Questions tagged [authentication]

A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully asserted their identity. There are three factors (types) of authentication, and a particular authentication process may combine two or more different factors.

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

CentOS 7 Allow both domain users AND local users

I successfully joined the domain with the server as outlined at https://www.rootusers.com/how-to-join-centos-linux-to-an-active-directory-domain/ and I am able to login using my domain account. I am ...
1
vote
0answers
28 views

Remote Desktop to W10 with NTLM Disabled

We recently disable NTLM on our DCs (Default Domain Controllers Policy - Restrict NTLM: Deny all The problem is when some (not all) Windows 10 workgroup clients (connected with VPN) try to open a ...
0
votes
0answers
35 views

Authorizing Access to git-http-backend Using Nginx http_auth_request Feature

I am attempting to authorize access to Git repositories using a Python authorization server behind an NGINX server. I have seen a plethora of examples of how to handle authorizing git-http-backend ...
0
votes
0answers
19 views

Editing Authselect files

I'm hardening fedora OS following the CIS Benchmark for fedora 28. In one of the remediations, the Benchmark provides an script that modifies the files system-auth and password-auth. When I apply the ...
0
votes
0answers
18 views

Multi-layer authentication for nginx reverse proxy server

I am writing a configurable reverse proxy server with nginx and I am running into an issue with upstream servers when it comes to authentication. Each reverse proxy has a single layer of pam ...
0
votes
1answer
114 views

Kibana - “missing authentication credentials for REST request”

I have a elasticsearch cluster with xpack basic license, and native user authentication enabled (with ssl of course). I am attempting to set up kibana on a docker container but keep getting an error ...
2
votes
0answers
22 views

Multiple Linux servers login via keyring [closed]

I have a number of Linux VM on the cloud as well as on in-house VM servers. They are a mix of RH, OEL, CentOS, Ubuntu. As part of security hardening, I have disabled password authentication and all ...
0
votes
0answers
30 views

Openvpn ldap (Active Directory) authentication - Incorrect password supplied for LDAP

I want to give clients sslvpn service using openvpn server. I wanted to use ldap authentication for authorization in clients. I prepared the definitions as published on the internet, the sslvpn tunnel ...
0
votes
0answers
5 views

Can roles be enabled on users of a group in keycloak

Can we have users added under a certain group and then give few roles to each of these groups in keycloak? For ex, if we have a group called 'admin', all users under this group will have read/write ...
1
vote
0answers
15 views

AWS data storage: how much to store with Cognito

I am new here. This is rather a choice-based question rather than purely technical one. Many mobile apps authenticate with Cognito, and I am going to use the same for ease of use + free tier ...
0
votes
1answer
23 views

Using Password-Protected SSH Keys for Unattended Scripts on Remote Server

From PC1, I SSH into SERVER1 where I have a bash script, that will SSH & auth to SERVER2 using an SSH-key that's password-protected. Everything works fine when I manually execute my script, using ...
0
votes
0answers
26 views

Setting up google-authenticator-libpam (TOTP/HOTP) for authentication in combination with pam-mysql for vsftpd

I have a setup in which virtual users for vsftpd (latest, 3.0.3) are authenticated against a MySQL database using pam-MySQL[1]. This works perfectly fine, configured like this: auth required /lib/...
0
votes
0answers
9 views

change in duration for failed login attempt by setting pam_faildelay.so delay is not taking effect

I have changed the delay value using "pam_faildelay.so delay" but the delay which I added 300 ms is not taking effect. For failed login attempts still I can see 2 seconds delay. Below is rule which I ...
0
votes
0answers
18 views

Is Bind DN a good practice for centralized authentication?

I am required to implement an LDAP authentication server and I am not sure about whether a Bind DN is needed for user authentication or not. Here are my points: In a RDBMS, we clearly need users to ...
2
votes
2answers
342 views

How does DKIM work when sending emails from multiple sources/servers?

So if I'm understanding DKIM correctly, it basically is a public/private key type of service. However, how does this work if you send emails from multiple servers/sources? For instance, I have a ...
1
vote
2answers
38 views

Connecting to BOTH Compliance and Exchange online in Powershell using Modern Auth

In the world of basic authentication, I used to connect to MSOL, Compliance and Exchange in a series that went like this: function ConnectToCloud() { $CloudCredentials = ...
0
votes
0answers
110 views

How to grant specific page access in IIS .NET Framework

I am trying to grant access to anyone to a specific page in IIS. I have main folder with the .NET Framework website in C# in this folder I have Web.config file which has <authentication mode="...
0
votes
1answer
20 views

Postfix/LDAP authentication - Restrict select users from connecting to smtp from public IP

In dovecot, I am able to use LDAP to restrict public access to specific users using LDAP user_filter and pass_filter queries. I would like to do the same thing in order to restrict specific users from ...
0
votes
0answers
11 views

FreeRADIUS server not replying with AV-pairs after sucessfull 802.1X authentication?

I am having trouble with 802.1X authentication while using FreeRadius server. I am having a Cisco switch which is connected to windows 7 VM. And on the other end, the switch is connected to the ...
0
votes
1answer
17 views

Apache authentication fails with require ldap-group

I have been trying to tie apache on a windows server to our active directory server for authentication and authorization. In order to test it, I have been trying the "ldap-status" handler, with the ...
0
votes
0answers
23 views

Configure Mac OSX 10.6 VPN Server to use pre shared keys for client login

I have set up Mac OS X server 10.6 on a 2012 mac mini and am running a VPN so I can connect to my home network. The VPN is up and running correctly when using a shared secret and username/password for ...
0
votes
0answers
27 views

Caching nginx requests “auth_request”

I want to cache the session from my request header field Authorization. My goal is, that I don't have to validate every request on the validation-server. If the Authorization-Session is cached (and ...
0
votes
1answer
14 views

LDAP Authentication against ActiveDirectory

I need to create an AD-user who can be used to query ActiveDirectory via LDAP and authenticate users. Which permissions does this user require? Thanks.
0
votes
1answer
105 views

dovecot authorization fails when trying to connect via mutt but all suggested dovecot auth tests work

I can't figure out why the dovecot authorization process is dropping the domain from my username name when when attempting to connect through my client (mutt). I'm using the simple auth-password ...
0
votes
0answers
28 views

For authentication of MongoDB: How to limit the number of login attempts? How to set session timeout?

I am designing security policies for databases. Is there any way to limit the number of login attempts to protect DB from brute-force attacks? For example, user have to wait for 2 minutes after 3 ...
0
votes
1answer
30 views

How to block crawlers like google from indexing gitlab?

How can I block any crawlers to access anything on gitlab? there should be a robots.txt or something similar to tell not to crawl. That would be good as a first step. But the more important thing, ...
0
votes
0answers
15 views

UFW activated, but still failed connections in auth.log

I activated the ufw on my ubuntu 18 server. After resetting to defaults, deny all incomming, I opened port 22, 80 and 443 and enabled the logging. In the ufw log, I can see a lot of blocked request. ...
0
votes
1answer
119 views

Apache 24 with openldap fail to prompt user login

freeBSD 11.3, apache 24 with mod_ldap, mod_authz_ldap loaded in http.conf here is the configuration for ldap in http.conf LDAPSharedCacheSize 200000 LDAPCacheEntries 1024 LDAPCacheTTL 600 ...
1
vote
1answer
20 views

how can an alert fire when specific users login to openshift or k8s?

Using either kube_state_metrics or anything else I'd like to fire a prometheus alertmanager alert when a specific user does a login to the cluster, such as, kubeadmin, or bob-smith. Or asking another ...
0
votes
1answer
29 views

linking G Suite and Windows Domain Controller for user management

I manage a small business and use G Suite for user management of all google apps as well as authentication for as many third party services as possible (like slack, atlassin and so on). Then we also ...
1
vote
0answers
42 views

NGINX auth_request and 302 response status = 500 invalid URL prefix

I'm trying to make NGINX authenticate requests with OAuth2 server (authorization code flow) that will redirect client to the login page. Is it possible to use auth_request directive for that? Here is ...
0
votes
2answers
101 views

Is authentication mandatory when setting up a reverse proxy?

I have never deployed a reverse proxy before and i was wondering if it is mandatory from a security perspective, to ensure only authenticated requests reach my web application server past the DMZ? ...
1
vote
0answers
42 views

Apache without any auth module

I do not have any need for Authentication/authorization modules on apache2.4, so I proceed to comment out all the Auth modules and all the Require directives. The server goes up fine, but i get a 500 ...
1
vote
2answers
131 views

How do I whitelist another sender (e.g. Sendgrid) for DMARC?

We host our own e-mail but use Sendgrid to send mail on behalf of a few internal PHP services that can't easily handle our mail configuration (e.g. they disallow self-signed certs by default, so ...
0
votes
0answers
50 views

HCL Domino: how to drop users logged in with LtpaToken

We are running a Domino server (V 10.0.1 FP3) hosting a number of Xpages applications. Apart from the admins all users are accessing those application through http only (i.e., no nrpc / Notes client ...
0
votes
0answers
19 views

Authenticating Windows user via Active Directory NPS to remotely access Cisco router (MS-CHAPv2 and/or PEAP)

I have Googled for hours and have not found my answer. I have found information on PEAP and MS-CHAPv2 of course, but nothing for my specific situation (which to me seems like something that should be ...
0
votes
0answers
25 views

Windows 10: How to unlock account if not connected to company domain

I have been looking for help on this for a while but unable to find any. We have remote workers using mainly windows 10 devices. They use a vpn connection to our company network using One-time-...
0
votes
1answer
34 views

Gmail couldn't verify that MyClientSite.ie actually sent this message (and not a spammer)

I'm having problems with delivery of emails from an application on a web server to Gmail. Gmail is displaying a round circle with a question mark, instead of the first letter of the sender, and ...
0
votes
0answers
49 views

Unable to redirect back to application after keycloak login

I have deployed the OIDC provider-keycloak in a k8s cluster and it is exposed as a load balancer. I'm using this along with Istio to redirect back to my application after successful login in keycloak....
0
votes
0answers
41 views

Apache Proxy asking for credentials every time

I have an "old" Ubuntu 16 (Apache 2.4.18) server which runs apache and proxies a site from our internal network the the internet. On this server the site works, on the first visit it ask for ...
0
votes
0answers
21 views

OpenLdap on Macbook air : ldap_bind() insufficient access (50) (auth fails)

I created a user tom as follow dn: uid=tom,ou=People,dc=example,dc=com objectClass: inetOrgPerson cn: Tom sn: Novembre uid: tom Then add password for this user ldappasswd -s secret -W -D "cn=admin,...
0
votes
0answers
32 views

How can I access SMB share on a local device which is Azure AD joined using Azure AD credentials

I am doing some testings on Azure in my lab, and I have a Windows 10 that is Azure AD joined only, plus a domain controller which is synced to my Azure AD. I want to be able to access the Windows 10 ...
0
votes
1answer
48 views

What does gcloud auth revoke actually do?

I'm trying to use a service account to allow a web app to upload files periodically to Cloud Storage with "gsutil cp". During the installation of the gcloud utilities on the web server, I ran a ...
0
votes
0answers
96 views

Bootstrapping secrets & authentication on a VPS

How should I get the first secret onto a cloud VPS? If I can authenticate that I'm talking to the VPS I think I am, it's easy enough to send a secret over that channel securely. And, once I have the ...
0
votes
1answer
57 views

User cannot access host after password reset in freeipa

Password of a user was expired and it was reset after the expiration in freeipa web. The user gets channel 0: open failed: administratively prohibited: open failed stdio forwarding failed error and ...
0
votes
0answers
34 views

LOGMAN save to SQL Server with Sql Server Authentication

I want to set up LOGMAN to save counters to a SQL database on another server, with Sql Server Authentication mode. First I create a database on the SQL Server (another machine) and a login: Create ...
0
votes
0answers
24 views

Dovecot imap auth in large company

I manage email in large company. They have few emails, but lots of employees who read them. Every email is read from 10+ employees. At the moment, we use password auth and if someone left the ...
0
votes
1answer
132 views

Configure AWS SSO with Auth0 as IDP

I am trying to configure “AWS SSO”'s to work with Auth0 as an External Identity Provider. I have made is to the point where I am getting the auth0 login as success but AWS throws me an error. error I ...
0
votes
0answers
27 views

Certificate Authentication “The request was aborted: Could not create SSL/TLS secure channel.”

We have imported a .pfx certificate under Personal store. It creates Root, Intermediate and Client certificate in Personal store. This certificate is used for authentication to an API which works ...
0
votes
2answers
99 views

relaying denied - why is sendmail authenticating the sender instead of the recipient

I am trying to set up an email server that receives email from a mx server using sendmail software on Fedora 30. When the mx forwards email to the email server, the logs show a Relaying denied - ...

1
2 3 4 5
42