The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
3answers
499 views

iis' basic authentication system blocks too many login attempts?

I'm doing a security analysis of a network for a university project. The servers use the basic autentication of iis, integrated with ssl. I'm now considering the possibility of a bruteforce attack. I ...
37
votes
3answers
161k views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried ...
2
votes
1answer
3k views

Rewriting a query-string part as a path part using nginx?

How do I rewrite URIs of the form /one/two?path=three&foo=bar to /one/two/three?foo=bar using nginx?
4
votes
2answers
5k views

IIS Basic Authorization ala .htaccess/.htpasswd in apache

How do I implement the protection of the pages (asp.net mvc app), so when I hit the home page or any other pages within the application I get a login dialog popup in the browser I'm looking for ...
4
votes
1answer
2k views

NGINX basic auth only for POST

I'm settings up nginx to serve Mercurial repositories. It works when not using basic authentication at all, or when I use basic authentication all over. What I want to do is to just use basic auth on ...
2
votes
1answer
217 views

Using nginx: require authentication when request from public IP, not needed when local

I wrote a simple file browser app which is served using node on port 3000. I use nginx as a front-end which proxies this service. This is on my home server. I would like to be able to require basic ...
2
votes
1answer
1k views

Apache and mod_dbd Getting “DBD: mod_dbd not compatible with APR in get_driver”

Im tring to implement basic authentication with Apache server and plugin's the proxy part working great but when i try to preform request that suppose to trigger the mod_authn_dbd and its ...
1
vote
1answer
70 views

Nginx: Selective On/Off of Auth Basic Based on Realm

I run SugarCRM on a LEMP stack and have it closed down with auth_basic. That works fine, headers show: WWW-Authenticate: Basic realm="Username and Password are required" Some files within SugarCRM ...
1
vote
1answer
753 views

How can I use munin-node apache_ with basic authentication?

munin-node-configure --suggest tells me that the apache_* nodes cannot be used: apache_accesses | no | no [Port 80: Authorization Required] apache_processes | no | no ...
0
votes
1answer
2k views

basic auth across multiple subdomains

I'm setting up a basic test environment to test drive multiple sites I co-maintain with a colleague. What I am trying to achieve is to password protect the entire domain with basic auth. This is ...