Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [authorization]

156 questions
5
votes
1 answer

IIS 7 password protect folder and files

I am using IIS 7 and I would like sombody to tell me how to password protect a folder. And how would you get the username and password dialog to show when someone tries to download a file in that directory.
shad
  • 65
  • 1
  • 1
  • 5
5
votes
1 answer

How to tweak Gnome user elevation in RHEL/CentOS

So I am attempting to tweak the way GNOME authenticates a desktop user for privileged applications. Out of the box it asks for the root password. For my deployment this is undesirable and I want it to re-prompt the user for their password and only…
ErebusBat
  • 905
  • 4
  • 12
  • 21
4
votes
1 answer

SVNParentPath directory authorization

The question is a bit stupid but I can't get it sorted. I have a server with SVN that uses the SVNPath directive in httpd.conf and all works fine with path authorizations. Now I'm installing a second serer where I'm going to use SVNParentPath…
James
  • 203
  • 1
  • 8
4
votes
1 answer

Apache LDAP auth: denied all time

There is my config (httpd 2.4): LDAPReferrals Off AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)" AuthLDAPBindDN "uid=zzz,ou=Applications,o=zzz.com" AuthLDAPBindPassword…
Dee
  • 81
  • 6
4
votes
2 answers

Can I set up application specific passwords on Ubuntu?

I've got a Ubuntu virtual server that I use for webhosting and other stuff. I've been thinking about moving mail onto it, but I'd like to secure it more against the threat of losing my smartphone. Google has 2 step verification systems that allow…
jldugger
  • 14,122
  • 19
  • 73
  • 129
4
votes
3 answers

LDAP: entries for services?

(Apologies if I've got the terminology wrong, I'm fairly new to LDAP) I am setting up a local LDAP server (Apache Directory Server) with the following structure: o={my organization name} [objectClass=organization] ou=groups…
Jason S
  • 616
  • 1
  • 16
  • 28
4
votes
2 answers

Active Directory, Linux, and User Private Groups

We're in the process of moving from NIS on our Linux systems to binding everything to Active Directory. The NIS environment follows the common standard used by many Linux distributions that a user's primary group is a group of the same name as the…
larsks
  • 41,276
  • 13
  • 117
  • 170
4
votes
1 answer

Require membership of more than one group in Apache

I would like to be able to do this: Require group member Require group member Require group contributor "Require group" lets…
crb
  • 7,928
  • 37
  • 53
3
votes
2 answers

Access rights escalation requiring multiple sysadmin authorisation

I was just wondering if there is a way to give a user root access escalation on a *nix system, kind of like sudo, but which requires more than one sysadmin authorisation. I am thinking of something sort of like how a self-destruct command on a…
sybreon
  • 7,357
  • 1
  • 19
  • 19
3
votes
1 answer

AuthorizedKeysCommand not getting executed

I'm trying to authorize SSH sessions using the AuthorizedKeysCommand in sshd_config. For some reason, the AuthorizedKeysCommand is not getting executed even though the SSH flow at least initiates the AuthorizedKeysCommand flow. Here's my…
shine
  • 69
  • 1
  • 2
  • 4
3
votes
1 answer

nginx auth_request how to return backend status code

when the backend proxy used in auth_request returns an error code different from 401 or 403, nginx is returning a 500 error code. The ngx_http_auth_request_module module (1.5.4+) implements client authorization based on the result of a subrequest.…
jobou
  • 193
  • 1
  • 6
3
votes
0 answers

Windows Server - Protect websites with AD user

My question is a bit tricky to explain :) We have ASP.NET websites running on Windows Server 2012. Some websites use SqlServer authentication, others use Windows authentication, some don't have any kind of authentication at all (or static HTML…
šljaker
  • 129
  • 2
3
votes
1 answer

Using Windows Server, how do I schedule an hourly task that will call a URL WITH an authorization header?

I need to schedule a task that will call a given url hourly. The URL doesn't return anything so it is fairly simple HOWEVER this URL requires an authorization header: Authorization: Basic {SOME AUTH CODE} How do I append this header to the request…
Matt Cashatt
  • 235
  • 3
  • 7
3
votes
1 answer

IIS 6 Denies access to the default document

I've got Windows Server 2k3 with IIS6 hosting a couple ASP.NET MVC 2 applications (.NET 4), all in the Default Web Site. Most of them simply use Integrated authentication, but a couple use forms as well. All the applications work properly and are…
yoozer8
  • 322
  • 2
  • 12
3
votes
2 answers

ISA or IIS removing HTTP Authorization header when published

I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am able to receive it when testing on local machine.…
user1589040
  • 31
  • 1
  • 2
1
2
3
…
10 11