The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
2answers
123 views

password protect only the home page

I'm trying to pwd protect only my home page with apache basic auth. This seems to work on everything not just the hp <LocationMatch "/"> AuthType Basic AuthName "heelooo?" AuthUserFile ...
2
votes
1answer
217 views

Using nginx: require authentication when request from public IP, not needed when local

I wrote a simple file browser app which is served using node on port 3000. I use nginx as a front-end which proxies this service. This is on my home server. I would like to be able to require basic ...
1
vote
1answer
56 views

How to inhibit repeated checks to mod_auth_basic by mod_autoindex?

In Apache 2.4, When using both mod_autoindex and mod_auth_basic on a directory, the indexing of that directory causes mod_auth_basic to perform a password hash and lookup from scratch once for every ...
1
vote
1answer
170 views

Why does mod_jk bypass Apache authorization?

Since switching from Apache 2.2 authorization gets bypassed for many JkMounts (except jk-status). If I cancel the browser password popup, I get a 401-page. It is not, as I expect, the one from ...
1
vote
1answer
1k views

Yum repo basic auth not working

So we've got this yum repo that is protected via basic auth. My yum.repo definition looks like this [custom-repo] name=Releases Repository ...
1
vote
1answer
184 views

Basic username-password authentication on gitorious

I recently set up my own server that is supposed to host some git repositories. I installed gitorious there. It is almost perfect. The one thing that I am struggling with right now is how can I make ...
1
vote
1answer
359 views

Enable basic authentication in IIS for remote requests, but not for local ones?

Is there a way in IIS to enable basic authentication for remote requests while leaving the website open for local requests? I need external users to authenticate to access a site, but users on the ...
1
vote
1answer
558 views

Basic authentication not occurring to a remote machine on IIS7

I have a sub-directory of my IIS7 website that I want to lock-down with basic authentication. I've gone into IIS manager, chosen Authentication the designated directory and enabled Basic ...
0
votes
1answer
256 views

.htaccess file is not working on Apache 2.4.12 and Windows Server 2008 R2

I am trying to add Authentication window to a section of the site using .htaccess file. But It is not working "the site is acting that the ".htaccess" files does not exists. here is that content of ...
0
votes
1answer
20 views

Does the Apache Httpd basic auth functionality have a constant time password comparison?

When I use Apache Httpd's basic auth functionality, sometimes I notice that wrong passwords seem to take longer than right passwords to check. Does Apache Httpd have an option for constant time ...
0
votes
1answer
107 views

mod_rewrite in .htaccess and basic auth in vhost - access to paths

I want to lock down a website (made on Drupal) with basic auth. Drupal is using mod_rewrite in its .htaccess file. The problem I'm facing is this - my virtual host looks like this: <VirtualHost ...
0
votes
1answer
83 views

Protect /analytics on Nginx with basic authentication, but allow access to .php and .js files?

Hope this is the right place to ask. I have Piwik setup and running on a Nginx webserver that I protected with HTTP basic authentication, as seen below. location /analytics { alias ...
0
votes
1answer
141 views

Switching between multiple authentication types on same URL

I have a secure SSO site that uses Shibboleth authentication and SAML identity provider. I need to allow a Google Search Appliance crawler to come index the URL's. I have a requirement to change on ...
0
votes
1answer
252 views

Nginx how to use limit_req_zone on auth_basic to protect against brute force attack?

I have an Nginx server that works as an SSL proxy for a service running on a localhost that doesn't support SSL authentication. I would like to use Nginx's limit_req_zone function to protect the ...
0
votes
1answer
722 views

nginx reverse proxy with basic_auth - 404 Not found

I have an nginx server block to proxy_pass content from three servers: gitlab, Rshiny and static content from another nginx server block. All this works fine, until I try to add password protection to ...
0
votes
1answer
192 views

activate htaccess only on specific URI

I have an apache webserver running on an ubuntu system. To avoid access for unauthorized users, I have an active .htaccess: AuthType Basic AuthName "own area" AuthUserFile /path/to/.htpasswd require ...
0
votes
1answer
150 views

basic auth on 2 different folders

I have nginx installed, and I want to use the built-in auth-basic module to authenticate on 2 different folders. Each folder should have its own user & password lists. For this i created 2 ...
0
votes
1answer
402 views

Issue with Nginx, http authentication and dynamic IP address

I am trying to get Nginx as a reverse proxy to authenticate users performing inbound http requests. My ISP provides me with a dynamic IP. I am not sure how to configure my ADSL router (NAT rules). ...
0
votes
1answer
302 views

basic authentication with nginx - page loads before auth popup

I have nginx and I have a directory that uses basic authentication. However, the page loads fully before the authentication popup comes. Even if I press cancel I'm not redirect to 401 authorization ...
0
votes
1answer
840 views

Apache2 with basic auth: exclude one location from auth (weird behaviour)

I have basic auth set for Directory / and want to exclude Location /assets/upload, but it just won't work, I have tried several options and tutorials. This Location directive clears the Directory ...
0
votes
1answer
159 views

Open HTTP Basic auth only on a specific domain/request

Are we, Apache Commandos, able to do this: Open the HTTP Basic Authentication dialog box in a browser only if I request some URL from a specific domain name/server name/host name? For instance: If ...
0
votes
1answer
531 views

Linux: Centos: enabling basic authentication

I am trying to set up basic authentication for a linux (centos) server. I did the following: mkdir /usr/local/apache mkdir /usr/local/apache/passwd echo > /usr/local/apache/passwd/passwords ...
0
votes
1answer
341 views

IIS Application Request Routing (ARR) reverse proxy rewrite to Apache with authentication

I'd need to rewrite an IIS site (using the ARR proxy method to keep the original URL) to another one which is hosted on an Apache 2 server. The Apache server requests a basic authentication. The ...
0
votes
1answer
147 views

HTTP Status Codes for Web Application Logic

This might be more of a PHP and SO question, but since it deals with HTTP codes, I thought I'd ask here first. So I'm building a very simple user authentication backend that basically checks the ...
0
votes
1answer
394 views

Allow website access from specific subnet, otherwise ask for credentials

How can I configure IIS 6 to allow access to a sub folder from our intranet without any authentication (well, the IP address needs to be checked but that's already working) from the internet only ...
0
votes
1answer
651 views

Protect all XML-RPC calls with HTTP basic auth but one

I set up a Django project for smartphone serving XML-RPC methods over HTTPS and using basic auth. All XML-RPC methods require username and password. I would like to implement a XML-RPC method to ...
2
votes
0answers
374 views

Nginx as a proxy doesn't allow to access backend (Apache) content which is password protected

I have apache as a backend and nginx as a frontend. Some content is password-protected by Apache (HTTP Auth). When I access it directly - everything works fine, bur when I try it through nginx - ...
1
vote
0answers
108 views

IIS 7.5 Basic Authentication does not seem to work with virtual directories

IIS 7.5 is running in this server. I have configured IIS Manager User "someuser". On virtual directory "virtdir", which is also an IIS7.5 "app" I have set user "someuser" to allowed (in IIS Manager ...
1
vote
0answers
81 views

why basic auth loops when using nginx and monit

I was trying to configure nginx so that http://example.com/monit will access http://127.0.0.1:2812, which is the url monit is listening. Two authentication was set, via nginx(nginx.conf file) and ...
1
vote
0answers
162 views

Is it possible to share a basic auth session between several aliases in nginx?

The title pretty much sums it up, we have a very simple virtual host setup in nginx protected by basic auth, so it looks like that: server { listen portnumber; server_name *.domain.com; ...
1
vote
0answers
55 views

Disable authentication for certain files

I am trying to disable Apache authentication for certain files, but I don't seem to get it right. This is what I have on .htaccess: AuthType Basic AuthName "Authentication Required" AuthUserFile ...
1
vote
0answers
566 views

HAproxy ACL based on backend application session cookie to replace HTTP Basic Auth

I would need some help on HAproxy configuration to bypass HTTP basic auth and let the user use a specific backend in case there is a valid session cookie present from another backend application. I ...
1
vote
0answers
2k views

Basic auth not working in Apache 2.4

I know it seems a simple task and I did it many times for Apache 2.0-2.2 but in 2.4 config doesn't work. I am trying to configure basic auth for directiry: <Directory /var/www/html/docs> ...
1
vote
0answers
68 views

IIS 7.5 http requesting basic authentication but https isn't

Server 2008 R2 IIS 7.5 Website Panel I have a multiple sites running that have a specific folder in each site, say PDFs, some changes have been made, but I don't know what and now if you try to ...
1
vote
0answers
289 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
1
vote
0answers
294 views

Apache Basic Auth not working in customer network

I'm having trouble, letting a customer see a site that is locked with a simple Apache Basic Auth password file. It works in every browser on Mac, Windows and in our network. Even the customer get's ...
1
vote
0answers
102 views

Basic auth in IIS7 without impersonation

I have an IIS 7 site set up with its own app pool. The app pool is running as a specific user, and the site is set to run as the app pool identity. I want to add basic-auth style protection to the ...
1
vote
0answers
366 views

Basic authentication with IIS 7 reverse proxy

In our DMZ we currently have a facade or proxy web page (asp.net webform), which forwards requests to a web service (asp.net web service) in our intranet, then relays the web services response back to ...
1
vote
0answers
422 views

Prevent Authentication Prompt When Streaming Office Documents

I have an issue where when streaming office documents from SQL Server, an authentication dialog prompts for credentials even though the user has been authenticated via basic auth in the browser. ...
0
votes
0answers
17 views

Secure Port with Nginx Web Server Authentication auth_basic

I am trying to secure the login URL of my website (Ajenti control panel) with auth_basic authentication. I access the site like this: https://myajentiinstallation.com:8787 In the file ...
0
votes
0answers
49 views

Apache Proxy & Basic Auth

Im trying to set up an Apache Proxy which also does LDAP Basic Auth: <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerAdmin webmaster@localhost ...
0
votes
0answers
48 views

Basic ncsa authentication is not workling in squid

I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7 I've configured squid for basic authentication, md5 password works, but if fails when I try to use either blowfish or sha password. Below is the ...
0
votes
0answers
106 views

Basic authentication with WildFly on Openshift

I'm trying to setup basic authentication for a Java EE application. I defined my users and roles in : application-users.properties application-roles.properties located in ...
0
votes
0answers
165 views

Nginx rewrite URL based on basic auth username

I have a static file serving set up in Nginx wherein different customers need to visit a different URL to get the content that is specific to them; in addition, they have to enter their username and ...
0
votes
0answers
189 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
0
votes
0answers
260 views

Apache Authentication failed, VtigerCRM customer portal cannot connect to server

We have installed VtigerCRM on the server which is protected by Apache authentication via LDAP. There is another machine running Vtiger customer portal. This machine needs to connect to the server ...
0
votes
0answers
285 views

How do I only allow certain IP addresses into apache, and then require a password for a subset of that list?

How do I only allow certain IP addresses into apache, and then require a password for a subset of that list? (I'm also open to doing this all within Proxy or Location directive) My setup is an ...
0
votes
0answers
240 views

Why do AuthType Basic directives not work in .htaccess

I have a web server running on ClearOs 6. I would like to protect a couple of directories using .htaccess, but I do not seem to be prompted for a password at all. Relevant bits of conf file are: ...
0
votes
0answers
262 views

Is there a way to get a password from HTTP authorization header in mod_rewrite (apache2)

I'd like to parse HTTP authorization header in mod_rewrite - to be able to use login and password for another redirect. I want to achieve something like this: user puts ...