Questions tagged [http-basic-authentication]

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

Apache BasicAuth Require valid-user not working, Require user test works

I am trying to Reverse Proxy an API and protect it with BasicAuth. I have done this successfully in the past on other servers running Apache, on this server, but with Shibboleth, and on nginx. I have ...
0
votes
0answers
12 views

HTTP-Basic Auth login loop Cpanel WHM [closed]

I have a problem to login with http-basic auth. I have loop, and dialog box with user and password are showing always when I'm trying to login. Username and password are correct. I'm using fresh ...
0
votes
0answers
44 views

HTTPS with Basic authentication in Header

I'm trying to setup a forward proxy to access certain endpoints on Remote server which require https with basic authentication in header. A(Application server) ---> Forward proxy (B) ----> Remote ...
0
votes
0answers
53 views

(Solved) Apache2 Basic Auth on sub-directory not prompting for authentication

TL;DR: The custom error pages of ISPConfig were the reason for those redirects. We have an Apache 2.4 installation in an ISPConfig environment. Every vhost has a directory for administration ...
0
votes
0answers
66 views

haproxy does not redirect and base auth semms to add unknown header

I set up a small Raspberry Pi based server for basic services. I want to make it accesible to different users, who shall have different acces rights. Everything will be based on docker. In a basic ...
0
votes
0answers
31 views

Apache individual DocumentRoot per REMOTE_USER

How can I give authenticated users an individual view of the DocumentRoot? I would like to lock users in their own directory. When alice visits http://example.net/ she only sees /srv/www/alice/ and ...
1
vote
0answers
45 views

gitweb: Use Apache HTTP basic authentication for repository authentication

I use gitweb to serve remote Git repositories on a server running Apache2. Everything is setup with automatic redirection from HTTP to HTTPS and Basic password authentication (though this might change ...
0
votes
0answers
122 views

Apache Reverse Proxy to Single vmware ESXi authentication problems

I have a Single Vmware ESXi host in a private Network which I have exposed the management into the public Internet via an Apache Reverse Proxy configuration. In order to make it harder to random ...
1
vote
0answers
59 views

basic auth for all pages except one

I have a wordpress page and want to add basic auth to the page, except for the wordpress rest api (url: localhost/wp-json/xyz)! The main problem seems to be the redirect that happens in the standard ....
0
votes
0answers
23 views

nginx auth: user1 access specific subfolder of user2

I have git repositories and until now I just had one user for / including all subdirectories. I want to allow one repository to a friend but don't allow him the other repos. Tried inside server {}:...
0
votes
1answer
135 views

mod security blocking basic authentication

I have a vps with centos 7, apache with mod_security and mod_evasive. I have a form in php with basic authentication. When I try to authenticate through the application (before activating mod security ...
2
votes
1answer
634 views

Disabling (Apache) Basic Authentication for OPTIONS requests

I have Apache basic authentication enabled on a test server and it works great: AuthType Basic AuthName "testing" AuthUserFile /home/www/.htpasswd Require user MyUser deny from all But it is also ...
2
votes
1answer
329 views

How do I get Nginx to work with subdirectories? [Nginx, Let's Encrypt, basic auth]

What I want: I want to install Mautic in a subfolder of my web root. I have a domain https://example.com and I want Mautic to be accessible from https://example.com/mautic. What I have: I have a ...
0
votes
1answer
363 views

Require basic auth for specific IPs in nginx

I have a whitelist of IPs for nginx, but in addition to this I want to require basic authentication for specific IP. For example, allow access for these IPs: 198.51.100.1 198.51.100.2 require basic ...
1
vote
1answer
148 views

Basic Auth in htaccess… only if in a specific subpath

We deploy the same code with the same .htaccess to Integration, Stage and Production. I want to require a basic auth on all but the Production server. They differ in the path, e.g. /data/stage/www/...
1
vote
1answer
229 views

Adding Basic Authentication to Nginx that contains existing Rewrite rules

I have images successfully served through a Nginx rewrite rule: # Rewrite part ============== location ~* "^/([a-z]{5})/([0-9]{5}).png$" { rewrite .* "/$1/image_handler.php?x=$2" last; } Now I ...
1
vote
0answers
505 views

nginx Basic Authentication configuration on windows can't find user in auth_basic_user_file

I'm trying to set up basic authentication on an nginx 1.14.2 server on a Windows 7 machine. Here's my test configuration: worker_processes 1; events { worker_connections 1024; } http { ...
1
vote
1answer
90 views

Nginx. White-list top filter and no auth white-list and basic auth simultaneously

Can't find a way to build the next scheme. A whitelist of IPs ever allowed. Ban for most of the net. A sublist of whitelisted IPs allowed to bypass auth. A part of a local net, for example. Basic ...
0
votes
1answer
2k views

How can I access an environment variable set by a rewrite rule in an expression?

I am working on a Symfony 3.4 application which has public and private parts. However, I am currently setting up a staging system for this application which should only be accessed by authorized users,...
0
votes
2answers
209 views

restrict access to subdirectory in apahe, leaving parent open

I am setting a webdav on apache2.4 and I need for my top directory /webdav to be freely open and for a sub directory like /webdav/projects/secretproject to be protected with a password. My curremt ...
0
votes
0answers
85 views

How to secure an insecure device on an untrusted network, via a web proxy?

Here's my situation: I've got a network-based device with a web-page interface, and the developers of this device, in their wisdom, did not include any kind of access-control or encryption for the ...
0
votes
1answer
71 views

Apache queries mariadb database -> how to log queries?

I got a apache2 vhost-configuration with BasicAuth. With the AuthDBDUserPWQery directive I'm checking a mariadb in the background, if the user-pw-combination exists. For troubleshooting I want to see ...
-1
votes
3answers
719 views

Why apache need authorization for url with username and password?

I build basic authorization in apache.Only one line in /var/www/html/remote.html. <p>it is a test </p> Now to verify the username and password with curl. curl -u xxxx:xxxx -v http://...
0
votes
1answer
269 views

htaccess + htpasswd: how to prevent executing php scripts without specifying a password

My site is managed by Apache on Linux. In the base directory, there is the sub folder fill. In this subfolder, there is a php script: do.php Here is my .htaccess: AuthType Basic AuthName 'Welcome ...
0
votes
0answers
26 views

Authenticate app on server

I did a website that is only allowed to people whose IP are whitelisted. Unfortunately for me, my client wants me to create an app. What I did, and it works since I've implemented a Basic Auth to ...
11
votes
1answer
18k views

“server certificate verification OK” but “ALPN, server did not agree to a protocol”

I am making a curl call curl -v ... https://... and the verbose output contains .... * ALPN, offering http/1.1 * SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256 * server certificate ...
0
votes
1answer
962 views

Nginx: Basic_auth is set up and working, but all protected pages return 404

I've set up basic auth on some pages on my site. Server logs are showing that the authentication is working, however, once I'm logged in all the protected pages return 404 errors - and not my actual ...
0
votes
3answers
701 views

How to grant access to sublocations when root location is protected by htauth in Apache 2.4

I have the following site configuration <Location /> AuthUserFile /path/.htpasswd AuthName "Restricted Area" AuthType Basic require valid-user </Location> which restricts ...
0
votes
1answer
116 views

Multi-User Server ; Basic Authentication ; User 1 Can Access User 2s Folder After Logging In To His Own and Backtracking

I have an Apache 2.4 server running with PHP and MySQL included. I have pages that are restricted (or are supposed to be) to certain users only. Each user has their own restricted page and must supply ...
4
votes
2answers
5k views

Configure Basic Authentication on Azure's App Service

For different reasons I'm using Azure's App Service to serve static files. I would like to secure this access by Http Basic Authentication which is enough for my purposes. How can I do that? I tried ...
0
votes
1answer
1k views

Apache 2.4: Set user dependent environment variable

I just wondered if it's possible to set an environment variable depending on the basic authentication user. I tried the following versions, but none of them work (obviously none of them is documented ...
0
votes
0answers
249 views

Apache Basic authentication using .htaccess file doesnt work on files in directory

I need to protect files within a directory, I used .htaccess file as below and put it in the directory : AuthType Basic AuthName "Authentication Required" AuthUserFile "c:\passwords\.htpasswd" ...
1
vote
0answers
364 views

Adding exception to nginx HTTP basic authentication based on being on the local network

I'm running an installation of a webapp running on a self-hosted server which is on my main network along with all our company PCs and a couple of other servers. We've decided we want to add HTTP ...
0
votes
1answer
4k views

Apache basic auth with LDAP and reverse proxy

So im using Apache 2.4, I want to set up a basic auth connected with LDAP and then, reverse proxy. The idea is to secure a webpage with this authorization. So here is my config: Order deny,allow ...
1
vote
0answers
292 views

Apache - LDAP basic auth checked but not required

I need Apache, configured as Proxy pass, to check the Authorization: Basic ... header against an LDAP server, setting a custom header if credentials exist and are correct but passing the request to ...
2
votes
1answer
1k views

Combine apache auth providers of different types with basic auth only if proactively provided by client

I'd like to be able to have a path on an apache server (2.4.18+ on ub16) that primarily authenticates using SAML (using the mod_auth_mellon plugin) for interactive use, but also supports having the ...
0
votes
1answer
3k views

how to correctly configure Httpd basic auth for pass through proxy

I have been asked to set up an basic auth prompt in front of our Jira server. I am using a proxypassthrough on httpd to allow access to jira in the first place. When ever I try to connect I am ...
0
votes
1answer
2k views

HA Proxy: Omit basic auth for specific URIs

Given a userlist such... userlist UsersAuth group admin users foo user foo insecure-password bar And a backend containing this... acl AuthOkay_Web http_auth(UsersAuth) http-request auth realm ...
0
votes
0answers
254 views

Is there a way to detect server ip in nginx configuration file?

I'm using nginx/1.12.0 and tried $server_addr directive but it gives me an error: nginx: [emerg] invalid parameter "$server_addr" in /etc/nginx/sites-enabled/conf Here is my code nginx conf ...
2
votes
1answer
732 views

Pass basic authentication credentials in .htaccess rewrite to protected folder

I have two folders, F1 and F2, under my public folder, each with an .htaccess file in them. F1 is protected by basic auth in .htaccess, like this: AuthName "Restricted Area" AuthType Basic ...
0
votes
1answer
628 views

Is HTTP basic auth enabled on Google Compute Engine instances?

I would like to use .htaccess files to password protect certain directories of my website, which is running on a Google Compute Engine Debian instance with LAMP installed. However, GCE appears to ...
4
votes
1answer
2k views

Nginx location blocks don't apply to .php files inside them?

So to help prevent brute force attacks against my phpmyadmin install I've configured nginx to require HTTP Basic Auth (extra username and password) and then the requests need to come from a ...
0
votes
1answer
60 views

Initialise (and manage) basic auth database on AWS using htdbm

I wish to protect a binary download on an AWS using basic authentication. In the short term and as proof of concept I can use a password file. However, the number of users is likely to grow large ...
1
vote
1answer
3k views

How to get nginx to properly proxy (incl. basic auth creds set in the headers) an Apache?

Edit: If you have an idea on how to improve the question or which details are missing from it, please do leave a comment. Expected Outcome: I am trying to deploy nginx as a reverse proxy to let me ...
1
vote
1answer
640 views

basic authentication failing with mod-proxy-fcgi and php7.0-fpm

Ubuntu 16.04 LTS running on AWS instance. Apache 2.4.18 / PHP7.0-fpm Problem is with basic-auth. I'm trying to pw-protect /var/www/html/admin//. I find that all non-php files are protected - but ....
1
vote
0answers
3k views

Setting up Apache 2.4 reverse proxy with SSL and authentication both on proxy AND backend

Goal: a client authenticates against apache 2.4 reverse proxy with OTP (AuthType basic), is then forwarded to the backend server (apache 2.2) where further individual authentication is required (...
0
votes
1answer
1k views

HAProxy is it possible to force basic auth then select AD server based on user IP?

Here is my context: I have a web application (using HTTPS) which needs users to be authenticated prior to contacting it The application expects an HTTP header to be set (let's name it HEADER) There ...
1
vote
2answers
863 views

Can HAProxy load a userlist from a file?

I can't seem to see anything in the documentation, but this seems like an obvious feature. I want to supply a file containing a list of users for Basic Authentication. I don't want to edit the HAProxy ...
-1
votes
2answers
4k views

Apache 2.4 http auth doesn't prompt credentials

I configured a vhost with http authentication. ServerAdmin info@example.com ServerName www.example.com DocumentRoot /home/webmaster/www.example.com/ <Directory "/home/...
0
votes
1answer
490 views

Improve performance of Nginx with http auth and a lot of requests

I've got an PHP side running via fpm behind an Nginx server. For $reasons we need an http base auth in front of that setup, so I ended up in a setup like: #… server section …. auth_basic "...

1
2 3 4 5