The access-control tag has no wiki summary.
0
votes
0answers
23 views
Allow access from specific domains in qmail
My qmail smtp server successfully receives mail from domain.com. It can't receive mail from sub.domain.com which is expected behaviour, since that subdomain does not exist in DNS system. But I have a ...
0
votes
1answer
27 views
Access Control Allow Origin of Openfire XMPP server
I'm running an Openfire XMPP server on a virtual hosting service. When I sent an XmlHttpRequest to that server by Javascript, I got the error from Chrome's dev console:
"XMLHttpRequest cannot load ...
1
vote
2answers
46 views
Lock down or limit user access on Windows Server 2000/2003?
I am looking for a way to severely restrict user account access on Windows servers. Is there a way to programmatically do this? I have found a few options like forcing a user to start in a program ...
10
votes
7answers
268 views
What are some secure alternatives to FTP?
This Hacker News story is all about the downsides of FTP. The only reason I might set up FTP is that it's easy.
I know about and use scp already, but sometimes I want to share files with someone ...
1
vote
1answer
66 views
Redirecting users who have come from the wrong Referer
Ignoring the merits of whether we should make this change or not (the circumstances are slightly complex and probably covered by my NDA), our client would like us to require that visitors to the site ...
2
votes
1answer
42 views
Restict access to control panel for one user
Is there a way to restrict control panel access to specific users on Windows 2008 R2?
I have only found a way to prohibit access to all limited users in group policy, but not a way to do it for ...
0
votes
1answer
57 views
How to transform Windows 7 in a “network router”? [closed]
I want to have more control about my home network. Actually it is formed by 2 Win7 PCs + 1 WinXP PC + 1 ADSL Router.
The ADSL Router built in software gives low control about the network. I want ...
4
votes
2answers
122 views
Open source system for swipe card access?
We're looking at replacing our campus-wide magnetic swipe card system with something more robust. The "programmer" side of me says there's got to be an open-source, scalable solution that already does ...
3
votes
2answers
59 views
Setting up a limited user account on Windows Server
I'd like to create a user account on a Windows Server which can read whatever bits of C:\ it needs to be able to execute programs, but have no read access to D:\ except for D:\Special.
It seems that ...
1
vote
1answer
35 views
Deny all gets overridden by another location block
location /_private {
deny all;
}
location ~ \.php$ {
# Workaround PHP vulnerability:
# http://forum.nginx.org/read.php?2,88845,page=3
try_files $uri =404;
include ...
2
votes
1answer
40 views
Windows 200x Server - User Group vs User privilege conflict
I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. ...
1
vote
1answer
51 views
SQL Server connection for Active Directory users without creating explicit logins for each of them
Users, who are part of an Active Directory domain (Windows Server 2008), need to be able to connect to a SQL Server 2008 R2 (it can be Express edition) with the "public" role rights.
Should I ...
0
votes
1answer
32 views
Specifying multiple acl conditions on one acl line of squid.conf
In squid I need to combine acl conditions in one line:
e.g.
acl allowed_conn src 10.40.50.5 && dstdomain intranet.loc
acl allowed_conn src 10.40.50.6 && dstdomain anothersite.net
I ...
1
vote
0answers
64 views
In OpenLDAP, what does the “manage” access level mean?
Edit: I have discovered the cause of the failures, which is a bug in my customized smbk5passwd module. Line 278 has a faulty #ifdef, causing the operation not to be marked as an internal ...
1
vote
0answers
75 views
anonymous access to domain share on a windows server 2003 domain controller
I've set up a WDS 2003 server for OS installation. (2003 because we need XP support) I also want to use this server to store Acronis images of already installed PCs. The newly installed PCs would be ...
1
vote
2answers
74 views
LDAP: entries for services?
(Apologies if I've got the terminology wrong, I'm fairly new to LDAP)
I am setting up a local LDAP server (Apache Directory Server) with the following structure:
o={my organization name} ...
0
votes
1answer
28 views
Access control based on URL and a file
I have a legacy web application on which I need to set access control based on the URL.
There are only two possibilities: allow from all or allow from my domain.
I believe I can do something like:
...
1
vote
3answers
108 views
Internet access control without squid
I intend to configure a server as a gateway.
I'll use it to manage network users, as well as share the internet connection for this network.
I will not share the Internet with squid, but I still ...
1
vote
2answers
37 views
Problem with SVN access control
I have the following access control file
[groups]
admin = robu, jjtl, dat
user = ulo
[/]
@admin = rw
@user = rw
[/wlp]
@admin = rw
[/wesys]
@admin = rw
@user = rw
But the user group still can ...
1
vote
6answers
90 views
Forbidding the download of a proprietary software, but allowing execution
I am running a server with proprietary software on it that my users can execute via SSH. However, I would like to disallow the download of that software (e.g. the directory containing the executables, ...
2
votes
2answers
48 views
Small confusion with access control directives in Apache
The access control to my server is defined like this:
Order allow,deny
Allow from 127.0.0.1
And this works the way I want it. First, only access from the local machine is allowed and then ...
1
vote
1answer
51 views
Windows file share access permission by computer
Here's what I want to happen:
User A logged into computer in the "Laptops" group: access denied to file share
The same User A logged into computer in the "Terminal Servers" group: access granted to ...
1
vote
1answer
55 views
Preventing phpMyAdmin access from a limited set of IP's
How can I limit the access to phpMyAdmin from only specific IP addresses ? I want phpMyAdmin, which is hosted on a data center to be accessible only from the IP range in my office. LAMP and phpMyAdmin ...
0
votes
2answers
117 views
Secure write access to system file (/etc/aliases)
I'm writing a program (in Python) that needs to modify a system file, /etc/aliases in this case. The software is a web application that typically will run under a dedicated web user, ie "www", ...
0
votes
0answers
13 views
Importing old git projects to Gerrit
I am trying to install gerrit over our git repositories. We have lots of projects that saved in git repositories. After installations everything seems ok from web interface. I can see the projects ...
1
vote
1answer
46 views
IP's requesting long gone files
I released an app almost a year ago that worked by requesting data from some php scripts on my server. That app no longer does this and the php files have been removed. Yet several people still have ...
3
votes
1answer
60 views
How I can tell if a right is being removed by a remote Group Policy?
I need to know how I can tell if a right is being removed by a Group Policy. The right in question is SC_MANAGER_ENUMERATE_SERVICE and is preventing code from opening the Service Control Manager on a ...
1
vote
2answers
153 views
data room access in a hospital
I am the librarian for a large hospital - Hoping to tap into the collective wisdom of the group for a request that came to our library from our IS department
Can anyone provide a resource or ...
0
votes
1answer
136 views
how do I change the path for non-admin user in windows 7
In Windows XP I could change the PATH variable in the Control Panel / System Tool.
When I start "System" in the Win7 Control Panel I can see some information about the computer. At the link "Advanced ...
0
votes
1answer
274 views
haproxy access list using path_dir having issues with firefox
I'm trying to route all requests containing a path directory of /socket.io/ to a separate port with HAProxy.
Here is my config file:
global
maxconn 4096 # Total Max Connections. This is ...
2
votes
4answers
208 views
Running Visual Studio 2010 in a University Campus
We have just installed Windows 7 Enterprise x64 in one of our computer labs being used by students for programming. However, when we installed Visual Studio 2010 Ultimate on the machines, we found ...
4
votes
3answers
2k views
Apache httpd: How can I Deny from all, Allow from subnet, but Deny from IP within that subnet?
I am running CentOS 5.5 with the stock Apache httpd-2.2.3.
I have enabled mod_status at the Location /server-status. I would like to allow access to this single Location in the following way:
Deny ...
2
votes
1answer
302 views
Add user which has free/busy access to all calendars on Exchange 2010
I've been given a challenge in relation to an ongoing IP telephony project at my workplace. The coming system features a client installed on every user's computer from where they can do lookups on ...
0
votes
0answers
70 views
Ldap access lists users even if user has no rights
I am trying to set up a more complex Active Directory structure for some testing purposes.
What I did so far:
set up 2 windows (one 2008 and one 2003) to control the same domain
set up an ...
0
votes
2answers
129 views
How Can I Restrict FTP to a Particular Local Group?
I am running the FTP daemon VSFTPD. I'd like to control FTP access by adding users to a group such that only members of the defined group can access the FTP services. I am thinking I can do this by ...
1
vote
1answer
118 views
Granting access to authzTo attribute
I'm trying to grant certain accounts auth access to their authzTo attribute in order to allow proxied authorization.
I tried adding this ldif:
dn: olcDatabase={-1}frontend,cn=config
changetype: ...
0
votes
3answers
104 views
Prevent acccess to the C drive
Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
3
votes
2answers
153 views
Is Windows Server 2008R2 NAP solution for NAC (endpoint security) valuable enough to be worth the hassles?
I'm learning about Windows Server 2008 R2's NAP features. I understand what network access control (NAC) is and what role NAP plays in that, but I would like to know what limitations and problems it ...
0
votes
2answers
614 views
Allowing users to configure printer ports without full admin rights on Windows Server 2003 R2 Standard
At our organization, we have multiple levels of support personnel. The lowest (level 1) of these personnel deal with a single job site with about 40 printers. Each site has a Windows Server 2003 R2 ...
1
vote
5answers
419 views
Physical Access Control using Active Directory?
I would like to know if there is a way to use Active Directory for Physical Access Control ?
Example:
All users will have a RFID card or a fingerprint entry registered on the domain (linked to the ...
7
votes
1answer
2k views
How do I add Access-Control-Allow-Origin in NGINX?
I like NGINX but how do I set the Access-Control-Allow-Origin header so I can use web-fonts from my subdomain on my main domain?
0
votes
1answer
147 views
Can a CDN support streaming?
I operate Grinderschool.com, a poker training site run through video sessions. Our subscribers access our videos via either 1) direct download or 2) streaming access. Currently, we have things set up ...
2
votes
1answer
112 views
Apache avoid password protection for a single file
I want to protect an entire virtual host in Apache, but I still want to allow public access to a single file. The virtual host proxies all requests to a Tomcat server on the back end. What's the best ...
0
votes
1answer
65 views
What can “Users” group do by default from the network without RDP or physical access?
This question is related to my previous question on Log on As a Service;
I have found out that our windows hosting provider's Active Directory domain "Domain Users" group is part of our servers' ...
2
votes
1answer
621 views
Requiring SSH-key Login From Specific IP Ranges
I need to be able to access my server (Ubuntu 8.04 LTS) from remote sites, but I'd like to worry a bit less about password complexity. Thus, I'd like to require that SSH keys be used for login ...
1
vote
4answers
544 views
Subversion: allow read access but prevent checkout?
My company is about to move to Subversion and the initial plan was to put a large amount of archive material in the repo, as well as our current work. The idea was that no one would ever want to ...
0
votes
1answer
133 views
AppArmor Profile for PowerDNS
I am currently working on a new authoritative nameserver using powerdns on Ubuntu 8.04 LTS.
I'd like to have AppArmor protecting this service like it did with bind, but when I look in ...
-1
votes
3answers
296 views
How can I prevent users on my network from using the internet? [closed]
I have project about subscription system using C#
I need to install a server program on a server and a client on the client machine
How can I prevent the user from accessing the internet before they ...
1
vote
1answer
68 views
Access controll strategy for production deployment
We have a development model where every developer is responsible for deploying the program he/she is responsible for.
What we want to achieve is the following:
for all developers to be able to ...
0
votes
1answer
46 views
Limiting conections to an Subversion server based on IP
I want to controls which IP addresses can connect to a subversion repository (svnserve) on a windows box.
Is it possible to configure svnserve itself to do this?
If not what would be the easiest way ...
