The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
7 views

Secure Port with Nginx Web Server Authentication auth_basic

I am trying to secure the login URL of my website (Ajenti control panel) with auth_basic authentication. I access the site like this: https://myajentiinstallation.com:8787 In the file ...
37
votes
3answers
154k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
1
vote
1answer
26 views

HTTP Basic Auth unless connecting from the office with Apache 2.4?

We wish to set up a website for demo purpose only that we can: Access from anywhere from the internet by entering a username and password via HTTP Basic Auth. For ease of use we wish to not having ...
1
vote
1answer
987 views

Yum repo basic auth not working

So we've got this yum repo that is protected via basic auth. My yum.repo definition looks like this [custom-repo] name=Releases Repository ...
0
votes
0answers
29 views

Apache Proxy & Basic Auth

Im trying to set up an Apache Proxy which also does LDAP Basic Auth: <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerAdmin webmaster@localhost ...
5
votes
1answer
1k views

How can I enable http auth in lighttpd for all directories except one?

I am trying to authenticate access to everything in webroot (/) except anything that resides in a particular directory (/directory/) and I've tried both of these options to no avail: $HTTP["url"] =~ ...
0
votes
1answer
49 views

How to set auth_basic for one file in NGINX? [duplicate]

Here is my config: server { #... location ^~ /wp-login.php { auth_basic "Restricted"; auth_basic_user_file /var/www/.htpasswd; } ...
1
vote
1answer
47 views

Nginx: Selective On/Off of Auth Basic Based on Realm

I run SugarCRM on a LEMP stack and have it closed down with auth_basic. That works fine, headers show: WWW-Authenticate: Basic realm="Username and Password are required" Some files within SugarCRM ...
0
votes
1answer
183 views

.htaccess file is not working on Apache 2.4.12 and Windows Server 2008 R2

I am trying to add Authentication window to a section of the site using .htaccess file. But It is not working "the site is acting that the ".htaccess" files does not exists. here is that content of ...
0
votes
0answers
36 views

Basic ncsa authentication is not workling in squid

I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7 I've configured squid for basic authentication, md5 password works, but if fails when I try to use either blowfish or sha password. Below is the ...
0
votes
1answer
20 views

Does the Apache Httpd basic auth functionality have a constant time password comparison?

When I use Apache Httpd's basic auth functionality, sometimes I notice that wrong passwords seem to take longer than right passwords to check. Does Apache Httpd have an option for constant time ...
1
vote
2answers
1k views

Apache removes Authorization header

Apache is acting as a reverse proxy in my setup. The application server running on port 8081 requires a valid Authorization header. The header is set by the client application. Apache seems to remove ...
0
votes
1answer
547 views

How can I add basic auth to an apache proxy while using CORS headers?

Background I use grafana for displaying graphs of our server-metrics. Grafana is a JS-app which in our case is getting the data from graphite and storing search-queries in elasticsearch. All three ...
0
votes
1answer
228 views

Nginx how to use limit_req_zone on auth_basic to protect against brute force attack?

I have an Nginx server that works as an SSL proxy for a service running on a localhost that doesn't support SSL authentication. I would like to use Nginx's limit_req_zone function to protect the ...
0
votes
0answers
89 views

Basic authentication with WildFly on Openshift

I'm trying to setup basic authentication for a Java EE application. I defined my users and roles in : application-users.properties application-roles.properties located in ...
0
votes
0answers
164 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
0
votes
1answer
59 views

nginx authentication and custom error page

I'm trying to set up my server so that it requires authentication before browsing any file on the domain. However, I want to display a custom error page (placeholder.html) when someone fails to ...
1
vote
1answer
98 views

Apache as authentication proxy

We are trying to implement authentication proxy from Apache httpd. This should secure application that uses Basic Authentication but user should authenticate with httpd's authentication (mod_auth_cas ...
1
vote
1answer
2k views

How do I use my own web form with the ngx_http_auth_basic_module?

I want to capture the username and password with my own form and then use those values with the Nginx ngx_http_auth_basic_module,rather than having the default Nginx box that comes up, asking for ...
1
vote
2answers
1k views

NGINX basic auth timeout?

I've protected a directory with satisfy and basic_auth, but seems that the validation is not stored in a cookie which after some time it's deleted, seems it's ip or something based. So i login once ...
1
vote
0answers
97 views

IIS 7.5 Basic Authentication does not seem to work with virtual directories

IIS 7.5 is running in this server. I have configured IIS Manager User "someuser". On virtual directory "virtdir", which is also an IIS7.5 "app" I have set user "someuser" to allowed (in IIS Manager ...
0
votes
1answer
102 views

mod_rewrite in .htaccess and basic auth in vhost - access to paths

I want to lock down a website (made on Drupal) with basic auth. Drupal is using mod_rewrite in its .htaccess file. The problem I'm facing is this - my virtual host looks like this: <VirtualHost ...
0
votes
1answer
80 views

Protect /analytics on Nginx with basic authentication, but allow access to .php and .js files?

Hope this is the right place to ask. I have Piwik setup and running on a Nginx webserver that I protected with HTTP basic authentication, as seen below. location /analytics { alias ...
1
vote
0answers
74 views

why basic auth loops when using nginx and monit

I was trying to configure nginx so that http://example.com/monit will access http://127.0.0.1:2812, which is the url monit is listening. Two authentication was set, via nginx(nginx.conf file) and ...
1
vote
0answers
143 views

Is it possible to share a basic auth session between several aliases in nginx?

The title pretty much sums it up, we have a very simple virtual host setup in nginx protected by basic auth, so it looks like that: server { listen portnumber; server_name *.domain.com; ...
0
votes
1answer
389 views

Issue with Nginx, http authentication and dynamic IP address

I am trying to get Nginx as a reverse proxy to authenticate users performing inbound http requests. My ISP provides me with a dynamic IP. I am not sure how to configure my ADSL router (NAT rules). ...
2
votes
1answer
210 views

Using nginx: require authentication when request from public IP, not needed when local

I wrote a simple file browser app which is served using node on port 3000. I use nginx as a front-end which proxies this service. This is on my home server. I would like to be able to require basic ...
0
votes
0answers
146 views

Nginx rewrite URL based on basic auth username

I have a static file serving set up in Nginx wherein different customers need to visit a different URL to get the content that is specific to them; in addition, they have to enter their username and ...
0
votes
1answer
125 views

Switching between multiple authentication types on same URL

I have a secure SSO site that uses Shibboleth authentication and SAML identity provider. I need to allow a Google Search Appliance crawler to come index the URL's. I have a requirement to change on ...
1
vote
1answer
747 views

How can I use munin-node apache_ with basic authentication?

munin-node-configure --suggest tells me that the apache_* nodes cannot be used: apache_accesses | no | no [Port 80: Authorization Required] apache_processes | no | no ...
1
vote
0answers
51 views

Disable authentication for certain files

I am trying to disable Apache authentication for certain files, but I don't seem to get it right. This is what I have on .htaccess: AuthType Basic AuthName "Authentication Required" AuthUserFile ...
1
vote
0answers
535 views

HAproxy ACL based on backend application session cookie to replace HTTP Basic Auth

I would need some help on HAproxy configuration to bypass HTTP basic auth and let the user use a specific backend in case there is a valid session cookie present from another backend application. I ...
0
votes
0answers
241 views

Apache Authentication failed, VtigerCRM customer portal cannot connect to server

We have installed VtigerCRM on the server which is protected by Apache authentication via LDAP. There is another machine running Vtiger customer portal. This machine needs to connect to the server ...
1
vote
1answer
158 views

Why does mod_jk bypass Apache authorization?

Since switching from Apache 2.2 authorization gets bypassed for many JkMounts (except jk-status). If I cancel the browser password popup, I get a 401-page. It is not, as I expect, the one from ...
1
vote
1answer
53 views

How to inhibit repeated checks to mod_auth_basic by mod_autoindex?

In Apache 2.4, When using both mod_autoindex and mod_auth_basic on a directory, the indexing of that directory causes mod_auth_basic to perform a password hash and lookup from scratch once for every ...
0
votes
0answers
278 views

How do I only allow certain IP addresses into apache, and then require a password for a subset of that list?

How do I only allow certain IP addresses into apache, and then require a password for a subset of that list? (I'm also open to doing this all within Proxy or Location directive) My setup is an ...
0
votes
1answer
130 views

Can't get basic plain auth to work on lighttpd win 1.4.35-1-ipv6

I simply can't get Plain Basic auth to work on lighttpd for more than one user. I have this auth.user file formatted like this: [account_1_name]:[account_1_password] ...
3
votes
1answer
2k views

CUPS basic auth error through web interface

I'm trying to configure CUPS to allow remote administration through the web interface. There's enough documentation out there that I can figure out what to change in my cupsd.conf (changing Listen ...
1
vote
0answers
2k views

Basic auth not working in Apache 2.4

I know it seems a simple task and I did it many times for Apache 2.0-2.2 but in 2.4 config doesn't work. I am trying to configure basic auth for directiry: <Directory /var/www/html/docs> ...
2
votes
1answer
553 views

Does IIS support HTTP basic auth and form auth at the same time?

preface: I am a web dev who knows apache servers quite well, but I have little to no knowledge of IIS or .NET I work with a developer who has been avoiding a request to add a Basic Auth to a staging ...
0
votes
1answer
252 views

Nginx auth only for given location

I'm using Nginx as a reverse proxy for a python WSGI web-app. It looks something like that: location / { #auth_basic "Administrator Login"; #auth_basic_user_file ...
0
votes
1answer
1k views

How to disable nginx basic_auth for one location but enable it for the rest of the site

I'm trying to get basic_auth disabled for a specific directory (/api/), but still have basic auth for the rest of the site I'm working with. The following is my nginx.conf: server { # base ...
0
votes
1answer
506 views

Linux: Centos: enabling basic authentication

I am trying to set up basic authentication for a linux (centos) server. I did the following: mkdir /usr/local/apache mkdir /usr/local/apache/passwd echo > /usr/local/apache/passwd/passwords ...
0
votes
1answer
248 views

IIS 7.5: In the “Connect As” dialog, can't set “Specific user” to the application pool identity?

I have a bunch of websites and applications with their own app pools, all using AppPoolIdentity. App pool identities are nice because you can set file system permissions and add SQL Server users based ...
1
vote
2answers
44 views

Persist basic authentication across protocols

I maintain a website that uses basic authentication to prevent outside users from viewing it (It's a staging/test environment open to the internet). The website is available over unsecured (HTTP) ...
1
vote
1answer
126 views

Is basic authentication secure when it goes though my reverse proxy on SSL?

Hoping someone can let me know if im on the right track. I use IIS on my file server within my network. I have an apache2 server which takes all HTTP and HTTPS requests and by way of reverse proxy ...
0
votes
1answer
692 views

nginx reverse proxy with basic_auth - 404 Not found

I have an nginx server block to proxy_pass content from three servers: gitlab, Rshiny and static content from another nginx server block. All this works fine, until I try to add password protection to ...
1
vote
1answer
178 views

Basic username-password authentication on gitorious

I recently set up my own server that is supposed to host some git repositories. I installed gitorious there. It is almost perfect. The one thing that I am struggling with right now is how can I make ...
0
votes
1answer
92 views

Does Basic User Authentication require 2-Phase communiation?

My Application connects to the Internet to HTTP Services using boost::asio. Recently we added support for HTTP Proxys and Basic User Authentication. We implemented Basic User Authentication by just ...
2
votes
1answer
341 views

IIS Basic Authentication only protects directories, not individual files?

I really hope this isn't a duplicate, but I wasn't able to find anything like this on here. My issue is: I have a subdirectory on a Windows (not sure if 2008 R2 or 2012) server with IIS 8.5 that I ...