The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
55 views
+50

Basic Authentication doesn't display login box

I am using IIS 7.5 and want to change a website from using anonymous authentication to basic authentication. I access the Authentication feature, disable anonymous authentication then enable basic ...
0
votes
1answer
68 views

Nginx reverse proxy, satisfy any causing all clients to be permitted [duplicate]

I am having a problem with satisfy any in a server or location block causing all clients to be permitted access, which afaik is not the expected behavior. server { listen 80; server_name ...
1
vote
0answers
56 views

Apache Basic Auth not working in customer network

I'm having trouble, letting a customer see a site that is locked with a simple Apache Basic Auth password file. It works in every browser on Mac, Windows and in our network. Even the customer get's ...
0
votes
2answers
185 views

Nginx reverse proxy - passthrough basic authenication

I am trying to setup nginx as a reverse rpoxy server in front off several IIS web servers who are authenticating using Basic authentication. (note - this is not the same as nginx providing the auth ...
1
vote
2answers
114 views

Apache removes Authorization header

Apache is acting as a reverse proxy in my setup. The application server running on port 8081 requires a valid Authorization header. The header is set by the client application. Apache seems to remove ...
0
votes
1answer
82 views

Apache2 with basic auth: exclude one location from auth (weird behaviour)

I have basic auth set for Directory / and want to exclude Location /assets/upload, but it just won't work, I have tried several options and tutorials. This Location directive clears the Directory ...
0
votes
1answer
21 views

Add a user to our Basic Authentication groups on many servers

I need to add a new user (and add them to an existing group) for basic authentication on many different servers. What's the fastest way to do this? The slow, dull way would be to ssh in to a server, ...
0
votes
1answer
57 views

Open HTTP Basic auth only on a specific domain/request

Are we, Apache Commandos, able to do this: Open the HTTP Basic Authentication dialog box in a browser only if I request some URL from a specific domain name/server name/host name? For instance: If ...
0
votes
0answers
98 views

nginx auth_basic except on specific directory

I have the following in nginx.conf: server { listen 80; server_name example.com; root /opt/www; index index.html; location = / { auth_basic off; allow all; } ...
2
votes
1answer
211 views

Found special user in apache weblog called @^Y@.@{phqsp~{2'/2|pq{jvk@-1('@lvo)&1--1.(/1)'@./*

When checking the logfiles of some of my customers I found this as username for authenticated users. We have a .htusers file used for basic web auth, all other users in the serverlog I found in the ...
0
votes
0answers
51 views

Confluence - Fails to work with pre basic auth [closed]

I got Confluence running on my box and i got a reverse proxy via Apache. I wanted to add a pre authentication by using Apache's basic auth in . It works perfectly if you are already logged in but if ...
2
votes
1answer
173 views

CUPS basic auth error through web interface

I'm trying to configure CUPS to allow remote administration through the web interface. There's enough documentation out there that I can figure out what to change in my cupsd.conf (changing Listen ...
0
votes
0answers
49 views

HTTP Request with Auth in Headers

I am writing a little technical explanation for our B2B customers that explains our transport & authentication options for web services so they can choose the most appropriate for their system. ...
1
vote
1answer
134 views

Basic Auth URL Parsing [closed]

We have a new b2b vendor that wants to use basic auth via URL. They want to authenticate like this: //URL coming into our server ...
0
votes
0answers
110 views

Linux: Centos: enabling basic authentication

I am trying to set up basic authentication for a linux (centos) server. I did the following: mkdir /usr/local/apache mkdir /usr/local/apache/passwd echo > /usr/local/apache/passwd/passwords ...
1
vote
2answers
67 views

password protect only the home page

I'm trying to pwd protect only my home page with apache basic auth. This seems to work on everything not just the hp <LocationMatch "/"> AuthType Basic AuthName "heelooo?" AuthUserFile ...
0
votes
0answers
267 views

Bypass proxy authentication [closed]

My scenario: My network has a proxy that requires interative authentication. When I access any URL, an username and password is requested to enable navigation. I do have a valid username/password ...
0
votes
1answer
113 views

IIS Application Request Routing (ARR) reverse proxy rewrite to Apache with authentication

I'd need to rewrite an IIS site (using the ARR proxy method to keep the original URL) to another one which is hosted on an Apache 2 server. The Apache server requests a basic authentication. The ...
3
votes
1answer
268 views

Slow Performance With IIS Basic Authentication

I'm using SSAS through HTTP with MSMDPUMP.dll. I have setup the MSMDPUMP.dll web to use only Basic Authentication and then I provide the User Id and Password in the ConnectionString. Everything works ...
1
vote
4answers
118 views

.htaccess issue on Apache Web Server in Ubuntu VM

I just installed Apache Web Server on Ubuntu 11.04 in VMWare Workstation. I created a basic HTML page, named it index.html and placed it in /var/www directory (document root). I am able to access ...
1
vote
1answer
153 views

Enable basic authentication in IIS for remote requests, but not for local ones?

Is there a way in IIS to enable basic authentication for remote requests while leaving the website open for local requests? I need external users to authenticate to access a site, but users on the ...
0
votes
1answer
43 views

Apache BasicAuth depending on request origin

I'm wondering if the following is possible somehow: Make Apache ask for basic authentication when a resource is requested from the Internet and just bypass the authentication when a request ...
1
vote
1answer
58 views

Directory Security failing with Chrome Browser

I have a directory that is protected: (extract from the vhost conf file) <Directory "/var/www/protectedDir"> allow from all Options -Indexes AuthName "secure data" ...
1
vote
1answer
144 views

How do I use my own web form with the ngx_http_auth_basic_module?

I want to capture the username and password with my own form and then use those values with the Nginx ngx_http_auth_basic_module,rather than having the default Nginx box that comes up, asking for ...
2
votes
2answers
273 views

CentOS Apache: basic auth returning 403 instead of 401

I have three dirs in /var/www/html, one of them has .htacces with following: Order Allow, Deny Allow from all AuthUserFile /var/www/.htpasswd AuthGroupFile /dev/null AuthName 'lalalal' AuthType Basic ...
0
votes
2answers
541 views

git refuses to send credentials over http?

curl seems to work fine, but git does not. git asks for a password, but then doesn't send any credentials. works: curl --netrc http://test.git.unsw.edu.au/ and curl -u username:password ...
2
votes
0answers
183 views

Nginx as a proxy doesn't allow to access backend (Apache) content which is password protected

I have apache as a backend and nginx as a frontend. Some content is password-protected by Apache (HTTP Auth). When I access it directly - everything works fine, bur when I try it through nginx - ...
0
votes
1answer
103 views

Apache2 mod_rewrite eating credentials with the P flag

I have an internal server that needs to rewrite inbound requests to another internal box, for stupid reasons, both machines have basic auth enabled on them. To get around the two levels of auth, and ...
0
votes
1answer
81 views

HTTP Status Codes for Web Application Logic

This might be more of a PHP and SO question, but since it deals with HTTP codes, I thought I'd ask here first. So I'm building a very simple user authentication backend that basically checks the ...
0
votes
1answer
477 views

How to exclude a specific URL from basic authentication in Apache?

Two scenarios: Directory I want my entire server to be password-protected, so I included this directory config in my sites-enabled/000-default: <Directory /> Options FollowSymLinks ...
6
votes
2answers
17k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
1
vote
3answers
207 views

Update saved password for basic authentication using a script

I have a website that uses basic authentication as described on this webpage. Each of the computers I manage have the password saved in their browser. There is only one username and password for ...
1
vote
2answers
185 views

apache2: Require valid-user AND allow all

I want to allow basic authentication, but not require it. All visitors -authenticated or not- should be able to acces a page (script) where the script can add special features for valid users. So ...
0
votes
0answers
90 views

Windows Server 2008 running IIS7 and setting up Basic Authentication

I am trying to password protect a folder on a Windows Server 2008 running Windows 7 and IIS7. I have already managed this on another of our servers running older equipement etc Windows Server 2003 ...
1
vote
0answers
84 views

Basic auth in IIS7 without impersonation

I have an IIS 7 site set up with its own app pool. The app pool is running as a specific user, and the site is set to run as the app pool identity. I want to add basic-auth style protection to the ...
2
votes
1answer
354 views

How do I create a virtual host with basic HTTP auth?

This is what I have so far: <VirtualHost *:80> DocumentRoot "/PathToTheFilesThat/theserver/gives/access/to" ServerName docs.mysite.com ProxyPass / http://localhost:8808/ ProxyPassReverse / ...
1
vote
3answers
650 views

apache basic authentication - how to disable on dev computer

I'm disabling access to some folders to unauthorized users this way: AuthUserFile /var/www/passwords/.htpasswd_private AuthType Basic AuthName "Access to private admin section" Require valid-user ...
2
votes
1answer
847 views

How can I protect a Tomcat webapp that's reverse proxied in an Apache2 virtual host using basic authentication?

I'm having trouble figuring out how to adding basic HTTP authentication to password-protect a development testing environment running on a production web server. Both the main site and the testing ...
3
votes
4answers
3k views

IIS 7.5 basic authentication and Active Directory validation

I'm not an IIS or Active Directory expert by any means so I want to present a scenario here and see if what we want to accomplish is feasible. We have an application hosted on Windows Server 2008 R2 ...
0
votes
1answer
675 views

nginx shows 403 after http auth successful when proxying

I have a basic sinatra app which is behind nginx so that I can use HTTP Basic Auth to protect it, but I get a 403 Forbidden error instead of seeing the webapp. The app works fine when I remove the ...
3
votes
1answer
442 views

Nginx PHP-FPM Basic Auth

I have nginx with php-fpm installed on Debian Squeeze. Directory tree is: /var/www/mysite index.php secret_folder_1 admin.php static.html secret_folder_2 admin.php static.html pictures ...
1
vote
2answers
232 views

Apache basic HTTP authentication not working

Trying to setup basic HTTP authentication with Apache, but it's not working. I get the directory listing and files regularly, no authentication required. I tried restarting httpd and the browsers ...
0
votes
1answer
1k views

Enable basic auth sitewide and disabling it for subpages?

I have a relatively straight forward config: upstream appserver-1 { server unix:/var/www/example.com/app/tmp/gunicorn.sock fail_timeout=0; } server { listen 80; server_name example.com; ...
0
votes
1answer
331 views

NGinx proxy, adding a basic authentication based on ip address

I’m building a system based on OpenVPN, where clients will connect to a website, secured by Basic Authentication (that’s the way it is, no way to change this). I wish I could go through a nginx ...
0
votes
1answer
152 views

Apache HTTP-Basic Auth not working

I have a really simple authorization configuration, but I'm getting a weird message rather than a user/password field when I try to access the page. Here's my .htaccess file: AuthType basic AuthName ...
1
vote
1answer
796 views

Rewriting a query-string part as a path part using nginx?

How do I rewrite URIs of the form /one/two?path=three&foo=bar to /one/two/three?foo=bar using nginx?
-2
votes
1answer
413 views

How can I use lighttpd authentication with custom login screen or link login page? [closed]

last time, I could be use mod_auth which user authentication module. But it is very simple that login check layout is just web broswer dialog... It is called http-basic-authentication. It is show ...
2
votes
1answer
625 views

Apache and mod_dbd Getting “DBD: mod_dbd not compatible with APR in get_driver”

Im tring to implement basic authentication with Apache server and plugin's the proxy part working great but when i try to preform request that suppose to trigger the mod_authn_dbd and its ...
0
votes
1answer
97 views

Apache 2+ basic authentication from db , not from files how to?

what plugins and what configuration do i need to configure Apache server to use user/password from DB and not from files to preform basic authentication
1
vote
1answer
882 views

Catching url parameters( “?=” or “&=” ) with Apache LocationMatch

I couldn't think of a good title for this. Basically I have basic auth that covers the whole site from /, but I want urls with certain parameters to be excluded from authentication. Example: do not ...

1 2