The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
102 views

password protect only the home page

I'm trying to pwd protect only my home page with apache basic auth. This seems to work on everything not just the hp <LocationMatch "/"> AuthType Basic AuthName "heelooo?" AuthUserFile ...
3
votes
1answer
1k views

How can I enable http auth in lighttpd for all directories except one?

I am trying to authenticate access to everything in webroot (/) except anything that resides in a particular directory (/directory/) and I've tried both of these options to no avail: $HTTP["url"] =~ ...
1
vote
1answer
26 views

How to inhibit repeated checks to mod_auth_basic by mod_autoindex?

In Apache 2.4, When using both mod_autoindex and mod_auth_basic on a directory, the indexing of that directory causes mod_auth_basic to perform a password hash and lookup from scratch once for every ...
1
vote
1answer
61 views

Why does mod_jk bypass Apache authorization?

Since switching from Apache 2.2 authorization gets bypassed for many JkMounts (except jk-status). If I cancel the browser password popup, I get a 401-page. It is not, as I expect, the one from ...
1
vote
1answer
305 views

Yum repo basic auth not working

So we've got this yum repo that is protected via basic auth. My yum.repo definition looks like this [custom-repo] name=Releases Repository ...
1
vote
1answer
135 views

Basic username-password authentication on gitorious

I recently set up my own server that is supposed to host some git repositories. I installed gitorious there. It is almost perfect. The one thing that I am struggling with right now is how can I make ...
1
vote
1answer
262 views

Enable basic authentication in IIS for remote requests, but not for local ones?

Is there a way in IIS to enable basic authentication for remote requests while leaving the website open for local requests? I need external users to authenticate to access a site, but users on the ...
1
vote
1answer
485 views

Basic authentication not occurring to a remote machine on IIS7

I have a sub-directory of my IIS7 website that I want to lock-down with basic authentication. I've gone into IIS manager, chosen Authentication the designated directory and enabled Basic ...
0
votes
1answer
42 views

Switching between multiple authentication types on same URL

I have a secure SSO site that uses Shibboleth authentication and SAML identity provider. I need to allow a Google Search Appliance crawler to come index the URL's. I have a requirement to change on ...
0
votes
1answer
329 views

nginx reverse proxy with basic_auth - 404 Not found

I have an nginx server block to proxy_pass content from three servers: gitlab, Rshiny and static content from another nginx server block. All this works fine, until I try to add password protection to ...
0
votes
1answer
111 views

activate htaccess only on specific URI

I have an apache webserver running on an ubuntu system. To avoid access for unauthorized users, I have an active .htaccess: AuthType Basic AuthName "own area" AuthUserFile /path/to/.htpasswd require ...
0
votes
1answer
97 views

basic auth on 2 different folders

I have nginx installed, and I want to use the built-in auth-basic module to authenticate on 2 different folders. Each folder should have its own user & password lists. For this i created 2 ...
0
votes
1answer
201 views

basic authentication with nginx - page loads before auth popup

I have nginx and I have a directory that uses basic authentication. However, the page loads fully before the authentication popup comes. Even if I press cancel I'm not redirect to 401 authorization ...
0
votes
1answer
506 views

Apache2 with basic auth: exclude one location from auth (weird behaviour)

I have basic auth set for Directory / and want to exclude Location /assets/upload, but it just won't work, I have tried several options and tutorials. This Location directive clears the Directory ...
0
votes
1answer
131 views

Open HTTP Basic auth only on a specific domain/request

Are we, Apache Commandos, able to do this: Open the HTTP Basic Authentication dialog box in a browser only if I request some URL from a specific domain name/server name/host name? For instance: If ...
0
votes
1answer
291 views

Linux: Centos: enabling basic authentication

I am trying to set up basic authentication for a linux (centos) server. I did the following: mkdir /usr/local/apache mkdir /usr/local/apache/passwd echo > /usr/local/apache/passwd/passwords ...
0
votes
1answer
260 views

IIS Application Request Routing (ARR) reverse proxy rewrite to Apache with authentication

I'd need to rewrite an IIS site (using the ARR proxy method to keep the original URL) to another one which is hosted on an Apache 2 server. The Apache server requests a basic authentication. The ...
0
votes
1answer
123 views

HTTP Status Codes for Web Application Logic

This might be more of a PHP and SO question, but since it deals with HTTP codes, I thought I'd ask here first. So I'm building a very simple user authentication backend that basically checks the ...
0
votes
1answer
153 views

How can I restrict http basic auth to hostname

How would I go about only requiring basic auth only for external connections to my localhost? That is: I run a local version of Apache and I don't want to have to sign in while I'm working locally ...
0
votes
1answer
381 views

Allow website access from specific subnet, otherwise ask for credentials

How can I configure IIS 6 to allow access to a sub folder from our intranet without any authentication (well, the IP address needs to be checked but that's already working) from the internet only ...
0
votes
1answer
622 views

Protect all XML-RPC calls with HTTP basic auth but one

I set up a Django project for smartphone serving XML-RPC methods over HTTPS and using basic auth. All XML-RPC methods require username and password. I would like to implement a XML-RPC method to ...
2
votes
0answers
145 views

Using nginx: require authentication when request from public IP, not needed when local

I wrote a simple file browser app which is served using node on port 3000. I use nginx as a front-end which proxies this service. This is on my home server. I would like to be able to require basic ...
2
votes
0answers
322 views

Nginx as a proxy doesn't allow to access backend (Apache) content which is password protected

I have apache as a backend and nginx as a frontend. Some content is password-protected by Apache (HTTP Auth). When I access it directly - everything works fine, bur when I try it through nginx - ...
1
vote
0answers
24 views

Disable authentication for certain files

I am trying to disable Apache authentication for certain files, but I don't seem to get it right. This is what I have on .htaccess: AuthType Basic AuthName "Authentication Required" AuthUserFile ...
1
vote
0answers
438 views

Basic auth not working in Apache 2.4

I know it seems a simple task and I did it many times for Apache 2.0-2.2 but in 2.4 config doesn't work. I am trying to configure basic auth for directiry: <Directory /var/www/html/docs> ...
1
vote
0answers
60 views

IIS 7.5 http requesting basic authentication but https isn't

Server 2008 R2 IIS 7.5 Website Panel I have a multiple sites running that have a specific folder in each site, say PDFs, some changes have been made, but I don't know what and now if you try to ...
1
vote
0answers
240 views

Apache Basic Auth not working in customer network

I'm having trouble, letting a customer see a site that is locked with a simple Apache Basic Auth password file. It works in every browser on Mac, Windows and in our network. Even the customer get's ...
1
vote
0answers
101 views

Basic auth in IIS7 without impersonation

I have an IIS 7 site set up with its own app pool. The app pool is running as a specific user, and the site is set to run as the app pool identity. I want to add basic-auth style protection to the ...
1
vote
0answers
358 views

Basic authentication with IIS 7 reverse proxy

In our DMZ we currently have a facade or proxy web page (asp.net webform), which forwards requests to a web service (asp.net web service) in our intranet, then relays the web services response back to ...
1
vote
0answers
392 views

Prevent Authentication Prompt When Streaming Office Documents

I have an issue where when streaming office documents from SQL Server, an authentication dialog prompts for credentials even though the user has been authenticated via basic auth in the browser. ...
0
votes
0answers
62 views

HAproxy ACL based on backend application session cookie to replace HTTP Basic Auth

I would need some help on HAproxy configuration to bypass HTTP basic auth and let the user use a specific backend in case there is a valid session cookie present from another backend application. I ...
0
votes
0answers
82 views

Nginx how to use limit_req_zone on auth_basic to protect against brute force attack?

I have an Nginx server that works as an SSL proxy for a service running on a localhost that doesn't support SSL authentication. I would like to use Nginx's limit_req_zone function to protect the ...
0
votes
0answers
49 views

Apache Authentication failed, VtigerCRM customer portal cannot connect to server

We have installed VtigerCRM on the server which is protected by Apache authentication via LDAP. There is another machine running Vtiger customer portal. This machine needs to connect to the server ...
0
votes
0answers
159 views

How can I add basic auth to an apache proxy while using CORS headers?

Background I use grafana for displaying graphs of our server-metrics. Grafana is a JS-app which in our case is getting the data from graphite and storing search-queries in elasticsearch. All three ...
0
votes
0answers
103 views

How do I only allow certain IP addresses into apache, and then require a password for a subset of that list?

How do I only allow certain IP addresses into apache, and then require a password for a subset of that list? (I'm also open to doing this all within Proxy or Location directive) My setup is an ...
0
votes
0answers
38 views

Apache's mod_perl access to Basic AuthType screen

I am looking to implement a perl script that gathers the login information (specifically, the username) before that information logs into the system. My current setting is the following PerlRequire ...
0
votes
0answers
266 views

Apache password mismatch using mod_dbd

I Using Apache 2.4, using mod_dbd authentication i followed all steps to configure but when i tries to login, shows me AH01617: user pedro: authentication failure for "/": Password Mismatch But i ...
0
votes
0answers
90 views

Enable/disable basic auth from IP in nginx

I have Atlassian Stash behind Nginx. Server-wide, I have a basic auth for controlling access from outside the office. To make this works, I have to put proxy_set_header Authorization "" But I'd like ...
0
votes
0answers
121 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
0
votes
0answers
144 views

Why do AuthType Basic directives not work in .htaccess

I have a web server running on ClearOs 6. I would like to protect a couple of directories using .htaccess, but I do not seem to be prompted for a password at all. Relevant bits of conf file are: ...
0
votes
0answers
170 views

Nginx with auth_basic AND MultiViews/try_files

I've managed to get faux MultiViews working with the following directive: location ~ ^(.+)$ { try_files $uri $uri/ $1.php?$args; } But it seems to break the auth_basic directives generated by ...
0
votes
0answers
106 views

Allow empty basic auth credentials, but check if supplied

I have an Apache 2.4 server with several webservices that all use form-based login + cookies. I want to unify my set-up with an LDAP authentication using Apache's AuthType Basic and AuthBasicProvider ...
0
votes
0answers
279 views

Issue with Nginx, http authentication and dynamic IP address

I am trying to get Nginx as a reverse proxy to authenticate users performing inbound http requests. My ISP provides me with a dynamic IP. I am not sure how to configure my ADSL router (NAT rules). ...
0
votes
0answers
168 views

Is there a way to get a password from HTTP authorization header in mod_rewrite (apache2)

I'd like to parse HTTP authorization header in mod_rewrite - to be able to use login and password for another redirect. I want to achieve something like this: user puts ...