Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [mod-auth]

39 questions
5
votes
1 answer

Authenticate with Client SSL Certificate OR basic auth

For security reasons, the authentication for a web application should be migrated to SSL client certificates. It should be possible to log in with either username/password or SSL. In addition, users from the intranet should be allowed to use the App…
Thomas Berger
  • 1,700
  • 12
  • 22
4
votes
1 answer

RequireAny apache2 error

I am trying to use RequireAny to allow acces to a site from either a certain IP or with a certain username. However, when I try to run apache I get the following error: Invalid command '
moesef
  • 255
  • 1
  • 2
  • 10
3
votes
2 answers

Linux apache mod_auth_sspi installation

I am running an Apache/2.4.7 Linux webserver and working on an intranet project where users of Internet Explorer need to be authenticated automatically. Their windows username has to be displayed in a greeting on the intranet homepage. I downloaded…
sisko
  • 155
  • 1
  • 8
3
votes
1 answer

Lighttpd mod_auth authentication difficulties on Safari (iPad and iPhone)

I've set up lighttpd on my embedded device and configured the modules in the lighttpd.conf When accessing the web pages from Chrome or Firefox from the PC I get asked for the username and password and after I supplied them the page loads. When I do…
trenki
  • 131
  • 3
3
votes
4 answers

AuthUserFile path relative to virtual host root?

Given this folder / file structure: private/.htpasswd public/.htaccess ... where public is the root folder of a virtual host in Apache, and private is its sibling folder: How do I define a relative path for AuthUserFile in the .htaccess file, such…
Decent Dabbler
  • 169
  • 1
  • 1
  • 8
3
votes
1 answer

Restrict WebSVN Access to Windows Users in Specific Domain

I am trying to install WebSVN on top of a VisualSVN install. VisualSVN is set up to use windows authentication, with users from domains CLIENT and DEV getting access to different areas of the site. Users in CLIENT are denied root access (through the…
Yaakov Ellis
  • 556
  • 1
  • 10
  • 15
2
votes
1 answer

Apache 2.4: Allow access to directory only for ip address range

I want allow access to /htdocs/reserved/ directory only for ip addresses from 192.168.1.193 to 192.168.1.254 (.193 --> .254). I have written this code in httpd.conf: Order Deny, Allow Deny from all Allow…
Simone Nigro
  • 375
  • 2
  • 3
  • 17
2
votes
2 answers

Custom Authentication Page - Apache mod_auth_form - Error 405 Method Not Allowed

I am having trouble trying to get the apache mod auth_form to work. I have a sub-domain that i wish to protect and use for various administrative features on my website. When i submit the auth form i get: Method Not Allowed The requested method GET…
Craig van Tonder
  • 121
  • 1
  • 7
2
votes
1 answer

(8)Exec format error: exec of ' /usr/local/download/abc.zip' when access file through apache

I had configure mod-auth-token in Apache install on Linux server. I had configure it to enable security in access file while download from server.( As per given on its website here). Apache configuration : ScriptAlias /downloads/…
Yagnesh Agola
  • 123
  • 1
  • 6
2
votes
1 answer

Apache mod_auth_basic and Ordering

I have Apache setup to authenticate with active directory through ldap for my users. There are a few "system" users (for automated build tests) that are manually setup and authenticate through file. AuthBasicProvider ldap file The issue I'm having…
Josh Johnson
  • 133
  • 4
1
vote
1 answer

Lighttpd ldap auth issue, massive performance loss (lighttpd 1.4.35-1.el6.x86_64 + RHEL 6.6)

I installed lighttpd for the first time from epel repo. I changed user and group for the webserver and ran the lighttpd server. I can download a page with 200 small images in about a second. If I enable ldap authentication with configuring ldap and…
Daniel Sootcliff
  • 11
  • 3
1
vote
1 answer

mod_auth_radius secure over https?

mod_auth_radius README file says: Using static passwords & RADIUS authentication over the web is a BAD IDEA. Everyone can sniff the passwords, as they're sent over the net in the clear. If I serve the page over https, will it be secure then? Or…
Karel
  • 629
  • 9
  • 16
1
vote
1 answer

Using Apache variable

I'm trying to use Apache's OpenID authentication module. According to this page, I should be able to use the REMOTE_USER Apache variable to identify the user. I'd like to pass this as a header to an upstream application (I'm using Apache to…
Ryan Kennedy
  • 203
  • 2
  • 11
1
vote
1 answer

apache override authentication in a specific folder

How do I change/override the authentication in apache to a different one in a subfolder? I tried this one but it didn't work. How can I fix it? AuthName "Front End Access" AuthType Basic AuthBasicProvider file …
user211434
1
vote
1 answer

Graphiti / Graphite using Apache with Proxy and BasicAuth requests auth for every URL / request

We have a server with apache set up as an authentication front end for a backend web service running on the same box. The setup seemed to work at first, but we soon realised that apache was asking for authentication every time we clicked a link,…
nightowl
  • 45
  • 8
1
2 3