hello,
can any one tell me how to do form authentication in asp.net mvc? i had done form authentication for built in database but i dont know how to use it with ADO.net entity model. thank you
I'm using launching firefox from the command line in a script to get snapshots of pages. These pages have basic http authentication. When using:
firefox http://user:[email protected]
Either a dialog appears, or authentication doesn't work at all.
Is there any option to make firefox open the page without showing the dialog?
Is anyone else having problems with the iPad IPSec (Cisco) VPN configuration?
I've configured a Cisco VPN connection to a PIX 501 firewall on a 32GB Wifi Apple iPad. This is done in Settings - General - Network - VPN - Add VPN Configuration - IPSec tab. When everything is set up properly and I attempt to connect I just get a popup that says "Enter your user authentication" with no fields to enter either piece of info, and just OK and Cancel buttons.
I've read about similar problems with the VPN client built into Mac OS X and the iPhone 3GS but never with the iPad. Does anybody know a solution? I'm not afraid to change the configuration of my PIX 501 if that's necessary.
I have an ASA that's providing IPsec VPN services using certificate authentication (no xauth, just the certs). It works perfectly with the Cisco IPsec VPN Client. Now I'm trying to let iPhones connect.
I've installed the CA cert and a client certificate on the iPhone with a profile using iPCU, along with the VPN configuration. Then connecting gives the error "Could not validate the server certificate". Additionally, the ASA logs the error "Received encrypted Oakley Informational packet with invalid payloads".
FWIW, I receive the same invalid payload error when trying to use the Snow Leopard IPsec client to connect.
Has anyone successfully gotten the iPhone IPsec client to work with certificate auth?
Hi All,
I'm trying to set up an environment for my TS gateway server where the authentication for the initial login to the TS gateway server is handled by a RADIUS server (as determined by NPS), then the user uses standard Windows Auth to log in to their destination machine.
I have the server successfully passing the auth to the RADIUS server, but only after it does a Windows auth first. The credentials will not match between the Windows Server and the RADIUS server, so the RADIUS auth always fails, and the TS Gateway server will not forward the request to the RADIUS server unless the Windows Auth succeeds.
Does anyone know how to disable the Windows Auth requirement on a TS Gateway server? This is a pretty vanilla SBS 2008 box.
I have an Apache James 2.3.2 email server running on RHEL 5. I have been connecting to it successfully for months using Thunderbird (currently version 12.0.1).
I am attempting to connect to the same account using Apple's Mail 6.5. On the first dialog, to add an account to Apple's Mail, it asks for full name, email address, and password. It then asks for an incoming mail server. I put account type equal to POP, the incoming mail server equal to the host in my email address, and my username and password.
It comes back with the error: "Logging in to the POP server "" failed. Make sure the user name and password you entered are correct, then click Continue. If the information isn't correct, you cannot receive messages."
While the dialogs are different in Thunderbird, I believe that I am giving it exactly the same parameters, and succeeding with authentication.
I have an Apache James 2.3.2 email server running on RHEL 5. I have been connecting to it successfully for months using Thunderbird (currently version 12.0.1).
I am attempting to connect to the same account using Apple's Mail 6.5. On the first dialog, to add an account to Apple's Mail, it asks for full name, email address, and password. It then asks for an incoming mail server. I put account type equal to POP, the incoming mail server equal to the host in my email address, and my username and password.
It comes back with the error: "Logging in to the POP server "" failed. Make sure the user name and password you entered are correct, then click Continue. If the information isn't correct, you cannot receive messages."
While the dialogs are different in Thunderbird, I believe that I am giving it exactly the same parameters, and succeeding with authentication.
Following the recent security advisory, I'm reconfiguring our VPN servers and having trouble.
We're using Windows 2008 R2 server for VPN services, running RRAS and NPS on the same server and configure it to use PEAP-EAP-MSCHAPV2 authentiation for all tunnel type(PPTP, L2TP, IKEv2, SSTP), which previously allowed plain MSCHAPv2.
But Apple products, MacOS and iOS cannot connect to VPN after this change. I tried to install root certificate used in PEAP transaction but no change.
Does anyone know whether MacOS/iOS supports PEAP-EAP-MSCHAPv2 authentication in PPTP/L2TP? If so any tips to make it work? (I know PEAP-EAP-MSCHAPv2 is supported in WPA/WPA2 enterprise)
Regards.
I'm testing a client machine that makes requests to a biztalk server using a forefront machine as a web proxy. Upon first test I put in an invalid name/password into the receive port and received the correct error message (407). Then, I set the correct name/password and everything worked correctly.
From there, I kept the correct information in the receive port but put an invalid name/password into the send adapter but the process completed successfully (should have failed with 407).
I've ensured that both the recieve and send ports are not bypassing the proxy for local addresses.
So the only thing that seems to make sense is if TMG is caching the authentication request coming from the machine I'm working on.
Is this thinking correct, and if so, does anyone know how to disable it in TMG?
I'm trying to get Cyrus IMAP (v 2.2 on Ubuntu 9.04) setup and working, but I'm having a bit of trouble getting the login working correctly.
I've created a mailbox for my test user "nrahl":
cm user/nrahl
and then created a password:
$ saslpasswd2 nrahl
I'm attempting to connect to the mailbox using Thunderbird. I'm using the machine's LAN IP address as the host, and "nrahl" as the username. It connects to the server and prompts me for the password. When I enter it, I get "Login to server failed." in Thunderbird, and /var/log/mail.log shows:
Apr 15 19:20:01 IMAP cyrus/imap[1930]: accepted connection
Apr 15 19:20:09 IMAP cyrus/imap[1930]: badlogin: [192.168.5.21] plaintext nrahl SASL(-13): authentication failure: checkpass failed
Part of /etc/imapd.conf with comments removed:
sieveusehomedir: false
sievedir: /var/spool/sieve
#mailnotifier: zephyr
#sievenotifier: zephyr
#dracinterval: 0
#drachost: localhost
hashimapspool: true
allowplaintext: yes
sasl_mech_list: PLAIN
#allowapop: no
#sasl_maximum_layer: 256
#loginrealms: example.com
#virtdomains: userid
#defaultdomain:
sasl_pwcheck_method: saslauthd
#sasl_auxprop_plugin: sasldb
sasl_auto_transition: no
UPDATE:
When setting:
sasl_pwcheck_method: alwaystrue
in /etc/imapd.conf, login works correctly. So I'm assuming the issue is saslauthd related.
I am evaluating the possibilities of moving my organisation to Mercurial, however I am stumbling on 2 basic requirements which I can't find proper pointers to.
How do I set up Mercurial's central repository to authenticate users with the central active directory and only allow them to push or pull if they have the right credentials?
How do I set up a Mercurial project repository to only allow users pertaining to a specific group to push / pull source code? We need this to have per-project authorisation.
On which HTTP servers (IIS or Apache etc.) are the above 2 requirements supported?
Apologies if I am asking something obvious or if I am missing something fundamental about how authentication and authorisation works.
Thanks.
I'm trying to automate a very periodic git add/commit/push cycle using a shell script and cron under OS X 10.8.5. The script is as basic as one would expect it to be:
cd /my/directory
git add .
git commit -m "a commit message with the date"
git push -u origin master
I've tried running it both as root as well as a non-root user. When I do this manually, I get a dialog box from OS X requesting that I authenticate the operation.
Running the script (either using cron or just using sh) ends up sending a message (via mail) to whichever user's cron executed the script saying that it was unable to write a file in the .git directory because of a permissions issue (which is most likely manual execution requires authentication).
Is there any way to circumvent this issue, or give the script permission to perform this operation without having me intervene each time?
I'm trying to get Cyrus IMAP (v 2.2 on Ubuntu 9.04) setup and working, but I'm having a bit of trouble getting the login working correctly.
I've created a mailbox for my test user "nrahl":
cm user/nrahl
and then created a password:
$ saslpasswd2 nrahl
I'm attempting to connect to the mailbox using Thunderbird. I'm using the machine's LAN IP address as the host, and "nrahl" as the username. It connects to the server and prompts me for the password. When I enter it, I get "Login to server failed." in Thunderbird, and /var/log/mail.log shows:
Apr 15 19:20:01 IMAP cyrus/imap[1930]: accepted connection
Apr 15 19:20:09 IMAP cyrus/imap[1930]: badlogin: [192.168.5.21] plaintext nrahl SASL(-13): authentication failure: checkpass failed
Part of /etc/imapd.conf with comments removed:
sieveusehomedir: false
sievedir: /var/spool/sieve
#mailnotifier: zephyr
#sievenotifier: zephyr
#dracinterval: 0
#drachost: localhost
hashimapspool: true
allowplaintext: yes
sasl_mech_list: PLAIN
#allowapop: no
#sasl_maximum_layer: 256
#loginrealms: example.com
#virtdomains: userid
#defaultdomain:
sasl_pwcheck_method: saslauthd
#sasl_auxprop_plugin: sasldb
sasl_auto_transition: no
UPDATE:
When setting:
sasl_pwcheck_method: alwaystrue
in /etc/imapd.conf, login works correctly. So I'm assuming the issue is saslauthd related.
I'm trying to get Cyrus IMAP (v 2.2 on Ubuntu 9.04) setup and working, but I'm having a bit of trouble getting the login working correctly.
I've created a mailbox for my test user "nrahl":
cm user/nrahl
and then created a password:
$ saslpasswd2 nrahl
I'm attempting to connect to the mailbox using Thunderbird. I'm using the machine's LAN IP address as the host, and "nrahl" as the username. It connects to the server and prompts me for the password. When I enter it, I get "Login to server failed." in Thunderbird, and /var/log/mail.log shows:
Apr 15 19:20:01 IMAP cyrus/imap[1930]: accepted connection
Apr 15 19:20:09 IMAP cyrus/imap[1930]: badlogin: [192.168.5.21] plaintext nrahl SASL(-13): authentication failure: checkpass failed
Part of /etc/imapd.conf with comments removed:
sieveusehomedir: false
sievedir: /var/spool/sieve
#mailnotifier: zephyr
#sievenotifier: zephyr
#dracinterval: 0
#drachost: localhost
hashimapspool: true
allowplaintext: yes
sasl_mech_list: PLAIN
#allowapop: no
#sasl_maximum_layer: 256
#loginrealms: example.com
#virtdomains: userid
#defaultdomain:
sasl_pwcheck_method: saslauthd
#sasl_auxprop_plugin: sasldb
sasl_auto_transition: no
Hi!
I am trying to send mail from my java application simply connecting on localhost:25 with empty login and password (I have to state them due to API).
Mail sending is failed then with
2010-03-21 12:20:01 login authenticator failed for localhost [127.0.0.1]: 535 Incorrect authentication data
On the other hand, when I am sending mail with telnet by:
$ telnet localhost 25
ehlo ...
mail from:...
rcpt to:...
data:
...
it works perfectly.
Any clues?
I'm having a hard time configuring Reporting services on one of our servers. I'm not uninitiated in the domain of IIS7 but I cannot get rid of the login prompt when I'm surfing to the Reporting services website.
What I did:
I made a windows and SQL user with the same name:
Then I choose Anonymous authentication in II7 and filled in the credentials of the specific R.S. user http://img32.imageshack.us/i/iis7auth.jpg/
I choose 'Local Service' as the service account in the R.S. configuration mgr http://img88.imageshack.us/i/rsconfigmgr.jpg/
The first problem is that there's always a pop-up when surfing to the website
The second is that when I'm able to log in I get the message that the user doesn't have the appropriate permissions.
The pop-up: http://img693.imageshack.us/i/loginpopup.jpg/
The server is a 2008 Web Server with SQL 2008 R2 Express.
What am I doing wrong?
Thanks in advance!
Hi all,
I'm trying to set up the mail server. I have problem with my SMTP authentication using sasl. I'm using postfixadmin to create my mailboxes, the password is in some kind of md5, postfixadmin config.inc.php:
$CONF['encrypt'] = 'md5crypt';
$CONF['authlib_default_flavor'] = 'md5raw';
the sasl is configured like that (/etc/postfix/sasl/smtpd.conf):
pwcheck_method: auxprop
auxprop_plugin: sql
sql_engine: mysql
mech_list: plain login cram-md5 digest-md5
sql_hostnames: 127.0.0.1
sql_user: postfix
sql_passwd: ****
sql_database: postfix
sql_select: SELECT password FROM mailbox WHERE username = '%u@%r'
log_level: 7
If I want to authenticate (let's say from Thunderbird) with my password, I can't. If I use hashed password from MySQL I can authenticate and send an email. So I think the problem is with hash algorithm. Do you know how to set up the SASL (or postfixadmin) to work fine together. I don't want to store my passwords in plain text...
I am using windows Server 2008 in a mediam size organization. I have 200 clients at the moment. I have learn that Samba4 has a remarkable changes for windows clienmts. I want to use Samba 4 to authenticate my windows xp and windows 7 clients machines. In my home based pc I am using vmware to test samba 4. For that purpose I am using CentOS 6.3 with Samab4.
Kindly guide me taht it is possible that I replace windows server as a PDC controller and use samba4 to onlu authenticate my clients. I does not want Group Policy only and only authentication .
So what u suggest me. Is it good to use samba 4 instaled of windows server.
thanks,
gardenair
Hi all,
I'm having a hard time configuring Reporting services on one of our servers. I'm not uninitiated in the domain of IIS7 but I cannot get rid of the login prompt when I'm surfing to the Reporting services website.
What I did:
I made a windows and SQL user with the same name:
Then I choose Anonymous authentication in II7 and filled in the credentials of the specific R.S. user http://img32.imageshack.us/i/iis7auth.jpg/
I choose 'Local Service' as the service account in the R.S. configuration mgr http://img88.imageshack.us/i/rsconfigmgr.jpg/
The first problem is that there's always a pop-up when surfing to the website
The second is that when I'm able to log in I get the message that the user doesn't have the appropriate permissions.
The pop-up: http://img693.imageshack.us/i/loginpopup.jpg/
The server is a 2008 Web Server with SQL 2008 R2 Express.
What I'm I doing wrong?
Thanks in advance!
In a network with 802.1x configuration and a samba server configured in the domain, I have a radius server that delegates the authentication against the samba domain for users (using LDAP). The radius defines which VLAN the user is supposed to have access.
I'm trying to put a Windows Vista Enterprise in the same network, but it attempts to logon the domain before authenticating against the network in 802.1x and it doesn't find any logon servers.
In the radius logs I see the machine trying to authenticate with 'host/'. Does Vista enterprise require that I put it in a network with access to the logon server at that point?
Thanks in advance,
João Miguel Neves
I had a working subversion server which used the passwd file which stores passwords in clear text. My requirements changed so that passwords now need to be encrypted. I did everything according to the book to use SASL, or so I believe, but now only the linux command line can authenticate. My OSX users, which also use command line, and my WinXp users, which use TortoiseSVN get errors. Linux versions are 1.6.11. OSX versions are 1.6.17. And TortoiseSVN versions are 1.7.4.
/opt/subversion/QRpage/conf/svnserve.conf:
[general]
anon-access = none
auth-access = write
realm = ABC
[sasl]
use-sasl = true
min-encryption = 128
max-encryption = 256
/etc/sasl2/svn.conf:
pwcheck_method: auxprop
auxprop_plugin: sasldb
sasldb_path: /etc/sasldb2
mech_list: DIGEST-MD5
Then I add new users via:
saslpasswd2 -c -f /etc/sasldb2 -u ABC dacracot
But for instance OSX users get this error trying to check out:
$ svn co svn://svn.nowhere.org/QRpage
svn: Cannot negotiate authentication mechanism
Hi everyone,
I'm fairly new to Sharepoint, i'm catching up fast (reading + experimenting) but i can't seem to get around this....
I have a web application with its respective site collection and sites, i have anonymous access allowed for all the sites with forms authentication.
Everything is working fine but i don't know how to login with the administrator account from the internet. With Windows auth you have the "login" link and you just have to use your admin credentials, how can i do that with forms auth??
Any help will be highly appreciated. Thanks in advance.
I am looking for an open-source minimalistic "message board" PHP software.
Not a forum, more something like one simple facebook wall.
The only thing a user can do is post a new message.
With RSS, and able to run on flat files (no database) with Apache+PHP
Authentication based on a configuration file, no management UI needed.
For now I use this software, but it lacks RSS:
http://nrw.free.fr/data/projects/pano/demo/index.php?pano=ifc
Anyone knows a software that matches my description?
Thanks!
Usage: communication between my family's 5 members living on different continents.
Is it possible to set up Linux (and Solaris) SSH server to authenticate users in this way:
i.e. user john is a member of the group Project1_Developers in the Active Directory.
we have something on the server A (running Linux, the server has an access to the AD via i.e. LDAP) in the SSH server LDAP (or other module) authentication config like root=Project1_Developers,Company_NIX_Admins.
when john connects to the server A using his username "john" and domain password, the server checks the john's group in the domain and if the group is "Project1_Developers" or "Company_NIX_Admins", makes him locally as a root with a root privileges.
The idea is also to have only a "root" and a system users on the server, without adding user "john" to all servers where John can log in.
Any help or the idea how to make the above or something similar to the above? Preferred using AD but any other similar solution is also possible.
p.s. please don't open a discussions is it secure to login via ssh as root or not, thanks :)
I've just run in to a really annoying issue with Windows 8.1 - it seems I cannot remove the need to use Live ID credentials from an account without completely deleting that account.
I know the process to do it - use the Disconnect link from the Accounts-Your account screen. The trouble comes when you get to the Switch to a local account screen, it will not let you enter the current account for the user name, instead you must enter a new one thus creating a new user account.
Can I revert back to using just a local login without having to recreate the account?
It seems quite retarded that I have to recreate the account, as deep down the only change required is which credential provider is used to authenticate the login.
(Note that this Live ID linkage was created by using the Windows Store, not as a result of an upgrade from 8 to 8.1).