment open to the internet). The website is available over unsecured (HTTP) ...
1
vote
1answer
40 views

Yum repo basic auth not working

So we've got this yum repo that is protected via basic auth. My yum.repo definition looks like this [custom-repo] name=Releases Repository ...
1
vote
1answer
29 views

Is basic authentication secure when it goes though my reverse proxy on SSL?

Hoping someone can let me know if im on the right track. I use IIS on my file server within my network. I have an apache2 server which takes all HTTP and HTTPS requests and by way of reverse proxy ...
0
votes
1answer
46 views

nginx reverse proxy with basic_auth - 404 Not found

I have an nginx server block to proxy_pass content from three servers: gitlab, Rshiny and static content from another nginx server block. All this works fine, until I try to add password protection to ...
0
votes
1answer
91 views

Basic username-password authentication on gitorious

I recently set up my own server that is supposed to host some git repositories. I installed gitorious there. It is almost perfect. The one thing that I am struggling with right now is how can I make ...
0
votes
0answers
15 views

Apache's mod_perl access to Basic AuthType screen

I am looking to implement a perl script that gathers the login information (specifically, the username) before that information logs into the system. My current setting is the following PerlRequire ...
0
votes
1answer
30 views

Does Basic User Authentication require 2-Phase communiation?

My Application connects to the Internet to HTTP Services using boost::asio. Recently we added support for HTTP Proxys and Basic User Authentication. We implemented Basic User Authentication by just ...
2
votes
1answer
50 views

IIS Basic Authentication only protects directories, not individual files?

I really hope this isn't a duplicate, but I wasn't able to find anything like this on here. My issue is: I have a subdirectory on a Windows (not sure if 2008 R2 or 2012) server with IIS 8.5 that I ...
0
votes
1answer
59 views

Apply HTTP Basic authentication only to root directory

I have setup a multi directory plain web application that need authentication only for root directory. All other sub directory I need to allow without password. I have setup HTTP Basic ...
0
votes
1answer
44 views

HTTP Basic auth in tomcat

I am trying to enable basic HTTP auth on my tomcat application. Also I want to keep it outside the application. I added a new user to tomcat-users.xml and set its role to 'app-user'. Then I added a ...
0
votes
0answers
113 views

Apache password mismatch using mod_dbd

I Using Apache 2.4, using mod_dbd authentication i followed all steps to configure but when i tries to login, shows me AH01617: user pedro: authentication failure for "/": Password Mismatch But i ...
0
votes
0answers
52 views

Enable/disable basic auth from IP in nginx

I have Atlassian Stash behind Nginx. Server-wide, I have a basic auth for controlling access from outside the office. To make this works, I have to put proxy_set_header Authorization "" But I'd like ...
1
vote
0answers
44 views

IIS 7.5 http requesting basic authentication but https isn't

Server 2008 R2 IIS 7.5 Website Panel I have a multiple sites running that have a specific folder in each site, say PDFs, some changes have been made, but I don't know what and now if you try to ...
0
votes
1answer
31 views

In apache how do you validate that the logged in username matches the directory name?

Sometimes you want to setup a directory structure in apache such that logged in users can only see their own directory. (i.e. the directory name and the username match.) What do you put in the ...
2
votes
1answer
110 views

Disable Apache basic auth in virtual subdirectory

I have a webserver that is completely locked down with Basic Auth <Location /> AuthType Basic # [...] rest of basic auth stuff require valid-user order deny,allow deny from ...
0
votes
1answer
60 views

activate htaccess only on specific URI

I have an apache webserver running on an ubuntu system. To avoid access for unauthorized users, I have an active .htaccess: AuthType Basic AuthName "own area" AuthUserFile /path/to/.htpasswd require ...
0
votes
0answers
57 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
0
votes
0answers
62 views

Why do AuthType Basic directives not work in .htaccess

I have a web server running on ClearOs 6. I would like to protect a couple of directories using .htaccess, but I do not seem to be prompted for a password at all. Relevant bits of conf file are: ...
0
votes
2answers
393 views

Apache2 authentication NTLM without prompted semi Basic auth type

I succesfully configured ntlm authentication. Unfortunately config allows semi basic authorization. For example when I'm using tortoise svn1.8.4(with serf access lib), chrome or IE web browsers, they ...
0
votes
0answers
125 views

Can I prevent Apache ProxyPass from returning HTTP 401?

I have Apache 2.2.22 acting as a proxy server, and it's doing authentication against an LDAP server: <Location /app> AuthType Basic AuthName "Test access" # ..mod_auth_ldap config ...
0
votes
0answers
111 views

Nginx with auth_basic AND MultiViews/try_files

I've managed to get faux MultiViews working with the following directive: location ~ ^(.+)$ { try_files $uri $uri/ $1.php?$args; } But it seems to break the auth_basic directives generated by ...
0
votes
1answer
26 views

Multiple Apache Auth User Files

I have multiple vhosts on a host running apache. It is a test system and I would like to give users "basic authentication" access to their sites. For this I have a vhost file with basic auth ...
0
votes
0answers
56 views

Allow empty basic auth credentials, but check if supplied

I have an Apache 2.4 server with several webservices that all use form-based login + cookies. I want to unify my set-up with an LDAP authentication using Apache's AuthType Basic and AuthBasicProvider ...
3
votes
2answers
95 views

Authentication request to change http to https

On my server that works with nginx, access is protected by a basic http authentication. I am currently developing a piece of code that requires HTTPS redirection, and when this redirection occurs, I ...
0
votes
1answer
68 views

basic auth on 2 different folders

I have nginx installed, and I want to use the built-in auth-basic module to authenticate on 2 different folders. Each folder should have its own user & password lists. For this i created 2 ...
0
votes
1answer
42 views

How to protect a virtualhost by Both IP OR password

I have managed to password protect a virtualhost by using this: <Proxy *> Order deny,allow Deny from all Allow from office-ip-1 office-ip-2 ...
1
vote
1answer
83 views

Hiding a HTTP Auth-Realm by sending 404 to non-known IPs?

I have an Apache (2.2) serving a web-app on example.com. That web-app has a debug-page reachable via example.com/debug. /debug is currently protected with a HTTP basic auth. As there is only a very ...
0
votes
1answer
144 views

Bypass IIS Basic Authentication for localhost

I'd like to have a website authenticated with basic auth, but then also allow the website to access itself locally. That is, I want to allow unauthenticated access only from localhost. In IIS I have ...
0
votes
0answers
87 views

How to make MySQL based authentication work in Apache 2.2?

I'm trying to set up a simple CalDAV/CardDAV server with a Radicale backend and an Apache 2.2 frontend. So far, it's all nice and simple, but I can't get the MySQL based authentication to work. I'd ...
0
votes
0answers
220 views

Issue with Nginx, http authentication and dynamic IP address

I am trying to get Nginx as a reverse proxy to authenticate users performing inbound http requests. My ISP provides me with a dynamic IP. I am not sure how to configure my ADSL router (NAT rules). ...
0
votes
1answer
48 views

Restricting access from the internet to a website in beta conflicting with the website's own authentication

I have a java website that runs on Apache Tomcat. As the website is in Beta, I don't want it to be publicly accessible to anyone on the internet and I want a restricted group of beta testers to ...
0
votes
0answers
15 views

Combining Location and Directory with BasicAuth

I have set up some basic auth on a site, which is working fine. I get prompted to authorise for all requests except to filea or fileb. <Directory "/var/www/vhosts/domain.com/public"> ...
-1
votes
1answer
214 views

HTTP digest authentication vs. HTTPS basic authentication [closed]

What is the difference between HTTP Digest Authentication and HTTPS basic authentication from a performance and security point of view?
0
votes
1answer
211 views

Nginx - Apply basic auth only if an htaccess file exists

How can I apply basic auth only if an htaccess file exists? If first tried to put the auth_basic directives in an if block, but that is not allowed. Then, I tried redirecting to a named location, ...
0
votes
1answer
125 views

basic authentication with nginx - page loads before auth popup

I have nginx and I have a directory that uses basic authentication. However, the page loads fully before the authentication popup comes. Even if I press cancel I'm not redirect to 401 authorization ...
0
votes
0answers
133 views

Is there a way to get a password from HTTP authorization header in mod_rewrite (apache2)

I'd like to parse HTTP authorization header in mod_rewrite - to be able to use login and password for another redirect. I want to achieve something like this: user puts ...
2
votes
0answers
118 views

Using nginx: require authentication when request from public IP, not needed when local

I wrote a simple file browser app which is served using node on port 3000. I use nginx as a front-end which proxies this service. This is on my home server. I would like to be able to require basic ...
2
votes
1answer
298 views

Basic Authentication doesn't display login box

I am using IIS 7.5 and want to change a website from using anonymous authentication to basic authentication. I access the Authentication feature, disable anonymous authentication then enable basic ...
0
votes
1answer
294 views

Nginx reverse proxy, satisfy any causing all clients to be permitted [duplicate]

I am having a problem with satisfy any in a server or location block causing all clients to be permitted access, which afaik is not the expected behavior. server { listen 80; server_name ...
1
vote
0answers
199 views

Apache Basic Auth not working in customer network

I'm having trouble, letting a customer see a site that is locked with a simple Apache Basic Auth password file. It works in every browser on Mac, Windows and in our network. Even the customer get's ...
0
votes
2answers
892 views

Nginx reverse proxy - passthrough basic authenication

I am trying to setup nginx as a reverse rpoxy server in front off several IIS web servers who are authenticating using Basic authentication. (note - this is not the same as nginx providing the auth ...
1
vote
2answers
314 views

Apache removes Authorization header

Apache is acting as a reverse proxy in my setup. The application server running on port 8081 requires a valid Authorization header. The header is set by the client application. Apache seems to remove ...
0
votes
1answer
309 views

Apache2 with basic auth: exclude one location from auth (weird behaviour)

I have basic auth set for Directory / and want to exclude Location /assets/upload, but it just won't work, I have tried several options and tutorials. This Location directive clears the Directory ...
0
votes
1answer
34 views

Add a user to our Basic Authentication groups on many servers

I need to add a new user (and add them to an existing group) for basic authentication on many different servers. What's the fastest way to do this? The slow, dull way would be to ssh in to a server, ...
0
votes
1answer
106 views

Open HTTP Basic auth only on a specific domain/request

Are we, Apache Commandos, able to do this: Open the HTTP Basic Authentication dialog box in a browser only if I request some URL from a specific domain name/server name/host name? For instance: If ...
2
votes
1answer
242 views

Found special user in apache weblog called @^Y@.@{phqsp~{2'/2|pq{jvk@-1('@lvo)&1--1.(/1)'@./*

When checking the logfiles of some of my customers I found this as username for authenticated users. We have a .htusers file used for basic web auth, all other users in the serverlog I found in the ...
3
votes
1answer
900 views

CUPS basic auth error through web interface

I'm trying to configure CUPS to allow remote administration through the web interface. There's enough documentation out there that I can figure out what to change in my cupsd.conf (changing Listen ...
1
vote
1answer
233 views

Basic Auth URL Parsing [closed]

We have a new b2b vendor that wants to use basic auth via URL. They want to authenticate like this: //URL coming into our server ...
0
votes
0answers
162 views

Linux: Centos: enabling basic authentication

I am trying to set up basic authentication for a linux (centos) server. I did the following: mkdir /usr/local/apache mkdir /usr/local/apache/passwd echo > /usr/local/apache/passwd/passwords ...