The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
21 views

How to Protect a Folder from Browser access but allow PHP scripts to acess it

So I currently have a folder located at /var/www/pictures, with /var/www being the document root for my web server. I want to have the pictures folder to throw a 403 forbidden error if a user tries to ...
0
votes
1answer
31 views

IIS access control by IP address for specific files and folders

I am pretty new to IIS and I want to secure access to a management console of a web app. By design of application there's a virtual directory that's intended for public access, but at the same time ...
3
votes
1answer
171 views

Grant temporary access to Ubuntu 14.04 EC2 machines

My company intends to hire an external contractor for some dev-ops jobs on our EC2 servers. We use Ubuntu accessed using a .pem certificate file. For obvious reasons, I do not want to share my .pem ...
4
votes
3answers
149 views

FreeIPA: prevent local root accessing user accounts

So after asking this question, I've been test-driving FreeIPA as a central authentication source. Managing access to multiple linux system One problem I ran into is that if a user is given local root ...
1
vote
2answers
70 views

Account name changes

The way we currently handle account name changes is quite cumbersome and wondering if there is an easier way to go about things. Name change request comes through and we create a new AD account, ...
1
vote
2answers
99 views

AD - storing last 4 of employee social sec number as the employeeNumber attritubte?

I am currently working on scripting some of our access at work and would love an easy way to enter and retrieve the last 4 of a user's social sec number. It's the primary way we identify people that ...
1
vote
1answer
37 views

Why do we need Allow when we have Require in httpd´╝č

We have directives of Require and Allow which can be used in httpd.conf. Won't "Require ip address" work like "Allow from address ; Deny from all"? As we can see in ...
0
votes
1answer
50 views

What could make OpenLDAP ignore access restrictions?

I'm trying to configure a new installation of OpenLDAP (2.6.39) on Arch Linux. I've used the default core packages to install and configure it, however I cannot get it to obey any access control ...
2
votes
0answers
21 views

Specialized access control for directories in RedHat 6?

I have a requirement where I want to set permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able to ...
0
votes
1answer
80 views

Can I publish to multiple distinct etcd clusters from a single host?

I have a number of distinct etcd clusters, I would like to be centrally controlled: I have multiple distinct etcd clusters. Hosts in one cluster should not have any access to config in another ...
0
votes
2answers
87 views

Any good template to write down server access details? [closed]

I wonder how other fellow sysadmin, web developers manage their inventories. I usually write down all access details in text files, not following any practice or convention. Can someone tell me, if ...
2
votes
1answer
44 views

Dynamic Access Controls limit user access to file based on file metadata and SQL Server table

I'm looking into Dynamic Access Controls as a way to limit user access to files in my file share, but I don't know if it can do what I am trying to do. All of the files in my share have custom ...
1
vote
0answers
94 views

Limit file access/download by count in Apache

I'd like to limit the number of times a file/image can downloaded/viewed to an upper count. For example if I have an image called /Limited.jpg and I wish that it can be downloaded/viewed only 1500 ...
0
votes
0answers
63 views

Apache - Deny access for a sub-location

I have an apache server, and I have configured the location /rest To be open for everyone. Now, I want a sub-location to only allow access from certain IP addresses. I got it working, by doing ...
0
votes
1answer
55 views

ESXi 5.0 disabled remote access

I have problem with remote access to my ESXi 5.0 host. Everything was working OK until I rebooted the ESXi host. After the reboot, the following tasks no longer work: Cannot open the initial web ...
1
vote
2answers
1k views

How to block internet access to certain programs on Linux

Recently, I have encountered a problem of limiting Internet Access to specific programs. Could anybody recommend a good way of doing that, without using any particular software?
0
votes
1answer
41 views

Access Control issue

Ok this is stumping me mainly because of the lack of experience I have with access control. I have two folders I need to keep away from users. Payroll and Banking. I went into security and took away ...
0
votes
1answer
33 views

Access Control questions

I have a couple of questions on access control and Group Policy We use a term server for employee's to get certain documents, access databases, etc. I'm trying to build a new access control plan ...
0
votes
1answer
46 views

Protect apache pages by URL

Is it possible to allow access to specific URLs only to certain networks? Basically, I would like to restrict access to the admin area only to the local network This area's pages are prefixed by ...
0
votes
1answer
83 views

Is it possible to restrict the connection duration per client on the router (say with OpenWRT)?

How to limit the connection duration per client per period (say, one MAC-address can connect only for 3 hours per week to the network). Where could be defined such a rule? In the firewall? So the ...
0
votes
0answers
132 views

Windows Server User Permissions issue via Citrix

I have a Windows Server with Citrix Installed on it. Now for those who do not know, Citrix is an Access Management Program that hosts published applications for remote users to access without actually ...
0
votes
1answer
142 views

What is the correct way to deny access to all files with nginx?

This is my configuration of the subdomain dev.mypage.com: server { listen 80; server_name dev.mypage.com; root /home/user/web/dev; index index.html index.htm ...
0
votes
1answer
141 views

Windows Active Directory “Last Logon” of deleted user

How can I find last logon information in Active Directory of a user that has been deleted?
0
votes
2answers
91 views

Prevent Administrators from accessing each others folders on Windows Server 2008

I have a Windows 2008 server running a Rails App, owned by one of our Hardware engineers. Now one of our marketing guys created another rails app and my boss wants me to put it on that same server. ...
1
vote
2answers
43 views

AuthGroupFile - support for nested groups?

I'm currently using groups managed in a simple text file to allow for read and write access to various ressources: res1-r: alice bob res1-w: zak This file is used with the AuthGroupFile directive. ...
2
votes
2answers
85 views

temporary ssh access on all ec2 boxes

I would like to offer a weekend on-call contractor ssh access with sudo on a cluster of production ec2 (ubuntu) boxes. I would like to easily enable/disable access to all the boxes with a simple ...
6
votes
3answers
146 views

Cisco Dot1x Port Authentication - VLAN selected based on what domain the user logs on to on computer?

Currently my company has been bought out by another. Due to this, another two companies users will be migrating into our office. It would be super handy if we could have the vlan chosen for the user ...
0
votes
0answers
29 views

Why aren't my Apache access controls working with my media wiki site?

In this example the working rule is working in that it produces a 503 error when accessed through a proxy server. Whereas, the not working rule is allowing access to all the web. Whats wrong here? ...
1
vote
0answers
42 views

Preventing Python as a gateway to CMD for Standard Users

Someone has hacked our system - using Python as a gateway to open command prompt as an admin - and the hacker shuts down computers remotely using shutdown /i. How can we prevent this using Group ...
0
votes
2answers
46 views

Restricting access to network shares including local adminstrators

I am currently setting up a network share. The permissions are working well. Users are unable to access folders unless they are within a certain active directory group. My one issue is with local ...
2
votes
0answers
139 views

How can I configure an LDAP ACL such that users may *only* use allowed services?

I am trying to configure acl with attribute allowedService in such a way that users with an application name entry can only login to that particular application. We have users as follows: dn: ...
0
votes
0answers
330 views

Does Access-Control-Allow-Origin allow for localhost

I'm working on some CORS configuration and I'm trying to test some things out. I have the following in my enabled site config: Access-Control-Allow-Origin: http://localhost:8082 When I try and ...
0
votes
1answer
748 views

Set Access-Control-Allow-Origin in nginx using wildcard domain

With nginx can I specify Access-Control-Allow-Origin using a wildcard like *.mydomain.com? Would it look like: add_header Access-Control-Allow-Origin *.mydomain.com; Thanks.
0
votes
1answer
152 views

nginx - php-fpm: access restrictions for some php pages

I have a folder containing some PHP files served with php-fpm (fastcgi); inside tihs folder, I have a file which I want to be allowed for internal IPs and deny for external. The problem I have is ...
0
votes
3answers
277 views

restrict root access for certain files or filesystems

I want to store files for my users on encrypted filesystems. Every user would have his own filesystem with his own key. The user is able to log in to the system and mount his filesystem. When they are ...
0
votes
3answers
1k views

Configuring Iptables On CentOS 6 Locks Me Out

I'm running the following bash script as root to configure iptables (I'm logged in via SSH): #!/bin/bash # Delete all existing rules iptables --flush # Set default chain policies iptables -P INPUT ...
3
votes
3answers
185 views

User has excessive rights to W2k8r2 server even when she is a normal user

Really wierd issue this one. I have a user whose PC I have just joined into a domain which is simply a single Windows 2008 R2 server. All users is map to a SHARE that contains their home folders so ...
3
votes
3answers
137 views

Preventing a file edit by users on linux

I know this may sound strange, but I need to allow only scripts to write to a certain file. The file is owned by root, and some users have sudo or root access. They sometimes edit the file by hand, ...
0
votes
1answer
190 views

IP bases access control list script

I would like to setup ACL (python script or any ready made Centos compatible scipt) & limit rate for all IP addresses, who are hitting the site very frequently. For example crawlers, bots (except ...
2
votes
1answer
983 views

LiteSpeed enable Access-Control-Allow-Origin (no response header on CORS request)

Seriously, I can't find a single page discussing this for litespeed. Using this format in the htaccess "Header set Access-Control-Allow-Origin http://aSite.com" (and https) sends the setting in the ...
0
votes
0answers
53 views

Network Role based routing

Apologies my networking skills are a tad rusty. I'm looking for a way to setup a system that gives me the ability to setup Role-based access to specific network resources. For example, i have three ...
1
vote
0answers
155 views

Multiple Access to Windows Server 2008 R2

I am trying to access my remote server Windows 2008 R2 by going to my computer and opening \188.64.186.121 and this works fine. When I try to simultaniously login on another computer to view the ...
3
votes
2answers
241 views

How do I force all devices on a network to register with IT before connecting, without vulnerability to Static IP-ing or MAC spoofing?

Context: I'm an admin for a midsize corporate network with several overlapping wireless access points and an ethernet cabling infrastructure. To comply with a security audit, we were recently ordered ...
2
votes
1answer
293 views

Intermittent 403 errors when using allow to limit access to url with both explicit IP and SetEnvIf

We are running Apache 2.2.22 on a Solaris 10 environment. We have a specific URL that we want to limit access to by IP. We recently implemented a CDN and now have the added complexity that the IP's ...
0
votes
1answer
61 views

Grant HTTP access based on unix user group

Is it possible to grant network access or HTTP access based on a user's group? At my company we want to set up an internal composer server using Satis to manage packages for the projects we write ...
2
votes
1answer
141 views

Using LDAP Attributes to improve performance for large directories

We have a LDAP directory with more than 50,000 users in it. LDAP Vendor suggests maximum limit of 40,000 users per LDAP group. We have number of inactive users and those are being purged but what if ...
0
votes
1answer
97 views

How to avoid repeating Allow/Deny access control statements across multiple Directory directives in Apache2 VirtualHosts?

On Apache2, I have a VirtualHost with a number of <Directory> directives/sections containing multiple access control statements i.e. <Directory /foo> Order Deny,Allow Deny from ...
0
votes
1answer
265 views

Apache IP-Based Access Control. Allow, Deny, Order Confusion [closed]

This should be an easy one, but I am seeing conflicting information from google, and would like some clarification. I am trying to block access to a site to all but 1 IP address. I am adding Allow, ...
2
votes
1answer
1k views

Configure Web app for external access (IIS7), allowing only certain users via AD group. All users need internal access

We have a Web app running in IIS7 (Server 2008 R2). I now need to allow external access with an SSL certificate, so certain users (e.g. the owner of the company) can use it remotely without VPN. ...
0
votes
1answer
341 views

Squid rate-limiting

I want to limit the number of requests that we get from single IPs, using squid (assume I have to use squid for political reasons), blocking those that make too many requests in a set period of time. ...