Questions tagged [authentication]

A process of proving that an entity (commonly a user or organization) is who they claim to be, or who they were previously identified as being. Authentication does not guarantee that particular entity's identity absolutely, it just proves that they are the same agent that has previously successfully asserted their identity. There are three factors (types) of authentication, and a particular authentication process may combine two or more different factors.

Filter by
Sorted by
Tagged with
77 votes
4 answers
293k views

How to grant network access to LocalSystem account?

How do you grant access to network resources to the LocalSystem (NT AUTHORITY\SYSTEM) account? Background When accessing the network, the LocalSystem account acts as the computer on the network: ...
Ian Boyd's user avatar
  • 5,373
27 votes
2 answers
21k views

Understand PAM and NSS

In the last days I have set up some Linux system with LDAP authentication and everything works fine, but there's still something I can't really understand regarding NSS and PAM, also after a lot of ...
ColOfAbRiX's user avatar
  • 1,080
99 votes
6 answers
555k views

How to delete cached temporarily credentials for a network share on a Windows machine without rebooting or logging off [duplicate]

This is more of a curiosity then a real problem, I am just to lazy to reboot or log off my laptop. I have connected to a network share on a Windows server with domain credentials from a non-domain ...
ralz's user avatar
  • 2,781
71 votes
20 answers
215k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
Belmin Fernandez's user avatar
13 votes
5 answers
94k views

How can I clear cached domain credentials?

Related: How can I enable domain authentication over wireless in Windows 7/2k8? To test the domain login over wireless connection feature I'm trying to set up in the above question, I need an ...
Iszi's user avatar
  • 2,466
12 votes
6 answers
83k views

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5.
KlimczakM's user avatar
  • 223
257 votes
5 answers
1.4m views

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

I believe this is not possible, but someone I know insisted that it works. I don't even know what parameters to try, and I haven't found this documented anywhere. I tried http://myserver.com/~user=...
ripper234's user avatar
  • 6,020
72 votes
11 answers
370k views

How do I remove login credentials for a network location in Win7?

I just tried to access a folder like so: \\somecomputeronmynetwork\somelocation$ When going to this location I'm prompted for a user name and password. I put one in, and it let me in fine. Now I ...
Joseph's user avatar
  • 1,746
44 votes
5 answers
17k views

Best system for managing ssh keys? [closed]

I've got several client computers (i.e. laptops, desktops, etc.), and I connect to several server machines that I manage, and I log into them all via SSH. I can imagine several schemes of managing ...
slacy's user avatar
  • 930
24 votes
2 answers
8k views

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active ...
13 votes
2 answers
17k views

Why can't I log in to a Windows-protected IIS 7.5 directory on the server?

I have a web site with an admin subdirectory that is protected by integrated Windows authentication. Works flawlessly from remote PCs. But when I attempt to access these pages on the server itself, ...
user21146's user avatar
  • 367
10 votes
6 answers
10k views

Enforce SSH key passwords?

I'm looking at removing password-based logins for SSH. However, I don't want to allow passwordless ssh keys, as that would be even worse. How can I make sure that only SSH keys which have passwords ...
Lee B's user avatar
  • 3,470
6 votes
3 answers
5k views

Managing service passwords with Puppet

I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
Jeff Ferland's user avatar
  • 20.7k
5 votes
1 answer
715 views

Use more complex AND/OR structure with PAM

PAM allows to use sufficent and required for some logic, like auth sufficient pam_a.so auth required pam_b.so auth required pam_c.so which would mean "either a is true, or b must be true and then c ...
allo's user avatar
  • 1,713
2 votes
3 answers
9k views

Apache .htaccess trick to authenticate only once for all subdomains?

I'm using something like this in .htaccess file to restrict access to the website: AuthUserFile /some/directory/.passwd AuthGroupFile /dev/null AuthName EnterPassword AuthType Basic require valid-...
michuk's user avatar
  • 133
1 vote
0 answers
1k views

Apache .htaccess trick to authenticate only once for all subdomains? [duplicate]

Possible Duplicate: Apache .htaccess trick to authenticate only once for all subdomains? I'm using something like this in .htaccess file to restrict access to the website: AuthUserFile /some/...
michuk's user avatar
  • 133
213 votes
1 answer
220k views

SSH use only my password, Ignore my ssh key, don't prompt me for a passphrase

This is a question regarding the OpenSSH client on Linux, MacOSX and FreeBSD. Normally, I log into systems using my SSH key. Occasionally, I want my SSH client to ignore my SSH key and use a ...
Stefan Lasiewski's user avatar
151 votes
5 answers
242k views

What is the difference between authentication and authorization?

Basic question from a novice: What is the difference between authentication and authorization?
user avatar
74 votes
11 answers
34k views

Why is SSH password authentication a security risk?

Most guides for OpenSSH configuration advise to disable password authentication in favor of key-based authentication. But in my opinion password authentication has a significant advantage: an ability ...
Septagram's user avatar
  • 937
24 votes
6 answers
37k views

Enable passwordless access to MySQL

How can I delete my password for MySQL? I dont want to have a password to connect to the database. My server is running Ubuntu.
Ben's user avatar
  • 775
24 votes
9 answers
20k views

Should we disable the root user?

Should we remove the root password, disable remote login and basically require adminstrators to use sudo to perform administrative actions?
jldugger's user avatar
  • 14.5k
21 votes
5 answers
29k views

How practical is it to authenticate a Linux server against AD?

We utilise both Windows and Linux server at our software development company. One of the friction points with this setup is that we don't have a single sign-on solution. Being more of a Microsoft ...
Philip Fourie's user avatar
18 votes
5 answers
38k views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
Eric's user avatar
  • 185
13 votes
2 answers
12k views

apache auth: combination of LDAP and htpasswd

We're using Apache with mod_svn to serve the subversion repo. Apache is hooked to an LDAP server so all users can use their domain passwords. For the build machine to be able to checkout, I want to ...
noamtm's user avatar
  • 339
11 votes
5 answers
118k views

How to use Active Directory to authenticate linux users

What are the best-practices for using Active Directory to authenticate users on linux (Debian) boxes? The way I would like it to work would be to add AD users to a group - say linux administrators or ...
Brent 's user avatar
  • 23.3k
11 votes
1 answer
22k views

How to specify multiple root certificates for nginx client certificate verification?

For a project as part of the European Grid Infrastructure (EGI) we need SSL client certificate verification for a service running on nginx. As there are several root CAs allowed within EGI, we need ...
Florian Feldhaus's user avatar
9 votes
4 answers
17k views

Authenticate in Apache via System Account

I currently have my apache server to authenticate via a password file created from htpasswd. Configured as such: AuthType Basic AuthName "Secured Site" AuthUserFile "/etc/apache2/users.passwd" How ...
Mark Roddy's user avatar
7 votes
4 answers
19k views

How do accept multiple authentication options in Apache?

I want to protect a path in my VirtualHost but allow users a variety of authentication options (e.g. mod-auth-cas, mod-auth-openid and mod-auth-digest.) How do I set up the virtual host definition to ...
James A. Rosen's user avatar
7 votes
2 answers
22k views

How to use nginx PAM module?

I would like to use nginx PAM module to authenticate a site with existing users on a FreeBSD system. I tried to use pam_unix.so, but no luck. It's just not let me in with my usr/psw pair. :( nginx ...
noirello's user avatar
5 votes
1 answer
12k views

nginx: understanding the purpose of auth_http (IMAP proxy)

I would like to send IMAP client requests to an IMAP back-end via an nginx proxy. According to the the mail_auth_http module, a directive auth_http has to be used in order to authenticate the clients. ...
watain's user avatar
  • 151
5 votes
4 answers
5k views

ubuntu - how can I avoid typing a password on every admin action?

I just set-up ubuntu 9.10 on my computer, and I'm trying to figure out how to avoid typing a password on every action that requires sudo privileges. I just want to type a password once on login and ...
sa125's user avatar
  • 325
4 votes
1 answer
8k views

Cookie Authentication in Apache

I'm trying to set up a reverse proxy in Apache. The user will be required to log in, and will then be sent a cookie. I want Apache to check the cookie. Is there a way to do this? EG, right now my ...
user19084's user avatar
  • 143
3 votes
1 answer
1k views

SSH - slow authentication

This is more of a curiosity question then a problem at this point. I have resolved my problem which i'll post the solution that worked for me. problem I was getting rather slow authentication times ...
au_stan's user avatar
  • 347
3 votes
4 answers
77k views

How can I enable domain authentication over wireless in Windows 7/2k8?

I've got several domain-member laptops which commonly roam to places where there aren't any network ports available. Occasionally, during these times, the laptop may be used by someone who has not ...
Iszi's user avatar
  • 2,466
3 votes
1 answer
3k views

Squid and Active Directory authentication

I want to integrate a Squid proxy with an Active Directory domain, so that the following is achieved: I can grant/deny access to web sites based on user accounts and/or groups. Domain users don't ...
Massimo's user avatar
  • 71.3k
2 votes
3 answers
7k views

Samba File Server + PAM + Berkeley DB or Samba + PAM

I've set up VSFTPD with PAM and Berkeley DB before using this article. It's a great article and was really easy to walk through setting it up. Now that I'm setting up Samba, I would like to do the ...
user29600's user avatar
  • 429
2 votes
3 answers
11k views

IIS Windows Authentication not working in Internet Explorer via host name; works via IP

I'm trying to get a new Windows Server 2003 box working to host an ASP.NET application that uses Windows Authentication. Here's some info: IIS Anonymous Access is diabled IIS Integrated Windows ...
RationalGeek's user avatar
2 votes
1 answer
92 views

SSH - Add public keys to server after disabling PasswordAuthentication

How can I add public keys to a host from unauthorized clients after disabling PasswordAuthentication? I have one client registered to the host via public key. I need to add additional clients. Do I ...
Wes Koerber's user avatar
1 vote
2 answers
81 views

Block Administrators authentication attemps from workstations

My Administrator user once in a while is getting locked-out by the workstations in our lab, due to failed logon attempts. (While this is a problem that should be addressed, because this means there is ...
EliadTech's user avatar
  • 1,250
1 vote
1 answer
169 views

Network update solutions for a company of ~20 (5 local, 15 remote)?

This is probably going to be a bit up in the air, because we're still in the "reaching towards solutions" phase, but I figured I'd see what you guys had to say. Plus I honestly know very little about ...
Margaret's user avatar
  • 231
0 votes
4 answers
472 views

No longer have to enter a password to SSH into another server?

For some reason, I have a server that if ssh into another server...you don't need to enter the password. How is this done? Can someone give me step by step instructions please?
Alex's user avatar
  • 8,591
154 votes
5 answers
135k views

How do I make ssh fail rather than prompt for a password if the public-key authentication fails?

I've got a script that SSHes several servers using public key authentication. One of the servers has stopped letting the script log in due to a configuration issue, which means that the script gets ...
rjmunro's user avatar
  • 2,331
50 votes
14 answers
103k views

This could be due to CredSSP encryption oracle remediation - RDP to Windows 10 pro host

Error Following Windows security updates in May 2018, when attempting to RDP to a Windows 10 Pro workstation the following error message is displayed after successfully entering user credentials: An ...
scott_lotus's user avatar
  • 1,089
50 votes
6 answers
176k views

Postgres error message: FATAL: Ident authentication failed for user "..."

Say you're seeing this message: FATAL: Ident authentication failed for user "..." What are the causes of this error message?
Steve Bennett's user avatar
34 votes
4 answers
77k views

public key authentication fails ONLY when sshd is daemon

I have no clue on how this happens. The distro is Scientific Linux 6.1 and everything is set up to perform authentication via public key. Yet, when sshd is running as a daemon (service sshd start), it ...
user666412's user avatar
31 votes
2 answers
24k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
ezzatron's user avatar
  • 415
30 votes
7 answers
7k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
Concrete Donkey's user avatar
28 votes
6 answers
100k views

Google Chrome: passthrough Windows authentication

The I.T. dept is considering allowing installation and automated deployment of Google Chrome browser to 100+ desktops. One of the requirements is for domain credentials to be passed through. The ...
p.campbell's user avatar
  • 4,427
22 votes
2 answers
51k views

Troubleshooting Windows Authentication problems (no challenge) in IIS 7.5?

I know that there are thousands of reports of people having trouble getting Integrated Windows Authentication to work with IIS, but they all seem to lead to web pages that don't apply or solutions ...
Aaronaught's user avatar
22 votes
3 answers
36k views

How does Kerberos work with SSH?

Suppose I have four computers, Laptop, Server1, Server2, Kerberos server: I log in using PuTTY or SSH from L to S1, giving my username / password From S1 I then SSH to S2. No password is needed as ...
PhilR's user avatar
  • 483