Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authentication]

A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

-2
votes
0answers
10 views

Set up MFA with ADFS 1.0 [on hold]

I have a Windows Server 2003 with ADFS 1.0 and want to set up two step authentication on it. From the Microsoft documentation at https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/...
0
votes
0answers
26 views

Integrating Yubikey Token details within LDAP with FreeIPA on CentOS

I would like to integrate yubikey token details within freeipa's ldap 389 directory server I'm trying to follow those instructions to extend ldap schema with yubikey information. Ldap's extensions ...
1
vote
1answer
32 views

Authentication with SSSD

I'm currently working on a project in my internship at an organisation, and it is honestly a bit of challenge, so I hope you guys can help me out. Background: The organisation I'm working in has a ...
2
votes
1answer
54 views

What is the best practice for logs integrity and authenticity?

We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
1
vote
1answer
13 views

Windows - Run As Different User (on different domain) - Error: “Domain isn't available”

Goal I have a Windows 10 PC. I want to run an application in the security context of a user on a different Windows domain from the one that my PC is connected to. Details My PC is connected to ...
-2
votes
0answers
9 views

Use existing NIS userlist to authenticate access to website [closed]

I'm setting up a private internal website on a server we have in my research lab. We use NIS to handle user credentials; how can I use the NIS user list with an HTML login form?
1
vote
1answer
32 views

How to enforce “User must change password at next logon” on Linux domain member?

I have an Ubuntu Server 18.04 domain member joined to Active Directory. Everything is working well, except for getting the AD User must change password at next login setting to be respected. I ...
0
votes
0answers
16 views

nginx captive portal radius authentication

I have multiple Ruckus Access Point and I want to provide a custom captive portal for guest authentication. The thing I want is to check if user currently has access - then switch him to the site he ...
0
votes
1answer
33 views

What is the difference between Cloud IAP and Cloud Endpoints OAuth?

With regards to authentication and authorization, what does Cloud IAP do that Cloud Endpoints doesn't? (and vice versa?) Is Cloud IAP doing both Authorization and Authentication? And if so, is it ...
1
vote
0answers
25 views

Jenkins (and other apps) user authentication in a K8s cluster

I have Jenkins running in a pod, in an on-prem Kubernetes cluster. My company uses AD, and my Jenkins instance outside the cluster (I'm migrating from this to the cluster instance) uses LDAP for ...
0
votes
0answers
8 views

Showing error message after Tomcat LockOutRealm error / user lock

I'm using JDBCRealm + LockOutRealm in Tomcat (8, but could switch to 9). This is working all fine, but if a user locks himself out, this is only visible in the logs, not the user facing login error ...
0
votes
0answers
9 views

Configuring the Oracle Database(12c)-Microsoft Active Directory Integration

I am planning to integrate LDAP with Oracle database for authentication management. I do not want to use Kerberos for this. It would be helpful if somebody from here advise whether that is possible ...
0
votes
0answers
25 views

Windows authentication with multiple domains

I have an ASP.NET web application with windows authentication setup, hosted on IIS8 on Domain-A. I have users from Domain-B who need to access to the above application. AFAIK, both these domains are ...
0
votes
0answers
46 views

SASL Authentication Failed on Postfix as relay server with office365

I'm setting a postfix server as relay to an account in office 365. I configure the main file /etc/postfix/main.cf as follows: relayhost = [smtp.office365.com]:587 smtp_sasl_auth_enable = yes ...
0
votes
0answers
9 views

Apache mod_dbd: DBDParams with encrypted password

I'm trying to configure Apache 2.4 with mod_dbd to connect to PostgreSQL for user authentication. (Ref: https://httpd.apache.org/docs/2.4/mod/mod_dbd.html) Is there a possibility to store the ...
0
votes
0answers
16 views

IIS credentials not working for sub folders

i have a site (example.com) that prompts for credentials once you click on a link on the main page if anonymous auth is disabled for that particular link, and basic auth and asp.net impersonation is ...
0
votes
0answers
71 views

Only IOS clients fail to authenticate to samba 4.8 shares

I have a samba 4.8 server that is an Active Directory member server. Windows and other samba clients can access its shares. But Apple IOS devices fail to authenticate. The logs on the server say ...
0
votes
0answers
18 views

Automatic push on commit (on bitbucket repository) [migrated]

I have a website which commits to a git local repository all the changes done. I need to automatically push them directly from the web server to a remote Bitbucket repository. The authentication ...
-1
votes
1answer
20 views

Properly implement REMOTE_USER-like thing for ssh

I'd like to know how to make the remote user name available in an ssh session on my server. So when joe@host1 logs in as commonuser@server1, the scripts running on server1 running as commonuser will ...
0
votes
1answer
22 views

User Authentication with Puppet and Active Directory

I've just started my internship in a governmental organisation, and my first assignment is to develop at user system for our internal serverfarm of 120+ Redhat and Windows servers. The internal ...
0
votes
0answers
28 views

Apache Kerberos authentication fallback

I'm trying to set up Apache so that : Users who connect to my website and send a valid Kerberos ticket are automatically logged in Those who do not provide any Kerberos ticket see the website's login ...
0
votes
2answers
32 views

Client certificate authentication - Apache2

I'm trying to set up a client authentication for one of my app but for now, it's not successfull. I bought a Gandi wildcard ssl certificate for my domain *.example.com and here is the configuration on ...
1
vote
0answers
36 views

Graceful 'Access denied' message when SSH to a server protected with SSSD fails

I'm using SSSD on Ubuntu for authn/authz. This works great, but I am getting a "Server unexpectedly closed network connection" when I try to SSH to the box with an unauthorized user. I can log in ...
0
votes
0answers
21 views

Freeradius User Group Membership Not Working

dictionary file: ATTRIBUTE My-Group 3003 string users file: reza My-Group := "operators", Cleartext-Password := "hello" Fall-Through := Yes bob My-Group := "...
0
votes
1answer
73 views

Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally

I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
0
votes
0answers
49 views

Automatic write from web server to git production repository using passwordless SSH key: is it secure?

I have a wordpress website which have 4 different environments: development, preview, staging and production. This all are connected to 4 git remote repositories: development, preview, staging and ...
0
votes
0answers
21 views

Can't type in username input field using vs 2017 TFS login on Windows Server 2008 r2

I always used visual studio TFS to get the latest version of an asp.net website on to the IIS Server. For the last few months I wasn't able to do that since I can't login to TFS. VS uses IE for ...
0
votes
0answers
41 views

Serverless environment: Printing and authentication and between Networks connected by a Site to Site VPN

The Scenario We have a new office. We wanted no servers on this site and to use Azure for the entire infrastructure. We have a DC (10.0.0.4) at our Azure network (10.0.0.0\24) with a Site to Site VPN ...
0
votes
0answers
60 views

Freeradius multi-factor auth with LDAP and Yubikey

I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey. It is working using the ldap ...
1
vote
0answers
20 views

Jenkins PWAuth doesn't work after process restart

I am running Jenkins (currently v2.134, always up to date from Jenkins Debian/Ubuntu repo) on a Ubuntu 18.04 server. It is configured to use the pwauth plugin for authentication against system ...
0
votes
1answer
47 views

Apache: Is the password protection in a .htaccess file always processed first?

Last week I did a relaunch on a website and today I have realized that the staging subdomain got indexed by Google. I want to avoid this mistake in the future and track down the error source. I ...
0
votes
1answer
63 views

how authenticated multiple subdomains in nginx with one login

we've got app consisting of several parts. Each part is running on it's subdomain (nginx site). We would like to hide access of dev env behind some shared auth, where first login on whatever of ...
1
vote
1answer
92 views

Define “unauthorized connection” vs “authorized connection” (newbie)

Reading the man page for sshd_config, I see the term "unauthorized connections" in MaxStartups. What is an "unauthorized connection," a connection that was allowed without any authorization? If some ...
1
vote
0answers
34 views

Domain service account fails to login locally before successfully logging into the Domain Controller

We are currently seeing an issue in our environment where domain service accounts are attempting to validate against a machine locally. These attempts fail, generating Event 4625 with Sub Status ...
2
votes
0answers
45 views

Lsass authenticates to ADFS on windows login

I am researching a domain user lockdown problem that involves an ADFS. What happens is that anytime a domain user logins into a windows 10 machine, lsass connects to ADFS to authenticate the user ...
0
votes
0answers
24 views

Authentication using G Suite

This is a topic that has been mentioned many times here and I searched extensively for solutions but came up with very little. We have almost completely ditched our windows servers and AD as we are ...
0
votes
1answer
30 views

Authentication in OpenVpn the way it's done in ProtonVpn for instance. Is it PAM?

I'm trying to add authentication to my VPN server which is accessible via Internet and for browsing Internet. At ProtonVpn, for instance, I'm given a login/password and upon connection OpenVpn ...
0
votes
1answer
30 views

Windows AD. Is there a limit of successful authentications requests per given account?

We're running bulk automation scripts in our environment. Hundreds of threads simultaneously that use the same AD account for authentication. At some point we got this account locked out while no ...
2
votes
1answer
75 views

Apache auth_ldap “authentication failed” only for a single user

We have a tricky problem with apache and auth_ldap against AD. Only a single user is not allowed to login, although it is in one of the allowed groups and other users of this group are allowed. When ...
-1
votes
1answer
45 views

Can't log in MySQL with newly created user, but any username without password is accepted

I installed MySQL 5.6 on Windows, imported a database (as root), and created a new user with a password to access this database. Connexion with the username and password does not work (tested with ...
0
votes
0answers
69 views

Kerberos ticket issues for AD domain rejoined computers using Ansible

We have Windows domain spread across multiple sites and we are using Ansible for orchestrating Windows rebuild process. During the rebuild, we observe some Kerberos related issues that we suspect may ...
0
votes
1answer
44 views

Close Port 587 - Ramifications?

Our recent PCI scan failed because "Plaintext authentication is allowed over unencrypted channel on SMTP." As such, our tech support suggested to close port 587. What are the effects of closing port ...
1
vote
2answers
81 views

One Windows 10 Client Logs Into Windows Server 2012 R2 Other Win 10 Client Doesn't

I have read this advisory mentioned in the error I get when my client tries to log into our server. It is a CredSSP error trying to log into a Windows 2012 Server R2 that Win 8 and Win 7 clients ...
0
votes
2answers
36 views

How can I test a computer file share access?

I have a web site that hits a fileshare on our network and uses the computer (webserver$), not a user account, to authenticate as the website runs as Network Service. I thought I could create a local ...
0
votes
0answers
20 views

Windows SDDL, changed ACL all to SU. How can I access to change it back?

So I am doing some testing with some of our software and modifying the ACLs for internal purposes. This is all in Windows 7. Original ACL SDDL looked like so: D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;...
0
votes
0answers
101 views

Linux sshd is using tacacs for authentication and it works fine but local authentication if tac fails doesnt work

I have configured my Linux server to use tacacs and it works just fine but when I lose the tacacs server my linux server doesn’t fall back to local authentication. Below are the config files and ...
2
votes
0answers
80 views

Pushing RD Gateway Authentication to a 3rd Party

The company where I currently work have a mix of SaaS and older thick client applications, which customers still use, however they want these to be run offsite. As a result, we have a hosted platform ...
0
votes
0answers
23 views

Sessions and authentication killed in Laravel 5, running on AWS

I've a VPS Provided from Amazon web services , and I've deployed more than 6 "laravel" projects which is worked perfectly , but I've same issue for 3 projects , which is sessions and authentication ...
40
votes
14answers
68k views

This could be due to CredSSP encryption oracle remediation - RDP to Windows 10 pro host

Error Following Windows security updates in May 2018, when attempting to RDP to a Windows 10 Pro workstation the following error message is displayed after successfully entering user credentials: ...
0
votes
0answers
22 views

How to use 2FA with cert based SSH auth?

I used this guide to enable Google TOTP auth on Ubuntu 16.04. SSH only allows cert based auth (PasswordAuthentication no) I set ChallengeResponseAuthentication yes and restarted the SSH service. I ...