Tagged Questions

1
vote
0answers
10 views

missing configuration in apache to achive mutual SSL authentcaion [migrated]

After implementing a Mutual Certificate Authentication with OpenSSL and Apache Web Server on CentOS platform. I tried this scenario ( see this diagram ): ---------- ...
1
vote
1answer
98 views

SSPI Apache2.2 Windows Authentication

I am trying to set up seamless authentication on windows for my intranet site, using SSPI on Apache 2.2 and windows 2008 server. I have installed mod_auth_sspi.so in apache/bin. I have also added the ...
2
votes
1answer
81 views

How to log username in Apache logs?

I need some help regarding how to log the user-name into apache logs. I'm building a use-case for Security Information Event Management. Is the method the same in case of IIS or just applicable to ...
3
votes
0answers
360 views

Password protect an alias virtual directory

I have a main domain being hosted through CPanel. I also have a sub-domain that I would like to appear as a path under the main domain instead of as a sub-domain. So I have: http://example.com/ ...
2
votes
1answer
276 views

Avoid the login popup when using http-auth

I have an Apache. Under the DOCUMENTROOT is a folder with an .htpasswd file for http-auth. If I open the browser and request the content in the folder I get an Popup to login. Is there a way to avoid ...
1
vote
0answers
104 views

Can I use both Digest and Basic Authentication on the same directory in Apache?

The reason I would want to do this is to support very old browsers (e.g. IE 6) that does not implement the more secure Digest method. If all new clients advertise the types of authentication they ...
1
vote
3answers
601 views

How to avoid basic authentication warning when using protected directory?

I used cpanel on my hosted site to set up a password protected directory to allow downloads of specific files. I send people a link to the file by email and include their username and password so ...
0
votes
1answer
275 views

Apache authentication, security exceptions and safari

I have apache authentication set up on a site, it works fine in firefox and chrome, you type in the username/pass once and then you can happily visit any page on the site. Unfortunately this is not ...
0
votes
1answer
327 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
1answer
467 views

Directory access control with Apache: do I need to use a specific .htaccess?

I have an Apache webserver, and in the Apache configuration, I have Alias /backups "/backups" <Directory "/backups"> AllowOverride None Options Indexes Order allow,deny Allow ...
7
votes
1answer
534 views

Permissions for serving up temporary files

I have a system (web based application) which pulls file attachments from a 3rd party system via SOAP. These are in turn on our system created as files in a directory. When a user of the system ...