Questions tagged [authorization]
The authorization tag has no usage guidance.
165
questions
1
vote
0
answers
4k
views
Difference between DOMAIN\username and User Logon Name causing problems with .NET Authorization Rule
I am currently having trouble with some IIS .NET Authorization Rules which are restricting access to an site based on the AD Group Membership.
The groups are configured as Global Groups, with names ...
0
votes
1
answer
212
views
Authorization required to install jzos batch launcher
We are trying to install the JZOS Batch Launcher. The function consists of three pieces: a load module that must be put into a z/OS PDSE, a sample start proc that can be tailored and put into an ...
0
votes
0
answers
399
views
Authorize users on a reverse proxy and redirect them to two different addresses if they have/do not have permission?
I need to create a "maintenance mode" reverse proxy that can be easily toggled between "open" (allow all connections) to "maintenance" (only allow connections from AD users in a specific security ...
3
votes
1
answer
9k
views
nginx auth_request how to return backend status code
when the backend proxy used in auth_request returns an error code different from 401 or 403, nginx is returning a 500 error code.
The ngx_http_auth_request_module module (1.5.4+) implements client ...
6
votes
1
answer
2k
views
Started task in z/OS lacks RACF privileges
I wish to test a JDBC server implementation running under z/OS. The usual approach would be to define a JCL procedure and run this as a started task. The started task requires a user ID under which it ...
9
votes
2
answers
12k
views
Admin password of MariaDb doesn't seem to work
I've just installed MariaDb on a fresh Ubuntu Gnome and ran mysql_secure_installation afterwards where I set a decent admin password, removed the anonymous user etc.
Afterwards I realized some ...
5
votes
1
answer
8k
views
Passing Authorization Basic Headers Along in Proxy
I am currently trying to get a reverse/forward proxy to pass along the authorization headers to the target server. How would I go abou this? I have already looked at the below sources, and one of the ...
0
votes
0
answers
406
views
Configure auth with MySQL in Apache 2.22
I've got a raspberry pi 1 which serves web pages using apache 2.22. I've done some research and I found a way to secure "pages" using a database (mysql in this case).
I've found this little guide to ...
0
votes
0
answers
350
views
IIS7 Digest authentication credentials forgotten between pages
I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh.
If this is normal behavior for this ...
2
votes
0
answers
164
views
Directly accessing files through reverse proxy
With my web app I've got to provide files to third party apis that unfortunately only accept file names. The files can be located anywhere, local or on network shares. The files are actually stored on ...
0
votes
3
answers
330
views
Is there a way to allow an apache2 logged in user to access a specific directory dynamically?
This is surprisingly a very difficult problem to solve.
I want to allow my Linux users to login to Apache2 and have access to their own directory(ies) only. I've managed to get Linux users to ...
1
vote
1
answer
2k
views
TACACS+ configuration: how to receive priv-lvl value?
I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL).
I tried with ...
1
vote
1
answer
969
views
Active directory authentication and authorization for an application
Currently all our applications are web based and our authentication and authorization mechanism is always through the database. eg database logins and access controls defined at database. However now ...
1
vote
0
answers
139
views
Nginx - How to authorize access to repositories using python script
I have set up a local Git server using Nginx ( in Ubuntu ) ,Now I want to authorize users using external python script , which should authorize them against predefined database .
AFAIK, I have to ...
0
votes
0
answers
96
views
Microsoft AD DS group membership verification when authorizing user
Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
5
votes
0
answers
970
views
Samba authentication and LDAP
I have an OpenLDAP server that I use for authentication and authorization for various services.
All users are of object type inetOrgPerson and my groups are groupOfNames.
Now I want to configure ...
3
votes
0
answers
51
views
Windows Server - Protect websites with AD user
My question is a bit tricky to explain :)
We have ASP.NET websites running on Windows Server 2012.
Some websites use SqlServer authentication, others use Windows authentication, some don't have any ...
1
vote
1
answer
78
views
Subversion Authorization specifics
We have a group of 300 developers. All of them will have rw access to one of the repos, but a small group of them - let's call them contractors - should not be allowed to read any other repo but that ...
0
votes
1
answer
2k
views
how to translate an Active Directory group into a NIS netgroup?
The goal is to be able to add
+ : @DL-MyCompany-MyTeam : ALL
to /etc/security/access.conf and have it work as expected. This is my sssd.conf:
[domain/default]
cache_credentials = True
[sssd]
...
1
vote
1
answer
2k
views
nginx location match issue auth_basic
I have this configuration :
location / {
root /etc/nginx/euchet;
}
location /app/ {
proxy_pass http://172.16.184.2:8080;
proxy_redirect off;
proxy_set_header Host $host;
...
0
votes
1
answer
2k
views
How to restrict access to a child SVN directory only?
I'm trying to configure permissions for an SVN repository accessed through Apache 2. What I want is to let anyone access the root directory, while restricting to authenticated users a child directory. ...
0
votes
0
answers
89
views
Enable root password on remote server
I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server.
...
1
vote
1
answer
2k
views
WordPress admin password protection not working on Nginx server
I am totally confused with Nginx server password protection. It does not work as we want.
This is my Nginx website configuration block.
server {
listen 80;
server_name example.com;
...
3
votes
1
answer
4k
views
Using Windows Server, how do I schedule an hourly task that will call a URL WITH an authorization header?
I need to schedule a task that will call a given url hourly. The URL doesn't return anything so it is fairly simple HOWEVER this URL requires an authorization header:
Authorization: Basic {SOME AUTH ...
0
votes
1
answer
2k
views
Linux TACACS+ authorization
I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working.
This is my ...
1
vote
1
answer
183
views
Authorizing users to SSH into machine - where to configure?
Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use.
I've ...
-1
votes
1
answer
4k
views
The authenticity of host “host” can't be established [closed]
I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
2
votes
1
answer
3k
views
Sudoers NOPASSWD how to grant access to a specific ln command
In /etc/sudoers I need to grant passwordless sudo for this command:
/usr/bin/env sudo ln -nfs /home/deployer/apps/myapp_staging/shared/config/nginx.conf /etc/nginx/sites-enabled/
to the deployer ...
2
votes
1
answer
404
views
Apache Authorization for multiple pages for different users
I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong
/var/www/application/user1/user1.html
/var/www/application/...
2
votes
1
answer
4k
views
Apache 2.4: Public Subdirectory with .htaccess
I'm currently upgrading to Apache 2.4.
What puzzles me right now is how to create a public subdirectory using .htaccess only. The outer directory is protected by AuthType Basic
Previously, the ...
5
votes
1
answer
119
views
Multi-user bzr server
I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
0
votes
0
answers
657
views
Multiple CAS servers with Microsoft Exchange and selective authorization
I have a Microsoft Exchange 2010 organization within one Microsoft Windows domain and I have users accessing it through OWA.
For simplicity lets say I currently have one CAS server (CAS 1) which is ...
15
votes
2
answers
10k
views
Simple, centralized user management on a small LAN - NIS or LDAP?
I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would like it to have centralized control of user accounts (at least, I ...
2
votes
1
answer
9k
views
Enable IIS directory browsing for specific user or group
At home, I have a small server running on Windows Server 2012 and IIS8 (no AD). I want some of the users on my server to be able to access a shared file directory so they can download it via https.
I ...
0
votes
1
answer
315
views
Windows 2008 server not authorizing vpn traffic
We are struggling to setup windows 2008 server vpn.
We have managed to establish a connection to the server from the client pc but cant browse to any url on the same server.
We keep getting an ...
4
votes
1
answer
229
views
SVNParentPath directory authorization
The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second ...
2
votes
2
answers
3k
views
ssh: allow all users for one IP, and restrict to one user for public IP
I have a server on a VPN. This server has a public address and has a gitlab instance on it.
I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
0
votes
2
answers
5k
views
Protect access to static files with Apache & Session [closed]
/assets
- file1.mp3
- file2.mp3
...
- fileX.mp3
(millions of files)
So what I want to prevent is to access the content directly if the user is not logged in
like
http://domain.com/assets/file1....
1
vote
0
answers
727
views
Intermittent ProviderException: API failed due to error 'The data area passed to a system call is too small. '
Running IIS 7.5.7600.16385 on Windows Server 2008 R2 Enterprise (7601: SP1). One of our websites is set to globally log errors and we are seeing this every day or two. We're using an authorization ...
1
vote
0
answers
261
views
401 error when setting error responses to custom in iis
I was receiving 401 unauthorized access errors on my /account/login page
The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
0
votes
1
answer
290
views
Require user based on URL?
I'd like to require user user1 when the URL is /foo/user1/*, user user2 when the URL is /foo/user2/*, etc. Is it possible to do this?
For example, I'd like to do something like this:
AliasMatch ^/...
2
votes
1
answer
731
views
error in system log - Succeeded authorizing right
Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
0
votes
1
answer
107
views
IIS: selective access to folders
Site MyGreatCompany.com is served by an IIS webserver through SSL and basic authentication.
The root directory and all subdirectories should be accessible to every authenticated user, except for ...
1
vote
0
answers
130
views
Getting apache to use ldap group and filesystem group information
We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
18
votes
5
answers
38k
views
Kerberos Authentication for workstations not on domain
I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
1
vote
1
answer
147
views
Windows file server access control by device
I'm trying to build a system where access to certain resources (file shares) in Windows Server, is limited not only by the username (in a Active Directory domain), but also by the client machine. So ...
0
votes
4
answers
4k
views
Protect Files from unauthorized access
I have this very big problem I've been trying to solve for last few days with no success. I have some files which are class schedules, these are imported to the server from an external source (html ...
0
votes
2
answers
163
views
Can I have Authentication without authorization checks with apache 2.4?
When I do not provide a require directive, apache 2.4 seems to ignore authentication and just lets the user access the url.
Is there way to turn off Authorization checks and only worry about ...
4
votes
1
answer
2k
views
Apache LDAP auth: denied all time
There is my config (httpd 2.4):
<AuthnProviderAlias ldap zzzldap>
LDAPReferrals Off
AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)"
AuthLDAPBindDN "uid=zzz,ou=...
3
votes
1
answer
1k
views
IIS 6 Denies access to the default document
I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...