Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

0
votes
0answers
12 views

http auth cPanel Password Protect doesn't show forbidden with cancel login

I used cPanel password protect on my webroot public_html and the login dialog appears as expected. But when I cancel login, it will prompt me a few more times and if I keep cancelling, it will ...
0
votes
1answer
15 views

http-basic auth, else placeholder-page

Is it possible to show a http-basic-auth, and when someone fails that test, show a certain HTML-placeholder-page? If so, how can I achieve that?
2
votes
0answers
22 views

mod_ident not to be trusted? [closed]

I'm looking at Apache's mod_ident: http://httpd.apache.org/docs/2.2/mod/mod_ident.html However, on this page it has the following disclaimer: The information should not be trusted in any way except ...
1
vote
0answers
20 views

What do I need to do to make my site compatible with Safari's iCloud Keychain so that it saves passwords?

I've noticed that a vendor's web application triggers Safari's "suggested password" feature at "create password" forms, but does not actually save this password when the form is submitted. That is, ...
1
vote
1answer
26 views

meta robots for logged in vs. not logged in users

On a site I'm working on, The homepage has generic content for visitors who aren't logged in. When a user is logged in, the content shown is personalized to them and could even be considered private. ...
0
votes
1answer
23 views

How to require approval to signup new Bluespice MediaWiki accounts?

On a MediaWiki site running BlueSpice, how can I require that all new account sign ups be approved before the account is created? I tried adding the ConfirmAccount extension described here, but now ...
1
vote
1answer
32 views

How to allow MediaWiki non-users to only read some wiki pages related login and account creation?

I've created a BlueSpice MediaWiki site that I only want visible to users that are logged in. This works fine by creating Read permission only for Users as described here. All this works fine until ...
3
votes
1answer
90 views

Multiple Apache vhosts with Basic Auth & SSL

I'm just getting started using Apache and I pretty much have everything configured the way I want, I'm just having trouble with one aspect. A quick overview: I have a document root of "/var/www", ...
1
vote
0answers
56 views

Plesk Site Preview redirects to Plesk Login

I moved over an existing PHP site to Plesk Panel 11.5 and now I'm having an issue with the site preview. When I click site preview the site comes up fine in a new window, however when I try to ...
0
votes
1answer
69 views

Is it possible to purchase a domain name from Google to take advantage of their two factor authentication?

We are planning to purchase a domain name from Google. Somewhere I have seen GoDaddy.com and eNom.com are the Google's partner. So can I purchase domain from Google? The reason for purchasing from ...
4
votes
1answer
56 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...
1
vote
0answers
39 views

How to log in to Domjudge after setting the password during installation

I am trying to install Domjudge on my VPS. I ran ./configure, make and config database. At this point I should be able to login at /public/login.php with the user/pass: judgehost/judge but it ...
1
vote
1answer
137 views

Can't login to Archiva via LDAP with “Could not find object” error

We upgraded to Apache Archiva 2.1.1 and successfully configured LDAP, so that "Ldap connection verified." appears in Redback Runtime Configuration. My user credentials are also recognized, as there is ...
1
vote
1answer
400 views

How to solve “Login Only” rejection when applying to Google AdSense

Recently, a site of mine was rejected due to "Login Only": Login Only: During our review of your website, we found that the majority of pages on your site are behind a login, or there is ...
1
vote
1answer
200 views

How to set up Nginx directory password authentication?

How to set up? Nginx directory password authentication /usr/local/nginx/conf/vhost/xxx.xxx.com.conf site configuration files. I want to in this website xxx.xxx.com/123 folders in password access ...
10
votes
4answers
598 views

Does SSL really matter for most websites?

I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL. I've read plenty of ...
0
votes
1answer
17 views

Requiring authorisation on multiple devices

In creating a sort of "remote control" site, I'm wondering what the best way for authorisation is going to be. The simplest example would be: User logs in on desktop - page 1 is displayed (controlled ...
4
votes
2answers
415 views

Should I track the login page?

I've recently started using Google Analytics on a B2B ecommerce site with authentication. Users must login and are redirected to the login page if they try to access an internal page without first ...
3
votes
5answers
126 views

How to you prevent someone from getting a “new free trial period” by just creating a new login?

I am considering several options for the Trial version of our web app. The one I favor the most is the classic trial period. Of course, it's a LOT easier for someone to hack this system. They can ...
1
vote
1answer
51 views

URL query is adding an unecessary comma

I am trying to automatically place login data through a URL query for my university services. (https://login.gatech.edu/cas/login) two problems arise when I try to pass a URL query (Ex: ...
3
votes
4answers
13k views

How to login as another user in phpmyadmin

I installed phpmyadmin in Win7, and if I type http://localhost/phpmyadmin/index.php in the browser, it will log in phpmyadmin as root user by default. I created a new user but still there's no login ...
0
votes
1answer
75 views

Authentication issues when hosting static site on DropBox

I am trying to host my static website on Dropbox and forward my domain to the public link of index.html of my site; I'm following the last tip from this post. I have two problems with this approach: ...
2
votes
2answers
80 views

HTTP code 403, access denied & Options -Indexes

at "webmasters.stackexchange.com" I already found a similar topic: Stop directory listing using .htaccess and redirect to good error page Options -Indexes ErrorDocument 403 /path/to/403.html ...
2
votes
3answers
189 views

Different authentication for HTTP POST and GET requests in Apache

I want to authenticate for POST requests for http://path/to/logical/abc.xml (but not GET requests to that URL). How do I put constraints like this in place? The paths are logical and location ...
1
vote
1answer
1k views

Why can't my user (author) login from back-end to post article in Joomla

I have just created a new user from my administrator back-end. I have assigned this user to groups like author and publisher. But this user can't seem to login to the admin screen to create articles. ...
2
votes
2answers
174 views

FB login and privacy policy

I'm bulding up a site, where the ONLY ONE method for log in, is the fb login button. Now i'm wondering if i need to make users check and read the my own site's privacy and policy before and accept ...
3
votes
2answers
2k views

How to implement OpenID authentication for my site?

I want to offer OpenID authentication for my users (please note that I do not necessary want to become an OpenID provider; I just need to authenticate my user for my website). How to implement OpenID ...
3
votes
4answers
574 views

Personalized content (authenticated with a cookie) and impact on SEO

We have a big website with a lot of content, that is doing pretty well in terms of SEO. Google likes the site, visitors like it as well. Our problem is that there is a lot of content that would only ...
7
votes
4answers
200 views

Single Sign on across Websites

I have three different websites that I run on three distinct top level domains. I would like to be able to have users log into any one of them and then be automatically logged into all three. As an ...
5
votes
2answers
429 views

HTTP for one part of the site, HTTPS for other

We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS? For example, WordPress (which I know) is located at http://foo.com, but we want to have ...
3
votes
2answers
1k views

How to make browsers offer to remember passwords

What properties login form needs to have to trigger "remember password" for all (or most) browsers? Background: For years I have been using Opera, and the rule has been that almost anything that ...
4
votes
1answer
865 views

Password protect an alias virtual directory

I have a main domain being hosted through CPanel. I also have a sub-domain that I would like to appear as a path under the main domain instead of as a sub-domain. So I have: http://example.com/ ...
3
votes
1answer
155 views

getting the user back where they came from with mod_form_auth

Using the mod_form_auth module in Apache HTTPD 2.4.3, I am looking for a way to have the user redirected to their original desired target after completing a login. That is, if I have a <Location ...
3
votes
1answer
91 views

How do I get a “Sign in with Facebook” button in Denmark?

I live in Denmark. In connection with a project I would like to add a "Sign in with Facebook" button to a website. In order to do that I apparently have to register as a Facebook developer on ...
2
votes
2answers
153 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
2
votes
2answers
633 views

My cPanel login is being redirected. How can I resolve this?

I'm trying to get to cPanel to manage my website. When I type www.mydomain.com:2082 into the browser window, the request seems to be redirected. I made a screen-cast so I could slow down the changes ...
1
vote
2answers
369 views

Why does Google report a soft 404 when I redirect to the signup page?

In the last month, I've got an increased number of "soft 404" errors reported by Google webmaster tools which actually work well for users. Configuration (maybe useless): I have a website built ...
1
vote
2answers
415 views

Still prompted for a password after adding SSH public key to a server

I'm attempting to setup a git repository on my Dreamhost web server by following the "Setup: For the Impatient" instructions here. I'm having difficulty setting up public key access to the server. ...
3
votes
1answer
549 views

Using Public Key Authentication for websites

I know GitHub uses it for code development (not user authentication for the website though). I saw this article on the idea: ...
0
votes
1answer
49 views

Utilising Open ID and third party auth services

I'm planning to utilise a third party authorisation service in order to allow users to sign in with their google/facebook accounts etc. In particular I am aiming to use the Yii extension here- ...
2
votes
2answers
1k views

Can I create test accounts in Google for testing Oauth in my application?

My app contains Sign in from Google function that uses Oauth. To test it I'd want to create test accounts at Google. But Google doesn't allow me to create ordinary accounts without entering captcha so ...
0
votes
1answer
35 views

Digest Authentication - how is it used? [closed]

I understand a bit about digest authentication from here http://en.wikipedia.org/wiki/Digest_access_authentication, but I am pretty unclear on where, when or how it is used. I can't find anything on ...
4
votes
5answers
804 views

Do user names used for login need to be unique?

Assuming a non-commercial site where users login with a user name and pw, do I need to enforce unicity of usernames? Note: The db will use a separate unique index to identify the users. The site is ...
3
votes
2answers
740 views

You don't have permission to access /index.php on this server

I made a 'login with OpenID' page and I had a error when OpenID provider return to my page: You don't have permission to access /index.php on this server. Additionally, a 404 Not Found ...
2
votes
1answer
414 views

How do I password protect a directory with a customizable login page?

At the moment, I have a directory that's password protected by .htaccess and .htpasswd. The problem with this is that when a visitor comes to my site, they get an ugly inbuilt Secure Area message ...
1
vote
1answer
1k views

SSPI Apache2.2 Windows Authentication

I am trying to set up seamless authentication on windows for my intranet site, using SSPI on Apache 2.2 and windows 2008 server. I have installed mod_auth_sspi.so in apache/bin. I have also added the ...
1
vote
1answer
108 views

Asking for user's 3rd party username/password like Facebook's Find Friends feature

Preface Facebook and other sites have features where they ask users for their credentials for 3rd party web sites (see image below). Presumably, facebook then uses the credentials to login as the ...
1
vote
1answer
894 views

Limit Joomla user login sessions

I am testing a Joomla installation for making a commercial website where you pay for accessing content. I just found out that it is possible to login from two different computers at the same time into ...
6
votes
5answers
163 views

Allowing users to post without logging in

On Stackoverflow/Stackexchange, users are allowed to add posts without requiring login, just wondering what should be considered before allowing this kind behavior on a site? Couple of things spring ...
0
votes
1answer
143 views

Capitals in URL subdirectory not changed by htaccess

Within my WordPress website I am redirecting sub directories to internal and external links. Now, when you place a CAPITAL letter in the sub dir it does not work anymore and the website does not show ...