Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [http-basic-authentication]

256 questions
5
votes
4 answers

Respond to HTTP OPTIONS with basic auth

We have a web site hosting Office documents behind IIS6 Basic authentication. IE has an authentication token for basic auth, which it presents to download the file. The user clicks "Open", and then Microsoft Office Protocol Discovery does a HTTP…
crb
  • 7,998
  • 1
  • 38
  • 53
5
votes
1 answer

Where to set username/password for BASIC authentication in IIS7

I have a .net web app running on iis7 (windows 2008) and want to add some simple protection to it. I've managed to set up BASIC authentication, but cant work out where I set the username/passwords that are allowed to access the resource
Anthony Main
  • 233
  • 3
  • 9
5
votes
2 answers

How do I secure a .NET (MVC) website prior to launch?

I have a .NET (MVC2) website that is in development. I have deployed it to some production infrastructure, and tested it over the internet with anonymous access (as it will be once it is live) and it works fine. Between now and the go-live date I…
Hugo Rodger-Brown
  • 3,719
  • 2
  • 18
  • 12
4
votes
1 answer

Nginx location blocks don't apply to .php files inside them?

So to help prevent brute force attacks against my phpmyadmin install I've configured nginx to require HTTP Basic Auth (extra username and password) and then the requests need to come from a whitelisted IP Address. However the IP Address whitelist…
user353498
4
votes
1 answer

Protecting a location by IP while applying basic auth everywhere else

I want to achieve the following results: Apply basic authentication to ANY location, file, path Remove basic authentication for an IP/CIDR range whitelist Prevent ALL access to a specific directory, and everything underneath it, for everyone except…
scrowler
  • 145
  • 1
  • 8
4
votes
0 answers

Apache 2.4 Redundant LDAP Authentication

I'm trying to provide a redundant LDAP authentication to my webserver. ScriptAlias /nagios/cgi-bin "/usr/local/nagios/sbin" AuthLDAPBindDN "search@domain" AuthLDAPBindPassword "pass" AuthLDAPURL…
Oliver Webb
  • 41
  • 2
4
votes
2 answers

Basic auth Apache with Tomcat

I have the following server setup: Apache Tomcat 7 running Atlassian's Jira (http:// :8081/tickets) Apache 2.4 web server as reverse proxy serving only the jira application at the moment, but there are more to come…
twenty7
  • 51
  • 1
  • 6
4
votes
1 answer

Yum repo basic auth not working

So we've got this yum repo that is protected via basic auth. My yum.repo definition looks like this [custom-repo] name=Releases…
maverick
  • 161
  • 1
  • 4
4
votes
1 answer

IIS Basic Authentication only protects directories, not individual files?

I really hope this isn't a duplicate, but I wasn't able to find anything like this on here. My issue is: I have a subdirectory on a Windows (not sure if 2008 R2 or 2012) server with IIS 8.5 that I want to protect with basic authentication. I've…
Christian
  • 209
  • 1
  • 3
  • 9
4
votes
1 answer

Disable Apache basic auth in virtual subdirectory

I have a webserver that is completely locked down with Basic Auth AuthType Basic # [...] rest of basic auth stuff require valid-user order deny,allow deny from all Satisfy any One subdirectory is…
Gerald Schneider
  • 23,274
  • 8
  • 57
  • 89
4
votes
3 answers

CUPS basic auth error through web interface

I'm trying to configure CUPS to allow remote administration through the web interface. There's enough documentation out there that I can figure out what to change in my cupsd.conf (changing Listen localhost:631 to Port 631, and adding Allow @LOCAL…
Inaimathi
  • 141
  • 1
  • 1
  • 6
4
votes
1 answer

Slow Performance With IIS Basic Authentication

I'm using SSAS through HTTP with MSMDPUMP.dll. I have setup the MSMDPUMP.dll web to use only Basic Authentication and then I provide the User Id and Password in the ConnectionString. Everything works but it's too slow to be usable. I have enabled…
Antti Simonen
  • 141
  • 4
4
votes
4 answers

IIS 7.5 basic authentication and Active Directory validation

I'm not an IIS or Active Directory expert by any means so I want to present a scenario here and see if what we want to accomplish is feasible. We have an application hosted on Windows Server 2008 R2 with a series of web services exposed as an API…
jturinetti
  • 43
  • 1
  • 1
  • 3
4
votes
1 answer

How can I stop brute force with IIS6 basic http authentication?

Is there a way to restrict incorrect login attempts and add some sort of timeout to stop basic auth being brute forced, using IIS?
Andrew
  • 53
  • 3
4
votes
1 answer

Excluding the nagios directory from Basic Auth that is set for the root directory

I have basic auth from the root directory for Apache. I am setting it like so. /etc/httpd/conf.d/xxxx.conf AuthType Basic AuthUserFile xxxxxxxx AuthName "Restricted Area" Require valid-user Since this…
Saifis
  • 209
  • 3
  • 13
1
2
3
…
17 18