Tag Info

New answers tagged

1

It seems that you installed and ran your puppet master first and then changed the hostname. On puppet master execute: puppet config print certname This will show the certname your master uses. It should be equal to your hostname. You can verify common name in master's certificate if it matches your hostname: openssl x509 -noout -subject -in $(puppet ...


3

Postfix only delegate authentication to a sasl server. Postfix can't help you.


0

A Virtual Directory Server would solve your problem. Definition of Virtual Directory Server from wikipedia: A virtual directory or virtual directory server in this context is a software layer that delivers a single access point for identity management applications and service platforms. A virtual directory operates as a high-performance, lightweight ...


0

I'm not quite sure what you're looking for, but... o=MidlandCollege looks ok so far. To have more fun with the eDirectory, I strongly advise to having a look at Apache DirectoryStudio. It's a GUI, but you'll see the LDAP calls, so you can derive some more knowledge from this.


0

You should take a backup of the users file usually /etc/raddb/users, remove all content and enter only the below text for accepting all requests by default. DEFAULT Auth-Type := Accept session-timeout = 14400, Termination-Action = RADIUS-Request And of course, restart Radius service. I hope that's what you wanted to do.


0

To answer my own question it isn't possible to mix these two types of authentication methods this way with Apache. So I turned to use SCM-Manager which is capable (with a little patch) to handle this situation.


0

Still looking? privacyidea is the open source solution. It is a fork of LinOTP. privacyidea is hosted at github, discussed at github and issues are kept at github to give you best transparency.


0

Location matching is done against a normalized URI that doesn't contain query string. So it's necessary to use an if block in this case : location /1/2/3 { if ($arg_action != "STATUS") { return 403; } add_header 'Location2' '2'; proxy_set_header Authorization "Basic BLAHBLAHBLAH"; proxy_pass http://backend; }


0

Did you add FTP Extensibility feature to when you add the FTP role?


1

Do you know that Debian Squeeze is no longer stable? Please considier upgrading your Debian to wheezy. You are using very old Debian distribution. OpenDKIM is kinda old there (2.0.1 vs 2.6.8 in wheezy), there is known bug. Please upgrade opendkim to newer version and your problem should be fixed.


0

I know this thread is really old but there are some major flaws in the linked articles logic and I'm feeling "rant'ie" - sudo allows both whitelisting and blacklisting. Not just black as they specify in the linked article - This skips over the idea of AAA (Authentication, Authorisation & Auditing) - su & sudo allow for both graded authentication and ...


0

This is clearly a late answer and I'm sure you've solved this or worked around it, but in case this helps someone else: You can definitely use MSDeploy to deploy a package using NTLM authentication even when the target webserver is on another domain. This is roughly the commandline we use: msdeploy.exe -source:package='MyPackage.csproj.zip' ...


0

If you have a test system without a real hostname (like ldap.example.org) and name it just ldap, the default configuration of OpenLDAP on Debian(?)/Ubuntu (which I guess you use) will assume an LDAP tree with the name dc=nodomain and create appropriate ACL rules. Really, your best approach is to set a complete FQDN and let dpkg --reconfigure slapd do it's ...


1

Running nslcd in debug mode shows the problem: $ $(which nslcd) -d ... nslcd: [8b4567] <authc="user.name"> DEBUG: myldap_search(base="dc=sub,dc=example,dc=org", filter="(&(objectClass=posixAccount)(uid=user.name))") ... nslcd: [8b4567] <authc="user.name"> DEBUG: ldap_result(): end of results (0 total) nslcd: [8b4567] ...


0

Might be useful to someone... I just had a similar situation (I only needed Basic Authentication). While some clients (Windows) were prompting to login, other (Windows Phone) did not prompt and could open the site as if no security was enabled. What I needed to do was to disable Anonimous Authentication on this site.


0

I had a similar problem and it occurred when we retired the old DC for our domain. When I would use ADUC, I would receive a logon failure when attempting to browse the domain. Right-Click on "Active Directory Users and Computers" Select "Change Domain Controller" Select "This Domain Controller or AD LDS instance" Enter the Name of the Domain ...


0

If you mean authentication using HTTP auth (as opposed to an HTML form), this works: You can make it work by setting different authentication realms along with the URL. Like this: <Location /abc/> AuthType Basic AuthName "Realm for ABC" AuthUserFile /var/www/html/domain.org/abc/.htpasswd require valid-user ...


0

Our issue was actually that we were using Integrated Windows Authentication which automatically passed the credentials of the logged on user to the server. In order to prompt the user for credentials, we enabled Basic Authentication to pass the login information to the server, which then used the login info and windows active directory to authenticate.


0

Remove the <identity impersonate="true"/> Restart the web server and it should prompt you for login/password.


2

ldapsearch -x -ZZ -h localhost -D "cn=admin,o=tree" -b o=tree mail |grep mail: will provide you with just email addresses. You can get as detailed as you want.


0

Please do the following. Log in to the iManager if it is installed you will find it at https:///nps Login as Admin or with equivalent rights. Go within the Menu eDirectory Maintenance and run the Import, Convert, Export Agent or ICE to export an leif file. Than you follow this TID https://www.novell.com/support/kb/doc.php?id=7003319 and, after you ...



Top 50 recent answers are included