People who code: we want your input. Take the Survey

Questions tagged [authorization]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
2answers
48 views

Hardware token/UUID for authentication of software

Is there a unique hardware token or a UUID on every computer motherboard/BIOS that can be used to create a "strongly coupled" software? I am working on writing a proprietary software for a ...
1
vote
0answers
7 views

Enforce kerberos authentication for each IIS site without individual site developers being able to disable it

We have a IIS server with multiple sites that are managed by different teams. We want to standardize on and enforce Kerberos autentication for all sites with each site having an individual AD group ...
1
vote
0answers
15 views

How to configure the apache authorization chain for Kerberos (mod_auth_kerb) and SSL?

What directives and conditions to configure the Apache configuration as follows: We try to authorize through Kerberos. If successful (What condition to use?), Then we redirect to URL1. Otherwise, we ...
1
vote
0answers
15 views

Can you implement token based authentication/authorization without a 3rd party?

fyi I'm a total newbie to server stuff (I'm an app developer, trying to implement a simple but secure api back end) It sounds simple enough, user sends his username/password, if it authenticates, you ...
1
vote
0answers
182 views

How to whitelist Authorization header in CloudFront custom Origin Request Policy?

I have created the following CloudFront Origin Request Policy: I need Authorization header (without Authorization header the AntiForgeryToken header is not forwarded) but I do not understand why ...
1
vote
1answer
2k views

Unable to start services in Centos 7 with error “Authorization not available” even as root user

I am not able to start services for the following Centos 7 server [root@myserver home]# uname -r 3.10.0-1160.11.1.el7.x86_64 [root@myserver home]# cat /etc/centos-release CentOS Linux release 7.9.2009 ...
0
votes
0answers
34 views

AWS Cognito Identity Authorization as RBAC on a php application

We have this PHP monolith application that was developed back in around 2005. We are thinking to modernize different modules. Firstly, we moved authentication from the system to Auth0, but for some ...
0
votes
1answer
24 views

What is the solution for authorizing linux users? [duplicate]

Entire company uses Linux distributions for users and and servers solutions. Company employees, when authenticate themselves to pc and are connected do company internal network, should get ...
0
votes
1answer
26 views

Proxy server capable of injecting authentication parameters/headers into the request

The idea is to have a proxy server(like SOCKS4/5, but for HTTP protocol), the purpose of this proxy server is to authenticate requests on behalf of the users, by manipulating the requests. For example ...
0
votes
0answers
25 views

Authorization in httpd with two-way SSL

We are configuring httpd as a reverse proxy for our web application in order to support two-way SSL (using mod_ssl). The current /etc/httpd/conf/httpd.conf is as follows: ServerRoot "/etc/httpd&...
0
votes
0answers
30 views

Apache X-Authorization request header

I'm using Basic file type authorization in my Apache httpd configuration. And my http request contains X-Authorization request header instead of Authorization. I'm getting unauthorized error. How can ...
1
vote
0answers
27 views

Login Active-Directory account require different username values in loginwindow and switch user

I've just bind my machine (running Mojave) to new AD server and would like to login to an existing AD account from loginwindow startup screen, but all I get is a tilted password record (indicator that ...
0
votes
0answers
112 views

Apache webdav jwt authorization

I have setup webdav server on apache. I have /shared and /private section on webdav server. Inside /private section every user has his own folder. Every user should have access to his own folder only. ...
0
votes
1answer
48 views

Authorize an user to use a permission-required software downloaded in program file(x86)

There are several permission-required software downloaded in program file(x86) in my company. Every time users need to use them, I have to go to their computers and type the password of administrator ...
0
votes
1answer
421 views

Apache authentication fails with require ldap-group

I have been trying to tie apache on a windows server to our active directory server for authentication and authorization. In order to test it, I have been trying the "ldap-status" handler, with the ...
0
votes
2answers
166 views

How can one allow or deny an ssh login for a specific user(s) or group(s) on an sshd server?

How can one allow or deny an ssh login for a specific user(s) or group(s) on an sshd server? (I realize SE has similar questions, but not I could find any that address this specific point. All others ...
0
votes
1answer
2k views

Error 404 when trying to access Kubernetes dashboard from remote laptop using SSH proxy

I have a remote cluster on a remote private Cloud to which I have only SSH access (no GUI). I started the proxy server with: kubectl proxy --address=0.0.0.0 --accept-hosts=.* And started a local SSH ...
2
votes
2answers
623 views

PAM dynamic LDAP Authorization with groups

At the moment my PAM is integrated through LDAP with a custom authentication stack in the /etc/pam.d/systhem-auth: auth required pam_env.so auth required pam_faildelay.so ...
1
vote
2answers
4k views

How to keep Authentication header with redirect using NGINX ingress annotations

I have an nginx ingress controller for my kubernetes cluster. I have a need to add a permanent redirect to an ingress which I can successfully do with nginx.ingress.kubernetes.io/permanent-redirect: "...
0
votes
1answer
66 views

IP-based Authentication

Is there a way to authenticate an user account (active directory) via ldap only when it is requesting from a specific ip range? In any other cases, the user account should not work. Short: Is it ...
1
vote
2answers
5k views

Authorization based on custom Header (Apache)

I have a service running behind a Apache Reverse-Proxy that uses the custom headers "username" and "role" to identify users and their role. I want Apache HTTPD to restrict access to to people whose ...
-1
votes
1answer
1k views

dovecot with LDAP can't find userPassword

I'm new to LDAP and I'm trying to use it with Dovecot for authentication. When I test out my setup with Telnet and IMAP, it reports 'userPassword not found'. However a simple search using the same ...
2
votes
1answer
124 views

Understanding AWS Cloudfront's origin access identifiers

I do not really understand the security behind AWS Cloudfront's OAI. The only thing it does is switch the bucket's domain. Instead of accessing the bucket with https://s3.amazonaws.com/[Bucket]/* it ...
1
vote
0answers
354 views

Cannot use integrated security with netcore app on iis installed as a web site

I have a little test project in netcore (2.1.401) that returns the logged in user via CNTLM. I deployed it to an IIS server following [this guide]. I also added the website to the hosts file. If I ...
1
vote
0answers
161 views

Reauthorize Google Container Registry GCR to read from Github

When trying to create a new Build Trigger I get the following response, after selecting Github as a source: Google Cloud Platform was not authorized to list repositories. Its access was most likely ...
1
vote
0answers
159 views

How to handle multi-domain user in ldap

I have an LDAP I have to create from scratch. This will handle multiple domains, in which will be multiple apps. With multiple authorization based on each apps. I don't want to duplicate users, and ...
0
votes
1answer
52 views

Can any user inside a organization remove a project?

Recently, I have created a project to apply full permissions on a such google account from my organization. I realized that any account could enter and destroy any project. I don't know if this is an ...
0
votes
1answer
270 views

How to restrict/secure access to developer's server hosted on Internet

I am setting up two Ubuntu virtual private servers for my startup company. The "public" server (let's call it www.example.com) shall contain the publicly open company web site and restricted but (...
0
votes
3answers
198 views

Apache Allow Only Authorized Users to Access File

I have an existing web site that needs to link to a pdf file on our web-server. The problem is, ONLY users who have been authenticated by logging into the site should be able to view the file. I have ...
0
votes
0answers
75 views

hHow to authorize Apache's users similar to Microsoft IIS?

I want to enable directory browsing in Apache and ask users to authenticate using openLDAP backend, and I want to set different groups for the folders inside Apache's web server. My goal is not to ...
1
vote
0answers
35 views

After a domain acct password change, what is the (max) length of time a windows service continue to run if not updated

I know the question is awkwardly phrased, and I also realize there are going to be multiple factors in this that don't lead to a single definitive answer. I seem recall in the past, having services ...
2
votes
1answer
7k views

AuthorizedKeysCommand not getting executed

I'm trying to authorize SSH sessions using the AuthorizedKeysCommand in sshd_config. For some reason, the AuthorizedKeysCommand is not getting executed even though the SSH flow at least initiates the ...
2
votes
1answer
973 views

How to tell Apache to reply with 403 instead of 401?

We have some rules for a subtree of Locations, which involve Require-ing ldap-group and expr-s. The user is duly challenged to supply login-credentials, which are verified. However, even when the ...
1
vote
0answers
2k views

Difference between DOMAIN\username and User Logon Name causing problems with .NET Authorization Rule

I am currently having trouble with some IIS .NET Authorization Rules which are restricting access to an site based on the AD Group Membership. The groups are configured as Global Groups, with names ...
0
votes
1answer
144 views

Authorization required to install jzos batch launcher

We are trying to install the JZOS Batch Launcher. The function consists of three pieces: a load module that must be put into a z/OS PDSE, a sample start proc that can be tailored and put into an ...
0
votes
0answers
300 views

Authorize users on a reverse proxy and redirect them to two different addresses if they have/do not have permission?

I need to create a "maintenance mode" reverse proxy that can be easily toggled between "open" (allow all connections) to "maintenance" (only allow connections from AD users in a specific security ...
3
votes
1answer
6k views

nginx auth_request how to return backend status code

when the backend proxy used in auth_request returns an error code different from 401 or 403, nginx is returning a 500 error code. The ngx_http_auth_request_module module (1.5.4+) implements client ...
5
votes
1answer
1k views

Started task in z/OS lacks RACF privileges

I wish to test a JDBC server implementation running under z/OS. The usual approach would be to define a JCL procedure and run this as a started task. The started task requires a user ID under which it ...
8
votes
2answers
9k views

Admin password of MariaDb doesn't seem to work

I've just installed MariaDb on a fresh Ubuntu Gnome and ran mysql_secure_installation afterwards where I set a decent admin password, removed the anonymous user etc. Afterwards I realized some ...
5
votes
1answer
6k views

Passing Authorization Basic Headers Along in Proxy

I am currently trying to get a reverse/forward proxy to pass along the authorization headers to the target server. How would I go abou this? I have already looked at the below sources, and one of the ...
0
votes
0answers
307 views

Configure auth with MySQL in Apache 2.22

I've got a raspberry pi 1 which serves web pages using apache 2.22. I've done some research and I found a way to secure "pages" using a database (mysql in this case). I've found this little guide to ...
0
votes
0answers
324 views

IIS7 Digest authentication credentials forgotten between pages

I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh. If this is normal behavior for this ...
2
votes
0answers
88 views

Directly accessing files through reverse proxy

With my web app I've got to provide files to third party apis that unfortunately only accept file names. The files can be located anywhere, local or on network shares. The files are actually stored on ...
0
votes
3answers
209 views

Is there a way to allow an apache2 logged in user to access a specific directory dynamically?

This is surprisingly a very difficult problem to solve. I want to allow my Linux users to login to Apache2 and have access to their own directory(ies) only. I've managed to get Linux users to ...
1
vote
1answer
2k views

TACACS+ configuration: how to receive priv-lvl value?

I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL). I tried with ...
1
vote
1answer
872 views

Active directory authentication and authorization for an application

Currently all our applications are web based and our authentication and authorization mechanism is always through the database. eg database logins and access controls defined at database. However now ...
1
vote
0answers
121 views

Nginx - How to authorize access to repositories using python script

I have set up a local Git server using Nginx ( in Ubuntu ) ,Now I want to authorize users using external python script , which should authorize them against predefined database . AFAIK, I have to ...
0
votes
0answers
57 views

Microsoft AD DS group membership verification when authorizing user

Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
5
votes
0answers
907 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
3
votes
0answers
49 views

Windows Server - Protect websites with AD user

My question is a bit tricky to explain :) We have ASP.NET websites running on Windows Server 2012. Some websites use SqlServer authentication, others use Windows authentication, some don't have any ...