Questions tagged [authentication]
A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully asserted their identity. There are three factors (types) of authentication, and a particular authentication process may combine two or more different factors.
2,203
questions
0
votes
0
answers
13
views
github auhentication method to access only all my organization's repos
I've been reading the official documentation and various articles but it's unclear to me. My organization has multiple users and multiple repos. It would not be right to merely authenticate as a ...
github
- 186
0
votes
1
answer
25
views
How to prevent postfix from sending e-mails without authentication
my first post here.
I had a postfix that I'm using as a relay.
I configured to use authentication with the following main.cf: https://pastebin.com/TQfmAQp2
The problem is: when I try to send an e-mail ...
2
votes
0
answers
352
views
What is the meaning of this line from ssh output: 'Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling'?
Everything works, ssh connects using private-public ssh key pair.
Just few things in ssh -v Ora2 output isn't clear for me.
This is complete ssh -v Ora2 output:
PS C:\Users\roeslermichal> ssh -v ...
- 135
0
votes
0
answers
33
views
How to setup pam on debian 11
I have installed debian 11 and pam-ldapd.
Now, I want to setup authenticating for openvpn with pam. When I wanted to test it with 'getent passwd' command, I got only local users response.
Can you help ...
- 13
0
votes
1
answer
34
views
Disabling password authentication
Suppose I want to allow SSH authentication only, and disable password authentication.
In /etc/ssh/sshd_config I've typically done this:
PasswordAuthentication no
But in some answers people recommend ...
- 870
0
votes
0
answers
29
views
Ubuntu20.04 : How to give non root user access to systemctl
The ubuntu version is 20.04
I am running a http service on port 6000.
I have created the service and as a user root i can run the service successfully
I have created a account svc_auto_bm and wanted ...
3
votes
1
answer
158
views
Let's Encrypt certificate on SQL Server 2019 - "The target principal name is incorrect"
Summary
I'm having trouble getting a certificate issued by Let's Encrypt R3 to work on SQL Server 2019. When using the certificate for SSL but not trusting the server certificate explicitly (In SSMS, ...
- 31
0
votes
1
answer
53
views
Detected LanMan/NTLMv1 Authentication method on Windows Server 2016
After running a security scan, I have this vulnerability showing up: Detected LanMan/NTLMv1 Authentication method.
I can only find information about Windows Server 2008, or Windows XP online regarding ...
- 1
0
votes
0
answers
114
views
azure app registration redirect uri not working for a spa application but only for one server
m a little stumped on this and just wondering if anyone had any ideas.
I have registered in azure an application with 3 spa redirects It is a .net core react application
http://localhost:3000/eem/ (...
- 101
0
votes
0
answers
28
views
Exchanging AD user groups with an external -not trusted- server for authentication and authorization
I'm not really sure how to short and precisely describe my problem. Thus, I was unable to find a solution or at least a hint via google.
We have a Microsoft AD domain and are currently planning to use ...
- 1
0
votes
0
answers
66
views
Can't config certificate-based authentication in WinRM / WSMan
I'm trying to configure certificate-based authentication in WinRM. I need this to source-initiated subscription of WEF from non-domain machine.
I use manual published by MS: https://learn.microsoft....
- 1
0
votes
0
answers
20
views
IIS with alternate name in SAN Cert prompts for Credentials
I have a server (server01) running IIS with a Web certificate installed. The certificate has the following SANs -
server01.companyname.com
server02.companyname.com
The binding on Default Web Site ...
- 101
0
votes
1
answer
67
views
sssd.service restarting every 1 minute 50 seconds
I have 5 workstations that have been joined to a freeipa domain. I've noticed some weird authentication related issues on 3 of the workstations. I've discovered that all 3 workstations will restart ...
- 239
1
vote
1
answer
62
views
FreeIPA authentication issues across high latency link?
We recently setup a FreeIPA server. We're using it for central user management, DNS, and CA. It's been working great with one exception.
Some of the workstations that authenticate with this FreeIPA ...
- 239
0
votes
1
answer
225
views
Authenticating via SSSD but Unix Auth logs a failure
I have WinAD authentication working on all 20+ of our Debian 11 servers. We also have a handful of CentOS/Rocky servers working correctly.
Login to one of the Debian machines causes the following logs:...
- 1
0
votes
0
answers
19
views
Difference between OAuth 2 and 3 legged
Our business uses an application with our EMR system in which they upload PDF documents into a third party EMR. We basically are outsourced healthcare and then upload documents from our EMR to ...
0
votes
0
answers
87
views
sshd allows login with no authentication all accounts
This morning I was logging into an Ubuntu 18 machine that luckily we use for testing and is not on the Internet. When my SSH client got to the authentication point I accidentally hit 'ESC' which means ...
- 13
0
votes
0
answers
169
views
nginx redirect to the proxy-host instead the public host
Authelia works, first of all I open in browser https://ads.target.org, then redirected to https://auth.target.org/?rd=https%3A%2F%2Fads.target.org%2F
After authentication, I redirected to https://192....
0
votes
0
answers
57
views
openconnect client hello dropped by DPI
I've installed openconnect server (ocserv) and works perfectly when I tunnel (SSH) to the server through another server that is inside country. But when I try to connect directly, the "client ...
0
votes
1
answer
120
views
AWS Cloudformation template - user pool app client hosted ui login url?
Is there a way to retrieve the login page url for a cognito user pool app client from the cloudformation template?
I currently have two projects: one for a spa webapp end one for the aws stack to host ...
- 141
0
votes
0
answers
41
views
Using Azure API Gateway to expose azure keyvault api to client application
Currently a client application works directly over internet with Azure Keyvault to get secret stored in the Keyvault. Azure service principal is used on client side for authentication to the Keyvault ...
- 1
0
votes
2
answers
123
views
Understanding HPE/MicroFocus Data Protector's user authentication (Windows GUI)
Following the manual to install a new Cell Manager (CM) for Micro Focus Data Protector 11.02, I got stuck at the point when configuration should start using the Windows GUI:
First The PC being used ...
- 366
0
votes
0
answers
24
views
Program error in windows 2016 2019 but not in windows 2012 r2
I just want to migrate from windows server 2012r2 to windows server 2016 or 2019, but I have the following problem with a service.
If I query the service in 2012r2, everything works and I get Events ...
- 1
0
votes
0
answers
121
views
samba - openLdap authentication issue - Ubuntu 20.04 server
i'll try and be concise:
i'm running a Ubuntu server 20.04 VM, i've installed OpenLDAP and Samba (this is an assignment, so i'm not worrying very much that those both are hosted on same server for the ...
- 1
0
votes
1
answer
721
views
couldn't find key MYSQL_KEY in Secret default/mysql-secret
I have the following file that creates a mysql-secret for mysql deployment pod.
apiVersion: v1
kind: Secret
metadata:
name: mysql-secret
type: Opaque
data:
mysql-password: MTExMTEx
mysql-root-...
- 337
0
votes
1
answer
176
views
Best practices to completely disable LDAP users' access to mixed services with mixed authentication methods?
Background
We use LDAP in our department to authenticate users to various services including web apps as well as Linux servers (via SSH). When a user leaves the department, we should disable their ...
- 38
0
votes
0
answers
65
views
Azure AKS Web API 500 error outside of debugger
I am developing a REST API using ASP.NET and .NET 7. Everything works fine on my local machine (in and out of a Docker container), when I publish to Azure App Service again no problem but when I ...
- 101
0
votes
0
answers
20
views
Copy BigQuery Data between different Accounts?
How to copy data between different accounts in python? Assuming I have oAuth credentials for both the source and destination
google-cloud-platform
0
votes
0
answers
24
views
Postfix Restrict Relay Domains Per User
I have a postfix server configured to relay for either mynetworks or sasl_authenticated clients. I would like to limit a sasl_autenticated client to send to a single domain. It looks like I might be ...
- 21
0
votes
2
answers
222
views
Nginx - How to return 404 if authentication headers are present?
I've got an nginx instance on the Internet that proxies an application. I would like to return 404 on any request from the Internet that attempts to authenticate to the application, as all of the ...
- 111
0
votes
1
answer
176
views
LDAP auth for hosts : same user should have different posixgroup memberships while login to different machines(hosts)
Any idea on how to achieve following objective with openLDAP server with unix clients
Objective :
a) Each user should have separate access restrictions to different hosts(unix servers) through LDAP ...
- 1
0
votes
1
answer
428
views
How to change Microsoft Azure MFA from "enter code" to "approve request"
We have a M365 tenant with MFA enforced for all users.
We can use either text message (SMS) or Microsoft Authenticator app on smartphone with a Time Based code (6 digit TOTP code).
We would like for ...
- 2,018
0
votes
0
answers
91
views
How to show the user a PAM module’s errors when attempting SSH authentication?
I have set up TOTP 2FA authentication on my VPS, mostly thanks to this answer.
I’ve been testing the authentication to see if my setup works as intended and it does, and when looking through /var/log/...
- 1
1
vote
1
answer
7k
views
Encryption type requested is not supported by the KDC
I am having intermittent issues with RDP'ing from a Windows 11 Enterprise PC to another Windows 11 Enterpise PC.
Both PC's are domain joined and on the same subnet.
Both PC's have a GPO applied to ...
- 123
0
votes
1
answer
74
views
Azure Function App - Azure Defender compliance
Azure Defender on Azure has two policies for Azure Function authentication that I'm not able to implement from other azure resources that support http calls.
Function apps should have Client ...
0
votes
1
answer
62
views
Enabling Cephx In cephadm depolyment
Hello i am trying to enable cephx in my ceph cluster
i added this three lines to /etc/ceph/ceph.conf
auth_cluster_required = cephx
auth_service_required = cephx
auth_client_required = cephx
i didn'...
- 109
0
votes
0
answers
82
views
AD FS SP forcing custom AuthnRequest
AD FS Error:
Exception details: Microsoft.IdentityServer.Service.Policy.PolicyServer.Engine.UnknownAuthenticationTypePolicyException: MSIS3305: None of the AuthenticationContext class references ...
- 1
0
votes
2
answers
217
views
can't automate the authentication process with PowerShell on Linux
On Debian 11, I have installed PowerShell 7.3.0. I am testing if I can run commands on a remote Windows computer. This is a simple example to get the remote computer hostname.
#!/usr/bin/env pwsh
$...
- 3
0
votes
0
answers
39
views
Openvpn comunity setup ldap
I have got installed openvpn server on my debian virtual machine. Evrything it's OK,but now I want conenct this server to the windows active directory.
I not found any working manual for this task. ...
- 13
1
vote
1
answer
160
views
TLS 1.2 client ignoring "Acceptable CA" list for Apache ClientCertificateRequest
I have TLS 1.2 mutual authentication working on Apache 2.4.54 with a self-signed CA and test clients on iOS and MacOS. Everything works, except the clients do not recognize the "Acceptable ...
- 131
1
vote
0
answers
36
views
Single Sign-On: multiple authentication providers
Let's say we have a web application with SSO/OIDC implemented and there are multiple authentication providers.
The workflow so far:
Click "Login via Microsoft"
Enter your email-address.
...
- 111
1
vote
0
answers
11
views
Setup Authentication for landingpage fetching data from proxy via access restriction?
Imagine the scenario where you have a client who wants you to implement calls to an external API on a landingpage that you've setup for them. The external API works based on a contract and API keys ...
- 155
0
votes
0
answers
70
views
Combination of HTTP authentication and Shibboleth authentication on the same Apache 2.4 website
I'd like to have 2 types of authentication on my web app (PHP 7.4 on Apache 2.4):
for the URLs /api/ and its children /api/xxxx (not actual directory, just url) I'd like to have HTTP authentication
...
- 1
1
vote
1
answer
531
views
SSH will always authenticate as root
# ssh -l admin 10.1.0.2
Warning: Permanently added '10.1.0.2' (RSA) to the list of known hosts.
root@10.1.0.2's password:
Using "OpenSSH_8.4p1 Debian-5+deb11u1, OpenSSL 1.1.1n" I want to ...
- 21
0
votes
0
answers
51
views
Setting up 802.1x for Office Network
I work at a smaller, development-focused company with some more prominent clients. One of these customers had new conditions for contractors, basically forcing us to implement 802.1x for our office.
...
- 101
0
votes
0
answers
465
views
sssd/ldap does not authenticate against LDAP
I have configured SSSD with AD as ID and Auth providers. I am not caching credentials, so I expect connections to AD for authentication when I ssh to the host, but I do not see any. The user account ...
- 101
2
votes
3
answers
2k
views
SSH authenticate with publickey,password or publickey,none
On my SFTP-Server I want to allow only login via public key AND password
OR (if and ONLY IF user has no password) by only public key
I set the following in the the sshd_config:
AuthenticationMethods ...
- 31
0
votes
0
answers
113
views
Auth Mellon on Apache is giving 404 for login endpoint
I'm trying to set up SAML auth on a subfolder of an apache 2.4 vhost using auth_mellon, following the instructions here: https://richard-purves.com/2019/05/07/apache-saml-sso-the-hard-way/
In the ...
- 1
1
vote
0
answers
83
views
PAM "remember me" with timeout option for 2FA?
Is it possible for PAM to remember that a second factor authentication has passed for a short period of time, e.g. an hour? This would have to be keyed to a user and IP address.
For example:
Log in ...
- 743
0
votes
0
answers
24
views
Secure SSH login Using 2FA
Does anyone know how to enable 2FA for SSH on ubuntu using email. So, When I want to login, I will receive an OTP code via email to access the SSH shell instead of using the Google authentication ...
