Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [authentication]

A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully asserted their identity. There are three factors (types) of authentication, and a particular authentication process may combine two or more different factors.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

Any studies on the hardware costs of server-side password hashing? [closed]

I am researching the state of the art in password security on the web and the general consensus seems to be that server-side hashing with a slow hashing algorithm (Argon2id, bcrypt, scrypt etc) is the ...
user avatar
1 vote
0 answers
25 views

Is one of Anonymous or Windows Authentication really required for IIS when hosting an ASP.NET CORE application

I have an ASP.NET CORE application hosted in IIS. The application uses OAUTH/OIDC for authenticating API requests. I have observed that if neither Anonymous nor Windows Authentication is activated ...
user avatar
0 votes
1 answer
10 views

Squid basic auth connection problems

We are using squid proxy with basic authentication. Each user has it's own outgoing ip configured. See parts of our squid.conf: # Authentication Basic Auth auth_param basic program /usr/lib/squid/...
user avatar
0 votes
1 answer
14 views

Can i use different client certificates for different locations using nginx

I have two different location on my Server: server/locationA server/locationB I want to restrict access to these locations using two client certificates certA and certB. locationA should only be ...
user avatar
0 votes
0 answers
15 views

How to increase the number of groups send by ADFS via SAML to Jenkins?

Yesterday we managed to integrate the CI Server Jenkins with Microsoft ADFS via SAML 2.0. When configuring the roles in Jenkins to the recieved groups of the user we noticed that only 80 groups are ...
user avatar
-2 votes
1 answer
15 views

RDP login works when using Android App, but now when using Windows [closed]

I am trying to connect to my work machine using RDP. Using my Android Phone I can connect to it. It shows up in the list and I fill in my details like so: COMPANYNAME\USERNAME. Then I enter the ...
user avatar
0 votes
1 answer
26 views

Strange issue with forwarding auth headers from apache to nginx - Non empty header(se_custid/ein) not found in the request to proceed

On the setup describe below, Looks like apache is not able to forward required headers to nginx or nginx while forwarding initial request is not forwarding full URL but just relative path. The idea ...
user avatar
0 votes
1 answer
51 views

Hashicorp Vault How Do I Login Headless From STDIN Using Bash Shell?

Given a Bash Shell say in a Docker container running on Gitlab, for example, how would I get the password to get passed in? When I login with this: $ vault login -method=ldap username=myusername It ...
user avatar
0 votes
0 answers
82 views

Authentication failed: TImeout for cockpit access in CentOS 7

PROBLEM When I try to login to cockpit on CentOS 7 using URL https://localhost:9090 using the root credentials, I get Authentication failed: Timeout error. Have searched the web for solution but not ...
user avatar
0 votes
0 answers
41 views

How do I order authentication options correctly in Apache, by location?

The order required is: Basic Auth - IF Authorization is in the header SAML Auth For 2 specific locations, no auth This is what I have, but it does not seem to work correctly <Location "/&...
user avatar
  • 514
0 votes
0 answers
12 views

Synchronize Google Workspaces and Azure. Maintainig only google Auth

I have a request from my current job. We are using Azure AD only for Windows login. On the other hand we are using G-Workspaces for Single Sign on and authentication with other applications. I have ...
user avatar
0 votes
1 answer
33 views

How to get Gravitee to do recursive group lookups

I have set up Gravitee APIM 3x (gateway, rest-api, console and portal). This work fine. When trying to replace the memory authentication with LDAP (FreeIPA) authentication, I am able to get the ...
user avatar
  • 101
0 votes
0 answers
75 views

Requirements for RDP from Azure AD Registered device

We are a small company (4 users, 7 devices) and have recently moved from a mess of local accounts on our PCs to using Azure AD for Office 365. The plan was to have accounts for each user and for ...
user avatar
  • 101
0 votes
0 answers
35 views

ADFS SSO error: Invalid audience for this response

My team are about to launch a new site, which authenticates users using SSO to our internal ADFS. SSO works on our local and staging environments and now we're setting up what will be the live ...
user avatar
  • 243
0 votes
2 answers
27 views

Do I need to restart my Debian after removing one key in authorized_keys?

I removed a public key in authorized_keys for a computer that I've lost. I have some servers running on the Debian and am afraid that a reboot would cause some trouble. However, I can't verify whether ...
user avatar
0 votes
0 answers
37 views

Exim4 - prevent unauthorized users sending emails

I am having some trouble securing my MX (Exim). At the moment anyone who telnets to my mail server on port 25 is able to just send an email. I am trying to figure out how to allow outbound traffic ...
user avatar
0 votes
0 answers
18 views

Is it possible to set up a on premise Windows Server so that its possible to login with Office 365 credentials?

It feels like I've searched everywhere about this but I get lost in all the variants that exists. What we want: To be able to login on our (on premise) Windows Servers using our Office365 credentials. ...
user avatar
  • 101
0 votes
1 answer
47 views

How does Microsoft Exchange determine which mailbox database a mailbox is in upon authenticating via POP3?

Performing a Microsoft Exchange 2010 to 2016 migration and everything is ready for transition besides this one problem. I have an internal CNAME DNS record mail.domain.tld that is pointing to the ...
user avatar
  • 285
1 vote
0 answers
369 views

Samba/Winbind domain member authentication issue

In setting up a new Linux Samba fileserver as a AD member I keep running into an issue with authentication. It appears to be triggered by running with selinux in Enforcing mode after joining AD, but ...
user avatar
2 votes
1 answer
438 views

libpam-ldapd - LDAP authentication on Debian 11 not working

I saw several other questions here regarding a similar issue - but I haven't found something that actually worked for me. My goal is to authenticate (mainly for SSH) all Debian maschines against an ...
user avatar
0 votes
1 answer
36 views

How to show a default page on a protected website running on IIS

I can't figure out the correct syntax in my web.config to allow the general public to see the index.aspx as a default page and for any other page to go thru the login page. If I use www.mywebsite.com/...
user avatar
1 vote
0 answers
11 views

OpenLDAP: interpreting username@domainname as uid=username,ou=domainname

Is that possible to tweak some settings that would make OpenLDAP always interpreting uid=username@domainname as uid=username,ou=domainname in authentication queries? Of course, making the clients to ...
user avatar
1 vote
2 answers
42 views

HTTPD server does LDAP authentication. How does the mechanism work?

I have a HTTPD apache server which does LDAP authentication. When the user hits the URL http://localhost/, a browser prompt pops up asking for username and password. How are the username and password ...
user avatar
  • 73
0 votes
0 answers
25 views

Windows clients slowly lose access to network resources until I give them a new MAC address

One of my clients has their domain controllers running as 2 VMs on VMware ESXi 5.5 at their head office, and there are 4 other branch offices. All the offices connect back to the Head Office via site-...
user avatar
0 votes
0 answers
122 views

Why squid authentication fails?

I'm trying to add authentication to squid installed on windows, here is the config: auth_param basic program C:\Squid\lib\squid\basic_ncsa_auth.exe C:\Squid\etc\squid\.htpasswd acl ncsa_users ...
user avatar
  • 151
1 vote
0 answers
121 views

Keycloak: Difference between Authentication sessions and User Sessions

I was going through the documentation https://www.keycloak.org/docs/latest/server_installation/#cache Here they have described different types of caches. I didn't quite understand the definitions they ...
user avatar
  • 123
0 votes
0 answers
95 views

Unable to configure LDAP in jenkins and gettig Authentication error

After giving the valid LDAP details in Jenkins, getting the error message as shown below: Login Authentication: failed for user "twice" Lookup User lookup: user "twice" does not ...
user avatar
0 votes
0 answers
53 views

Freeradius 3.0 accept all IP Address

I found the following code on the internet to allow all IP in freeradius client.conf file, client 0.0.0.0/0 { secret = 12345 shortname = name } But This is not working in freeradius 3.0 , it is ...
user avatar
0 votes
1 answer
19 views

What role does session on the Authorization server play?

I was reading about Sessions in this article https://auth0.com/docs/users/sessions It says when a user logs in, two types of sessions are create Two sessions are created: The local session (storezero....
user avatar
  • 123
0 votes
0 answers
26 views

Switched BizTalk's database domain, but cannot remove DC

I've inherited an older system involving BizTalk (Server 2010) where the application and its database were on separate servers on separate domains. There has been efforts to modernize the systems and ...
user avatar
  • 1
1 vote
1 answer
625 views

Chrome doesn't prompt to use a local certificate after setting up client certificate authentication on Apache

I have used this guide to set up client certificate authentication on Apache. I verified my certificate using the openssl verify directive (it's valid), I also successfully imported the PFX file into ...
user avatar
  • 111
0 votes
0 answers
122 views

How do I configure apache, so that my client certificate authentication works for two specific URLs only?

I'm following this guide in order to establish client-based, certificate authentication on my website. The goal: Allow 2 users access to 2 specific URLs: /login and /admin. When any of the 2 users ...
user avatar
  • 111
0 votes
0 answers
36 views

Rewrite to https://localhost:8000 rather than https://localhost

I use nginx in my MacOS to test third-party authentications such as Google and Twitter in localhost. As a result, on my local website https://localhost:8000/..., I could engage with www.funfun.io for ...
user avatar
  • 287
1 vote
0 answers
73 views

More explicit Nginx logs

I use nginx in my MacOS to test third-party authentications such as Google and Twitter in localhost. As a result, on my local website https://localhost:8000/..., I could engage with www.funfun.io for ...
user avatar
  • 287
0 votes
0 answers
84 views

InspIRCd doesn’t even contact configured LDAP

On Ubuntu 20.04 I've installed InspIRCd (which seems to work fine as-is) and added to its config: <module name="m_ldapauth.so"> <ldapauth baserdn="dc=nodomain" ...
user avatar
1 vote
0 answers
128 views

Unable to log in with AD credentials

I have a DC (Debian) that seems to be working fine. I am able to join the domain but when I join a Fedora member it joins but the DNS isn't registered. I have to manually add the record to the dc. ...
user avatar
0 votes
0 answers
123 views

Debug third-party authentications in localhost with docker and nginx

We have a website where we just added third-party authentications such as Google, Twitter. I'm trying to test these authentications in localhost (MacOS). I'm running a docker to run nginx, here is ...
user avatar
  • 287
0 votes
2 answers
108 views

ADFS as proxy to some IDP

As far as I know, Exchange does support WS-Federation, but it does not support SAML. At the same time I have IDP that does support SAML, but does not support WS-Federation. Is it possible to configure ...
user avatar
  • 135
0 votes
1 answer
28 views

Is it possible to overlay local LDAP attributes on top of a replicated tree?

A central LDAP server provides user data as posixAccount, whereby the attributes homeDirectory and loginShell are empty. I want allow users in this central LDAP server to access a Linux system. If I ...
user avatar
  • 198
0 votes
1 answer
67 views

manual certificate authentication for IMAPS

I'm running an IMAPS service and users are authenticated with an X.509 certificate. It works fine using Thunderbird. But how I can connect to the IMAPS service manually using openssl? I use the same ...
user avatar
  • 101
0 votes
1 answer
395 views

idmap range on Ubuntu 20.04 (sssd) does not match CentOS 7 winbind idmaps (kinda)

My Active Directory maps in Ubuntu systems are very long compared to my CentOS IDs The last 4 digits match but Ubunutu seems to be adding a lot more to the beginning. In CentOS winbind/samba I used a ...
user avatar
0 votes
1 answer
414 views

Ubuntu SSSD Auth Error with child/sub AD Domain

Need help authenticating linux (Ubuntu) server that is joined to child domain. I can see the server name on the Domain Controller and able to run authentication test successfully however I am not ...
user avatar
  • 3
0 votes
0 answers
38 views

Avoiding the PBA password prompt

I have an Ubuntu system which boots from a small NVME disk using software encryption, TPM, etc. to mitigate against data loss in case of theft. The system is interfaced with customised PCIe hardware ...
user avatar
  • 101
1 vote
0 answers
49 views

Authenticating ftp against multiple (postgres) databases

Current State Given is a host with a couple of IPv4 addresses and HTTP & FTP access for each address; each vhost has access to a PostgreSQL database. Web- and ftp-authentication is done against ...
user avatar
  • 11
0 votes
0 answers
43 views

Using Teleport authentication client to reach Route-views.org

There is a need to establish connection between Teleport Bastion node and route-views.org router/collector. I have idea how to connect Bastion to the other Linux server/machine using Teleport or ...
user avatar
0 votes
0 answers
50 views

Downgrade Google Identity Platform back to Firebase Authentication

We used Firebase Authentication and were happy about it. Then I clicked the "migrate to Identity Platform" button — but that was a mistake. We don't use any of the advantages but end up ...
user avatar
0 votes
1 answer
435 views

ADFS: Some Users Cannot Sign-In

I have a new ADFS implementation running on Server 2019. After setup, I tested authentication for various user accounts using the /adfs/ls/IdpInitiatedSignon.aspx. Most of the account I tested worked ...
user avatar
  • 61
1 vote
0 answers
71 views

Temporarily disable minimum password time in FreeIPA after password reset by support

We use FreeIPA 4.6.8 and we have users that of course forget their passwords. However, password policy has a minimum password time of 1 hour. When support resets their password for them and provides ...
user avatar
  • 123
0 votes
1 answer
52 views

Is it possible to limit AWS Account access from corporate devices only

Is it possible to ensure that AWS accounts that have been created by an organisation cannot be logged in to from devices that are not part of the corporate infrastructure? I am struggling to ...
user avatar
0 votes
0 answers
37 views

Can I use AD CS to Authenticate Domain Users Instead of a Password?

I have a number of Active Directory Domain User Accounts, which function essentially as service accounts. I'd like to avoid having to rotate the passwords for all of those domain user accounts, and ...
user avatar

1
2 3 4 5
44