The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
30 views

Is it possible to share a basic auth session between several aliases in nginx?

The title pretty much sums it up, we have a very simple virtual host setup in nginx protected by basic auth, so it looks like that: server { listen portnumber; server_name *.domain.com; ...
0
votes
0answers
34 views

Nginx rewrite URL based on basic auth username

I have a static file serving set up in Nginx wherein different customers need to visit a different URL to get the content that is specific to them; in addition, they have to enter their username and ...
0
votes
0answers
30 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
1
vote
1answer
25 views

Apache as authentication proxy

We are trying to implement authentication proxy from Apache httpd. This should secure application that uses Basic Authentication but user should authenticate with httpd's authentication (mod_auth_cas ...
0
votes
1answer
57 views

Switching between multiple authentication types on same URL

I have a secure SSO site that uses Shibboleth authentication and SAML identity provider. I need to allow a Google Search Appliance crawler to come index the URL's. I have a requirement to change on ...
1
vote
0answers
26 views

Disable authentication for certain files

I am trying to disable Apache authentication for certain files, but I don't seem to get it right. This is what I have on .htaccess: AuthType Basic AuthName "Authentication Required" AuthUserFile ...
0
votes
0answers
99 views

HAproxy ACL based on backend application session cookie to replace HTTP Basic Auth

I would need some help on HAproxy configuration to bypass HTTP basic auth and let the user use a specific backend in case there is a valid session cookie present from another backend application. I ...
0
votes
0answers
110 views

Nginx how to use limit_req_zone on auth_basic to protect against brute force attack?

I have an Nginx server that works as an SSL proxy for a service running on a localhost that doesn't support SSL authentication. I would like to use Nginx's limit_req_zone function to protect the ...
0
votes
0answers
71 views

Apache Authentication failed, VtigerCRM customer portal cannot connect to server

We have installed VtigerCRM on the server which is protected by Apache authentication via LDAP. There is another machine running Vtiger customer portal. This machine needs to connect to the server ...
1
vote
1answer
30 views

How to inhibit repeated checks to mod_auth_basic by mod_autoindex?

In Apache 2.4, When using both mod_autoindex and mod_auth_basic on a directory, the indexing of that directory causes mod_auth_basic to perform a password hash and lookup from scratch once for every ...
0
votes
0answers
191 views

How can I add basic auth to an apache proxy while using CORS headers?

Background I use grafana for displaying graphs of our server-metrics. Grafana is a JS-app which in our case is getting the data from graphite and storing search-queries in elasticsearch. All three ...
0
votes
0answers
128 views

How do I only allow certain IP addresses into apache, and then require a password for a subset of that list?

How do I only allow certain IP addresses into apache, and then require a password for a subset of that list? (I'm also open to doing this all within Proxy or Location directive) My setup is an ...
0
votes
1answer
68 views

Can't get basic plain auth to work on lighttpd win 1.4.35-1-ipv6

I simply can't get Plain Basic auth to work on lighttpd for more than one user. I have this auth.user file formatted like this: [account_1_name]:[account_1_password] ...
1
vote
1answer
71 views

Why does mod_jk bypass Apache authorization?

Since switching from Apache 2.2 authorization gets bypassed for many JkMounts (except jk-status). If I cancel the browser password popup, I get a 401-page. It is not, as I expect, the one from ...
1
vote
0answers
573 views

Basic auth not working in Apache 2.4

I know it seems a simple task and I did it many times for Apache 2.0-2.2 but in 2.4 config doesn't work. I am trying to configure basic auth for directiry: <Directory /var/www/html/docs> ...
0
votes
1answer
141 views

IIS 7.5: In the “Connect As” dialog, can't set “Specific user” to the application pool identity?

I have a bunch of websites and applications with their own app pools, all using AppPoolIdentity. App pool identities are nice because you can set file system permissions and add SQL Server users based ...
1
vote
2answers
36 views

Persist basic authentication across protocols

I maintain a website that uses basic authentication to prevent outside users from viewing it (It's a staging/test environment open to the internet). The website is available over unsecured (HTTP) ...
1
vote
1answer
368 views

Yum repo basic auth not working

So we've got this yum repo that is protected via basic auth. My yum.repo definition looks like this [custom-repo] name=Releases Repository ...
1
vote
1answer
90 views

Is basic authentication secure when it goes though my reverse proxy on SSL?

Hoping someone can let me know if im on the right track. I use IIS on my file server within my network. I have an apache2 server which takes all HTTP and HTTPS requests and by way of reverse proxy ...
0
votes
1answer
380 views

nginx reverse proxy with basic_auth - 404 Not found

I have an nginx server block to proxy_pass content from three servers: gitlab, Rshiny and static content from another nginx server block. All this works fine, until I try to add password protection to ...
1
vote
1answer
142 views

Basic username-password authentication on gitorious

I recently set up my own server that is supposed to host some git repositories. I installed gitorious there. It is almost perfect. The one thing that I am struggling with right now is how can I make ...
0
votes
0answers
40 views

Apache's mod_perl access to Basic AuthType screen

I am looking to implement a perl script that gathers the login information (specifically, the username) before that information logs into the system. My current setting is the following PerlRequire ...
0
votes
1answer
63 views

Does Basic User Authentication require 2-Phase communiation?

My Application connects to the Internet to HTTP Services using boost::asio. Recently we added support for HTTP Proxys and Basic User Authentication. We implemented Basic User Authentication by just ...
2
votes
1answer
207 views

IIS Basic Authentication only protects directories, not individual files?

I really hope this isn't a duplicate, but I wasn't able to find anything like this on here. My issue is: I have a subdirectory on a Windows (not sure if 2008 R2 or 2012) server with IIS 8.5 that I ...
0
votes
1answer
413 views

How to disable nginx basic_auth for one location but enable it for the rest of the site

I'm trying to get basic_auth disabled for a specific directory (/api/), but still have basic auth for the rest of the site I'm working with. The following is my nginx.conf: server { # base ...
0
votes
1answer
135 views

Apply HTTP Basic authentication only to root directory

I have setup a multi directory plain web application that need authentication only for root directory. All other sub directory I need to allow without password. I have setup HTTP Basic ...
0
votes
1answer
113 views

HTTP Basic auth in tomcat

I am trying to enable basic HTTP auth on my tomcat application. Also I want to keep it outside the application. I added a new user to tomcat-users.xml and set its role to 'app-user'. Then I added a ...
0
votes
0answers
291 views

Apache password mismatch using mod_dbd

I Using Apache 2.4, using mod_dbd authentication i followed all steps to configure but when i tries to login, shows me AH01617: user pedro: authentication failure for "/": Password Mismatch But i ...
0
votes
0answers
91 views

Enable/disable basic auth from IP in nginx

I have Atlassian Stash behind Nginx. Server-wide, I have a basic auth for controlling access from outside the office. To make this works, I have to put proxy_set_header Authorization "" But I'd like ...
1
vote
0answers
61 views

IIS 7.5 http requesting basic authentication but https isn't

Server 2008 R2 IIS 7.5 Website Panel I have a multiple sites running that have a specific folder in each site, say PDFs, some changes have been made, but I don't know what and now if you try to ...
0
votes
1answer
37 views

In apache how do you validate that the logged in username matches the directory name?

Sometimes you want to setup a directory structure in apache such that logged in users can only see their own directory. (i.e. the directory name and the username match.) What do you put in the ...
2
votes
1answer
439 views

Disable Apache basic auth in virtual subdirectory

I have a webserver that is completely locked down with Basic Auth <Location /> AuthType Basic # [...] rest of basic auth stuff require valid-user order deny,allow deny from ...
0
votes
1answer
118 views

activate htaccess only on specific URI

I have an apache webserver running on an ubuntu system. To avoid access for unauthorized users, I have an active .htaccess: AuthType Basic AuthName "own area" AuthUserFile /path/to/.htpasswd require ...
0
votes
0answers
129 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
0
votes
0answers
152 views

Why do AuthType Basic directives not work in .htaccess

I have a web server running on ClearOs 6. I would like to protect a couple of directories using .htaccess, but I do not seem to be prompted for a password at all. Relevant bits of conf file are: ...
0
votes
2answers
1k views

Apache2 authentication NTLM without prompted semi Basic auth type

I succesfully configured ntlm authentication. Unfortunately config allows semi basic authorization. For example when I'm using tortoise svn1.8.4(with serf access lib), chrome or IE web browsers, they ...
0
votes
0answers
172 views

Nginx with auth_basic AND MultiViews/try_files

I've managed to get faux MultiViews working with the following directive: location ~ ^(.+)$ { try_files $uri $uri/ $1.php?$args; } But it seems to break the auth_basic directives generated by ...
0
votes
1answer
40 views

Multiple Apache Auth User Files

I have multiple vhosts on a host running apache. It is a test system and I would like to give users "basic authentication" access to their sites. For this I have a vhost file with basic auth ...
0
votes
0answers
111 views

Allow empty basic auth credentials, but check if supplied

I have an Apache 2.4 server with several webservices that all use form-based login + cookies. I want to unify my set-up with an LDAP authentication using Apache's AuthType Basic and AuthBasicProvider ...
3
votes
2answers
133 views

Authentication request to change http to https

On my server that works with nginx, access is protected by a basic http authentication. I am currently developing a piece of code that requires HTTPS redirection, and when this redirection occurs, I ...
0
votes
1answer
103 views

basic auth on 2 different folders

I have nginx installed, and I want to use the built-in auth-basic module to authenticate on 2 different folders. Each folder should have its own user & password lists. For this i created 2 ...
0
votes
1answer
66 views

How to protect a virtualhost by Both IP OR password

I have managed to password protect a virtualhost by using this: <Proxy *> Order deny,allow Deny from all Allow from office-ip-1 office-ip-2 ...
1
vote
1answer
114 views

Hiding a HTTP Auth-Realm by sending 404 to non-known IPs?

I have an Apache (2.2) serving a web-app on example.com. That web-app has a debug-page reachable via example.com/debug. /debug is currently protected with a HTTP basic auth. As there is only a very ...
0
votes
1answer
190 views

Bypass IIS Basic Authentication for localhost

I'd like to have a website authenticated with basic auth, but then also allow the website to access itself locally. That is, I want to allow unauthenticated access only from localhost. In IIS I have ...
0
votes
1answer
297 views

Issue with Nginx, http authentication and dynamic IP address

I am trying to get Nginx as a reverse proxy to authenticate users performing inbound http requests. My ISP provides me with a dynamic IP. I am not sure how to configure my ADSL router (NAT rules). ...
0
votes
1answer
63 views

Restricting access from the internet to a website in beta conflicting with the website's own authentication

I have a java website that runs on Apache Tomcat. As the website is in Beta, I don't want it to be publicly accessible to anyone on the internet and I want a restricted group of beta testers to ...
-1
votes
1answer
670 views

HTTP digest authentication vs. HTTPS basic authentication [closed]

What is the difference between HTTP Digest Authentication and HTTPS basic authentication from a performance and security point of view?
0
votes
1answer
377 views

Nginx - Apply basic auth only if an htaccess file exists

How can I apply basic auth only if an htaccess file exists? If first tried to put the auth_basic directives in an if block, but that is not allowed. Then, I tried redirecting to a named location, ...
0
votes
1answer
212 views

basic authentication with nginx - page loads before auth popup

I have nginx and I have a directory that uses basic authentication. However, the page loads fully before the authentication popup comes. Even if I press cancel I'm not redirect to 401 authorization ...
0
votes
0answers
172 views

Is there a way to get a password from HTTP authorization header in mod_rewrite (apache2)

I'd like to parse HTTP authorization header in mod_rewrite - to be able to use login and password for another redirect. I want to achieve something like this: user puts ...