Questions tagged [http-basic-authentication]

Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

Password protecting an upstream server using Nginx

I've been searching for ages and whilst I can find lots of questions about proxying to a password-protected server using Nginx, I can't find any references to how to go about adding basic ...
0
votes
0answers
18 views

Apache 2.4: Using the same basic auth setup for multiple directories and locations

I have a Flask site setup on my Linux host running Apache 2.4. I use a <Directory> block to set baseline permissions for the filesystem, and a <Location> block to set custom privileges ...
1
vote
1answer
78 views

nginx basic_auth fails when moving outside location, to “root”

This works: location /someplace/ { auth_basic "Restricted Access"; auth_basic_user_file /etc/nginx/.htpasswd; } I go to /someplace/ and I get prompted for the user and password and can ...
0
votes
0answers
10 views

Anonymous access to default doc

We have a web site in IIS 8, that has a default document (index.asp) set. The entire site uses basic authentication except the index.asp page. This is working correctly, if I enter the domain with the ...
0
votes
0answers
13 views

Apache2, Bypassing authentication only between virtual host redirect

I have 2 virtual hosts on port 80. I use a dynamic dns service to direct them using the servername. It works fine going to each individually. What I am trying to accomplish not having to log into ...
1
vote
1answer
64 views

Is it possible to use a auth_basic password protection using linux users and passwords?

I'd like to password protect a website allowing only Linux users and their passwords stored in /etc/passwd and /etc/shaddow to login. Apache and nginx allow to restrict accessung by using a HTTP ...
3
votes
1answer
196 views

Can I use rate-limiting with HTTP basic authentication in Apache?

So I'm running a few popular web applications on my server. I want these to be reachable from any computer without creating too many vulnerabilities. I am using Apache 2.4.29 as my HTTP server. My ...
0
votes
1answer
249 views

Redirect incoming URL request between basic authentication and openidc in apache

Redirect incoming URL request between basic authentication and openidc. I want to categorize if the request for URL is coming from "wget/curl" then i need it to get authenticated with Basic ...
1
vote
0answers
293 views

curl not sending credentials during negotiation

We have a Jenkins server that uses Kerberos-SSO, with a fallback to Basic if SSO is not configured on the browser or using curl. When I use curl with the --negotiate argument, however, it doesn't send ...
0
votes
0answers
125 views

Apache authentication separation causing slowdown and multiple cred requests

<Location ~ ^[\/]{0,1}(favicon|git|jclouds|login|static)(.*)$> Require all granted Satisfy any </Location> <Location /crumbIssuer> AuthType Basic AuthName "Company ...
0
votes
0answers
119 views

.htaccess for multiple users - but only the first user in .htpasswd is accepted

I would like to configure .htaccess for multiple users and make some tests. But only the first user "tester1" is accepted in the prompt, for the other users the prompt appears endless again ...
0
votes
0answers
243 views

SSL Connection to MySQL database

I have read some answers here on serverfault that suggests it is not a good idea to open a MySQL port to the firewall, so I am trying to setup accordingly. Two options remain to connect to MySQL: SSH ...
1
vote
0answers
41 views

Apache2 Location directive and mod_rewrite

I have a website that is protected with basic authentication, except for one file, one folder, and one rewritten URL location. It looks like this: <Directory /var/www/mydomain.com> AuthType ...
0
votes
0answers
35 views

Require IP still asking for login

I set following vhost which I want to be accessible without login when called from within the network, but with login when called from outside. However, no matter how I change the Require IP, ...
0
votes
0answers
218 views

Basic Authentication not working on Apache 2.4.6 <Location …>

Just moved a site to new server, replaced the Allow.... directives with Require... Centos7, Apache 2.4.6 I have one location that I was using basic authentication and working fine, here is the ...
0
votes
1answer
386 views

How to disable basic authentication when using kerberos on nginx?

My task is to configure Kerberos authentication on nginx. The backend is django. The idea is that when a request is made to api, nginx should perform kerberos authentication. But in case the user is ...
0
votes
0answers
58 views

Apache BasicAuth Require valid-user not working, Require user test works

I am trying to Reverse Proxy an API and protect it with BasicAuth. I have done this successfully in the past on other servers running Apache, on this server, but with Shibboleth, and on nginx. I have ...
1
vote
0answers
47 views

Apache individual DocumentRoot per REMOTE_USER

How can I give authenticated users an individual view of the DocumentRoot? I would like to lock users in their own directory. When alice visits http://example.net/ she only sees /srv/www/alice/ and ...
1
vote
0answers
105 views

gitweb: Use Apache HTTP basic authentication for repository authentication

I use gitweb to serve remote Git repositories on a server running Apache2. Everything is setup with automatic redirection from HTTP to HTTPS and Basic password authentication (though this might change ...
1
vote
0answers
84 views

basic auth for all pages except one

I have a wordpress page and want to add basic auth to the page, except for the wordpress rest api (url: localhost/wp-json/xyz)! The main problem seems to be the redirect that happens in the standard ....
0
votes
1answer
173 views

mod security blocking basic authentication

I have a vps with centos 7, apache with mod_security and mod_evasive. I have a form in php with basic authentication. When I try to authenticate through the application (before activating mod security ...
2
votes
1answer
2k views

Disabling (Apache) Basic Authentication for OPTIONS requests

I have Apache basic authentication enabled on a test server and it works great: AuthType Basic AuthName "testing" AuthUserFile /home/www/.htpasswd Require user MyUser deny from all But it is also ...
2
votes
1answer
498 views

How do I get Nginx to work with subdirectories? [Nginx, Let's Encrypt, basic auth]

What I want: I want to install Mautic in a subfolder of my web root. I have a domain https://example.com and I want Mautic to be accessible from https://example.com/mautic. What I have: I have a ...
0
votes
1answer
677 views

Require basic auth for specific IPs in nginx

I have a whitelist of IPs for nginx, but in addition to this I want to require basic authentication for specific IP. For example, allow access for these IPs: 198.51.100.1 198.51.100.2 require basic ...
1
vote
1answer
217 views

Basic Auth in htaccess… only if in a specific subpath

We deploy the same code with the same .htaccess to Integration, Stage and Production. I want to require a basic auth on all but the Production server. They differ in the path, e.g. /data/stage/www/...
1
vote
1answer
303 views

Adding Basic Authentication to Nginx that contains existing Rewrite rules

I have images successfully served through a Nginx rewrite rule: # Rewrite part ============== location ~* "^/([a-z]{5})/([0-9]{5}).png$" { rewrite .* "/$1/image_handler.php?x=$2" last; } Now I ...
1
vote
0answers
777 views

nginx Basic Authentication configuration on windows can't find user in auth_basic_user_file

I'm trying to set up basic authentication on an nginx 1.14.2 server on a Windows 7 machine. Here's my test configuration: worker_processes 1; events { worker_connections 1024; } http { ...
1
vote
1answer
122 views

Nginx. White-list top filter and no auth white-list and basic auth simultaneously

Can't find a way to build the next scheme. A whitelist of IPs ever allowed. Ban for most of the net. A sublist of whitelisted IPs allowed to bypass auth. A part of a local net, for example. Basic ...
0
votes
1answer
4k views

How can I access an environment variable set by a rewrite rule in an expression?

I am working on a Symfony 3.4 application which has public and private parts. However, I am currently setting up a staging system for this application which should only be accessed by authorized users,...
0
votes
2answers
405 views

restrict access to subdirectory in apahe, leaving parent open

I am setting a webdav on apache2.4 and I need for my top directory /webdav to be freely open and for a sub directory like /webdav/projects/secretproject to be protected with a password. My curremt ...
0
votes
0answers
157 views

How to secure an insecure device on an untrusted network, via a web proxy?

Here's my situation: I've got a network-based device with a web-page interface, and the developers of this device, in their wisdom, did not include any kind of access-control or encryption for the ...
0
votes
1answer
83 views

Apache queries mariadb database -> how to log queries?

I got a apache2 vhost-configuration with BasicAuth. With the AuthDBDUserPWQery directive I'm checking a mariadb in the background, if the user-pw-combination exists. For troubleshooting I want to see ...
-1
votes
3answers
1k views

Why apache need authorization for url with username and password?

I build basic authorization in apache.Only one line in /var/www/html/remote.html. <p>it is a test </p> Now to verify the username and password with curl. curl -u xxxx:xxxx -v http://...
0
votes
1answer
440 views

htaccess + htpasswd: how to prevent executing php scripts without specifying a password

My site is managed by Apache on Linux. In the base directory, there is the sub folder fill. In this subfolder, there is a php script: do.php Here is my .htaccess: AuthType Basic AuthName 'Welcome ...
0
votes
0answers
26 views

Authenticate app on server

I did a website that is only allowed to people whose IP are whitelisted. Unfortunately for me, my client wants me to create an app. What I did, and it works since I've implemented a Basic Auth to ...
12
votes
1answer
31k views

“server certificate verification OK” but “ALPN, server did not agree to a protocol”

I am making a curl call curl -v ... https://... and the verbose output contains .... * ALPN, offering http/1.1 * SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256 * server certificate ...
1
vote
2answers
1k views

Nginx: Basic_auth is set up and working, but all protected pages return 404

I've set up basic auth on some pages on my site. Server logs are showing that the authentication is working, however, once I'm logged in all the protected pages return 404 errors - and not my actual ...
0
votes
3answers
1k views

How to grant access to sublocations when root location is protected by htauth in Apache 2.4

I have the following site configuration <Location /> AuthUserFile /path/.htpasswd AuthName "Restricted Area" AuthType Basic require valid-user </Location> which restricts ...
0
votes
1answer
167 views

Multi-User Server ; Basic Authentication ; User 1 Can Access User 2s Folder After Logging In To His Own and Backtracking

I have an Apache 2.4 server running with PHP and MySQL included. I have pages that are restricted (or are supposed to be) to certain users only. Each user has their own restricted page and must supply ...
4
votes
3answers
7k views

Configure Basic Authentication on Azure's App Service

For different reasons I'm using Azure's App Service to serve static files. I would like to secure this access by Http Basic Authentication which is enough for my purposes. How can I do that? I tried ...
0
votes
1answer
2k views

Apache 2.4: Set user dependent environment variable

I just wondered if it's possible to set an environment variable depending on the basic authentication user. I tried the following versions, but none of them work (obviously none of them is documented ...
0
votes
0answers
258 views

Apache Basic authentication using .htaccess file doesnt work on files in directory

I need to protect files within a directory, I used .htaccess file as below and put it in the directory : AuthType Basic AuthName "Authentication Required" AuthUserFile "c:\passwords\.htpasswd" ...
1
vote
0answers
434 views

Adding exception to nginx HTTP basic authentication based on being on the local network

I'm running an installation of a webapp running on a self-hosted server which is on my main network along with all our company PCs and a couple of other servers. We've decided we want to add HTTP ...
0
votes
1answer
4k views

Apache basic auth with LDAP and reverse proxy

So im using Apache 2.4, I want to set up a basic auth connected with LDAP and then, reverse proxy. The idea is to secure a webpage with this authorization. So here is my config: Order deny,allow ...
1
vote
0answers
326 views

Apache - LDAP basic auth checked but not required

I need Apache, configured as Proxy pass, to check the Authorization: Basic ... header against an LDAP server, setting a custom header if credentials exist and are correct but passing the request to ...
2
votes
1answer
1k views

Combine apache auth providers of different types with basic auth only if proactively provided by client

I'd like to be able to have a path on an apache server (2.4.18+ on ub16) that primarily authenticates using SAML (using the mod_auth_mellon plugin) for interactive use, but also supports having the ...
2
votes
1answer
6k views

how to correctly configure Httpd basic auth for pass through proxy

I have been asked to set up an basic auth prompt in front of our Jira server. I am using a proxypassthrough on httpd to allow access to jira in the first place. When ever I try to connect I am ...
0
votes
1answer
2k views

HA Proxy: Omit basic auth for specific URIs

Given a userlist such... userlist UsersAuth group admin users foo user foo insecure-password bar And a backend containing this... acl AuthOkay_Web http_auth(UsersAuth) http-request auth realm ...
0
votes
0answers
350 views

Is there a way to detect server ip in nginx configuration file?

I'm using nginx/1.12.0 and tried $server_addr directive but it gives me an error: nginx: [emerg] invalid parameter "$server_addr" in /etc/nginx/sites-enabled/conf Here is my code nginx conf ...
2
votes
1answer
797 views

Pass basic authentication credentials in .htaccess rewrite to protected folder

I have two folders, F1 and F2, under my public folder, each with an .htaccess file in them. F1 is protected by basic auth in .htaccess, like this: AuthName "Restricted Area" AuthType Basic ...

1
2 3 4 5