Questions tagged [http-authentication]
74 questions
1
vote
1 answer
Apache .htaccess set different password for symlink
I got a domain with a website that can be reached by two urls, mydomain.com/pathA and mydomain.com/pathB.
But they are actually the same directory on the server. It contains a MediaWiki installation, which is quite large and contains image files…

GolezTrol
- 119
- 6
1
vote
1 answer
What does this error mean in my IIS7 Failed Request Tracing report?
when I attempt to goto any page in my web application (i'm migrating the code from an asp.net web site to web application, and now testing it) .. i keep getting some not authenticated error(s) .
So, i've turned on FREB and this is what it…

Pure.Krome
- 6,508
- 18
- 73
- 87
1
vote
0 answers
Nginx auth_request ignored when accessing from non-auth_request location
I am trying to use a web app which allows me to upload and share files via a download link. I want the upload section to be accessed via authenticated users only, and download links to be accessible by public users. All download links have /download…

be-side
- 11
- 1
1
vote
1 answer
What is this formatting in the "Bearer" Authentication token of a HTTP get
I came across a "Bearer" Authentication in the header of a HTTP request (I want to understand an API) that I want to replicate.
This is the header field:
authentication : Bearer…

tzippy
- 113
- 4
1
vote
1 answer
Condition depending on domain in .htaccess: SetEnvIf and IfDefine?
I would like to add a rule in .htaccess that "Does something" (actually enable a httpauth user restriction) depending on the domain name.
I thought I had it and did:
SetEnvIf Host "staging\.(.*)\.ch"…

Urs
- 115
- 3
1
vote
0 answers
Nginx basic_auth for entire site (reverse proxy) except for a "hidden" URL which should access all content without basic_auth
TL'DR
set a gibberish URL in nginx site definition that would bypass basic-auth to reverse-proxy
More details:
I have a setup with Grafana running on a VPS and an nginx reverse proxy directing towards it behind basic auth. The setup works fine but…

bosch
- 185
- 6
0
votes
1 answer
Unable to enroll Device into Azure AD using 3rd Party On-Premise MDM
We are in the process of Integrating a third party MDM (on-premise) with Autopilot in AAD portal to enable Windows 10 OOBE. We want to achieve this by leveraging an on-premise Core Enterprise Application server in Azure. We have configured the…

john zuh
- 51
- 1
- 6
0
votes
1 answer
Require basic auth for specific IPs in nginx
I have a whitelist of IPs for nginx, but in addition to this I want to require basic authentication for specific IP.
For example, allow access for these IPs:
198.51.100.1
198.51.100.2
require basic authentication for this IP:
198.51.100.3
and deny…

Oleg
- 276
- 4
- 18
0
votes
1 answer
How to use htaccess to restrict access to script when rewriting?
I have a php script that relies on the following rewrite rules:
RewriteEngine on
RewriteCond %{REQUEST_URI} !^/script.*$ [NC]
RewriteRule (.*)$ script.php/go [QSA,L]
So when someone visits http://example.com/foo, the script is called…

bstpierre
- 431
- 1
- 3
- 14
0
votes
0 answers
Apache mod_auth_form to subdirectory
First, my structure. Running Ubuntu 16.04.3 with Apache 2.4, I have a site at /mnt/WWW but never serves pages from there except for a login form. Everything is redirected to www. if not another subdomain and then redirected from http to https. I…

Shaun Williams
- 53
- 1
- 8
0
votes
0 answers
Automatic logins in chrome
I have an outdated internal website (which I cannot alter), which uses one of those old login mechanisms which pops up a modal authentication box when you try to access it.
(The popup is not HTML, but rather a browser implemented box)
As this site…

eshalev
- 111
- 4
0
votes
1 answer
Cannot login into gerrit
I have a gerrit setup on my server with http as a authentication method and nginx as server. I've created a admin account which works perfectly fine. I was trying to set up a another account with command
ssh -p 29418 admin@host gerrit create-account…

kebie
- 141
- 1
- 1
- 7
0
votes
2 answers
Nginx forcing auth for IP in allowed subnet
I'm implementing authentication for the sites hosted inside the office, I have a PAM auth module that authenticates the users, that's working good so far.
The problem is that I need to authenticate ONLY the users that come from the Internet…

Alonimus
- 36
- 5
0
votes
1 answer
Apache mod_proxy with SSL not redirecting
I have a custom server running behind an apache reverse proxy. Since the custom server can only handle HTTP traffic, i am trying to use apache for wrapping proper SSL around it, and for some kind of HTTP authentication.
So i enabled mod_proxy and…

simonszu
- 373
- 7
- 14
0
votes
4 answers
Site-wide protection for standalone trac
I'd like to setup Trac as a standalone daemon, but as an internal service. I.e. I want people to do a http authentication before even entering wiki.
Both --auth and --basic-auth give me user authentication, which is ok too, but I cannot find any way…

viraptor
- 1,296
- 6
- 21
- 41