Questions tagged [authorization]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
4k views

Difference between DOMAIN\username and User Logon Name causing problems with .NET Authorization Rule

I am currently having trouble with some IIS .NET Authorization Rules which are restricting access to an site based on the AD Group Membership. The groups are configured as Global Groups, with names ...
Beast-a-tron's user avatar
0 votes
1 answer
212 views

Authorization required to install jzos batch launcher

We are trying to install the JZOS Batch Launcher. The function consists of three pieces: a load module that must be put into a z/OS PDSE, a sample start proc that can be tailored and put into an ...
kushwah_a's user avatar
0 votes
0 answers
399 views

Authorize users on a reverse proxy and redirect them to two different addresses if they have/do not have permission?

I need to create a "maintenance mode" reverse proxy that can be easily toggled between "open" (allow all connections) to "maintenance" (only allow connections from AD users in a specific security ...
David Cruz's user avatar
3 votes
1 answer
9k views

nginx auth_request how to return backend status code

when the backend proxy used in auth_request returns an error code different from 401 or 403, nginx is returning a 500 error code. The ngx_http_auth_request_module module (1.5.4+) implements client ...
jobou's user avatar
  • 193
6 votes
1 answer
2k views

Started task in z/OS lacks RACF privileges

I wish to test a JDBC server implementation running under z/OS. The usual approach would be to define a JCL procedure and run this as a started task. The started task requires a user ID under which it ...
Achim Schmitz's user avatar
9 votes
2 answers
12k views

Admin password of MariaDb doesn't seem to work

I've just installed MariaDb on a fresh Ubuntu Gnome and ran mysql_secure_installation afterwards where I set a decent admin password, removed the anonymous user etc. Afterwards I realized some ...
suamikim's user avatar
  • 193
5 votes
1 answer
8k views

Passing Authorization Basic Headers Along in Proxy

I am currently trying to get a reverse/forward proxy to pass along the authorization headers to the target server. How would I go abou this? I have already looked at the below sources, and one of the ...
HSchmale's user avatar
  • 223
0 votes
0 answers
406 views

Configure auth with MySQL in Apache 2.22

I've got a raspberry pi 1 which serves web pages using apache 2.22. I've done some research and I found a way to secure "pages" using a database (mysql in this case). I've found this little guide to ...
joninx's user avatar
  • 129
0 votes
0 answers
350 views

IIS7 Digest authentication credentials forgotten between pages

I'm able to authenticate using AD credentials and the requested page loads fine, but IIS is re-requesting authentication for every page change or page refresh. If this is normal behavior for this ...
pierce.jason's user avatar
2 votes
0 answers
164 views

Directly accessing files through reverse proxy

With my web app I've got to provide files to third party apis that unfortunately only accept file names. The files can be located anywhere, local or on network shares. The files are actually stored on ...
Knack's user avatar
  • 121
0 votes
3 answers
330 views

Is there a way to allow an apache2 logged in user to access a specific directory dynamically?

This is surprisingly a very difficult problem to solve. I want to allow my Linux users to login to Apache2 and have access to their own directory(ies) only. I've managed to get Linux users to ...
CaesarS's user avatar
  • 111
1 vote
1 answer
2k views

TACACS+ configuration: how to receive priv-lvl value?

I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL). I tried with ...
tomekceszke's user avatar
1 vote
1 answer
969 views

Active directory authentication and authorization for an application

Currently all our applications are web based and our authentication and authorization mechanism is always through the database. eg database logins and access controls defined at database. However now ...
JinPangPang's user avatar
1 vote
0 answers
139 views

Nginx - How to authorize access to repositories using python script

I have set up a local Git server using Nginx ( in Ubuntu ) ,Now I want to authorize users using external python script , which should authorize them against predefined database . AFAIK, I have to ...
Ahmed T. Ali's user avatar
0 votes
0 answers
96 views

Microsoft AD DS group membership verification when authorizing user

Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
Mike's user avatar
  • 1,315
5 votes
0 answers
970 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
Chris's user avatar
  • 193
3 votes
0 answers
51 views

Windows Server - Protect websites with AD user

My question is a bit tricky to explain :) We have ASP.NET websites running on Windows Server 2012. Some websites use SqlServer authentication, others use Windows authentication, some don't have any ...
šljaker's user avatar
  • 129
1 vote
1 answer
78 views

Subversion Authorization specifics

We have a group of 300 developers. All of them will have rw access to one of the repos, but a small group of them - let's call them contractors - should not be allowed to read any other repo but that ...
MoBarger's user avatar
0 votes
1 answer
2k views

how to translate an Active Directory group into a NIS netgroup?

The goal is to be able to add + : @DL-MyCompany-MyTeam : ALL to /etc/security/access.conf and have it work as expected. This is my sssd.conf: [domain/default] cache_credentials = True [sssd] ...
rone's user avatar
  • 13
1 vote
1 answer
2k views

nginx location match issue auth_basic

I have this configuration : location / { root /etc/nginx/euchet; } location /app/ { proxy_pass http://172.16.184.2:8080; proxy_redirect off; proxy_set_header Host $host; ...
Nikolay Yakubitskiy's user avatar
0 votes
1 answer
2k views

How to restrict access to a child SVN directory only?

I'm trying to configure permissions for an SVN repository accessed through Apache 2. What I want is to let anyone access the root directory, while restricting to authenticated users a child directory. ...
Arseni Mourzenko's user avatar
0 votes
0 answers
89 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
micgeronimo's user avatar
1 vote
1 answer
2k views

WordPress admin password protection not working on Nginx server

I am totally confused with Nginx server password protection. It does not work as we want. This is my Nginx website configuration block. server { listen 80; server_name example.com; ...
Robert hue's user avatar
3 votes
1 answer
4k views

Using Windows Server, how do I schedule an hourly task that will call a URL WITH an authorization header?

I need to schedule a task that will call a given url hourly. The URL doesn't return anything so it is fairly simple HOWEVER this URL requires an authorization header: Authorization: Basic {SOME AUTH ...
Matt Cashatt's user avatar
0 votes
1 answer
2k views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
Ignacio Verona's user avatar
1 vote
1 answer
183 views

Authorizing users to SSH into machine - where to configure?

Ubuntu Trusty here. I'm having some trouble deciding where in the system I should configure which users are to be allowed to ssh into the machine, and which keys they're allowed to use. I've ...
Alexandr Kurilin's user avatar
-1 votes
1 answer
4k views

The authenticity of host “host” can't be established [closed]

I'm running a web app on a Linux server which connects to other servers. When I run the project on my Play framework on loclhost it runs fluently. When I run it on my Linux server I get the above ...
itaied's user avatar
  • 123
2 votes
1 answer
3k views

Sudoers NOPASSWD how to grant access to a specific ln command

In /etc/sudoers I need to grant passwordless sudo for this command: /usr/bin/env sudo ln -nfs /home/deployer/apps/myapp_staging/shared/config/nginx.conf /etc/nginx/sites-enabled/ to the deployer ...
Darme's user avatar
  • 253
2 votes
1 answer
404 views

Apache Authorization for multiple pages for different users

I have a website that I has common pages as well as restricted pages. I would like to restrict each page for each user, such that my cong /var/www/application/user1/user1.html /var/www/application/...
Prashanth Sundaram's user avatar
2 votes
1 answer
4k views

Apache 2.4: Public Subdirectory with .htaccess

I'm currently upgrading to Apache 2.4. What puzzles me right now is how to create a public subdirectory using .htaccess only. The outer directory is protected by AuthType Basic Previously, the ...
Daniel B's user avatar
  • 173
5 votes
1 answer
119 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
MvG's user avatar
  • 1,813
0 votes
0 answers
657 views

Multiple CAS servers with Microsoft Exchange and selective authorization

I have a Microsoft Exchange 2010 organization within one Microsoft Windows domain and I have users accessing it through OWA. For simplicity lets say I currently have one CAS server (CAS 1) which is ...
John Wilcox's user avatar
15 votes
2 answers
10k views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would like it to have centralized control of user accounts (at least, I ...
einpoklum's user avatar
  • 1,722
2 votes
1 answer
9k views

Enable IIS directory browsing for specific user or group

At home, I have a small server running on Windows Server 2012 and IIS8 (no AD). I want some of the users on my server to be able to access a shared file directory so they can download it via https. I ...
fero's user avatar
  • 123
0 votes
1 answer
315 views

Windows 2008 server not authorizing vpn traffic

We are struggling to setup windows 2008 server vpn. We have managed to establish a connection to the server from the client pc but cant browse to any url on the same server. We keep getting an ...
CodeFriendly's user avatar
4 votes
1 answer
229 views

SVNParentPath directory authorization

The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second ...
James's user avatar
  • 203
2 votes
2 answers
3k views

ssh: allow all users for one IP, and restrict to one user for public IP

I have a server on a VPN. This server has a public address and has a gitlab instance on it. I'd like to be able to connect with any ssh user from the VPN address, but restrict the access to the git ...
greg0ire's user avatar
  • 316
0 votes
2 answers
5k views

Protect access to static files with Apache & Session [closed]

/assets - file1.mp3 - file2.mp3 ... - fileX.mp3 (millions of files) So what I want to prevent is to access the content directly if the user is not logged in like http://domain.com/assets/file1....
DmitrySemenov's user avatar
1 vote
0 answers
727 views

Intermittent ProviderException: API failed due to error 'The data area passed to a system call is too small. '

Running IIS 7.5.7600.16385 on Windows Server 2008 R2 Enterprise (7601: SP1). One of our websites is set to globally log errors and we are seeing this every day or two. We're using an authorization ...
Brian's user avatar
  • 111
1 vote
0 answers
261 views

401 error when setting error responses to custom in iis

I was receiving 401 unauthorized access errors on my /account/login page The controller contains a [authorize] attribute while all the actions have [allowanonymous]. I have forms and anon ...
Graham.Fraser's user avatar
0 votes
1 answer
290 views

Require user based on URL?

I'd like to require user user1 when the URL is /foo/user1/*, user user2 when the URL is /foo/user2/*, etc. Is it possible to do this? For example, I'd like to do something like this: AliasMatch ^/...
Richard Hansen's user avatar
2 votes
1 answer
731 views

error in system log - Succeeded authorizing right

Just installed a fresh 10.8.2 server running contacts, DNS, Mail, Open Dir, Profile Manager and Websites. The machine is primerally used for mail which is all fine and as far as i can see there are no ...
Matthew's user avatar
  • 21
0 votes
1 answer
107 views

IIS: selective access to folders

Site MyGreatCompany.com is served by an IIS webserver through SSL and basic authentication. The root directory and all subdirectories should be accessible to every authenticated user, except for ...
aag's user avatar
  • 407
1 vote
0 answers
130 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
Angelo's user avatar
  • 132
18 votes
5 answers
38k views

Kerberos Authentication for workstations not on domain

I have a base understanding of how Kerberos works in an Active Directory environment and the methods it uses to authenticate users and workstations onto the network, but my question is.. since ...
Eric's user avatar
  • 185
1 vote
1 answer
147 views

Windows file server access control by device

I'm trying to build a system where access to certain resources (file shares) in Windows Server, is limited not only by the username (in a Active Directory domain), but also by the client machine. So ...
Ori Shavit's user avatar
0 votes
4 answers
4k views

Protect Files from unauthorized access

I have this very big problem I've been trying to solve for last few days with no success. I have some files which are class schedules, these are imported to the server from an external source (html ...
user avatar
0 votes
2 answers
163 views

Can I have Authentication without authorization checks with apache 2.4?

When I do not provide a require directive, apache 2.4 seems to ignore authentication and just lets the user access the url. Is there way to turn off Authorization checks and only worry about ...
Xylene's user avatar
  • 1
4 votes
1 answer
2k views

Apache LDAP auth: denied all time

There is my config (httpd 2.4): <AuthnProviderAlias ldap zzzldap> LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN "uid=zzz,ou=...
Dee's user avatar
  • 81
3 votes
1 answer
1k views

IIS 6 Denies access to the default document

I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as ...
yoozer8's user avatar
  • 322