Tag Info

Hot answers tagged

8

As I can see, your expectation is user can't send behalf other user because you put reject_sender_login_mismatch in smtpd_sender_restrictions. Yes, that should work. Unfortunately, you put reject_sender_login_mismatch after permit_sasl_authenticated. Based on postfix logic, if your client successfully login via SASL, it won't checked against ...


2

It's quite old question, but someone might find it help full. First of all: change sshd_config and use default option: UsePAM yes. Logging on Centos/RedHat is through PAM to SSSD, and than Kerberos itself. The same is with SSH, it first looks on PAM config, and contact SSSD, than Kerberos. Because of Kerberos verifing domain, I would recommend using ...


2

The port number shown is the ephemeral client-side port number, corresponding to the source port as seen by the SSH server. Server-side, all ssh connections are to port 22. Here's me sshing into my colo'ed server, and confirming the port listed in the relevant syslog file: odessa% ssh www.teaparty.net [...] [me@lory ~]$ tail -2 /var/log/facility/authpriv ...


2

You're thinking about this from the wrong direction. Certificate authentication is a replacement or enhancement for username/password or AD authentication. When a user connects to your site and presents a certificate, then the user is logged in as the user that certificate is mapped to. So if you have 3 users you want to be able to use your site, either ...


1

Without extra effort nothing is preventing a (dubiously determined) attacker from initiating a man-in-the-middle attack during the first key exchange and all subsequent connections. This is the same risk inherent in any key exchange over the internet. You can verify the fingerprints of both the master and the minion. On master: sudo salt-key -F On minion: ...


1

After many tries I've found the solution. The problem was in incorrect VirtualHost configuration for git-http-backend. Here's my working config: <IfModule mod_ssl.c> <VirtualHost _default_:443> DocumentRoot /git/myrepos SetEnv GIT_PROJECT_ROOT /git/myrepos SetEnv GIT_HTTP_EXPORT_ALL ScriptAlias /myrepos/ ...


1

Set auth_username_format to %Lu.%Ld It will result username.domain in lowercase. See this wiki for complete variables from dovecot


1

Even better... http://blogs.technet.com/b/cloudpfe/archive/2014/10/26/using-time-based-one-time-passwords-for-multi-factor-authentication-in-ad-fs-3-0.aspx This lists the entire TOTP solution for AD FS.


1

< bot >Convert answer as comment in answer section< /bot > Nginx support multiple root certificates. Just put multiple root CA certificates into a file specified in the ssl_client_certificate directive. Note the docs explicitly say "certificates"(plural). This is a consideration why nginx doesn't support ssl_client_certificate in a directory (as ...



Only top voted, non community-wiki answers of a minimum length are eligible