The access-control tag has no wiki summary.
0
votes
0answers
20 views
Redmine and file manager with different access for roles
I am using redmine 1.2.1 for small projects. Mainly for reporting issues from a customer and publishing new versions for him. I would like to use it also for storing documents and other internal ...
53
votes
6answers
2k views
Ending company IT Admin relationship
We have been using a company to administer our (small office) IT infrastructure. We don't have complete records of what has been done/hasn't been done and don't know what we need to ask for in order ...
2
votes
1answer
23 views
Apache HTTPD proxy - Deny directive ignored
I am running CentOS 5.5 with the stock Apache httpd-2.2.3.
I want to set up a proxy server which will forward proxy requests from a single IP address (123.123.123.123 in the example below) and reject ...
1
vote
0answers
45 views
Free Virtualization products with access control [closed]
My small research lab is still running an old rack server with VMWare Server 2 providing our virtual machines, mostly for test environments and online experiments. Access to the web interface is ...
1
vote
1answer
27 views
How can I use different database realm for different “instances” of an application for authentication?
I have a web application on apache/httpd. By copying this application and putting it in a different directory under document root, I creat a new instance of that application. I do set up a new ...
1
vote
1answer
101 views
Guest Internet access for an hotel
First of all, thanks so much for all the help from all the techies on this site.
We have to implement the ability for guests to use the internet over wireless for an hotel.
When guests check into ...
2
votes
1answer
89 views
Why does IIS use the IUSR_Machine account to load aspnet_isapi.dll when it should use application pool account?
I was recently tasked with fixing a Windows Server 2003 server running IIS 6.0 that was giving:
HTTP Error 401.3 - Unauthorized: Access is denied due to an ACL set on the requested resource.
It ...
1
vote
4answers
175 views
Restrict access to certain USB drives
Our company are currently in the process of rolling out authorised encrypted USB sticks. We have now drafted into the IT policy that only company approved USB devices and removable media are allowed ...
0
votes
1answer
65 views
Best Practice for Remote Development
I posted on webmasters, but someone suggested I ask here...
http://webmasters.stackexchange.com/questions/26517/securing-access-to-server
We have developers who work remotely and servers at an ISP. ...
1
vote
1answer
153 views
how to restrict /wp/wp-admin files to my private ip adresses
I have a wordpress site under /wp directory, with nginx web server.I want to restrict /wp/wp-admin files to my private ip adresses and return an error to unathorised clients.
the problem is wp-admin ...
0
votes
0answers
58 views
Allow access from specific domains in qmail
My qmail smtp server successfully receives mail from domain.com. It can't receive mail from sub.domain.com which is expected behaviour, since that subdomain does not exist in DNS system. But I have a ...
0
votes
1answer
126 views
Access Control Allow Origin of Openfire XMPP server
I'm running an Openfire XMPP server on a virtual hosting service. When I sent an XmlHttpRequest to that server by Javascript, I got the error from Chrome's dev console:
"XMLHttpRequest cannot load ...
1
vote
2answers
62 views
Lock down or limit user access on Windows Server 2000/2003?
I am looking for a way to severely restrict user account access on Windows servers. Is there a way to programmatically do this? I have found a few options like forcing a user to start in a program ...
11
votes
7answers
373 views
What are some secure alternatives to FTP?
This Hacker News story is all about the downsides of FTP. The only reason I might set up FTP is that it's easy.
I know about and use scp already, but sometimes I want to share files with someone ...
1
vote
2answers
103 views
Redirecting users who have come from the wrong Referer
Ignoring the merits of whether we should make this change or not (the circumstances are slightly complex and probably covered by my NDA), our client would like us to require that visitors to the site ...
2
votes
1answer
53 views
Restict access to control panel for one user
Is there a way to restrict control panel access to specific users on Windows 2008 R2?
I have only found a way to prohibit access to all limited users in group policy, but not a way to do it for ...
5
votes
3answers
337 views
Open source system for swipe card access?
We're looking at replacing our campus-wide magnetic swipe card system with something more robust. The "programmer" side of me says there's got to be an open-source, scalable solution that already does ...
3
votes
2answers
72 views
Setting up a limited user account on Windows Server
I'd like to create a user account on a Windows Server which can read whatever bits of C:\ it needs to be able to execute programs, but have no read access to D:\ except for D:\Special.
It seems that ...
1
vote
1answer
69 views
Deny all gets overridden by another location block
location /_private {
deny all;
}
location ~ \.php$ {
# Workaround PHP vulnerability:
# http://forum.nginx.org/read.php?2,88845,page=3
try_files $uri =404;
include ...
2
votes
1answer
46 views
Windows 200x Server - User Group vs User privilege conflict
I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. ...
1
vote
1answer
72 views
SQL Server connection for Active Directory users without creating explicit logins for each of them
Users, who are part of an Active Directory domain (Windows Server 2008), need to be able to connect to a SQL Server 2008 R2 (it can be Express edition) with the "public" role rights.
Should I ...
0
votes
1answer
57 views
Specifying multiple acl conditions on one acl line of squid.conf
In squid I need to combine acl conditions in one line:
e.g.
acl allowed_conn src 10.40.50.5 && dstdomain intranet.loc
acl allowed_conn src 10.40.50.6 && dstdomain anothersite.net
I ...
1
vote
0answers
99 views
In OpenLDAP, what does the “manage” access level mean?
Edit: I have discovered the cause of the failures, which is a bug in my customized smbk5passwd module. Line 278 has a faulty #ifdef, causing the operation not to be marked as an internal ...
1
vote
0answers
101 views
anonymous access to domain share on a windows server 2003 domain controller
I've set up a WDS 2003 server for OS installation. (2003 because we need XP support) I also want to use this server to store Acronis images of already installed PCs. The newly installed PCs would be ...
1
vote
2answers
100 views
LDAP: entries for services?
(Apologies if I've got the terminology wrong, I'm fairly new to LDAP)
I am setting up a local LDAP server (Apache Directory Server) with the following structure:
o={my organization name} ...
0
votes
1answer
33 views
Access control based on URL and a file
I have a legacy web application on which I need to set access control based on the URL.
There are only two possibilities: allow from all or allow from my domain.
I believe I can do something like:
...
1
vote
3answers
114 views
Internet access control without squid
I intend to configure a server as a gateway.
I'll use it to manage network users, as well as share the internet connection for this network.
I will not share the Internet with squid, but I still ...
1
vote
2answers
48 views
Problem with SVN access control
I have the following access control file
[groups]
admin = robu, jjtl, dat
user = ulo
[/]
@admin = rw
@user = rw
[/wlp]
@admin = rw
[/wesys]
@admin = rw
@user = rw
But the user group still can ...
1
vote
6answers
92 views
Forbidding the download of a proprietary software, but allowing execution
I am running a server with proprietary software on it that my users can execute via SSH. However, I would like to disallow the download of that software (e.g. the directory containing the executables, ...
2
votes
2answers
61 views
Small confusion with access control directives in Apache
The access control to my server is defined like this:
Order allow,deny
Allow from 127.0.0.1
And this works the way I want it. First, only access from the local machine is allowed and then ...
1
vote
1answer
56 views
Windows file share access permission by computer
Here's what I want to happen:
User A logged into computer in the "Laptops" group: access denied to file share
The same User A logged into computer in the "Terminal Servers" group: access granted to ...
1
vote
1answer
100 views
Preventing phpMyAdmin access from a limited set of IP's
How can I limit the access to phpMyAdmin from only specific IP addresses ? I want phpMyAdmin, which is hosted on a data center to be accessible only from the IP range in my office. LAMP and phpMyAdmin ...
0
votes
2answers
138 views
Secure write access to system file (/etc/aliases)
I'm writing a program (in Python) that needs to modify a system file, /etc/aliases in this case. The software is a web application that typically will run under a dedicated web user, ie "www", ...
0
votes
0answers
14 views
Importing old git projects to Gerrit
I am trying to install gerrit over our git repositories. We have lots of projects that saved in git repositories. After installations everything seems ok from web interface. I can see the projects ...
1
vote
1answer
47 views
IP's requesting long gone files
I released an app almost a year ago that worked by requesting data from some php scripts on my server. That app no longer does this and the php files have been removed. Yet several people still have ...
3
votes
1answer
61 views
How I can tell if a right is being removed by a remote Group Policy?
I need to know how I can tell if a right is being removed by a Group Policy. The right in question is SC_MANAGER_ENUMERATE_SERVICE and is preventing code from opening the Service Control Manager on a ...
1
vote
2answers
161 views
data room access in a hospital
I am the librarian for a large hospital - Hoping to tap into the collective wisdom of the group for a request that came to our library from our IS department
Can anyone provide a resource or ...
0
votes
1answer
179 views
how do I change the path for non-admin user in windows 7
In Windows XP I could change the PATH variable in the Control Panel / System Tool.
When I start "System" in the Win7 Control Panel I can see some information about the computer. At the link "Advanced ...
0
votes
1answer
345 views
haproxy access list using path_dir having issues with firefox
I'm trying to route all requests containing a path directory of /socket.io/ to a separate port with HAProxy.
Here is my config file:
global
maxconn 4096 # Total Max Connections. This is ...
2
votes
4answers
265 views
Running Visual Studio 2010 in a University Campus
We have just installed Windows 7 Enterprise x64 in one of our computer labs being used by students for programming. However, when we installed Visual Studio 2010 Ultimate on the machines, we found ...
6
votes
3answers
4k views
Apache httpd: How can I Deny from all, Allow from subnet, but Deny from IP within that subnet?
I am running CentOS 5.5 with the stock Apache httpd-2.2.3.
I have enabled mod_status at the Location /server-status. I would like to allow access to this single Location in the following way:
Deny ...
2
votes
1answer
421 views
Add user which has free/busy access to all calendars on Exchange 2010
I've been given a challenge in relation to an ongoing IP telephony project at my workplace. The coming system features a client installed on every user's computer from where they can do lookups on ...
0
votes
2answers
153 views
How Can I Restrict FTP to a Particular Local Group?
I am running the FTP daemon VSFTPD. I'd like to control FTP access by adding users to a group such that only members of the defined group can access the FTP services. I am thinking I can do this by ...
1
vote
1answer
165 views
Granting access to authzTo attribute
I'm trying to grant certain accounts auth access to their authzTo attribute in order to allow proxied authorization.
I tried adding this ldif:
dn: olcDatabase={-1}frontend,cn=config
changetype: ...
0
votes
3answers
110 views
Prevent acccess to the C drive
Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
3
votes
2answers
184 views
Is Windows Server 2008R2 NAP solution for NAC (endpoint security) valuable enough to be worth the hassles?
I'm learning about Windows Server 2008 R2's NAP features. I understand what network access control (NAC) is and what role NAP plays in that, but I would like to know what limitations and problems it ...
0
votes
2answers
716 views
Allowing users to configure printer ports without full admin rights on Windows Server 2003 R2 Standard
At our organization, we have multiple levels of support personnel. The lowest (level 1) of these personnel deal with a single job site with about 40 printers. Each site has a Windows Server 2003 R2 ...
1
vote
5answers
563 views
Physical Access Control using Active Directory?
I would like to know if there is a way to use Active Directory for Physical Access Control ?
Example:
All users will have a RFID card or a fingerprint entry registered on the domain (linked to the ...
13
votes
1answer
3k views
How do I add Access-Control-Allow-Origin in NGINX?
I like NGINX but how do I set the Access-Control-Allow-Origin header so I can use web-fonts from my subdomain on my main domain?
0
votes
1answer
157 views
Can a CDN support streaming?
I operate Grinderschool.com, a poker training site run through video sessions. Our subscribers access our videos via either 1) direct download or 2) streaming access. Currently, we have things set up ...
