The tag has no wiki summary.

learn more… | top users | synonyms

-1
votes
1answer
67 views

Restrict shared folder access to specific computer/IP [closed]

How to configure a server [having DNS and ADS roles installed user account created/configured] to restrict its shared folder access to a specific computer in the network. Sol-1: Solution proposed ...
-1
votes
0answers
25 views

WiFidog and restricted internet access

I am testing out WiFiDog with AuthPuppy. The setup went great, and everything seems to work as expected. The only thing I am now looking for is a way to restrict web access to a select amount of ...
0
votes
1answer
21 views

mysql grant select to ONE table on ALL database

I have many tables with the same table structure. I want to create a user which can access one table in all of those databases. We are adding new databases frequently, so a wildcard would be ...
1
vote
1answer
50 views

Set up nginx for access controlled video streaming

I am trying to create an application thats core it will be to show videos in a learning environment based on meteor/nodejs. The problem is the streaming itself. As described on many pages, node is not ...
0
votes
1answer
48 views

how to assign ip to shared folder

I have a file server on 2008r2 and I want to limit users to connect to the file server only from a given IP, for security reasons. More information: every person has own shared folder on the file ...
0
votes
0answers
32 views

Nginx - Mediawiki - Limit access to the connexion page to specified ip

I would like to limit the possibility to connect to my Mediawiki web site to a specified list of ip. The url to connect are : /index.php/Spécial:Connexion /index.php?title=Spécial:Connexion ...
1
vote
1answer
35 views

802.1X port-based wired NAP Enforcement

I'm learning about NAP enforcement in Windows Server 2008 R2. I am unable to grasp how to enforce NAP based on port. I understand that 802.1x wired NAP Enforcement uses switches to decide whether ...
-1
votes
2answers
148 views

Apache 2.4 - allow access to blog.example.com but restrict access to example.com/blog

I'm trying to set up something like this: If I type the URL blog.example.com or www.blog.example.com, than I can access the content of /var/www/blog But if I type *.example.com/blog, I want to ...
0
votes
0answers
19 views

How secure is it for MSS, Sourcefire IDP to place in inter network?

We have SourceFire Defense Center and MSS LCP place in DMZ. SourceFire IDP is going to be place in our inter network and communicate with SourceFire Defense Center. As the Sourcefire IDP is operating ...
-2
votes
1answer
96 views

Allow access to only two files & redirect all but other file to index.html

I have one html file that includes other files via SSI. I have another zip file available for download. I have found how to redirect the root directory and non-existent files to index.html. I would ...
0
votes
0answers
38 views

Cisco NAC Agent keeps refreshing: Compliance Module version is available?

I have Cisco NAC agent installed on my domain-joined PC. It keeps displaying the following update message randomly: Cisco NAC Agent Compliance Module version xxxxx is available. Do you want to ...
1
vote
1answer
71 views

Apache: Serve content from files that are restricted

In my Apache setup, I have a directory with my error pages in it (404 403). However, I don't want this directory being viewable directly - I'd like accessing it to return a 404. So what I did was ...
0
votes
1answer
145 views

How to Protect a Folder from Browser access but allow PHP scripts to acess it

So I currently have a folder located at /var/www/pictures, with /var/www being the document root for my web server. I want to have the pictures folder to throw a 403 forbidden error if a user tries to ...
0
votes
1answer
363 views

IIS access control by IP address for specific files and folders

I am pretty new to IIS and I want to secure access to a management console of a web app. By design of application there's a virtual directory that's intended for public access, but at the same time ...
3
votes
1answer
311 views

Grant temporary access to Ubuntu 14.04 EC2 machines

My company intends to hire an external contractor for some dev-ops jobs on our EC2 servers. We use Ubuntu accessed using a .pem certificate file. For obvious reasons, I do not want to share my .pem ...
4
votes
3answers
268 views

FreeIPA: prevent local root accessing user accounts

So after asking this question, I've been test-driving FreeIPA as a central authentication source. Managing access to multiple linux system One problem I ran into is that if a user is given local root ...
1
vote
2answers
136 views

Account name changes

The way we currently handle account name changes is quite cumbersome and wondering if there is an easier way to go about things. Name change request comes through and we create a new AD account, ...
1
vote
2answers
178 views

AD - storing last 4 of employee social sec number as the employeeNumber attritubte?

I am currently working on scripting some of our access at work and would love an easy way to enter and retrieve the last 4 of a user's social sec number. It's the primary way we identify people that ...
1
vote
1answer
49 views

Why do we need Allow when we have Require in httpd?

We have directives of Require and Allow which can be used in httpd.conf. Won't "Require ip address" work like "Allow from address ; Deny from all"? As we can see in ...
0
votes
1answer
74 views

What could make OpenLDAP ignore access restrictions?

I'm trying to configure a new installation of OpenLDAP (2.6.39) on Arch Linux. I've used the default core packages to install and configure it, however I cannot get it to obey any access control ...
2
votes
0answers
24 views

Specialized access control for directories in RedHat 6?

I have a requirement where I want to set permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able to ...
0
votes
1answer
111 views

Can I publish to multiple distinct etcd clusters from a single host?

I have a number of distinct etcd clusters, I would like to be centrally controlled: I have multiple distinct etcd clusters. Hosts in one cluster should not have any access to config in another ...
0
votes
2answers
143 views

Any good template to write down server access details? [closed]

I wonder how other fellow sysadmin, web developers manage their inventories. I usually write down all access details in text files, not following any practice or convention. Can someone tell me, if ...
2
votes
1answer
63 views

Dynamic Access Controls limit user access to file based on file metadata and SQL Server table

I'm looking into Dynamic Access Controls as a way to limit user access to files in my file share, but I don't know if it can do what I am trying to do. All of the files in my share have custom ...
1
vote
0answers
142 views

Limit file access/download by count in Apache

I'd like to limit the number of times a file/image can downloaded/viewed to an upper count. For example if I have an image called /Limited.jpg and I wish that it can be downloaded/viewed only 1500 ...
0
votes
1answer
82 views

ESXi 5.0 disabled remote access

I have problem with remote access to my ESXi 5.0 host. Everything was working OK until I rebooted the ESXi host. After the reboot, the following tasks no longer work: Cannot open the initial web ...
3
votes
1answer
3k views

How to block internet access to certain programs on Linux

Recently, I have encountered a problem of limiting Internet Access to specific programs. Could anybody recommend a good way of doing that, without using any particular software?
0
votes
1answer
43 views

Access Control issue

Ok this is stumping me mainly because of the lack of experience I have with access control. I have two folders I need to keep away from users. Payroll and Banking. I went into security and took away ...
0
votes
1answer
36 views

Access Control questions

I have a couple of questions on access control and Group Policy We use a term server for employee's to get certain documents, access databases, etc. I'm trying to build a new access control plan ...
0
votes
1answer
62 views

Protect apache pages by URL

Is it possible to allow access to specific URLs only to certain networks? Basically, I would like to restrict access to the admin area only to the local network This area's pages are prefixed by ...
0
votes
1answer
197 views

Is it possible to restrict the connection duration per client on the router (say with OpenWRT)?

How to limit the connection duration per client per period (say, one MAC-address can connect only for 3 hours per week to the network). Where could be defined such a rule? In the firewall? So the ...
0
votes
0answers
214 views

Windows Server User Permissions issue via Citrix

I have a Windows Server with Citrix Installed on it. Now for those who do not know, Citrix is an Access Management Program that hosts published applications for remote users to access without actually ...
0
votes
1answer
154 views

What is the correct way to deny access to all files with nginx?

This is my configuration of the subdomain dev.mypage.com: server { listen 80; server_name dev.mypage.com; root /home/user/web/dev; index index.html index.htm ...
0
votes
1answer
248 views

Windows Active Directory “Last Logon” of deleted user

How can I find last logon information in Active Directory of a user that has been deleted?
0
votes
2answers
105 views

Prevent Administrators from accessing each others folders on Windows Server 2008

I have a Windows 2008 server running a Rails App, owned by one of our Hardware engineers. Now one of our marketing guys created another rails app and my boss wants me to put it on that same server. ...
1
vote
2answers
60 views

AuthGroupFile - support for nested groups?

I'm currently using groups managed in a simple text file to allow for read and write access to various ressources: res1-r: alice bob res1-w: zak This file is used with the AuthGroupFile directive. ...
2
votes
2answers
114 views

temporary ssh access on all ec2 boxes

I would like to offer a weekend on-call contractor ssh access with sudo on a cluster of production ec2 (ubuntu) boxes. I would like to easily enable/disable access to all the boxes with a simple ...
6
votes
3answers
184 views

Cisco Dot1x Port Authentication - VLAN selected based on what domain the user logs on to on computer?

Currently my company has been bought out by another. Due to this, another two companies users will be migrating into our office. It would be super handy if we could have the vlan chosen for the user ...
0
votes
0answers
33 views

Why aren't my Apache access controls working with my media wiki site?

In this example the working rule is working in that it produces a 503 error when accessed through a proxy server. Whereas, the not working rule is allowing access to all the web. Whats wrong here? ...
1
vote
0answers
47 views

Preventing Python as a gateway to CMD for Standard Users

Someone has hacked our system - using Python as a gateway to open command prompt as an admin - and the hacker shuts down computers remotely using shutdown /i. How can we prevent this using Group ...
0
votes
2answers
48 views

Restricting access to network shares including local adminstrators

I am currently setting up a network share. The permissions are working well. Users are unable to access folders unless they are within a certain active directory group. My one issue is with local ...
2
votes
0answers
184 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
0
votes
0answers
414 views

Does Access-Control-Allow-Origin allow for localhost

I'm working on some CORS configuration and I'm trying to test some things out. I have the following in my enabled site config: Access-Control-Allow-Origin: http://localhost:8082 When I try and ...
1
vote
1answer
1k views

Set Access-Control-Allow-Origin in nginx using wildcard domain

With nginx can I specify Access-Control-Allow-Origin using a wildcard like *.mydomain.com? Would it look like: add_header Access-Control-Allow-Origin *.mydomain.com; Thanks.
0
votes
1answer
267 views

nginx - php-fpm: access restrictions for some php pages

I have a folder containing some PHP files served with php-fpm (fastcgi); inside tihs folder, I have a file which I want to be allowed for internal IPs and deny for external. The problem I have is ...
0
votes
3answers
348 views

restrict root access for certain files or filesystems

I want to store files for my users on encrypted filesystems. Every user would have his own filesystem with his own key. The user is able to log in to the system and mount his filesystem. When they are ...
0
votes
3answers
1k views

Configuring Iptables On CentOS 6 Locks Me Out

I'm running the following bash script as root to configure iptables (I'm logged in via SSH): #!/bin/bash # Delete all existing rules iptables --flush # Set default chain policies iptables -P INPUT ...
3
votes
3answers
203 views

User has excessive rights to W2k8r2 server even when she is a normal user

Really wierd issue this one. I have a user whose PC I have just joined into a domain which is simply a single Windows 2008 R2 server. All users is map to a SHARE that contains their home folders so ...
3
votes
3answers
147 views

Preventing a file edit by users on linux

I know this may sound strange, but I need to allow only scripts to write to a certain file. The file is owned by root, and some users have sudo or root access. They sometimes edit the file by hand, ...
0
votes
1answer
233 views

IP bases access control list script

I would like to setup ACL (python script or any ready made Centos compatible scipt) & limit rate for all IP addresses, who are hitting the site very frequently. For example crawlers, bots (except ...