Questions tagged [http-authentication]

74 questions
1
vote
1 answer

Apache .htaccess set different password for symlink

I got a domain with a website that can be reached by two urls, mydomain.com/pathA and mydomain.com/pathB. But they are actually the same directory on the server. It contains a MediaWiki installation, which is quite large and contains image files…
1
vote
1 answer

What does this error mean in my IIS7 Failed Request Tracing report?

when I attempt to goto any page in my web application (i'm migrating the code from an asp.net web site to web application, and now testing it) .. i keep getting some not authenticated error(s) . So, i've turned on FREB and this is what it…
Pure.Krome
  • 6,508
  • 18
  • 73
  • 87
1
vote
0 answers

Nginx auth_request ignored when accessing from non-auth_request location

I am trying to use a web app which allows me to upload and share files via a download link. I want the upload section to be accessed via authenticated users only, and download links to be accessible by public users. All download links have /download…
be-side
  • 11
  • 1
1
vote
1 answer

What is this formatting in the "Bearer" Authentication token of a HTTP get

I came across a "Bearer" Authentication in the header of a HTTP request (I want to understand an API) that I want to replicate. This is the header field: authentication : Bearer…
tzippy
  • 113
  • 4
1
vote
1 answer

Condition depending on domain in .htaccess: SetEnvIf and IfDefine?

I would like to add a rule in .htaccess that "Does something" (actually enable a httpauth user restriction) depending on the domain name. I thought I had it and did: SetEnvIf Host "staging\.(.*)\.ch"…
1
vote
0 answers

Nginx basic_auth for entire site (reverse proxy) except for a "hidden" URL which should access all content without basic_auth

TL'DR set a gibberish URL in nginx site definition that would bypass basic-auth to reverse-proxy More details: I have a setup with Grafana running on a VPS and an nginx reverse proxy directing towards it behind basic auth. The setup works fine but…
0
votes
1 answer

Unable to enroll Device into Azure AD using 3rd Party On-Premise MDM

We are in the process of Integrating a third party MDM (on-premise) with Autopilot in AAD portal to enable Windows 10 OOBE. We want to achieve this by leveraging an on-premise Core Enterprise Application server in Azure. We have configured the…
0
votes
1 answer

Require basic auth for specific IPs in nginx

I have a whitelist of IPs for nginx, but in addition to this I want to require basic authentication for specific IP. For example, allow access for these IPs: 198.51.100.1 198.51.100.2 require basic authentication for this IP: 198.51.100.3 and deny…
Oleg
  • 276
  • 4
  • 18
0
votes
1 answer

How to use htaccess to restrict access to script when rewriting?

I have a php script that relies on the following rewrite rules: RewriteEngine on RewriteCond %{REQUEST_URI} !^/script.*$ [NC] RewriteRule (.*)$ script.php/go [QSA,L] So when someone visits http://example.com/foo, the script is called…
0
votes
0 answers

Apache mod_auth_form to subdirectory

First, my structure. Running Ubuntu 16.04.3 with Apache 2.4, I have a site at /mnt/WWW but never serves pages from there except for a login form. Everything is redirected to www. if not another subdomain and then redirected from http to https. I…
0
votes
0 answers

Automatic logins in chrome

I have an outdated internal website (which I cannot alter), which uses one of those old login mechanisms which pops up a modal authentication box when you try to access it. (The popup is not HTML, but rather a browser implemented box) As this site…
eshalev
  • 111
  • 4
0
votes
1 answer

Cannot login into gerrit

I have a gerrit setup on my server with http as a authentication method and nginx as server. I've created a admin account which works perfectly fine. I was trying to set up a another account with command ssh -p 29418 admin@host gerrit create-account…
kebie
  • 141
  • 1
  • 1
  • 7
0
votes
2 answers

Nginx forcing auth for IP in allowed subnet

I'm implementing authentication for the sites hosted inside the office, I have a PAM auth module that authenticates the users, that's working good so far. The problem is that I need to authenticate ONLY the users that come from the Internet…
Alonimus
  • 36
  • 5
0
votes
1 answer

Apache mod_proxy with SSL not redirecting

I have a custom server running behind an apache reverse proxy. Since the custom server can only handle HTTP traffic, i am trying to use apache for wrapping proper SSL around it, and for some kind of HTTP authentication. So i enabled mod_proxy and…
0
votes
4 answers

Site-wide protection for standalone trac

I'd like to setup Trac as a standalone daemon, but as an internal service. I.e. I want people to do a http authentication before even entering wiki. Both --auth and --basic-auth give me user authentication, which is ok too, but I cannot find any way…
viraptor
  • 1,296
  • 6
  • 21
  • 41