Questions tagged [http-basic-authentication]

Filter by
Sorted by
Tagged with
1 vote
1 answer
144 views

Basic Authentication for an Azure Web App based on Linux

I have an Azure Web App based on Linux. I want to enable basic authentication, meaning that it simply asks for a username and password in the header to access the web app. I've only found a solution (...
0 votes
1 answer
29 views

apache - Require HTTP basic auth on ScriptAlias Location

I have a ScriptAlias configured like so: <VirtualHost *:443> ScriptAlias /path/ "/path/to/bin/cgi" </VirtualHost> I want to use Apache to put a basic auth wall in front of ...
2 votes
2 answers
2k views

Combine apache auth providers of different types with basic auth only if proactively provided by client

I'd like to be able to have a path on an apache server (2.4.18+ on ub16) that primarily authenticates using SAML (using the mod_auth_mellon plugin) for interactive use, but also supports having the ...
0 votes
2 answers
1k views

How to change the basic auth default header in nginx?

I set basic auth in my nginx location / { auth_basic "Restricted Area"; auth_basic_user_file /etc/nginx/.htpasswd; } So after i saved and restart nginx. The browser ...
2 votes
3 answers
871 views

Apache 2.4.51 bypass Basic Auth for specific query string

I need Basic Auth on my website, except if a specific hash is present in the URL. www.example.com => Authentication required www.example.com/whatever => Authentication required www.example.com/...
5 votes
2 answers
6k views

Apache up in flames (AH00025). How to fix?

I was trying to get Apache 2.4.10 to do basic authentication (under HTTPS) as specified in a .htaccess file. I changed one directory's settings to AllowOverride all, and it started serving up nothing ...
0 votes
2 answers
432 views

Why is my Windows 11 host sending connection reset packets to AWX using certificate authentication?

Here is what I have done so far. Installed AWX 2.9 using docker on CentOS. Successfully managing Windows nodes (8,10) through AWX and WinRM using certificate authentication. (No problem here) ...
0 votes
0 answers
72 views

HTTP Base Auth for a Swarm service behind Traefik reverse proxy

I'm running a Docker Swarm cluster with services behind Traefik2 with HTTPS Base Auth enabled in Traefik itself. Now i'd like to add RabbitMQ with its management interface and make the web management ...
4 votes
2 answers
4k views

Disabling (Apache) Basic Authentication for OPTIONS requests

I have Apache basic authentication enabled on a test server and it works great: AuthType Basic AuthName "testing" AuthUserFile /home/www/.htpasswd Require user MyUser deny from all But it is also ...
2 votes
0 answers
32 views

401 Error When Making Basic Authenticated API Calls to X2CRM

We are encountering a 401 error when making basic authenticated API calls to the X2CRM endpoints (index.php/api2/Contacts). Unauthenticated API calls to other X2CRM VoIP endpoints are successful ...
0 votes
2 answers
2k views

restrict access to subdirectory in apache, leaving parent open

I am setting a webdav on apache2.4 and I need for my top directory /webdav to be freely open and for a sub directory like /webdav/projects/secretproject to be protected with a password. My curremt ...
1 vote
1 answer
1k views

HAproxy's http-check to a site requesting basic auth

HAproxy should use httpchk against a page that requires authentication via basic auth. backend backendname option httpchk http-check send meth GET uri /check/path/ ver HTTP/1.1 hdr ...
0 votes
1 answer
201 views

Apache 2.4 REMOTE_USER lowercase

I'm dealing with a legacy system that uses Apache with mod_auth_basic and mod_authnz_ldap for authentication and authorization in given directories and those directories with an .htaccess file. The ...
1 vote
2 answers
3k views

IIS 8.5 Basic authentication not working - internal error 500.19

I have Basic Auth enabled for the specific folder and anonymous disabled. I also have created users, however I get a "The page cannot be displayed because an internal server error has occurred." ...
0 votes
1 answer
222 views

Make nginx look for credentials in "Proxy-Authorization" header, so it works with apt

I have an nginx in front of an apt-cacher-ng. The nginx's job is to terminate HTTPS and take care of authentication. The issue is, that nginx will look in the Authorization header for credentials, but ...
6 votes
1 answer
2k views

Using nginx: require authentication when request from public IP, not needed when local

I wrote a simple file browser app which is served using node on port 3000. I use nginx as a front-end which proxies this service. This is on my home server. I would like to be able to require basic ...
0 votes
2 answers
2k views

Switching between multiple authentication types on same URL

I have a secure SSO site that uses Shibboleth authentication and SAML identity provider. I need to allow a Google Search Appliance crawler to come index the URL's. I have a requirement to change on ...
1 vote
1 answer
607 views

New user fails authentication with Gerrit setup using proxy HTTP while other users work

We have an issue with authenticating a new user on our Gerrit setup. We are running Gerrit 2.16 using proxy HTTP behind a dedicated nginx server. The nginx server listens on port 8080, does basic ...
1 vote
1 answer
2k views

.htaccess file is not working on Apache 2.4.12 and Windows Server 2008 R2

I am trying to add Authentication window to a section of the site using .htaccess file. But It is not working "the site is acting that the ".htaccess" files does not exists. here is that content of ...
2 votes
1 answer
663 views

Apache2 OpenLDAP authorization fails using ldap-user

I have an Apache2 server running in a Docker container (httpd:2.4.54-bullseye), and an LDAP server (OpenLDAP slapd 2.4.57+dfsg-3 on Debian 11.1) I'm trying to use mod_authnz_ldap Apache module to ...
1 vote
0 answers
772 views

Nginx basic_auth for entire site (reverse proxy) except for a "hidden" URL which should access all content without basic_auth

TL'DR set a gibberish URL in nginx site definition that would bypass basic-auth to reverse-proxy More details: I have a setup with Grafana running on a VPS and an nginx reverse proxy directing towards ...
2 votes
2 answers
2k views

How do I create a virtual host with basic HTTP auth?

This is what I have so far: <VirtualHost *:80> DocumentRoot "/PathToTheFilesThat/theserver/gives/access/to" ServerName docs.mysite.com ProxyPass / http://localhost:8808/ ProxyPassReverse / http:...
3 votes
1 answer
3k views

Apache 2.4, reverse proxy, forward credentials (basic auth)

I want to pass the basic authentication credentials to the reverse proxy server. Example of how it works now: User accesses the website, Apache is configured to ask for basic auth, user enters ...
19 votes
1 answer
75k views

"server certificate verification OK" but "ALPN, server did not agree to a protocol"

I am making a curl call curl -v ... https://... and the verbose output contains .... * ALPN, offering http/1.1 * SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256 * server certificate ...
0 votes
2 answers
2k views

Basic auth and data from curl to HAProxy backend not working on TLS Termination - but works on TLS passthrough

listen pki bind *:8884 ssl no-sslv3 crt /HAPROXY.pem.ecdsa verify required ca-file /CA_CHAIN.pem mode http http-request add-header Content-Type "application/pkcs10" http-...
0 votes
1 answer
2k views

Linux: Centos: enabling basic authentication

I am trying to set up basic authentication for a linux (centos) server. I did the following: mkdir /usr/local/apache mkdir /usr/local/apache/passwd echo > /usr/local/apache/passwd/passwords ...
0 votes
2 answers
2k views

How to set BasicAuth everywhere EXCEPT certain directories

When it comes to setting BasicAuth protection for specific directory, I use simple setup (in apache2.conf file): <Directory /var/www/somedir/> Deny from all AuthUserFile /var/pswd/somedir/....
0 votes
1 answer
1k views

Nginx Disable Basic Auth - Laravel Forge

On a Laravel Forge Nginx Server I've enabled basic auth security at a root level for my site, this is working fine. However I'm now trying to exclude a webhooks path from basic auth to allow the site ...
1 vote
2 answers
134 views

HTTPD server does LDAP authentication. How does the mechanism work?

I have a HTTPD apache server which does LDAP authentication. When the user hits the URL http://localhost/, a browser prompt pops up asking for username and password. How are the username and password ...
0 votes
1 answer
1k views

HAProxy is it possible to force basic auth then select AD server based on user IP?

Here is my context: I have a web application (using HTTPS) which needs users to be authenticated prior to contacting it The application expects an HTTP header to be set (let's name it HEADER) There ...
6 votes
2 answers
6k views

.htaccess - Exclude folder from basic auth protection

I have a website where no one is allowed to enter without entering the basic auth credentials. However, I need the media folder to be accessible by everyone, because we are using a third party ...
1 vote
1 answer
2k views

Varnish with Basic auth returns 401

I've tried to configure Varnish on server which has Basic Auth authentication by using these solutions: https://stackoverflow.com/a/40424168/7202171 https://blog.tenya.me/blog/2011/12/14/varnish-http-...
2 votes
1 answer
849 views

Are there common situations that cause a "401 Error" being displayed without a login dialog being displayed first?

Perhaps this is a somewhat broad question, but I am currently relying on shots in the dark ... We sometimes provide access to some web URLs (running Apache 2.4) protected by basic password protection. ...
10 votes
1 answer
8k views

Exclusion of a protected sub-url does not work on Apache 2.4?

I try to exclude a sub-url "/shop/api" from my protected website. It worked fine on different server on Apache/2.2.15 but now not with Apache/2.4.7? It always asks for the basic authentication. Any ...
2 votes
1 answer
120 views

I'm not sure if basic auth on my server is being secured

This may be a really dumb question but I had to make sure that i'm fine with this. I setup an HTTPS server with basic auth, but the browser informs me that the connection is not secured when i connect ...
1 vote
1 answer
902 views

Nginx Http Basic Auth Security

So lets say I host something like netdata dash board on port 6000. Then I nginx reverse proxy it to the subdomain netdata.domain.com While basic auth is applied at the nginx.conf to allow site wide ...
0 votes
1 answer
2k views

How to Exclude Basic Auth from Nginx Subdomain

I have the two lines of basic auth added in the nginx.conf. So that all subdomain blocks under reverse proxy are password protected. But I do have a few in which I don't want it to have that. What do ...
3 votes
3 answers
13k views

CUPS basic auth error through web interface

I'm trying to configure CUPS to allow remote administration through the web interface. There's enough documentation out there that I can figure out what to change in my cupsd.conf (changing Listen ...
0 votes
1 answer
1k views

nginx: autoindex with basic auth

I have a running website where I have a specific directory where I store random stuff (it sounds very informal and it indeed is). So, I wanted to have some sort of index there that lists the contents ...
8 votes
3 answers
15k views

Configure Basic Authentication on Azure's App Service

For different reasons I'm using Azure's App Service to serve static files. I would like to secure this access by Http Basic Authentication which is enough for my purposes. How can I do that? I tried ...
1 vote
2 answers
1k views

Improve performance of Nginx with http auth and a lot of requests

I've got an PHP side running via fpm behind an Nginx server. For $reasons we need an http base auth in front of that setup, so I ended up in a setup like: #… server section …. auth_basic "...
0 votes
0 answers
1k views

Password protecting an upstream server using Nginx

I've been searching for ages and whilst I can find lots of questions about proxying to a password-protected server using Nginx, I can't find any references to how to go about adding basic ...
1 vote
1 answer
1k views

nginx basic_auth fails when moving outside location, to "root"

This works: location /someplace/ { auth_basic "Restricted Access"; auth_basic_user_file /etc/nginx/.htpasswd; } I go to /someplace/ and I get prompted for the user and password and can ...
0 votes
1 answer
7k views

Apache 2.4 http auth doesn't prompt credentials

I configured a vhost with http authentication. ServerAdmin [email protected] ServerName www.example.com DocumentRoot /home/webmaster/www.example.com/ <Directory "/home/...
1 vote
1 answer
606 views

Is it possible to use a auth_basic password protection using linux users and passwords?

I'd like to password protect a website allowing only Linux users and their passwords stored in /etc/passwd and /etc/shaddow to login. Apache and nginx allow to restrict accessung by using a HTTP ...
3 votes
1 answer
1k views

Can I use rate-limiting with HTTP basic authentication in Apache?

So I'm running a few popular web applications on my server. I want these to be reachable from any computer without creating too many vulnerabilities. I am using Apache 2.4.29 as my HTTP server. My ...
2 votes
1 answer
11k views

how to correctly configure Httpd basic auth for pass through proxy

I have been asked to set up an basic auth prompt in front of our Jira server. I am using a proxypassthrough on httpd to allow access to jira in the first place. When ever I try to connect I am ...
1 vote
2 answers
3k views

Nginx: Basic_auth is set up and working, but all protected pages return 404

I've set up basic auth on some pages on my site. Server logs are showing that the authentication is working, however, once I'm logged in all the protected pages return 404 errors - and not my actual ...
0 votes
1 answer
554 views

Redirect incoming URL request between basic authentication and openidc in apache

Redirect incoming URL request between basic authentication and openidc. I want to categorize if the request for URL is coming from "wget/curl" then i need it to get authenticated with Basic ...
1 vote
0 answers
3k views

curl not sending credentials during negotiation

We have a Jenkins server that uses Kerberos-SSO, with a fallback to Basic if SSO is not configured on the browser or using curl. When I use curl with the --negotiate argument, however, it doesn't send ...

1
2 3 4 5 6