Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [http-basic-authentication]

0
votes
0answers
10 views

About the location block on apache server for gogs with basic authentication

I use apache Apache/2.4.25. I use its reverse proxy for gogs which is a git repository docker container image. The important is that I use basic authentication. I am able to visit web site and to use ...
1
vote
1answer
40 views

Nginx. White-list top filter and no auth white-list and basic auth simultaneously

Can't find a way to build the next scheme. A whitelist of IPs ever allowed. Ban for most of the net. A sublist of whitelisted IPs allowed to bypass auth. A part of a local net, for example. Basic ...
0
votes
0answers
31 views

How to fallback to auth_basic from auth_ldap (or any other auth model) in nginx?

I have an application served by nginx which supports only http basic authentication. I am adding ldap authentication to it using the nginx-auth-ldap nginx module. So, the configuration looks like: ...
0
votes
1answer
36 views

How can I access an environment variable set by a rewrite rule in an expression?

I am working on a Symfony 3.4 application which has public and private parts. However, I am currently setting up a staging system for this application which should only be accessed by authorized users,...
0
votes
0answers
10 views

tomcat server user login denied instead of providing correct passsword username

I am trying to implement basic authentication in tomcat server (version 8.5.x). Here is what I have done the changes. tomcat-users.xsd <xs:schema xmlns="http://www.w3.org/2001/XMLSchema" ...
-1
votes
0answers
26 views

HTTP-Basic authentification policy

I am using a nginx-reverse proxy for https to http and http-basic-authentification. The login will be monitored by fail2ban and works fine for me but I would like to have a passwort-policy for ....
0
votes
2answers
50 views

restrict access to subdirectory in apahe, leaving parent open

I am setting a webdav on apache2.4 and I need for my top directory /webdav to be freely open and for a sub directory like /webdav/projects/secretproject to be protected with a password. My curremt ...
0
votes
0answers
62 views

Basic Auth header params does not exist depending on url

Forgive me ahead of time for my lack of knowledge on this topic When I send a basic auth request (via header) to my url https://www.mywebsite.com, the PHP server variables such as "PHP_AUTH_PW" and "...
0
votes
0answers
40 views

How to secure an insecure device on an untrusted network, via a web proxy?

Here's my situation: I've got a network-based device with a web-page interface, and the developers of this device, in their wisdom, did not include any kind of access-control or encryption for the ...
0
votes
1answer
50 views

Apache queries mariadb database -> how to log queries?

I got a apache2 vhost-configuration with BasicAuth. With the AuthDBDUserPWQery directive I'm checking a mariadb in the background, if the user-pw-combination exists. For troubleshooting I want to see ...
-1
votes
3answers
43 views

Why apache need authorization for url with username and password?

I build basic authorization in apache.Only one line in /var/www/html/remote.html. <p>it is a test </p> Now to verify the username and password with curl. curl -u xxxx:xxxx -v http://...
0
votes
1answer
64 views

htaccess + htpasswd: how to prevent executing php scripts without specifying a password

My site is managed by Apache on Linux. In the base directory, there is the sub folder fill. In this subfolder, there is a php script: do.php Here is my .htaccess: AuthType Basic AuthName 'Welcome ...
0
votes
0answers
22 views

Authenticate app on server

I did a website that is only allowed to people whose IP are whitelisted. Unfortunately for me, my client wants me to create an app. What I did, and it works since I've implemented a Basic Auth to ...
3
votes
1answer
3k views

“server certificate verification OK” but “ALPN, server did not agree to a protocol”

I am making a curl call curl -v ... https://... and the verbose output contains .... * ALPN, offering http/1.1 * SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256 * server certificate ...
0
votes
1answer
222 views

Nginx: Basic_auth is set up and working, but all protected pages return 404

I've set up basic auth on some pages on my site. Server logs are showing that the authentication is working, however, once I'm logged in all the protected pages return 404 errors - and not my actual ...
0
votes
0answers
201 views

unauthorized bundle.js on nginx with basic auth

I'm configuring basic auth on my nginx to protect my reactjs app, I'm inserting my password and from chrome network tab I see that the page is being loaded, and several dependencies (bootstrap, jquery ...
0
votes
3answers
157 views

How to grant access to sublocations when root location is protected by htauth in Apache 2.4

I have the following site configuration <Location /> AuthUserFile /path/.htpasswd AuthName "Restricted Area" AuthType Basic require valid-user </Location> which restricts ...
0
votes
1answer
49 views

Multi-User Server ; Basic Authentication ; User 1 Can Access User 2s Folder After Logging In To His Own and Backtracking

I have an Apache 2.4 server running with PHP and MySQL included. I have pages that are restricted (or are supposed to be) to certain users only. Each user has their own restricted page and must supply ...
3
votes
2answers
2k views

Configure Basic Authentication on Azure's App Service

For different reasons I'm using Azure's App Service to serve static files. I would like to secure this access by Http Basic Authentication which is enough for my purposes. How can I do that? I tried ...
0
votes
0answers
47 views

catch unauthenticated user and rewrite request

My IIS site ("https://example.com") is protected by SSL and basic authentication. Requests are reverse-proxied using Isapi-rewrite to the internal server "haus.lan" with the following rule: ...
0
votes
1answer
503 views

Apache 2.4: Set user dependent environment variable

I just wondered if it's possible to set an environment variable depending on the basic authentication user. I tried the following versions, but none of them work (obviously none of them is documented ...
0
votes
0answers
193 views

Requests on my nginx server return error 419 despite allowing IP

I'm developing a website interacting with a REST API, which is using webhooks so that the API can POST a request to my own platform once it finished processing. The website being under development, I ...
0
votes
0answers
201 views

Apache Basic authentication using .htaccess file doesnt work on files in directory

I need to protect files within a directory, I used .htaccess file as below and put it in the directory : AuthType Basic AuthName "Authentication Required" AuthUserFile "c:\passwords\.htpasswd" ...
1
vote
0answers
197 views

Adding exception to nginx HTTP basic authentication based on being on the local network

I'm running an installation of a webapp running on a self-hosted server which is on my main network along with all our company PCs and a couple of other servers. We've decided we want to add HTTP ...
0
votes
1answer
2k views

Apache basic auth with LDAP and reverse proxy

So im using Apache 2.4, I want to set up a basic auth connected with LDAP and then, reverse proxy. The idea is to secure a webpage with this authorization. So here is my config: Order deny,allow ...
1
vote
0answers
207 views

Apache - LDAP basic auth checked but not required

I need Apache, configured as Proxy pass, to check the Authorization: Basic ... header against an LDAP server, setting a custom header if credentials exist and are correct but passing the request to ...
0
votes
1answer
550 views

Combine apache auth providers of different types with basic auth only if proactively provided by client

I'd like to be able to have a path on an apache server (2.4.18+ on ub16) that primarily authenticates using SAML (using the mod_auth_mellon plugin) for interactive use, but also supports having the ...
0
votes
1answer
932 views

how to correctly configure Httpd basic auth for pass through proxy

I have been asked to set up an basic auth prompt in front of our Jira server. I am using a proxypassthrough on httpd to allow access to jira in the first place. When ever I try to connect I am ...
0
votes
1answer
850 views

HA Proxy: Omit basic auth for specific URIs

Given a userlist such... userlist UsersAuth group admin users foo user foo insecure-password bar And a backend containing this... acl AuthOkay_Web http_auth(UsersAuth) http-request auth realm ...
0
votes
0answers
139 views

Is there a way to detect server ip in nginx configuration file?

I'm using nginx/1.12.0 and tried $server_addr directive but it gives me an error: nginx: [emerg] invalid parameter "$server_addr" in /etc/nginx/sites-enabled/conf Here is my code nginx conf ...
2
votes
1answer
514 views

Pass basic authentication credentials in .htaccess rewrite to protected folder

I have two folders, F1 and F2, under my public folder, each with an .htaccess file in them. F1 is protected by basic auth in .htaccess, like this: AuthName "Restricted Area" AuthType Basic ...
0
votes
1answer
474 views

Is HTTP basic auth enabled on Google Compute Engine instances?

I would like to use .htaccess files to password protect certain directories of my website, which is running on a Google Compute Engine Debian instance with LAMP installed. However, GCE appears to ...
3
votes
1answer
1k views

Nginx location blocks don't apply to .php files inside them?

So to help prevent brute force attacks against my phpmyadmin install I've configured nginx to require HTTP Basic Auth (extra username and password) and then the requests need to come from a ...
0
votes
1answer
47 views

Initialise (and manage) basic auth database on AWS using htdbm

I wish to protect a binary download on an AWS using basic authentication. In the short term and as proof of concept I can use a password file. However, the number of users is likely to grow large ...
1
vote
1answer
2k views

How to get nginx to properly proxy (incl. basic auth creds set in the headers) an Apache?

Edit: If you have an idea on how to improve the question or which details are missing from it, please do leave a comment. Expected Outcome: I am trying to deploy nginx as a reverse proxy to let me ...
1
vote
1answer
383 views

basic authentication failing with mod-proxy-fcgi and php7.0-fpm

Ubuntu 16.04 LTS running on AWS instance. Apache 2.4.18 / PHP7.0-fpm Problem is with basic-auth. I'm trying to pw-protect /var/www/html/admin//. I find that all non-php files are protected - but ....
1
vote
0answers
2k views

Setting up Apache 2.4 reverse proxy with SSL and authentication both on proxy AND backend

Goal: a client authenticates against apache 2.4 reverse proxy with OTP (AuthType basic), is then forwarded to the backend server (apache 2.2) where further individual authentication is required (...
0
votes
1answer
868 views

HAProxy is it possible to force basic auth then select AD server based on user IP?

Here is my context: I have a web application (using HTTPS) which needs users to be authenticated prior to contacting it The application expects an HTTP header to be set (let's name it HEADER) There ...
1
vote
2answers
597 views

Can HAProxy load a userlist from a file?

I can't seem to see anything in the documentation, but this seems like an obvious feature. I want to supply a file containing a list of users for Basic Authentication. I don't want to edit the HAProxy ...
-1
votes
2answers
2k views

Apache 2.4 http auth doesn't prompt credentials

I configured a vhost with http authentication. ServerAdmin info@example.com ServerName www.example.com DocumentRoot /home/webmaster/www.example.com/ <Directory "/home/...
0
votes
1answer
316 views

Improve performance of Nginx with http auth and a lot of requests

I've got an PHP side running via fpm behind an Nginx server. For $reasons we need an http base auth in front of that setup, so I ended up in a setup like: #… server section …. auth_basic "...
0
votes
1answer
471 views

Getting 401.2 error with IIS basic authentication instead of a password prompt

When I deploy a web site locally in IIS on Windows 7 with a section in web.config allowing a single local user to authenticate, it works fine. <authorization> <allow users=".\test01" /&...
0
votes
1answer
943 views

Basic Auth apache 2.2 bypass IP

how can set the basic auth of apache 2.2 to bypass IP? I have follow this wiki http://wiki.apache.org/httpd/BypassAuthenticationOrAuthorizationRequirements , but ask always a password, also to IP ...
0
votes
1answer
1k views

Nginx auth basic not working with rewrite

I need to protect one directory with the basic auth and rewrite all urls inside this directory only. I have the following config: location /admin/ { auth_basic "Secure area"; ...
1
vote
2answers
1k views

IIS 8.5 Basic authentication not working - internal error 500.19

I have Basic Auth enabled for the specific folder and anonymous disabled. I also have created users, however I get a "The page cannot be displayed because an internal server error has occurred." ...
0
votes
0answers
59 views

Why is this nginx location section causing my php file to download?

This is my basic configuration for a wordpress site. server { root /var/www/site; listen *****; server_name *****; include basics.conf; } As soon as I add the ...
0
votes
0answers
58 views

Secure all access to apache with basic authentication - directories and virtual hosts

I want to use the apache server as web server and reverse proxy to several web-services. But i also want use apache as an authentication gateway. I know how to protect specific directories with ....
1
vote
1answer
304 views

nginx auth fail2ban current connection behind cloudflare

I've noticed that fail2bans iptables rules only works on *new connections meaning as long as someone continues to hammer a login (basic auth or wordpress etc. the existing connection continues to ...
2
votes
1answer
1k views

Is it possible to setup basic authentication for 1 specific domain binding only?

I just want to enable basic auth for 1 domain binding only and leave the rest public accessible. Is this possible with IIS?
3
votes
1answer
2k views

Apache up in flames (AH00025). How to fix?

I was trying to get Apache 2.4.10 to do basic authentication (under HTTPS) as specified in a .htaccess file. I changed one directory's settings to AllowOverride all, and it started serving up nothing ...