Questions tagged [authorization]

156 questions
1
vote
1 answer

Allow only selected address to connect to openssh

I need to restrict connections to an openssh server to only three or four IP addresses. I know I can, on the CentOS 7 and Oracle Linux boxes, use firewalld or TCP wrappers. However, some of the servers on the network do not support firewalld or…
scarville
  • 51
  • 5
1
vote
1 answer

NGINX auth_basic exclude GET request to specific php script

I can't seem to figure out how to exclude a specific location from auth_basic. server { server_name example.com; root /var/www/html; index index.php; auth_basic "Nein nein nein"; auth_basic_user_file…
droplet
  • 113
  • 4
1
vote
2 answers

Hardware token/UUID for authentication of software

Is there a unique hardware token or a UUID on every computer motherboard/BIOS that can be used to create a "strongly coupled" software? I am working on writing a proprietary software for a client and I can't afford anyone to create copies of the…
Cyberpks
  • 113
  • 3
1
vote
0 answers

Enforce kerberos authentication for each IIS site without individual site developers being able to disable it

We have a IIS server with multiple sites that are managed by different teams. We want to standardize on and enforce Kerberos autentication for all sites with each site having an individual AD group for authorization/access. The obvious solution…
invictus
  • 135
  • 1
  • 10
1
vote
0 answers

How to configure the apache authorization chain for Kerberos (mod_auth_kerb) and SSL?

What directives and conditions to configure the Apache configuration as follows: We try to authorize through Kerberos. If successful (What condition to use?), Then we redirect to URL1. Otherwise, we try to authorize through Certificates. If…
1
vote
0 answers

Can you implement token based authentication/authorization without a 3rd party?

fyi I'm a total newbie to server stuff (I'm an app developer, trying to implement a simple but secure api back end) It sounds simple enough, user sends his username/password, if it authenticates, you give them a token, and they include that token in…
Sam b
  • 11
  • 1
1
vote
2 answers

Unable to start services in Centos 7 with error "Authorization not available" even as root user

I am not able to start services for the following Centos 7 server [root@myserver home]# uname -r 3.10.0-1160.11.1.el7.x86_64 [root@myserver home]# cat /etc/centos-release CentOS Linux release 7.9.2009 (Core) I first realised there was a problem…
rnoodle
  • 111
  • 1
  • 1
  • 4
1
vote
0 answers

Login Active-Directory account require different username values in loginwindow and switch user

I've just bind my machine (running Mojave) to new AD server and would like to login to an existing AD account from loginwindow startup screen, but all I get is a tilted password record (indicator that occur once password is incorrect). Apparently,…
0
votes
2 answers

IIS website showing login panel

The default website for my IIS (windows 7) shows a login box everytime you try to browse it. When I press cancel, I get a 401 error. How do I remove this and allow anyone to access anything on my IIS? Default website, virtual applications, etc.
Paul Knopf
  • 200
  • 4
0
votes
1 answer

How to allow a set of users access to a sub site in SharePoint but not the root site

We have a publicly addressable MOSS 2007 site which is only accessable to users with windows accounts. Off the root Site collection, we have a series of sub sites: http://moss http://moss/depts/ http://moss/depts/finance http://moss/depts/safety…
chris.w.mclean
  • 155
  • 4
  • 13
0
votes
1 answer

Can any user inside a organization remove a project?

Recently, I have created a project to apply full permissions on a such google account from my organization. I realized that any account could enter and destroy any project. I don't know if this is an issue or my configuration is failing. Someone has…
0
votes
1 answer

How to restrict/secure access to developer's server hosted on Internet

I am setting up two Ubuntu virtual private servers for my startup company. The "public" server (let's call it www.example.com) shall contain the publicly open company web site and restricted but (relatively less sensitive) services such as the LDAP…
0
votes
3 answers

Apache Allow Only Authorized Users to Access File

I have an existing web site that needs to link to a pdf file on our web-server. The problem is, ONLY users who have been authenticated by logging into the site should be able to view the file. I have tried everything I can think of and I just can…
pbuchheit
  • 139
  • 10
0
votes
0 answers

hHow to authorize Apache's users similar to Microsoft IIS?

I want to enable directory browsing in Apache and ask users to authenticate using openLDAP backend, and I want to set different groups for the folders inside Apache's web server. My goal is not to let all users have access to all the folders and…
0
votes
1 answer

Authorization required to install jzos batch launcher

We are trying to install the JZOS Batch Launcher. The function consists of three pieces: a load module that must be put into a z/OS PDSE, a sample start proc that can be tailored and put into an appropriate PROCLIB, and sample JCL that can be…