Questions tagged [authentication]
The process of identifying the party logging into a system.
348
questions
0
votes
1
answer
16
views
Best way to test credentials?
I've got a C# app where I need to validate credentials for a DB2 database (V7R3).
The way historically we've done this is to append the credentials to a connection string and actually attempt to ...
- 281
1
vote
0
answers
31
views
Azure Analysis Service Tabular Cube - How To Impersonate A User in SSMS
Test Cube, Test User, connect to it(Azure Analysis Service) in SSMS, right click the cube, browse, click on "Impersonate":
And you will see a series of prompts that are specific to a on-...
- 215
-1
votes
1
answer
214
views
Query postgres db in a Docker container from another container using peer auth
I have two Docker containers with a Postgres db in each. I am exposing the Postgres socket of each container to the other one, using Docker volumes, like so:
docker run --rm -itd --name=containerone -...
0
votes
0
answers
79
views
Entra ID auth to Azure SQL VM intermittently fails
We have a number of Azure VMs running SQL server 2022 in our organization. We create these VMs from a marketplace image that comes with SQL preinstalled. We then go through the configuration steps ...
- 1
0
votes
1
answer
68
views
MySQL CLI asks for password but doesn't use it
I'm trying to connect to a remote MySQL database for replication.
The database is on a machine that's part of a secured network, so after opening the security enough to allow my replication ...
- 11
0
votes
0
answers
312
views
invalid username/password; logon denied with kerberos authentication
I am attempting to configure Oracle with Kerberos. I have completed all of the necessary configurations and have obtained a ticket. However, when I run SQLPlus /@ORCL, I receive the following error:
C:...
- 1
1
vote
1
answer
276
views
Module signing on a trigger which accesses system views. Base table is on a custom schema
Some background:
Question is follow up of this question:
Is there a way in SQL Server to make a table only able to insert by trigger?
I'm trying to achieve what the answer to the original question ...
- 1,550
0
votes
0
answers
34
views
I am able to login using server, client and x509 authentication in MongoDB community edition
I am trying to configure x509 authentication for mongodb community edition. Though I have configured the same, I am able to login using server as well as client authentication along with x509 auth. Is ...
1
vote
1
answer
57
views
SQL Server login with specific permissions
I'm a junior DBA. I want to create a SQL Server login that can access all databases, take backups, read tables, and update table values.
I thought of giving that login processAdmin as server role and ...
- 19
0
votes
0
answers
85
views
connection failed: FATAL: role "y" does not exist when .ini has role "x"
I have a Python program for PostgreSQL database management. Today it started throwing
psycopg.OperationalError: connection failed: FATAL: role "role_a" does not exist
Connection parameters ...
- 133
0
votes
0
answers
358
views
How to get NTLM version authentication with select statement in SQL Server
From my using SSMS I connect to SQL Server 2019. I would like to know what authentication is my current session connection using. I executed SQL:
select
auth_scheme
from
sys....
- 357
0
votes
2
answers
1k
views
PostgreSQL: Pgbouncer authentication
We are using authentication file mode in pgbouncer. The authentication part of Pgbouncer is so confusing. Would be helpful if anybody can throw some light on my below queries.
Are Pgbouncer ...
- 341
0
votes
0
answers
48
views
How to use AAD-MFA on SQL 2022 on an Azure VM?
So apparently SQL Server 2022 now supports the use of AAD-MFA (Azure Active Directory with Multi-Factor Authentication) as an auth method. (Source)
However, this requires Azure Arc, and according to ...
- 658
2
votes
1
answer
3k
views
How do I change the Authentication Plugin for users mysql.sys, mysql.session, etc?
I use MySQL version 8.0.34 on a Debian server.
With the latest update I get the message that mysql_native_password is deprecated and I should rather use caching_sha2_password instead.
With my own ...
- 33
0
votes
1
answer
291
views
PostgreSQL client on Windows to access PostgreSQL server on Linux using Active Directoy Kerberos authentication
TEST 1 - PostgreSQL with Active Directory authentication
I have installed PotgreSQL Server v15.3 on Red Hat 8.8 and integrate PostgreSQL authentication using Active Directory.
In pg_hba.conf I have ...
- 357
0
votes
1
answer
137
views
Indexing of hash-value column vs INT IDs for session tokens
Let's say:
your application should use session IDs generated with a CSPRNG, which shall authenticate your user sessions
your system uses PHP 8.2 and MariaDB 10.6
Which of the approaches below ...
- 163
1
vote
2
answers
12k
views
How to correctly replace 'default_authentication_plugin' with 'authentication_policy'?
I have MySQL 8.0.33 on Ubuntu. In the error log, I see the following warning:
[Warning] [MY-010918] [Server] 'default_authentication_plugin' is deprecated and will be removed in a future release. ...
6
votes
5
answers
3k
views
SQL Server with multiple databases (one per client) - what is the best security practice in terms of logins/users/permissions?
We have multiple SQL Servers with each holding dozens of databases - one per client (a client in this case means a customer organization). These databases are accessed via an application, but the ...
- 675
1
vote
0
answers
79
views
Windows authentication on remote client accessing SQL Server 2022 with SSMS [duplicate]
I have installed SQL Server 2022 on Windows Server 2019 Datacenter, and applied the March SQL Server 2022 Cumulative Updates. Also installed on the server is SSMS 18.12.1 and 19.0.2.
On a remote ...
- 11
0
votes
1
answer
140
views
Oracle RADIUS authentication requiring to re-authenticate for every query
My company has switched the Oracle authentication from a password to RADIUS authentication. The only change I needed to make in Oracle SQL Developer was oracle.net.authentication_services = RADIUS. I ...
- 103
1
vote
0
answers
74
views
PostgreSQL: data retrieval from a private (authentication-based) RESTful web API using a foreign data wrapper
In some cases, one want to feed or populate some PostgreSQL database tables using data fetched from the web, e.g. through a RESTful API (serving JSON features).
I've recently discovered foreign data ...
- 384
0
votes
2
answers
87
views
Microsoft SQL Server migration and users conflict resolution?
When moving a server from one machine to another, it is necessary to re-create the SQL Server users from the old machine.
But when moving databases, they are moved with those users already in.
Problem ...
1
vote
1
answer
210
views
Cannot run nodetool commands after enabling JMX authentication in DSE
I would like to use these two pages to enable DSE Unified Authentication and realize a secure environment.
I have tried to configure it but it does not work.
How is it as a symptom.
When I type ...
- 41
0
votes
1
answer
223
views
Passwordless access to psql from Administrator WITHOUT any password (Windows)
Yes, I know there are plenty of answers on how to access psql without password... while specifying password somewhere.
I do not have context this luxurious. I do not have any password. What I do have ...
- 503
0
votes
2
answers
5k
views
How to fix authentication through pgpool?
I have a cluster that consists of:
pgpool
master
slave
Using pgpool-II version 4.3.2 and
Postgres 14.4
Several users have been created, all are authenticated through pgpool.
There was a need to ...
- 131
-1
votes
1
answer
130
views
Creating a database with authentication enabled on mongodb
I can create a database using a specific role for my "user1".
I have tested and a user "test1" can not create a database in the mode authorization enabled.
How works the creation ...
7
votes
2
answers
19k
views
How to start MySQL after failure?
After I reboot my server, I can no longer start mysql.
I have followed several solutions posted here:
This
This
Or this
Did not help much... :(
I run the following commands to start the service:
...
- 61
0
votes
2
answers
216
views
User handling in MS-SQL database
I have an MS-SQL installation, controlling different databases. This can be accessed using Microsoft SQL Server Management Studio 18. For doing that, I use Windows authentication.
In there, I have ...
- 579
0
votes
2
answers
1k
views
Store LDAP bind credentials in environment variables for pg_hba.conf
I am working on setting up LDAP authentication for a PostgreSQL database and have added the following in my pg_hba.conf file:
# TYPE DATABASE USER ADDRESS METHOD
host all all ...
- 105
0
votes
2
answers
2k
views
How to sync SQL Server Logins with database User after a restore from another server
I have a database server with several databases inside. This server is used as test server to store a set of test databases. The test databases do not come from the same production server thus I can ...
- 101
0
votes
0
answers
489
views
Enable username and password authentication on mongodb sharded cluster
I have a mongodb cluster(1 mongos, mongo config replica set with 2 members, 1 shard with 3 members) and I have enabled internal authentication in config replica set. Also my backend code connects to ...
4
votes
1
answer
11k
views
PostgreSQL: Using the .pgpass file
I have been reading up on the .pgpass file, but I can’t get it working for me.
My .pgpass file looks something like this:
127.0.0.1:5432:accounts:fred:p@55w0rd
I set the privilege to 0600 (this is on ...
- 2,869
2
votes
1
answer
2k
views
Authentication relying on mysql_native_password seems to also check for Linux user?
I have a mariaDB 10.3 install. The mysql.table states that 'root' login relies on mysql_native_password plugin, with no password set.
If my linux user is root, I am able to connect to mysql using;
...
- 23
0
votes
0
answers
98
views
Is it possible to use check_user_proxy on AWS RDS?
My top-level goal is to enable two-user (zero-downtime) secret rotation for RDS users. To recap/summarize the approach, you always have two accounts in your DB that have equivalent access. You switch ...
- 101
0
votes
2
answers
776
views
Designating no password for account in MySQL config file
This is a theoretical question because having a DB account with no password is a terrible idea.
Question: Is there a way to designate an account with no password in the MySQL config file?
- 265
1
vote
2
answers
603
views
DB2 Linux authentication fails
I have DB2 Express-C v10.5 instance configured to authenticate against LDAP. The LDAP sever is going to be shutdown and I should configure the same DB2 instance to use Linux authentication.
I copied ...
- 111
1
vote
1
answer
3k
views
Which authentication is better for MS-SQL Server 2019 : integrated security=SSPI vs uid=sa;pwd=xx | windows auth vs sa auth
In my different web applications I use both ways, however, I would like to learn which method is better:
1: server=localhost;database=x; integrated security=SSPI;persist security info=False; ...
- 553
0
votes
1
answer
6k
views
Does my PostgreSQL instance support kerberos/gssapi authentication?
I installed it following instructions from digital ocean how-to-install-postgresql-on-ubuntu-20-04-quickstart:
% sudo apt install postgresql postgresql-contrib
I also did a 'show all' in psql and ...
- 121
2
votes
1
answer
2k
views
Nested AD group access not working when nested more than 2 levels deep?
For the setup of the security of the databases we have created a number of nested Active Directory groups:
Group
Members
Group type
RGP-EA_PROD-RW
RGP-SparxEA-RW
Domain Local Security
RGP-SparxEA-...
2
votes
1
answer
2k
views
PostgreSQL keeps asking for user password with "trust" authentication enabled
I created a user john with createuser and didn't supply any passwords for it, i.e. no -P option specified. I then proceeded to add the following line above all other lines in the pg_hba.conf file:
...
- 31
1
vote
0
answers
116
views
Saving multiple authentication strategies to the same database
I need some advice with the logic behind this authentication method.
I'd like my app to have multiple ways to create accounts:
email/pass
twitter
google
I can handle the email and password login ...
1
vote
1
answer
672
views
Kerberos Issue - Anonymous Login
I have a linked server that connects one SQL Server to another SQL Server. For two weeks now there has been an error when testing the connection;
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. ...
- 83
1
vote
1
answer
587
views
Can SQL Server OpenQuery/OpenRowSet to an LDAP Linked Server be used for Authentication?
I can fetch data back from LDAPS (port 636/3269) by first creating a Linked Server using sp_addlinkedserver and sp_addlinkedsrvlogin.
However, what I really need to do is to authenticate a Username/...
- 183
0
votes
1
answer
2k
views
PostgreSQL Linux PAM Authentication Error
I'm using PSQL version 12.5 on Ubuntu 20.04.1. My pg_hba.conf file looks like this:
# DO NOT DISABLE!
# If you change this first entry you will need to make sure that the
# database superuser can ...
- 103
1
vote
1
answer
1k
views
Active Directory authentication with SQL Server on Linux containers
I have a problem and hope someone can help me. I have SQL Server as docker container. I want our developers able to login in SSMS (SQL Server Management Studio) using their Active Directory users. I ...
0
votes
1
answer
3k
views
Why do I have to set MySQL user password with mysql_native_password to connect with Workbench?
I've noticed if I set the mysql user's password like below, I cannot connect with MySQL Workbench.
ALTER USER 'root'@'localhost' IDENTIFIED BY 'myPassword'
If I use this below I can connect to it:
...
- 101
-1
votes
1
answer
99
views
How to prevent starting of MongoDb 3.0.3 instance without "--auth" parameter?
I have a local Mongo database for which I have created users and authenticating through my code. But the authentication is only valid if mongo instance is run with "--auth" parameter.
If ...
-1
votes
1
answer
932
views
Best practice for connecting to Postgres from Django [closed]
I recently installed Postgres 11 on my Raspberry Pi 4, and attempted to connect to a database from my Django app:
return psycopg2.connect(dbname="covid")
The connection failed like so:
...
- 109
0
votes
1
answer
338
views
Snowflake: how to allow only Key Pair Authentication connections?
Is there any way to configure Snowflake to allow only key pair authenticated users' connections?
At the moment you can add RSA_PUBLIC_KEY_FP to any user. But he can connect easily without specifying ...
- 164
0
votes
0
answers
46
views
Oracle DB Authentication Prioritization
If an Oracle authentication service has been configured, such as SecurID, does this mean that local users using Username/Password cannot use these credentials to login?
From this link it appears as ...
- 1