Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authentication]

A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully ...

0
votes
0answers
12 views

Haproxy API Facade Authentication

We're hoping to set up a series of internal services to be exposed via haproxy (probably with keepalived for redundancy). This would make, for example, http://x-1.site.com/api, http://x-2.site.com/...
0
votes
0answers
23 views

What are my options for certificate expiry notification tooling? [closed]

I have responsibilities over a number of certificates which have expiry dates. To be clear, this includes TLS certificates, but also includes things like HTTPS client authentication certificates, and ...
0
votes
2answers
19 views

Horde and Dovecot's SHA512-CRYPT: Cannot connect using custom SQL query

after successfully switching the authentification mechanism in dovecot and roundcube from MD5 to SHA512-CRYPT, I struggle to get Horde to authentificate using custom SQL queries. Setting $conf['auth']...
0
votes
0answers
13 views

ssl3_get_server_certificate from sssd when attempting to log in, using openldap to autheticate

When I attempt to change password on Centos 7 using OpenLDAP, openldap returns passwd: Authentication token manipulation error Watching the syslog when this happens shows the error: sssd[be[...
2
votes
1answer
32 views

Ssh Key authentication only works if I am physically logged into the server

UPDATE: This issue was caused by home directory encryption I have a strange problem. I have created and installed keys and disabled password login for SSH. If I try to SSH to the server I get a "...
1
vote
1answer
29 views

SMTP MTA to MTA authentication

I still have trouble understanding how a receiving MTA authenticates the forwarding MTA. I imagine an email that is forwarded by domain A's MTAA to domain B's MTAB. Steps to take by MTAA: Find MX ...
-4
votes
1answer
162 views

Implementing Kerberos Authentication on Linux servers using script [closed]

My client wants to implement Kerberos Authentication on multiple Oracle Linux Boxes. Do they need to be done manually or can I implement on all of them using any script? Is there any way to script ...
0
votes
0answers
42 views

SSH not requiring password prompt after duo 2fa setup

followed the instructions here: https://duo.com/docs/duounix#overview when i ssh to the server I get the duo dual auth stuff, but never have to enter a password. Usually, duo auth comes after i ...
0
votes
1answer
21 views

npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)

The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
0
votes
0answers
54 views

How can I avoid Windows to try to use seamless authentication with a specific user against an application?

We have an web application that authenticates against Microsoft ADFS. We have seamless authentication activated. The problem is that some AD users (generic users) are not allowed to access this ...
0
votes
0answers
44 views

Setting IIS as forward proxy to provide it's server certificate as client certificate for backend server that requires client auth

My environment setup so far is as follows:- Tomcat on server (1) hosting a web application (X) that uses http connection for requests to it in the intranet IIS 8.5 installed on server (2), acting as ...
0
votes
1answer
19 views

What are the rules regarding casing of values for environment variable USERNAME in Windows?

One of my customers says that in his AD usernames have mixed case sometimes and besides that, that people are able to successfully login using another casing of usernames. So there might be an ...
1
vote
1answer
20 views

IIS - One website, two bindings, two authentications?

I want to know if the following is possible to accomplish & whether it is or isn't, get as much feedback so I can find a way to start. I want to create a site in IIS. This site I would want to ...
1
vote
1answer
21 views

How can I proxy multiple LDAP servers with completely different name spaces?

We are developing R/Shiny Applications on Ubuntu Server. Authentication is done via OpenLDAP on Ubuntu Server. The Shiny Server only supports one LDAP directory. Now, we have an external customer ...
1
vote
1answer
105 views

ONLYOFFICE - JWS secret doesn't work (can connect without)

I'm running ONLYOFFICE Document Server under an https:// vhost on nginx on Ubuntu Server 18.04 LTS. It's reachable at onlyoffice.example.com and I also have a Nextcloud instance at nextcloud.example....
0
votes
1answer
79 views

EXIM: Auth not advertised when using EHLO

I've moved my mail server from one VM over to another. Everything has been configured as it was previously, and from the perspective of IMAP, there are no issues. Currently however, I'm having an ...
0
votes
0answers
641 views

Is using HOTP only authorization considered weak?

I have seen many experts advising usage of some kind of OTP as second step of 2FA schemes. I fully understand 2FA is more secure than Single Authorization, but it is also more inconvenient for casual ...
0
votes
0answers
20 views

nginx: whitelist via mail on access

I'd like to expose several services to the internet using nginx as reverse proxy. For a maximum of security, I came up with the following procedure: Access to service.foo.bar is blocked by default ...
0
votes
0answers
55 views

Integrating Yubikey Token details within LDAP with FreeIPA on CentOS

I would like to integrate yubikey token details within freeipa's ldap 389 directory server I'm trying to follow those instructions to extend ldap schema with yubikey information. Ldap's extensions ...
1
vote
1answer
46 views

Authentication with SSSD

I'm currently working on a project in my internship at an organisation, and it is honestly a bit of challenge, so I hope you guys can help me out. Background: The organisation I'm working in has a ...
2
votes
1answer
71 views

What is the best practice for logs integrity and authenticity?

We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
1
vote
1answer
24 views

Windows - Run As Different User (on different domain) - Error: “Domain isn't available”

Goal I have a Windows 10 PC. I want to run an application in the security context of a user on a different Windows domain from the one that my PC is connected to. Details My PC is connected to ...
1
vote
1answer
119 views

How to enforce “User must change password at next logon” on Linux domain member?

I have an Ubuntu Server 18.04 domain member joined to Active Directory. Everything is working well, except for getting the AD User must change password at next login setting to be respected. I ...
0
votes
0answers
70 views

nginx captive portal radius authentication

I have multiple Ruckus Access Point and I want to provide a custom captive portal for guest authentication. The thing I want is to check if user currently has access - then switch him to the site he ...
0
votes
1answer
57 views

What is the difference between Cloud IAP and Cloud Endpoints OAuth?

With regards to authentication and authorization, what does Cloud IAP do that Cloud Endpoints doesn't? (and vice versa?) Is Cloud IAP doing both Authorization and Authentication? And if so, is it ...
1
vote
0answers
48 views

Jenkins (and other apps) user authentication in a K8s cluster

I have Jenkins running in a pod, in an on-prem Kubernetes cluster. My company uses AD, and my Jenkins instance outside the cluster (I'm migrating from this to the cluster instance) uses LDAP for ...
0
votes
0answers
19 views

Showing error message after Tomcat LockOutRealm error / user lock

I'm using JDBCRealm + LockOutRealm in Tomcat (8, but could switch to 9). This is working all fine, but if a user locks himself out, this is only visible in the logs, not the user facing login error ...
0
votes
0answers
36 views

Configuring the Oracle Database(12c)-Microsoft Active Directory Integration

I am planning to integrate LDAP with Oracle database for authentication management. I do not want to use Kerberos for this. It would be helpful if somebody from here advise whether that is possible ...
0
votes
0answers
30 views

Windows authentication with multiple domains

I have an ASP.NET web application with windows authentication setup, hosted on IIS8 on Domain-A. I have users from Domain-B who need to access to the above application. AFAIK, both these domains are ...
0
votes
0answers
126 views

SASL Authentication Failed on Postfix as relay server with office365

I'm setting a postfix server as relay to an account in office 365. I configure the main file /etc/postfix/main.cf as follows: relayhost = [smtp.office365.com]:587 smtp_sasl_auth_enable = yes ...
0
votes
0answers
18 views

Apache mod_dbd: DBDParams with encrypted password

I'm trying to configure Apache 2.4 with mod_dbd to connect to PostgreSQL for user authentication. (Ref: https://httpd.apache.org/docs/2.4/mod/mod_dbd.html) Is there a possibility to store the ...
0
votes
0answers
17 views

IIS credentials not working for sub folders

i have a site (example.com) that prompts for credentials once you click on a link on the main page if anonymous auth is disabled for that particular link, and basic auth and asp.net impersonation is ...
0
votes
0answers
81 views

Only IOS clients fail to authenticate to samba 4.8 shares

I have a samba 4.8 server that is an Active Directory member server. Windows and other samba clients can access its shares. But Apple IOS devices fail to authenticate. The logs on the server say ...
-1
votes
1answer
23 views

Properly implement REMOTE_USER-like thing for ssh

I'd like to know how to make the remote user name available in an ssh session on my server. So when joe@host1 logs in as commonuser@server1, the scripts running on server1 running as commonuser will ...
0
votes
1answer
65 views

User Authentication with Puppet and Active Directory

I've just started my internship in a governmental organisation, and my first assignment is to develop at user system for our internal serverfarm of 120+ Redhat and Windows servers. The internal ...
0
votes
0answers
79 views

Apache Kerberos authentication fallback

I'm trying to set up Apache so that : Users who connect to my website and send a valid Kerberos ticket are automatically logged in Those who do not provide any Kerberos ticket see the website's login ...
0
votes
2answers
44 views

Client certificate authentication - Apache2

I'm trying to set up a client authentication for one of my app but for now, it's not successfull. I bought a Gandi wildcard ssl certificate for my domain *.example.com and here is the configuration on ...
1
vote
0answers
47 views

Graceful 'Access denied' message when SSH to a server protected with SSSD fails

I'm using SSSD on Ubuntu for authn/authz. This works great, but I am getting a "Server unexpectedly closed network connection" when I try to SSH to the box with an unauthorized user. I can log in ...
0
votes
0answers
68 views

Freeradius User Group Membership Not Working

dictionary file: ATTRIBUTE My-Group 3003 string users file: reza My-Group := "operators", Cleartext-Password := "hello" Fall-Through := Yes bob My-Group := "...
0
votes
1answer
214 views

Unifi AP-PRO with pfSense running FreeRADIUS, with MySQL database externally

I'm in the process of moving from a set of Aerohive AP's to Unifi AP-PRO to increase the range of our wifi. Adding more Aerohives could be a solution, but they're way more expensive and I already have ...
0
votes
0answers
51 views

Automatic write from web server to git production repository using passwordless SSH key: is it secure?

I have a wordpress website which have 4 different environments: development, preview, staging and production. This all are connected to 4 git remote repositories: development, preview, staging and ...
0
votes
0answers
21 views

Can't type in username input field using vs 2017 TFS login on Windows Server 2008 r2

I always used visual studio TFS to get the latest version of an asp.net website on to the IIS Server. For the last few months I wasn't able to do that since I can't login to TFS. VS uses IE for ...
0
votes
0answers
43 views

Serverless environment: Printing and authentication and between Networks connected by a Site to Site VPN

The Scenario We have a new office. We wanted no servers on this site and to use Azure for the entire infrastructure. We have a DC (10.0.0.4) at our Azure network (10.0.0.0\24) with a Site to Site VPN ...
0
votes
0answers
173 views

Freeradius multi-factor auth with LDAP and Yubikey

I just set up a freeradius server and would like to be able to authenticate using both the password of a ldap user and the yubico otp generated from their yubikey. It is working using the ldap ...
1
vote
0answers
38 views

Jenkins PWAuth doesn't work after process restart

I am running Jenkins (currently v2.134, always up to date from Jenkins Debian/Ubuntu repo) on a Ubuntu 18.04 server. It is configured to use the pwauth plugin for authentication against system ...
0
votes
1answer
51 views

Apache: Is the password protection in a .htaccess file always processed first?

Last week I did a relaunch on a website and today I have realized that the staging subdomain got indexed by Google. I want to avoid this mistake in the future and track down the error source. I ...
0
votes
1answer
110 views

how authenticated multiple subdomains in nginx with one login

we've got app consisting of several parts. Each part is running on it's subdomain (nginx site). We would like to hide access of dev env behind some shared auth, where first login on whatever of ...
1
vote
1answer
93 views

Define “unauthorized connection” vs “authorized connection” (newbie)

Reading the man page for sshd_config, I see the term "unauthorized connections" in MaxStartups. What is an "unauthorized connection," a connection that was allowed without any authorization? If some ...
1
vote
0answers
41 views

Domain service account fails to login locally before successfully logging into the Domain Controller

We are currently seeing an issue in our environment where domain service accounts are attempting to validate against a machine locally. These attempts fail, generating Event 4625 with Sub Status ...
2
votes
0answers
48 views

Lsass authenticates to ADFS on windows login

I am researching a domain user lockdown problem that involves an ADFS. What happens is that anytime a domain user logins into a windows 10 machine, lsass connects to ADFS to authenticate the user ...