Questions tagged [authentication]

Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

Filter by
Sorted by
Tagged with
1
vote
0answers
7 views

Storing session data between servers (and noob guidance) [closed]

First post here, I'm sure this information is somewhere on the web, but the problem is I'm such a noob I don't know what to search for. So, my problem is that I want to design a sign up API. Let's ...
1
vote
2answers
30 views

Can I restrict access to certain areas of my site using the user's access to restricted areas of another site?

I'd like to restrict access to certain areas of my site (site X) based on whether or not the user has access to certain restricted areas of another site (site Y), which is not under my control. To be ...
2
votes
1answer
32 views

How can I ban mediawiki logins from IPs that persistently fail?

I have a MediaWiki website and someone is trying to login as my WikiSysop user by guessing lots of passwords. What can I do to ban IPs if they exceed a threshold of failed login attempts? (Okay, no-...
1
vote
0answers
26 views

Do Google Analytics sessions get broken when tracking UserID and ClientID across subdomains that may not send that data?

I have a domain name with three subdomains. One where a user is authenticated and two where they aren't. I'm planning on implementing UserID tracking for Google Analytics in place of the standard ...
1
vote
0answers
44 views

After implementing HTTPS, “require valid-user” in subdirectory no longer asks for password, just gives 401 Not Authorized

I'm not very knowledgeable about server scripting, however I've only just installed SSL certificate for the domain. The main website (hosted by GoDaddy) is now working fine on SSL/TLS and I've ...
1
vote
1answer
31 views

Do most websites not use HTTP authentication header but something else for authentication?

https://curl.haxx.se/docs/httpscripting.html says It is worth noting that while this is how HTTP Authentication works, very many web sites will not use this concept when they provide logins etc. ...
0
votes
2answers
384 views

AdSense on pages for logged in users with different content for each user

Is it possible to show AdSense to logged in users when each user sees different content? I'm developing an application where each user sees the content that they have entered. The ads would be ...
0
votes
1answer
39 views

It is harder for users to log on to my website when using gmails “+company” email address feature. How can I help them?

If you have a website and lots of people create his accounts with this format: mail+mycompanysite@gmail.com mail+companysite@gmail.com mail+company_site@gmail.com This issue is causing me several ...
5
votes
2answers
2k views

CDN for authenticated sites

We have a site that requires users to sign into. Typical stuff. Today, all the content (dynamic and static) is behind the login process, and you cannot access any of the pages or files via a URL ...
5
votes
2answers
1k views

How do I setup authentication on a specific folder using .htaccess?

I have a folder that I want to host files privately on my webserver. How do I go about making it password protected using .htaccess? Note: Nothing monolithic, I want something that is simple/easy so ...
1
vote
0answers
18 views

Allow our own systems to use an API and restrict it from the general internet without using authentication

I have an Apache server which is reverse proxy'd to some Java container. In Java container there is an API that we don't want internet to see but expect our own systems to use it without any ...
1
vote
0answers
553 views

Append basic authentication header NGINX to existing authentication header of upstream application

Assume the following setup: The NGINX reverse proxy is asking for basic authentication (which is a good habit when you expose things on the internet). Basic authentication uses the Authorization ...
1
vote
2answers
4k views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
1
vote
1answer
31 views

How do I log in into Apache web server on Ubuntu from Windows?

I've been given a username and password for an Apache server, that runs on Ubuntu, and belongs to my professor. I do not know how to connect to the server from my machine(windows), and run scripts ...
1
vote
0answers
149 views

Why does CPanel keep prompting me for credentials

When I login directly to CPanel, I login successfully and can see various parts of CPanel (text only, no images), but the system keeps prompting me to login again. When I login via WHM, everything ...
2
votes
1answer
40 views

Individual directory options for every VirtualHost in Apache2

I have a Debian 9 server with two static IPv4 addresses. One of them is public and the other one is in the server's VPN subnet (the machine is running an OpenVPN server). There is a DNS server in the ...
1
vote
0answers
19 views

double authentication for https password protected password

I am hosting a customer's OpenCart store on my own domain hosting. I have add-on domain in my CPanel for customer's domain and created sub domain for it to ease access. Other than the double ...
1
vote
1answer
50 views

Can DHIS2 provision users in advance and then have them log in using OAuth2?

We are looking at using DHIS2 as the data mart/dashboard backend for an application we are built. Its great that it has OAuth2 built in which makes it easy for us to allow SSO for a user. However is ...
7
votes
0answers
110 views

Automatic reauthenticate at oauth2 endpoint

I am currently (ab)using an oauth2 endpoint of an API to enable users of the API to login to my site (using response_type=code). I do not save refresh tokens or even access_token as that oauth2 ...
1
vote
1answer
13 views

Why can't I login to my wordpress at home?

I don't have the same issue in the office but when I try to login at home, it keeps on saying "too many redirects". I'm not very good at this FTP thing so can anyone help me what to do? I've tried ...
0
votes
2answers
2k views

Godaddy - folder with password protection

Godaddy windows shared hosting on IIS6, but will probably migrate to IIS7 soon. Is there easy way to setup folder with password protection, so when I try to access secure folder, login dialog pops up?...
2
votes
0answers
626 views

Apache basic authentication without instant prompt for credentials

I'm looking for away to eliminate the intrusive instant prompt for credentials when basic authentication is used and instead serve a nice page that tells the user where he is and what credentials to ...
3
votes
1answer
106 views

Does requiring login to access content hinder SEO?

I am wondering what the SEO effects of a 'Login Wall' is. More specifically, we have content that is region specific, so for instance a URL could look like www.example.com/content/Canada/Ontario. This ...
4
votes
5answers
2k views

How to you prevent someone from getting a “new free trial period” by just creating a new login?

I am considering several options for the Trial version of our web app. The one I favor the most is the classic trial period. Of course, it's a LOT easier for someone to hack this system. They can ...
7
votes
2answers
7k views

More Secure NGINX Authentication than auth_basic

I've been trying to come up with the most secure method of authentication to my reverse proxy in NGINX. I've been using ngx_http_auth_basic_module so far without any issues, but there are apparently ...
0
votes
1answer
29 views

PHP syntax issue [closed]

I'm reading a Sentry tutorial for implementing an authentication workflow in a webapp. I'm a PHP beginner. There's a thing I don't understand in this code: <?php // set up autoloader require ('...
1
vote
1answer
3k views

SSPI Apache2.2 Windows Authentication

I am trying to set up seamless authentication on windows for my intranet site, using SSPI on Apache 2.2 and windows 2008 server. I have installed mod_auth_sspi.so in apache/bin. I have also added the ...
4
votes
3answers
1k views

How to allow Google to index protected content?

I'm working on my site and as it require users to log in it will be hard to Google to index the sites, because to see 90% of the content you have to be online. So I've made a script which looks for ...
4
votes
2answers
505 views

SEO Impact on presenting User details without login

I am looking to develop a functionality on our website in which i can a show user their name based on cookie data. There will be no login required. we will retrieve user's name based on the previous ...
3
votes
2answers
697 views

Can basic HTTP password authentication interfere with CDN access?

I'm doing my best to ask this question, I'm stepping across domains here to cover for another team that is MIA on this task. Please guide me if the question sounds stupid. We are dealing with a ...
8
votes
4answers
45k views

How to login as another user in phpmyadmin

I installed phpmyadmin in Win7, and if I type http://localhost/phpmyadmin/index.php in the browser, it will log in phpmyadmin as root user by default. I created a new user but still there's no login ...
6
votes
1answer
2k views

Does htpasswd authentication prevent Google from crawling my site?

I have a site that I want to continue testing before I make public, so I don't want Google to start crawling the site as there will be a large amount of garbage content during testing. I currently ...
0
votes
1answer
688 views

Googlebot not respecting HTTP basic auth

I have basic auth set up and it has always worked. Suddenly Google started crawling my pages. The auth is still there (I have checked it using different browsers). I am at a loss how it's possible. ...
1
vote
0answers
37 views

Can I get email id, which email id is used to login in webmaster? [closed]

Can I get email id, which email id is used to login in webmaster... please help... We Have all email id and passwords @admin... But I dont know which is used to login webmaster... What I can do in it.....
0
votes
1answer
316 views

Is it possible to create a full SEO website with Firebase?

I work a lot with PHP, and as many of you know, you have a lot of flexibility when it comes to creating dynamic pages. You have sessions for authentication, database queries, etc. But the most ...
1
vote
1answer
63 views

How to detect the server has logged out the user from the client side?

For performance reasons I'm setting some user info in the local storage of the client/navigator when he logs in. It allows me to tune the pages appearance (show/hide menus, display the name of the ...
3
votes
1answer
91 views

Website Prompting Username and Password for Authentication on Debian Apache WebServer

I am attempting to host my own website with an Apache web server on Debian, but have reached this problem. When I try to go to my site at example.com it immediately asks for me to authenticate with a ...
0
votes
1answer
41 views

Is it OK for SEO to create tutorial documentation pages on my website that are only shown to logged in users?

I'm thinking to create tutorial pages (visible only if logged in) for my client. Using same CMS database. My question is, is this bad for SEO? should I tell robots to ignore these pages?
1
vote
1answer
873 views

SIMPLEST way to set up password protection for a static site, with basic admin UI?

I have a static site. I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...
0
votes
1answer
28 views

How to log-in with more rights than Admin or Bureaucrat?

I'm having a heck of a time with MediaWiki and an Internal Server Error. I'd like to log-in with more privileges than afforded by Admin and Bureaucrat in hopes of actually being able to save a page. ...
1
vote
1answer
31 views

Verifying that a user is from a certain country

I'm helping a small non-profit with their website and we are going to have a login and membership system where we need to verify that a user is from a certain country. How can this be done? We are ...
0
votes
1answer
506 views

How to require user login using htpasswd within the htaccess file?

I'm trying to require users to login and would like to handle the request with htpasswd in the htaccess file: Any ideas on how I can do that?
6
votes
3answers
15k views

Can I create test accounts in Google for testing Oauth in my application?

My app contains Sign in from Google function that uses Oauth. To test it I'd want to create test accounts at Google. But Google doesn't allow me to create ordinary accounts without entering captcha so ...
2
votes
1answer
62 views

Best way to respond to an authentication request via HTTPS

I'm implementing a very simple authentication scheme. Username:Password are sent (via header of an HTTPS POST request) to a PHP file on an Apache server that checks whether that combination is in a ...
6
votes
1answer
56 views

Can't login or edit on 3 wordpress sites from a particular Windows PC

I have 3 wordpress.org sites and I have problems logging in and/or editing all three from one particular laptop (Win 7 Home Premium). It is puzzling. I can load regular pages from the sites OK. The ...
0
votes
1answer
85 views

Does Cloudflare use different authentication mechanisms across platforms?

I'm using Cloudflare flexible SSL for a website I made, and after investigating certificate properties, I realized different authentication mechanisms are being used. Chrome 45 for Windows desktop ...
2
votes
1answer
37 views

Is it reliable to rely on external authentication providers in the long run?

We use Google+, Facebook and Twitter oauth2 APIs for our membership infrastructure, because our content policy strictly prohibits standalone ownership of content by user (means that there is no ...
3
votes
2answers
599 views

Limit access to rewritten uri based on IP address

I'd like to limit access to a Drupal 7 registration page (/user/register) from certain IP addresses. I've tried to set the apache directive, but it's still letting me access it from an IP that isn't ...
2
votes
1answer
427 views

Access Google Analytics without original login credentials

Our Google Analytics administrator has forgotten the login credentials for our account. How can we recover this?
4
votes
2answers
214 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...