The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
10 views

Exclude subfolder from auth_basic in NginX [duplicate]

I'd like to set NginX to protect a specific folder but within this folder there is a subfolder which should be world open. My config looks like this server { listen 80 default_server; ...
-1
votes
0answers
17 views

Looking for a GUI for HTPASSWD, or a way to style the popup [on hold]

At the moment I am just using htpasswd authentication for my clients login to my dev server... I would really like to be able to style a landing page that has the htpasswd login functionality albeit ...
1
vote
1answer
1k views

Apache2 with basic auth: exclude one location from auth (weird behaviour)

I have basic auth set for Directory / and want to exclude Location /assets/upload, but it just won't work, I have tried several options and tutorials. This Location directive clears the Directory ...
0
votes
1answer
32 views

Apache up in flames (AH00025). How to fix?

I was trying to get Apache 2.4.10 to do basic authentication (under HTTPS) as specified in a .htaccess file. I changed one directory's settings to AllowOverride all, and it started serving up nothing ...
0
votes
1answer
1k views

nginx reverse proxy with basic_auth - 404 Not found

I have an nginx server block to proxy_pass content from three servers: gitlab, Rshiny and static content from another nginx server block. All this works fine, until I try to add password protection to ...
0
votes
0answers
21 views

Is Apache Basic Auth w/ SSL “good enough” from a security standpoint?

Is using Apache Basic Auth with enforced SSL good enough to secure internal-only sites that must be publicly accessible? I know that there are more advanced Apache authentication protocols such as ...
0
votes
0answers
39 views

phpMyAdmin asks for BasicAuth

When accessing the phpMyAdmin link (mydomain.com/phpMyAdmin/), I am being prompted with a BasicAuth pop-up. The phpMyAdmin/config.inc.php does not overwrite any defaults, therefore the config.default....
0
votes
1answer
31 views

IIS 8 on Server 2012 “Basic Authentication” is not available as a feature even after installing Role

I have an Azure VM with Windows Server 2012 on which I use IIS 8.0 to connect to an Azure App Service website. I use Server Management (version screenshot:https://www.dropbox.com/s/4fiqtzw3mgdwd0r/...
8
votes
2answers
20k views

Enable basic auth sitewide and disabling it for subpages?

I have a relatively straight forward config: upstream appserver-1 { server unix:/var/www/example.com/app/tmp/gunicorn.sock fail_timeout=0; } server { listen 80; server_name example.com; ...
0
votes
0answers
156 views

How to create cores on Solr Cloud with basic authentification?

I am running Solr Cloud 5.3.x which is secured by basic authentification. After successfully uploading the config files to zookeeper, I wanted to create the cores. Unfortunatelly this failes. solr ...
0
votes
0answers
27 views

Disable basic authentication from local network

Running apache 2.4.18 on Ubuntu 16.04, I just don't know how to get this working anymore. I want to enable basic http authentication for all requests, except for requests from the local network. So ...
2
votes
1answer
26 views

Basic Auth User Management

I have 2 questions regarding Apache Basic Auth that i currently am utilising. I have a website that after a certain action, the website will produce a Basic Auth username and password for the user to ...
0
votes
0answers
50 views

Apache auth basic keeps prompting for credentials

I have an Apache 2.4 serving several Tomcats and a PHP Laravel application on the same machine. I want to restrict access to all applications with a basic authentication. The access to the tomcats (/...
1
vote
0answers
20 views

Apache HTTPD basic auth creates multiple login dialogs

So i have an Apache HTTPD server (v2.4.6) with mod_ssl. I setup basic auth in /etc/httpd/conf.d/ssl.conf with the code at the end: <LocationMatch "xxxx"> AuthType Basic AuthName "Restricted" ...
0
votes
2answers
36 views

Basic Auth in multiple directories on same virtualhost

Is it possible to nest basic auth? So that the parent folder and all subfolders can be accessed using one basic auth directive but subfolders have seperate auth VHost config: <VirtualHost *:80&...
0
votes
0answers
29 views

IIS7 Digest authentication credentials forgotten between pages

I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh. If this is normal behavior for this ...
0
votes
1answer
87 views

HAProxy basic auth except from specific IP

I have set up basic authentication for my backend, like this: backend webservers acl is_auth_ok http_auth(SiteUsers) http-request auth realm MySite if !is_auth_ok This works but now I want ...
2
votes
2answers
163 views

Basic auth Apache with Tomcat

I have the following server setup: Apache Tomcat 7 running Atlassian's Jira (http:// <server-ip>:8081/tickets) Apache 2.4 web server as reverse proxy serving only the jira application at the ...
0
votes
0answers
34 views

Tomcat webapp protected by Apache basic auth wont accept valid username password

I have Apache 2.4 set up as a reverse proxy in front of my Tomcat 7 app. There is also another static HTML portion called moderation. The tomcat app is set up to provide a form based login. I want ...
0
votes
2answers
111 views

How to do basic auth with HAProxy while doing other ACL?

I am running HAProxy in front of apache servers and I want to implement basic authentication for some domains. The manual states that this should do the trick: userlist admins user myusername ...
1
vote
2answers
930 views

Nginx - Apply basic auth only if an htaccess file exists

How can I apply basic auth only if an htaccess file exists? If first tried to put the auth_basic directives in an if block, but that is not allowed. Then, I tried redirecting to a named location, ...
0
votes
0answers
8 views

Trailing numbers in Apache Basic Auth [duplicate]

I don't know if I'm doing something wrong, or if this is a legit bug... I'm using Centos 6 with httpd, and any trailing numbers are ignored in the password. Example: Using htpasswd I set my password ...
0
votes
2answers
442 views

basic authentication with nginx - page loads before auth popup

I have nginx and I have a directory that uses basic authentication. However, the page loads fully before the authentication popup comes. Even if I press cancel I'm not redirect to 401 authorization ...
0
votes
0answers
37 views

htaccess permissions randomly being used in parent directory

I have an Ubuntu 14.04 server, which I have had set up for a fews years with little adjustments. On the server I have a directory Movies which has a .htaccess file in it that requires authentication ...
1
vote
0answers
138 views

iis 8 basic authentication 404 error

I deployed a .Net application on Windows Server 2012. The application works fine when no authentication is enabled(with anonymous authentication). When I enable Basic authentication, the site ...
1
vote
1answer
116 views

Protecting a location by IP while applying basic auth everywhere else

I want to achieve the following results: Apply basic authentication to ANY location, file, path Remove basic authentication for an IP/CIDR range whitelist Prevent ALL access to a specific directory, ...
2
votes
1answer
506 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
0
votes
1answer
51 views

Exchange 2007 RPC over HTTPS, basic auth, password prompt bypassed by clicking 'need password'.. desired behavior?

I can't handle the incessant password prompting anymore.. Our Outlook installations prompt for a password after the comps wake from sleep and/or when changing between wired/wireless. Outlook DOES ...
3
votes
0answers
124 views

Apache 2.4 Redundant LDAP Authentication

I'm trying to provide a redundant LDAP authentication to my webserver. ScriptAlias /nagios/cgi-bin "/usr/local/nagios/sbin" <AuthnProviderAlias ldap ldap-one> AuthLDAPBindDN "search@domain" ...
0
votes
0answers
34 views

IIS 7.5 How to configure custom 401 Authentication Error Page with Basic Authentication

I have a website running under IIS 7.5. I am using Basic Authentication. I want to set it up so that if authentication fails it redirects them to a www url. How can I achieve this?
0
votes
1answer
351 views

Apache Proxy & Basic Auth

Im trying to set up an Apache Proxy which also does LDAP Basic Auth: <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerAdmin webmaster@localhost ...
0
votes
1answer
19 views

Show user which Group is required for Apache Basic Auth page

Is it possible to show which 'group' is required for access to a web page protected with Apache Basic Auth? Ideally, the pop-up requesting username and password would pass the 'group' required as a ...
0
votes
0answers
36 views

IIS Intranet Users Login

I have a web application deployed in IIS 7. I want to configure it so that others from all intranet Domains can login to the web application. Here are the things I've done: Enabled IIS Windows ...
1
vote
0answers
139 views

IIS 8.5 Credentials working for windows authentication but not for basic

I have an IIS 8.5 on a windows server 2012 machine. When I enable the windows authentication (basic authentication is disabled), I can access and see the home page of IIS (http://localhost) with the ...
0
votes
2answers
37 views

How to set BasicAuth everywhere EXCEPT certain directories

When it comes to setting BasicAuth protection for specific directory, I use simple setup (in apache2.conf file): <Directory /var/www/somedir/> Deny from all AuthUserFile /var/pswd/somedir/....
1
vote
1answer
409 views

Apache Basic Auth not working in customer network

I'm having trouble, letting a customer see a site that is locked with a simple Apache Basic Auth password file. It works in every browser on Mac, Windows and in our network. Even the customer get's ...
1
vote
1answer
342 views

Exclusion of a protected sub-url does not work on Apache 2.4?

I try to exclude a sub-url "/shop/api" from my protected website. It worked fine on different server on Apache/2.2.15 but now not with Apache/2.4.7? It always asks for the basic authentication. Any ...
62
votes
4answers
274k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried http://myserver.com/~user=...
0
votes
1answer
76 views

Truncate Basic authentication username and password in Apache proxy

We need to proxy a request to a server. The sender has an autogenerated username and password, and will use basic authentication. We can't change these how these are generated by the sender. The ...
2
votes
1answer
3k views

Yum repo basic auth not working

So we've got this yum repo that is protected via basic auth. My yum.repo definition looks like this [custom-repo] name=Releases Repository baseurl=http://user:password@our-corporate-yum.devops....
1
vote
1answer
255 views

How to get the remote user from httpd basic authentication in my tomcat servlet?

I've successfully configured mod_proxy_ajp from my httpd to Tomcat, with httpd performing the SSL and basic authentication. I need the remote user in my tomcat application, so I thought using AJP ...
0
votes
1answer
135 views

Protect /analytics on Nginx with basic authentication, but allow access to .php and .js files?

Hope this is the right place to ask. I have Piwik setup and running on a Nginx webserver that I protected with HTTP basic authentication, as seen below. location /analytics { alias /var/www/piwik/...
0
votes
0answers
163 views

Secure Port with Nginx Web Server Authentication auth_basic

I am trying to secure the login URL of my website (Ajenti control panel) with auth_basic authentication. I access the site like this: https://myajentiinstallation.com:8787 In the file /etc/nginx....
1
vote
1answer
141 views

HTTP Basic Auth unless connecting from the office with Apache 2.4?

We wish to set up a website for demo purpose only that we can: Access from anywhere from the internet by entering a username and password via HTTP Basic Auth. For ease of use we wish to not having ...
5
votes
1answer
2k views

How can I enable http auth in lighttpd for all directories except one?

I am trying to authenticate access to everything in webroot (/) except anything that resides in a particular directory (/directory/) and I've tried both of these options to no avail: $HTTP["url"] =~ "...
0
votes
1answer
206 views

How to set auth_basic for one file in NGINX? [duplicate]

Here is my config: server { #... location ^~ /wp-login.php { auth_basic "Restricted"; auth_basic_user_file /var/www/.htpasswd; } ...
1
vote
1answer
302 views

Nginx: Selective On/Off of Auth Basic Based on Realm

I run SugarCRM on a LEMP stack and have it closed down with auth_basic. That works fine, headers show: WWW-Authenticate: Basic realm="Username and Password are required" Some files within SugarCRM ...
0
votes
1answer
826 views

.htaccess file is not working on Apache 2.4.12 and Windows Server 2008 R2

I am trying to add Authentication window to a section of the site using .htaccess file. But It is not working "the site is acting that the ".htaccess" files does not exists. here is that content of ...
0
votes
0answers
172 views

Basic ncsa authentication is not workling in squid

I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7 I've configured squid for basic authentication, md5 password works, but if fails when I try to use either blowfish or sha password. Below is the ...
0
votes
1answer
29 views

Does the Apache Httpd basic auth functionality have a constant time password comparison?

When I use Apache Httpd's basic auth functionality, sometimes I notice that wrong passwords seem to take longer than right passwords to check. Does Apache Httpd have an option for constant time ...