0
votes
0answers
8 views

Apache Authentication failed, VtigerCRM customer portal cannot connect to server

We have installed VtigerCRM on the server which is protected by Apache authentication via LDAP. There is another machine running Vtiger customer portal. This machine needs to connect to the server ...
1
vote
1answer
13 views

How to inhibit repeated checks to mod_auth_basic by mod_autoindex?

In Apache 2.4, When using both mod_autoindex and mod_auth_basic on a directory, the indexing of that directory causes mod_auth_basic to perform a password hash and lookup from scratch once for every ...
0
votes
1answer
33 views

Can't get basic plain auth to work on lighttpd win 1.4.35-1-ipv6

I simply can't get Plain Basic auth to work on lighttpd for more than one user. I have this auth.user file formatted like this: [account_1_name]:[account_1_password] ...
0
votes
1answer
84 views

IIS 7.5: In the “Connect As” dialog, can't set “Specific user” to the application pool identity?

I have a bunch of websites and applications with their own app pools, all using AppPoolIdentity. App pool identities are nice because you can set file system permissions and add SQL Server users based ...
1
vote
1answer
117 views

Basic username-password authentication on gitorious

I recently set up my own server that is supposed to host some git repositories. I installed gitorious there. It is almost perfect. The one thing that I am struggling with right now is how can I make ...
0
votes
1answer
139 views

How to disable nginx basic_auth for one location but enable it for the rest of the site

I'm trying to get basic_auth disabled for a specific directory (/api/), but still have basic auth for the rest of the site I'm working with. The following is my nginx.conf: server { # base ...
0
votes
1answer
35 views

In apache how do you validate that the logged in username matches the directory name?

Sometimes you want to setup a directory structure in apache such that logged in users can only see their own directory. (i.e. the directory name and the username match.) What do you put in the ...
0
votes
0answers
27 views

Troubleshooting Basic auth loop

I have a HTTP basic auth PHP script that I know works as I have tried on a local LAMP server. When I try it on my shared host, regardless of credentials (non are actually required) the login and ...
0
votes
0answers
258 views

Issue with Nginx, http authentication and dynamic IP address

I am trying to get Nginx as a reverse proxy to authenticate users performing inbound http requests. My ISP provides me with a dynamic IP. I am not sure how to configure my ADSL router (NAT rules). ...
0
votes
1answer
55 views

Restricting access from the internet to a website in beta conflicting with the website's own authentication

I have a java website that runs on Apache Tomcat. As the website is in Beta, I don't want it to be publicly accessible to anyone on the internet and I want a restricted group of beta testers to ...
0
votes
0answers
147 views

Is there a way to get a password from HTTP authorization header in mod_rewrite (apache2)

I'd like to parse HTTP authorization header in mod_rewrite - to be able to use login and password for another redirect. I want to achieve something like this: user puts ...
0
votes
1answer
148 views

Nginx auth only for given location

I'm using Nginx as a reverse proxy for a python WSGI web-app. It looks something like that: location / { #auth_basic "Administrator Login"; #auth_basic_user_file ...
0
votes
1answer
401 views

Apache2 with basic auth: exclude one location from auth (weird behaviour)

I have basic auth set for Directory / and want to exclude Location /assets/upload, but it just won't work, I have tried several options and tutorials. This Location directive clears the Directory ...
1
vote
1answer
243 views

Enable basic authentication in IIS for remote requests, but not for local ones?

Is there a way in IIS to enable basic authentication for remote requests while leaving the website open for local requests? I need external users to authenticate to access a site, but users on the ...
1
vote
1answer
70 views

Directory Security failing with Chrome Browser

I have a directory that is protected: (extract from the vhost conf file) <Directory "/var/www/protectedDir"> allow from all Options -Indexes AuthName "secure data" ...
1
vote
2answers
1k views

git refuses to send credentials over http?

curl seems to work fine, but git does not. git asks for a password, but then doesn't send any credentials. works: curl --netrc http://test.git.unsw.edu.au/ and curl -u username:password ...
2
votes
1answer
458 views

Does IIS support HTTP basic auth and form auth at the same time?

preface: I am a web dev who knows apache servers quite well, but I have little to no knowledge of IIS or .NET I work with a developer who has been avoiding a request to add a Basic Auth to a staging ...
21
votes
3answers
87k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
1
vote
0answers
100 views

Basic auth in IIS7 without impersonation

I have an IIS 7 site set up with its own app pool. The app pool is running as a specific user, and the site is set to run as the app pool identity. I want to add basic-auth style protection to the ...
2
votes
1answer
1k views

How can I protect a Tomcat webapp that's reverse proxied in an Apache2 virtual host using basic authentication?

I'm having trouble figuring out how to adding basic HTTP authentication to password-protect a development testing environment running on a production web server. Both the main site and the testing ...
3
votes
4answers
6k views

IIS 7.5 basic authentication and Active Directory validation

I'm not an IIS or Active Directory expert by any means so I want to present a scenario here and see if what we want to accomplish is feasible. We have an application hosted on Windows Server 2008 R2 ...
0
votes
1answer
393 views

IIS/AD - Implementing single sign-on between two websites

I have two websites. One is an "intranet," one is a public site that has "admin" areas: www.example-intranet.com www.example.com They are both running on the same IIS 6 box. ...
4
votes
2answers
3k views

IIS Basic Authorization ala .htaccess/.htpasswd in apache

How do I implement the protection of the pages (asp.net mvc app), so when I hit the home page or any other pages within the application I get a login dialog popup in the browser I'm looking for ...
0
votes
1answer
391 views

mod_auth wrong password authentication?

i have a server running apache2 in a debian lenny. something strange happen with the folders protected by .htaccess. basically, if you put a wrong password but formed by the_correct_password + ...
0
votes
1answer
379 views

Allow website access from specific subnet, otherwise ask for credentials

How can I configure IIS 6 to allow access to a sub folder from our intranet without any authentication (well, the IP address needs to be checked but that's already working) from the internet only ...
3
votes
2answers
10k views

service static files under nginx & HTTP-Authentication

I have an app deployed in testing mode on a server. Access to it has been restricted to a select group of users via HTTP-Authentication. That works fine. The problem is that if I serve static files ...
0
votes
2answers
750 views

apache basic auth require group not throing forbidden

i have a basic auth setuped with user and groups AuthType Basic AuthName "GSD Dev Area" AuthUserFile /coding/conf/passwords/gsdesign/htpasswd AuthGroupFile /coding/conf/passwords/gsdesign/groups ...