Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authentication]

A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully asserted their identity. There are three factors (types) of authentication, and a particular authentication process may combine two or more different factors.

0
votes
0answers
8 views

(Open) LDAP authentication - superuser not available on client

I'm still arguing with LDAP authentication. Now I have a server running openldap in centos, some account and a client that can use that directory to log on. Yhe issue I have is that I'm no longer ...
1
vote
1answer
31 views

SSH - Add public keys to server after disabling PasswordAuthentication

How can I add public keys to a host from unauthorized clients after disabling PasswordAuthentication? I have one client registered to the host via public key. I need to add additional clients. Do I ...
0
votes
1answer
31 views

(Open) LDAP - Authentication not working

I installed OpenLDAP on a CentOS7 machine, I can log on locally on the server, so user exists (in passwd). I also run the following LDAP command: #ldapsearch -h localhost -x cn=ldapuser01 -b "dc=...
1
vote
0answers
9 views

Use CHAP with NPS and a Domain Controller in Core

I've noticed a difference on the authentication behavior of Active Directory where the Core version failed to authenticate properly when using CHAP from the NPS server. I have reproduct the problem ...
0
votes
0answers
8 views

How does Adobe CC Sign-up using Google work? [on hold]

I really want to know how does it work. When I click 'Sign-up using Google' is opens a new tab in my browser and the app is awaiting for some response. When I've signed up, the app appears ...
0
votes
1answer
18 views

Using Azure Conditional Access to control downloading from SharePoint/OneDrive

I'm trying to use Azure Conditional Access to control downloading from SharePoint/OneDrive, but i'm completely new to this. I wish to be able to use OneDrive (the business app) AND to download/sync ...
0
votes
0answers
15 views

Authentication token manipulation error

I am working on a remote Linux server and my password expired. So now when I login it asks me to change my password. But when I give a new password, I get an error Authentication token manipulation ...
0
votes
1answer
14 views

Postfix relay authentication for both server and client

I built a postfix relay several years ago that relays through office365. This is limited to hosts on the VPN, but now want to provide a public IP and allow remote printers to relay through postfix for ...
0
votes
0answers
28 views

How to fallback to auth_basic from auth_ldap (or any other auth model) in nginx?

I have an application served by nginx which supports only http basic authentication. I am adding ldap authentication to it using the nginx-auth-ldap nginx module. So, the configuration looks like: ...
0
votes
1answer
10 views

Postfix / Thunderbird / Cyrus SASL2: Username Or Password Invalid

I'm quite certain that I've entered my password correctly; that Thunderbird regards it as incorrect is I expect due to a Postfix or Cyrus SASL misconfiguration. I am perpetually confused about eMail ...
0
votes
0answers
20 views

Sending explicit auth fail requests to fail2ban

From what I understand, fail2ban parses the log files for regexps matching like authentication failure. Is there a way an application can explicitly notify auth failure information like via a REST ...
0
votes
0answers
46 views

smb refuse authentication from one of computers

From some time I'm fighting with freeNas SMB service. I make a share with access restricted to particular user. On both computers i have, when i'm trying to reach this share, login propmpt is shown. ...
1
vote
0answers
40 views

Authenticate AD user after joining CentOS 7 to Active Directory Domain

I am trying to join a CentOS 7.5 to a Windows Active Directory Domain for authenticating AD users. Although, the joining process has been successful, I'm unable to authenticate any users though. ...
-1
votes
1answer
34 views

Authenticating DNS Queries

Is there any way to use a TSIG (or other) key in combination with a DNS query to authenticate into a DNS view for use with recursion? Something like: key trusted-key { algorithm HMAC-SHA256; ...
0
votes
0answers
14 views

Is it possible to use Proxmox VE inside a VM?

Is it possible to use Proxmox VE authentication from inside a VM? What I want to do is create users in the Proxmox VE realm via the Proxmox management web console, and those users should be able to ...
0
votes
2answers
42 views

Disabled users are not succeeding authentication via ADFS + Multi-Factor Server

We are using the on-premise version of Azure Multifactor authentication. When I authenticate through ADFS it's forcing every user to use MFA even though I have disabled users to succeed ...
0
votes
0answers
15 views

How does ssh logins with Kerberos authentication exactly work from every client while Kerberos uses mutual authentication model?

I have my system authentication managed with SSSD which uses Kerberos. As kerberos support mutual authentication model i.e., both client and server should support Kerberos, how exactly does SSH to ...
0
votes
0answers
28 views

ldap pass though authentication

We have a scenario where the local ldap will actually receive all authentication requests and then pass the authentication to SASLauthd module when password is stored as {SASL}username. Thus, the ...
1
vote
1answer
60 views

Audit failed login attempts to domain on Active Directory controller

I want to get information about all failed login attempts on Active directory server. I already changed these policies on AD controller: And disabled Audit: Force Audit policy subcategory settings (...
1
vote
2answers
26 views

Use specific claims provider trust for a specific application group

I have a Windows Server 2016 on which I am using ADFS. I followed the link at https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-to-authenticate-users-stored-in-...
0
votes
0answers
31 views

OpenVPN auth-ldap cannot find user in a group, but ldapsearch can find it

I can search for a user without issue: ldapsearch -h ldap.my.server.name -b "cn=vpnusers,ou=groups,dc=example,dc=com" -x "memberUid=myusername" Results: # extended LDIF # # LDAPv3 # base <cn=...
-1
votes
0answers
24 views

sssd certificate_verification is not working

In Ubuntu and RedHat I am using sssd to let user login through OpenLDAP Server. Users are trying to login to the sssd client using ssh and sssd in tern sending the user's credential to OpenLDAP. The ...
0
votes
0answers
27 views

squid3.5 - cannot authenticate username/password with Mysql 8

I configured squid 3.5 and mysql 8 in (centos 7.5)same vm(NAT) in vmware workstation. This is my configuration: Mysql configuration wget https://repo.mysql.com//mysql80-community-release-el7-1....
2
votes
0answers
71 views

PuTTY configuration with plink for keyboard-interactive authentication

Please see EDIT #2 for latest findings I've looked at other similar questions but, unfortunately, none of them seemed to help. This one is the closest and my symptoms are similar. Here's the issue: ...
0
votes
0answers
18 views

How Kerberous works when using an AD with three domains, one is root and others are Child?

Assuming an AD has one root domain 'ROOT' and two Child domains 'CHILD1, CHILD2' then How a user in the CHILD1 domain can access the resource in the CHILD2 domain? ROOT is the root domain with the ...
0
votes
0answers
50 views

How to rate limit with an api key (Apache/nginx)

I have an API in PHP and want to rate limit it into various tiers, with different tiers having different rates. Each user will be assigned a tier, and an API key for use in the URL. So for example ...
0
votes
1answer
35 views

nslcd with domain.com and sub.domain.com

i'm trying to setup our linux server with nslcd within multiple AD Domains, example.com and sub.exmaple.com. The current setup with nslcd is pretty easy and works for the domain example.com: uid ...
2
votes
1answer
331 views

How DC authenticates when Client is not using any authentication?

I have a virtual environment with the following structure: DC: Windows Server 2008 Client: Windows 7 I installed Active Directory on the Windows Server 2008 and made it in domain januapp.local, then ...
0
votes
0answers
114 views

LDAP: creating a bind user with limited privileges

I need to bind to an OpenLDAP server to authenticate users, but I don't want this low-privileged or "delegated administrator" to be able to see more attributes than strictly necessary. How do I ...
0
votes
0answers
18 views

Haproxy API Facade Authentication

We're hoping to set up a series of internal services to be exposed via haproxy (probably with keepalived for redundancy). This would make, for example, http://x-1.site.com/api, http://x-2.site.com/...
0
votes
2answers
23 views

Horde and Dovecot's SHA512-CRYPT: Cannot connect using custom SQL query

after successfully switching the authentification mechanism in dovecot and roundcube from MD5 to SHA512-CRYPT, I struggle to get Horde to authentificate using custom SQL queries. Setting $conf['auth']...
0
votes
0answers
29 views

ssl3_get_server_certificate from sssd when attempting to log in, using openldap to autheticate

When I attempt to change password on Centos 7 using OpenLDAP, openldap returns passwd: Authentication token manipulation error Watching the syslog when this happens shows the error: sssd[be[...
2
votes
1answer
41 views

Ssh Key authentication only works if I am physically logged into the server

UPDATE: This issue was caused by home directory encryption I have a strange problem. I have created and installed keys and disabled password login for SSH. If I try to SSH to the server I get a "...
1
vote
1answer
49 views

SMTP MTA to MTA authentication

I still have trouble understanding how a receiving MTA authenticates the forwarding MTA. I imagine an email that is forwarded by domain A's MTAA to domain B's MTAB. Steps to take by MTAA: Find MX ...
-4
votes
1answer
168 views

Implementing Kerberos Authentication on Linux servers using script [closed]

My client wants to implement Kerberos Authentication on multiple Oracle Linux Boxes. Do they need to be done manually or can I implement on all of them using any script? Is there any way to script ...
0
votes
0answers
66 views

SSH not requiring password prompt after duo 2fa setup

followed the instructions here: https://duo.com/docs/duounix#overview when i ssh to the server I get the duo dual auth stuff, but never have to enter a password. Usually, duo auth comes after i ...
0
votes
1answer
81 views

npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)

The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
0
votes
0answers
56 views

How can I avoid Windows to try to use seamless authentication with a specific user against an application?

We have an web application that authenticates against Microsoft ADFS. We have seamless authentication activated. The problem is that some AD users (generic users) are not allowed to access this ...
0
votes
0answers
145 views

Setting IIS as forward proxy to provide it's server certificate as client certificate for backend server that requires client auth

My environment setup so far is as follows:- Tomcat on server (1) hosting a web application (X) that uses http connection for requests to it in the intranet IIS 8.5 installed on server (2), acting as ...
0
votes
1answer
20 views

What are the rules regarding casing of values for environment variable USERNAME in Windows?

One of my customers says that in his AD usernames have mixed case sometimes and besides that, that people are able to successfully login using another casing of usernames. So there might be an ...
1
vote
1answer
23 views

IIS - One website, two bindings, two authentications?

I want to know if the following is possible to accomplish & whether it is or isn't, get as much feedback so I can find a way to start. I want to create a site in IIS. This site I would want to ...
1
vote
1answer
27 views

How can I proxy multiple LDAP servers with completely different name spaces?

We are developing R/Shiny Applications on Ubuntu Server. Authentication is done via OpenLDAP on Ubuntu Server. The Shiny Server only supports one LDAP directory. Now, we have an external customer ...
1
vote
1answer
276 views

ONLYOFFICE - JWS secret doesn't work (can connect without)

I'm running ONLYOFFICE Document Server under an https:// vhost on nginx on Ubuntu Server 18.04 LTS. It's reachable at onlyoffice.example.com and I also have a Nextcloud instance at nextcloud.example....
0
votes
1answer
155 views

EXIM: Auth not advertised when using EHLO

I've moved my mail server from one VM over to another. Everything has been configured as it was previously, and from the perspective of IMAP, there are no issues. Currently however, I'm having an ...
0
votes
0answers
642 views

Is using HOTP only authorization considered weak?

I have seen many experts advising usage of some kind of OTP as second step of 2FA schemes. I fully understand 2FA is more secure than Single Authorization, but it is also more inconvenient for casual ...
0
votes
0answers
24 views

nginx: whitelist via mail on access

I'd like to expose several services to the internet using nginx as reverse proxy. For a maximum of security, I came up with the following procedure: Access to service.foo.bar is blocked by default ...
0
votes
0answers
76 views

Integrating Yubikey Token details within LDAP with FreeIPA on CentOS

I would like to integrate yubikey token details within freeipa's ldap 389 directory server I'm trying to follow those instructions to extend ldap schema with yubikey information. Ldap's extensions ...
1
vote
1answer
51 views

Authentication with SSSD

I'm currently working on a project in my internship at an organisation, and it is honestly a bit of challenge, so I hope you guys can help me out. Background: The organisation I'm working in has a ...
2
votes
1answer
77 views

What is the best practice for logs integrity and authenticity?

We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
1
vote
1answer
74 views

Windows - Run As Different User (on different domain) - Error: “Domain isn't available”

Goal I have a Windows 10 PC. I want to run an application in the security context of a user on a different Windows domain from the one that my PC is connected to. Details My PC is connected to ...