Questions tagged [authorization]
The authorization tag has no usage guidance.
50
questions with no upvoted or accepted answers
6
votes
1
answer
2k
views
Started task in z/OS lacks RACF privileges
I wish to test a JDBC server implementation running under z/OS. The usual approach would be to define a JCL procedure and run this as a started task. The started task requires a user ID under which it ...
5
votes
0
answers
972
views
Samba authentication and LDAP
I have an OpenLDAP server that I use for authentication and authorization for various services.
All users are of object type inetOrgPerson and my groups are groupOfNames.
Now I want to configure ...
3
votes
0
answers
51
views
Windows Server - Protect websites with AD user
My question is a bit tricky to explain :)
We have ASP.NET websites running on Windows Server 2012.
Some websites use SqlServer authentication, others use Windows authentication, some don't have any ...
3
votes
0
answers
2k
views
Jenkins - Project based authorization and LDAP
Does anybody know if the Project-based Matrix Authorization Strategy is supposed to work with LDAP integration?
There are several closed bug reports on JENKINS-2324 that say users don't need to have ...
2
votes
0
answers
174
views
Directly accessing files through reverse proxy
With my web app I've got to provide files to third party apis that unfortunately only accept file names. The files can be located anywhere, local or on network shares. The files are actually stored on ...
2
votes
1
answer
732
views
error in system log - Succeeded authorizing right
Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
1
vote
0
answers
85
views
Enforce kerberos authentication for each IIS site without individual site developers being able to disable it
We have a IIS server with multiple sites that are managed by different teams. We want to standardize on and enforce Kerberos autentication for all sites with each site having an individual AD group ...
1
vote
0
answers
166
views
How to configure the apache authorization chain for Kerberos (mod_auth_kerb) and SSL?
What directives and conditions to configure the Apache configuration as follows:
We try to authorize through Kerberos.
If successful (What condition to use?), Then we redirect to URL1.
Otherwise, we ...
1
vote
0
answers
26
views
Can you implement token based authentication/authorization without a 3rd party?
fyi I'm a total newbie to server stuff (I'm an app developer, trying to implement a simple but secure api back end)
It sounds simple enough, user sends his username/password, if it authenticates, you ...
1
vote
0
answers
44
views
Login Active-Directory account require different username values in loginwindow and switch user
I've just bind my machine (running Mojave) to new AD server and would like to login to an existing AD account from loginwindow startup screen, but all I get is a tilted password record (indicator that ...
1
vote
1
answer
232
views
IP-based Authentication
Is there a way to authenticate an user account (active directory) via ldap only when it is requesting from a specific ip range? In any other cases, the user account should not work.
Short: Is it ...
1
vote
0
answers
548
views
Cannot use integrated security with netcore app on iis installed as a web site
I have a little test project in netcore (2.1.401) that returns the logged in user via CNTLM. I deployed it to an IIS server following [this guide]. I also added the website to the hosts file.
If I ...
1
vote
0
answers
179
views
Reauthorize Google Container Registry GCR to read from Github
When trying to create a new Build Trigger I get the following response, after selecting Github as a source:
Google Cloud Platform was not authorized to list repositories. Its access was most likely ...
1
vote
0
answers
502
views
How to handle multi-domain user in ldap
I have an LDAP I have to create from scratch.
This will handle multiple domains, in which will be multiple apps. With multiple authorization based on each apps.
I don't want to duplicate users, and ...
1
vote
0
answers
43
views
After a domain acct password change, what is the (max) length of time a windows service continue to run if not updated
I know the question is awkwardly phrased, and I also realize there are going to be multiple factors in this that don't lead to a single definitive answer.
I seem recall in the past, having services ...
1
vote
0
answers
4k
views
Difference between DOMAIN\username and User Logon Name causing problems with .NET Authorization Rule
I am currently having trouble with some IIS .NET Authorization Rules which are restricting access to an site based on the AD Group Membership.
The groups are configured as Global Groups, with names ...
1
vote
0
answers
140
views
Nginx - How to authorize access to repositories using python script
I have set up a local Git server using Nginx ( in Ubuntu ) ,Now I want to authorize users using external python script , which should authorize them against predefined database .
AFAIK, I have to ...
1
vote
1
answer
78
views
Subversion Authorization specifics
We have a group of 300 developers. All of them will have rw access to one of the repos, but a small group of them - let's call them contractors - should not be allowed to read any other repo but that ...
1
vote
0
answers
727
views
Intermittent ProviderException: API failed due to error 'The data area passed to a system call is too small. '
Running IIS 7.5.7600.16385 on Windows Server 2008 R2 Enterprise (7601: SP1). One of our websites is set to globally log errors and we are seeing this every day or two. We're using an authorization ...
1
vote
0
answers
262
views
401 error when setting error responses to custom in iis
I was receiving 401 unauthorized access errors on my /account/login page
The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
1
vote
0
answers
133
views
Getting apache to use ldap group and filesystem group information
We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
1
vote
0
answers
2k
views
Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)
(Debian Squeeze)
I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
1
vote
0
answers
355
views
SVN server authentication on Mac - users are not recognized
We have a anomaly here, trying to set up SVN authentication. Here is apache configuration:
<Location /repo_main>
DAV svn
SVNPath /svn/repo_main
AuthType Basic
AuthName "svn"
...
0
votes
0
answers
52
views
Bypassing CERT_HAS_EXPIRED leads to 401 Unauthorized
In our Next.js app, axios requests work in client components (using useEffect) but fail with a CERT_HAS_EXPIRED error from server components. As a workaround in development, we run ...
0
votes
0
answers
23
views
Following Istio TCP Traffic authorization tutorial and getting 'connection rejected' instead of 'connection succeeded'
I'm following the Istio security authorization TCP Traffic tutorial.
On step 5, Verify that sleep successfully communicates with tcp-echo on port 9002., I get a connection rejected result rather than ...
0
votes
1
answer
135
views
Why dovecot use "postfix_accounts.users" to retrieve mail user information after username/password auth?
I had set up a mail server in my Rocky Linux 9.1 that comes with postfix, dovecot and mysql (refer to https://computingforgeeks.com/how-to-setup-mail-server-on-centos/).
Every thing is updated. (...
0
votes
0
answers
93
views
Apache Ranger vs Keycloak for authorization
Iam new to both Apache Ranger and Keycloak. When I was doing my research I understood that, Apache ranger and Keycloak both has the authoirzation capabilites, added keycloak has authentication ...
0
votes
1
answer
50
views
Can you limit a role to objects that meet a selector?
How can we limit a service account to only be able to create, list, delete etc. objects that have a specific label within a given namespace?
We have engineered an hierarchy of services (which map to ...
0
votes
0
answers
30
views
Exchanging AD user groups with an external -not trusted- server for authentication and authorization
I'm not really sure how to short and precisely describe my problem. Thus, I was unable to find a solution or at least a hint via google.
We have a Microsoft AD domain and are currently planning to use ...
0
votes
1
answer
144
views
How to get Gravitee to do recursive group lookups
I have set up Gravitee APIM 3x (gateway, rest-api, console and portal).
This work fine. When trying to replace the memory authentication with LDAP (FreeIPA) authentication, I am able to get the ...
0
votes
0
answers
433
views
Login to SSL VPN via SSO and then use SSO inside VPN for other Service Providers possible?
I have a setup where you authorize via SAML SSO (keycloak as idp) to access a SSL VPN (fortigate as sp). Now inside the VPN there are authorization reverse proxy servers.
Is it possible to have the ...
0
votes
1
answer
55
views
What role does session on the Authorization server play?
I was reading about Sessions in this article
https://auth0.com/docs/users/sessions
It says when a user logs in, two types of sessions are create
Two sessions are created:
The local session (storezero....
0
votes
0
answers
338
views
Apache X-Authorization request header
I'm using Basic file type authorization in my Apache httpd configuration.
And my http request contains X-Authorization request header instead of Authorization.
I'm getting unauthorized error. How can ...
0
votes
1
answer
553
views
Authorize an user to use a permission-required software downloaded in program file(x86)
There are several permission-required software downloaded in program file(x86) in my company. Every time users need to use them, I have to go to their computers and type the password of administrator ...
0
votes
1
answer
5k
views
Error 404 when trying to access Kubernetes dashboard from remote laptop using SSH proxy
I have a remote cluster on a remote private Cloud to which I have only SSH access (no GUI). I started the proxy server with:
kubectl proxy --address=0.0.0.0 --accept-hosts=.*
And started a local SSH ...
0
votes
1
answer
71
views
Can any user inside a organization remove a project?
Recently, I have created a project to apply full permissions on a such google account from my organization. I realized that any account could enter and destroy any project.
I don't know if this is an ...
0
votes
1
answer
728
views
How to restrict/secure access to developer's server hosted on Internet
I am setting up two Ubuntu virtual private servers for my startup company.
The "public" server (let's call it www.example.com) shall contain the publicly open company web site and restricted but (...
0
votes
0
answers
128
views
hHow to authorize Apache's users similar to Microsoft IIS?
I want to enable directory browsing in Apache and ask users to authenticate using openLDAP backend, and I want to set different groups for the folders inside Apache's web server.
My goal is not to ...
0
votes
1
answer
213
views
Authorization required to install jzos batch launcher
We are trying to install the JZOS Batch Launcher. The function consists of three pieces: a load module that must be put into a z/OS PDSE, a sample start proc that can be tailored and put into an ...
0
votes
0
answers
403
views
Authorize users on a reverse proxy and redirect them to two different addresses if they have/do not have permission?
I need to create a "maintenance mode" reverse proxy that can be easily toggled between "open" (allow all connections) to "maintenance" (only allow connections from AD users in a specific security ...
0
votes
0
answers
407
views
Configure auth with MySQL in Apache 2.22
I've got a raspberry pi 1 which serves web pages using apache 2.22. I've done some research and I found a way to secure "pages" using a database (mysql in this case).
I've found this little guide to ...
0
votes
0
answers
350
views
IIS7 Digest authentication credentials forgotten between pages
I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh.
If this is normal behavior for this ...
0
votes
0
answers
97
views
Microsoft AD DS group membership verification when authorizing user
Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
0
votes
0
answers
90
views
Enable root password on remote server
I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server.
...
0
votes
0
answers
665
views
Multiple CAS servers with Microsoft Exchange and selective authorization
I have a Microsoft Exchange 2010 organization within one Microsoft Windows domain and I have users accessing it through OWA.
For simplicity lets say I currently have one CAS server (CAS 1) which is ...
0
votes
2
answers
166
views
Can I have Authentication without authorization checks with apache 2.4?
When I do not provide a require directive, apache 2.4 seems to ignore authentication and just lets the user access the url.
Is there way to turn off Authorization checks and only worry about ...
0
votes
1
answer
293
views
OpenSSH scp restrictions a-la gitolite
Does anyone know of some software that would allow to restrict/tune the scp experience on a single unix user, based on SSH keys?
Similar to what gitolite does, or more flexible what rssh can do, but ...
0
votes
3
answers
534
views
Active Directory problems while trying to perfom compare operation
I have CentOs 5.5 with Apache 2.2 and SVN installed. Also I have Windows 2003 R2 with Active Directory.
I'm trying to authorize users via AD so each user have access to repo if he is a member of ...
0
votes
1
answer
192
views
How to do a database backup in DB2 in Vista?
How to do a database backup in DB2 in Vista?
Whenever I issued this command (login in Vista as Administrator):
restore database myDB from D: taken at 20081013134446
the command line processor ...
-1
votes
1
answer
3k
views
dovecot with LDAP can't find userPassword
I'm new to LDAP and I'm trying to use it with Dovecot for authentication. When I test out my setup with Telnet and IMAP, it reports 'userPassword not found'. However a simple search using the same ...