Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have an Ubuntu server where file-level ACLs are applied on a certain volume. Its params are "rw, acl".

We are evaluating the ease of managing users for this volume. We need to be able to:

  • Define particular groups with particular permissions on directories (recursively).
  • Define users as group admins
    • Admins can add/remove other users from the groups

As usual, there's complexity ahead that is sure to show up but I can't think of yet....

Currently we're tied to LDAP groups; it would be handy to authenticate using LDAP and have some sort of local groups for this particular volume.

We are sure we can use and build the base get/setacl commands to do this, but a prefab UI to this would be desirable; ideally using an admin web page so that the less CLI-bent admins can be happy.

What UIs are out there for this?

share|improve this question
ACL + easy = does not compute. Prepare yourself for complexity. –  Janne Pikkarainen Mar 12 '12 at 21:26
Your question rather reads like you would be needing a GUI for LDAP group management (for adding/removing group members) than ACL management. Other than that, have you thought about exposing the directory structure using Samba and using a Windows client for ACL management? –  the-wabbit Mar 12 '12 at 22:27
@syneticon-dj: (1) One unfortunate twist is that LDAP group manipulation is the direct approach, but due to Business Concerns would not be ideal here. (2) That's an interesting approach. –  Paul Nathan Mar 12 '12 at 22:33
phpldapadmin and LDAP/PAM will give you most of this; exposing the directories via Samba and using allowed/denied groups at a share level should give you the rest. –  Andrew Mar 13 '12 at 5:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.