The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
30 views

IIS 7.5: In the “Connect As” dialog, can't set “Specific user” to the application pool identity?

I have a bunch of websites and applications with their own app pools, all using AppPoolIdentity. App pool identities are nice because you can set file system permissions and add SQL Server users based ...
3
votes
1answer
955 views

CUPS basic auth error through web interface

I'm trying to configure CUPS to allow remote administration through the web interface. There's enough documentation out there that I can figure out what to change in my cupsd.conf (changing Listen ...
3
votes
1answer
1k views

How can I enable http auth in lighttpd for all directories except one?

I am trying to authenticate access to everything in webroot (/) except anything that resides in a particular directory (/directory/) and I've tried both of these options to no avail: $HTTP["url"] =~ ...
-2
votes
0answers
30 views

I am getting authentication page twice on opening browser for first time

I am getting authentication page twice on opening any browser for first time. I am using tomcat authentication. On opening fresh browser (not new tab) when i try my url, Authentication page gets ...
1
vote
2answers
26 views

Persist basic authentication across protocols

I maintain a website that uses basic authentication to prevent outside users from viewing it (It's a staging/test environment open to the internet). The website is available over unsecured (HTTP) ...
1
vote
1answer
65 views

Yum repo basic auth not working

So we've got this yum repo that is protected via basic auth. My yum.repo definition looks like this [custom-repo] name=Releases Repository ...
1
vote
1answer
37 views

Is basic authentication secure when it goes though my reverse proxy on SSL?

Hoping someone can let me know if im on the right track. I use IIS on my file server within my network. I have an apache2 server which takes all HTTP and HTTPS requests and by way of reverse proxy ...
0
votes
1answer
70 views

nginx reverse proxy with basic_auth - 404 Not found

I have an nginx server block to proxy_pass content from three servers: gitlab, Rshiny and static content from another nginx server block. All this works fine, until I try to add password protection to ...
0
votes
1answer
96 views

Basic username-password authentication on gitorious

I recently set up my own server that is supposed to host some git repositories. I installed gitorious there. It is almost perfect. The one thing that I am struggling with right now is how can I make ...
0
votes
0answers
129 views

Apache password mismatch using mod_dbd

I Using Apache 2.4, using mod_dbd authentication i followed all steps to configure but when i tries to login, shows me AH01617: user pedro: authentication failure for "/": Password Mismatch But i ...
0
votes
0answers
15 views

Apache's mod_perl access to Basic AuthType screen

I am looking to implement a perl script that gathers the login information (specifically, the username) before that information logs into the system. My current setting is the following PerlRequire ...
0
votes
1answer
34 views

Does Basic User Authentication require 2-Phase communiation?

My Application connects to the Internet to HTTP Services using boost::asio. Recently we added support for HTTP Proxys and Basic User Authentication. We implemented Basic User Authentication by just ...
2
votes
1answer
67 views

IIS Basic Authentication only protects directories, not individual files?

I really hope this isn't a duplicate, but I wasn't able to find anything like this on here. My issue is: I have a subdirectory on a Windows (not sure if 2008 R2 or 2012) server with IIS 8.5 that I ...
0
votes
1answer
51 views

HTTP Basic auth in tomcat

I am trying to enable basic HTTP auth on my tomcat application. Also I want to keep it outside the application. I added a new user to tomcat-users.xml and set its role to 'app-user'. Then I added a ...
0
votes
1answer
64 views

Apply HTTP Basic authentication only to root directory

I have setup a multi directory plain web application that need authentication only for root directory. All other sub directory I need to allow without password. I have setup HTTP Basic ...
0
votes
1answer
1k views

IIS 7.5 Basic authorization issue

When I log on using correct user name\password (I always copy-paste them) I get 401.1 error. User name and password are correct (user is created on server locally, not a domain one). I can run program ...
0
votes
2answers
454 views

Apache2 authentication NTLM without prompted semi Basic auth type

I succesfully configured ntlm authentication. Unfortunately config allows semi basic authorization. For example when I'm using tortoise svn1.8.4(with serf access lib), chrome or IE web browsers, they ...
0
votes
0answers
57 views

Enable/disable basic auth from IP in nginx

I have Atlassian Stash behind Nginx. Server-wide, I have a basic auth for controlling access from outside the office. To make this works, I have to put proxy_set_header Authorization "" But I'd like ...
1
vote
0answers
45 views

IIS 7.5 http requesting basic authentication but https isn't

Server 2008 R2 IIS 7.5 Website Panel I have a multiple sites running that have a specific folder in each site, say PDFs, some changes have been made, but I don't know what and now if you try to ...
2
votes
1answer
124 views

Disable Apache basic auth in virtual subdirectory

I have a webserver that is completely locked down with Basic Auth <Location /> AuthType Basic # [...] rest of basic auth stuff require valid-user order deny,allow deny from ...
0
votes
1answer
31 views

In apache how do you validate that the logged in username matches the directory name?

Sometimes you want to setup a directory structure in apache such that logged in users can only see their own directory. (i.e. the directory name and the username match.) What do you put in the ...
0
votes
1answer
70 views

activate htaccess only on specific URI

I have an apache webserver running on an ubuntu system. To avoid access for unauthorized users, I have an active .htaccess: AuthType Basic AuthName "own area" AuthUserFile /path/to/.htpasswd require ...
19
votes
3answers
75k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
0
votes
0answers
71 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
0
votes
0answers
66 views

Why do AuthType Basic directives not work in .htaccess

I have a web server running on ClearOs 6. I would like to protect a couple of directories using .htaccess, but I do not seem to be prompted for a password at all. Relevant bits of conf file are: ...
0
votes
2answers
496 views

Apache2 mix of two location restrictions: basic auth and ip-based

I want to restrict a staging server with basic auth, except for one special location, which should not have basic auth but be restricted to a client IP block. My virtual host section looks like this: ...
0
votes
0answers
137 views

Can I prevent Apache ProxyPass from returning HTTP 401?

I have Apache 2.2.22 acting as a proxy server, and it's doing authentication against an LDAP server: <Location /app> AuthType Basic AuthName "Test access" # ..mod_auth_ldap config ...
0
votes
0answers
116 views

Nginx with auth_basic AND MultiViews/try_files

I've managed to get faux MultiViews working with the following directive: location ~ ^(.+)$ { try_files $uri $uri/ $1.php?$args; } But it seems to break the auth_basic directives generated by ...
0
votes
0answers
62 views

Allow empty basic auth credentials, but check if supplied

I have an Apache 2.4 server with several webservices that all use form-based login + cookies. I want to unify my set-up with an LDAP authentication using Apache's AuthType Basic and AuthBasicProvider ...
0
votes
1answer
27 views

Multiple Apache Auth User Files

I have multiple vhosts on a host running apache. It is a test system and I would like to give users "basic authentication" access to their sites. For this I have a vhost file with basic auth ...
3
votes
2answers
4k views

Enable basic auth sitewide and disabling it for subpages?

I have a relatively straight forward config: upstream appserver-1 { server unix:/var/www/example.com/app/tmp/gunicorn.sock fail_timeout=0; } server { listen 80; server_name example.com; ...
3
votes
2answers
103 views

Authentication request to change http to https

On my server that works with nginx, access is protected by a basic http authentication. I am currently developing a piece of code that requires HTTPS redirection, and when this redirection occurs, I ...
0
votes
1answer
74 views

basic auth on 2 different folders

I have nginx installed, and I want to use the built-in auth-basic module to authenticate on 2 different folders. Each folder should have its own user & password lists. For this i created 2 ...
0
votes
1answer
43 views

How to protect a virtualhost by Both IP OR password

I have managed to password protect a virtualhost by using this: <Proxy *> Order deny,allow Deny from all Allow from office-ip-1 office-ip-2 ...
0
votes
1answer
150 views

Bypass IIS Basic Authentication for localhost

I'd like to have a website authenticated with basic auth, but then also allow the website to access itself locally. That is, I want to allow unauthenticated access only from localhost. In IIS I have ...
1
vote
1answer
86 views

Hiding a HTTP Auth-Realm by sending 404 to non-known IPs?

I have an Apache (2.2) serving a web-app on example.com. That web-app has a debug-page reachable via example.com/debug. /debug is currently protected with a HTTP basic auth. As there is only a very ...
0
votes
0answers
91 views

How to make MySQL based authentication work in Apache 2.2?

I'm trying to set up a simple CalDAV/CardDAV server with a Radicale backend and an Apache 2.2 frontend. So far, it's all nice and simple, but I can't get the MySQL based authentication to work. I'd ...
0
votes
0answers
230 views

Issue with Nginx, http authentication and dynamic IP address

I am trying to get Nginx as a reverse proxy to authenticate users performing inbound http requests. My ISP provides me with a dynamic IP. I am not sure how to configure my ADSL router (NAT rules). ...
0
votes
1answer
49 views

Restricting access from the internet to a website in beta conflicting with the website's own authentication

I have a java website that runs on Apache Tomcat. As the website is in Beta, I don't want it to be publicly accessible to anyone on the internet and I want a restricted group of beta testers to ...
-1
votes
1answer
251 views

HTTP digest authentication vs. HTTPS basic authentication [closed]

What is the difference between HTTP Digest Authentication and HTTPS basic authentication from a performance and security point of view?
0
votes
0answers
17 views

Combining Location and Directory with BasicAuth

I have set up some basic auth on a site, which is working fine. I get prompted to authorise for all requests except to filea or fileb. <Directory "/var/www/vhosts/domain.com/public"> ...
3
votes
3answers
1k views

Apache redirect to https for basic auth

I have a tricky variation on an old problem. I have an apache based site that should generally be accessed via http/port 80. However for certain areas protected areas that require authentication ...
1
vote
2answers
1k views

git refuses to send credentials over http?

curl seems to work fine, but git does not. git asks for a password, but then doesn't send any credentials. works: curl --netrc http://test.git.unsw.edu.au/ and curl -u username:password ...
0
votes
1answer
231 views

Nginx - Apply basic auth only if an htaccess file exists

How can I apply basic auth only if an htaccess file exists? If first tried to put the auth_basic directives in an if block, but that is not allowed. Then, I tried redirecting to a named location, ...
0
votes
1answer
133 views

basic authentication with nginx - page loads before auth popup

I have nginx and I have a directory that uses basic authentication. However, the page loads fully before the authentication popup comes. Even if I press cancel I'm not redirect to 401 authorization ...
0
votes
0answers
137 views

Is there a way to get a password from HTTP authorization header in mod_rewrite (apache2)

I'd like to parse HTTP authorization header in mod_rewrite - to be able to use login and password for another redirect. I want to achieve something like this: user puts ...
2
votes
0answers
122 views

Using nginx: require authentication when request from public IP, not needed when local

I wrote a simple file browser app which is served using node on port 3000. I use nginx as a front-end which proxies this service. This is on my home server. I would like to be able to require basic ...
2
votes
1answer
312 views

Basic Authentication doesn't display login box

I am using IIS 7.5 and want to change a website from using anonymous authentication to basic authentication. I access the Authentication feature, disable anonymous authentication then enable basic ...
0
votes
1answer
310 views

Nginx reverse proxy, satisfy any causing all clients to be permitted [duplicate]

I am having a problem with satisfy any in a server or location block causing all clients to be permitted access, which afaik is not the expected behavior. server { listen 80; server_name ...
1
vote
3answers
1k views

apache basic authentication - how to disable on dev computer

I'm disabling access to some folders to unauthorized users this way: AuthUserFile /var/www/passwords/.htpasswd_private AuthType Basic AuthName "Access to private admin section" Require valid-user ...