The tag has no wiki summary.

learn more… | top users | synonyms

17
votes
3answers
3k views

Slowest wireless client dictates the connection quality of all others?

Not sure if this is the place to ask this, but I couldn't find a more appropriate StackExchange site. I heard that the quality of wireless connection follows the law of the lowest common denominator - ...
14
votes
6answers
2k views

How to grant temporary access to server?

I've hired a remote consultant to tune up my servers. Now, I am not 100% confident about giving him root password and allow him to do whatever he wants to do on the servers. Ideally, I want to see ...
5
votes
7answers
18k views

unable to schedule a task (access denied)

i have a bat file im trying to schedule every morning. whilst in the Scheduled Task Wizard... when i click on finish... i get a ... The new task could not be created. The specific error is: ...
5
votes
2answers
281 views

Weird Apache Access Logs

I see repeated requests like these in my Apache Access Logs and they have been eating up all my CPU. I have a normal WordPress installation. All i changed in the Apache Configuration was changing the ...
5
votes
3answers
4k views

Weird access log on my server

Everyday, there's one IP 58.218.204.110 try to get a non-exist file hxxp://216.245.205.74/judge.php from my server. The IP 216.245.205.74 is not my server IP. Do I just ignore it or is there any ...
5
votes
2answers
640 views

Access control to 100's of LAMP box via LDAP

This is every SysAdmin's nightmare of things to do. Basically we want to control who has access to which hosts. As simple it may sound, the problem is to find a scalable and low maintenance(mgmt. ...
4
votes
4answers
3k views

How to restrict everyone except a certain group in SSH?

I want to restrict all users on a server to only be able to use SFTP while the members of an admin group should have full SSH access. I found that it is possible to restrict the members of a group by ...
4
votes
4answers
386 views

Impact of the size of hosts.deny on network responsiveness

I intend to completely deny access to around 2000 IP addresses by adding proper entries in the hosts.deny file. Will this have an impact on the responsiveness of the system when accessed remotely by ...
4
votes
2answers
146 views

What is the safest way to allow a developer to edit 3 Puppet modules?

We have a developer that has to make 3 Puppet modules for an environment. I want him to be able to write his 3 modules. We currently write our own modules and he is the first person from another ...
4
votes
4answers
3k views

It is fair to jail my SFTP users to their home directory?

roots. I'm running an Ubuntu 9.04 (home) Server on my LAN. I currently use it to store little web apps, photos, some subversion repository and stuff like that. My (few) users are friends of mine and I ...
4
votes
2answers
1k views

Allow ports on EC2 only for Heroku

I have some services - mysql, some HTTP services - which I would like to have open for Heroku exclusively. I can define IP adress / IP mask (I am not sure what it is in EC2 security groups). Which IP ...
4
votes
2answers
707 views

Mac Server Access.log concerns, possibly hacked? (newb sorry)

this is what my web access.log looks like (well a short snippet) 46.4.33.46 - - [20/Jul/2011:11:56:18 +0100] "GET http://allegro.pl/matematyka-wokol-nas-6-zeszyt-cwiczen-czesc-1-2-i1727657348.html ...
3
votes
3answers
763 views

Best practice for multi Admin root access

I'm trying to put together a security policy for a collection of Linux servers. There are 8 people in my organization that require root level access over SSH. At a past company, my solution was to ...
3
votes
1answer
7k views

How to deny access to php files inside a directory? nginx

I've tried a lot of variations of config, but I still can't get it work as it should. Any suggestions? location ~ /views/(.+)\.php$ { deny all; } Config: server { listen 80; ...
3
votes
3answers
503 views

Access logs show someone “GET”ing a random ip, why does this return 200?

I have a small linux box set up with Apache as a way to teach myself Apache. I've set up port forwarding on my router so it's accessible from the outside world, and I've gotten a few strange requests ...
3
votes
2answers
557 views

Is there a good way to secure access to an entire staging server?

I have a staging server and production server that hosts multiple sites (using Apache2.2). Currently, I have the DNS pointing stage.domainX.com to the staging server and *.domainX.com pointing to the ...
3
votes
1answer
2k views

SSH whitelist 2 addresses

We want to block all access to SSH, except for two IP addresses. One address is dynamic, it starts with 124.567.890.xxx where xxx is changing all the time. I read that you can do this by changing ...
3
votes
2answers
830 views

802.1X needs single port per device?

We are planning to implement 802.1X. What is not clear is whether a switch supporting 802.1X can successfully and correctly authenticate multiple devices connected to the same switch port (e.g. if we ...
3
votes
5answers
514 views

Remote access of Linux over IRC

I have been tasked with setting up and supporting some computers for some people who have sociological problems. Troubled teens/adults and the like. They need computers to do very basic tasks like web ...
3
votes
2answers
7k views

FTP 550: Permission Denied

I suddenly get the error 550: Permission Denied in Filezilla when I try to create a new directory. A few days ago I changed some settings on the server regarding ssl and imap settings, but I don't ...
3
votes
1answer
331 views

How to view / enumerate / obtain a list of all effective rights / permissions on an Active Directory object?

I am new to Server Fault and was hoping to find an answer to a question that I have been struggling with for the past week or so. I have been recently asked by my management to furnish a list of all ...
2
votes
1answer
548 views

sudoers restriction only works when using “sudo”, how to restrict regular usage?

I have the following in my sudoers.d/nginx file: deployer ALL=NOPASSWD: /etc/init.d/nginx reload This works if I run the command as sudo: $ sudo /etc/init.d/nginx start [sudo] password for ...
2
votes
3answers
926 views

SSH hosts.deny and hosts.allow

I have this content in hosts.deny (with a new line at the end): # # hosts.deny This file describes the names of the hosts which are # *not* allowed to use the local INET services, as decided ...
2
votes
2answers
325 views

The difference between su and bash

When I access the network server, I use the command sudo su to get admin privileges. Recently I found that sudo bash is the correct command and will allow me privileges those su does not. What is the ...
2
votes
2answers
2k views

Stop Apache from writing duplicate log entries into access_log

I have the following lines pertaining to loggin in my apache vhost file SetEnvIf Request_URI "^/server-status$" dontlog SetEnvIf Request_URI "^/haproxy-status$" dontlog SetEnvIf Request_Method ...
2
votes
6answers
4k views

Cannot find Routing and Remote Access

I have a remote desktop server (Win XP SP3 German), and i need to configure a vpn. However, i cannot find Routing and remote access anywhere - I also tried with Start --> Run --> rrasmgmt.msc, but it ...
2
votes
2answers
1k views

Cloud mapping experiment. Contact research@pdrlabs.net in the access logs

54.204.131.75 - - [09/Jul/2014:17:53:43 +0100] "HEAD / HTTP/1.1" 200 283 "-" "Cloud mapping experiment. Contact research@pdrlabs.net" A new line in my access log the other day. As far as i can tell ...
2
votes
1answer
50 views

Best practice for assigning passwords in a company

I work in a small company and have been spending a lot of time optimizing our network. Our security system is, sadly, abysmal, seeing as no one ever really took care of it. So I'm looking for an ...
2
votes
1answer
3k views

How do I hide a directory of text files on IIS?

I have a directory of text files on IIS. I would like this directory to be hidden. I have set the web.config as follow: <?xml version="1.0" encoding="utf-8" ?> <configuration> ...
2
votes
1answer
513 views

Incoming External Email STOPPED?

Firstly, I should say that I know my way around Windows very well, I don't really know the first thing about Exchange. We are running an sbs2003 Server with exchange. This past week, everyone sending ...
2
votes
1answer
58 views

Permission to files owned by group denied

I think the easiest way to describe is using these pictures: click for image I also tested using chmod -R a+rw minecraft2 What is the problem here?
2
votes
1answer
305 views

Active Directory - Only show accessible shares

I have a Windows 2008 R2 server running Active Directory and sharing folders over the network. Every user can list all shares, even if the don't have the right to access them. This is not a security ...
2
votes
1answer
85 views

MySQL allows entry without Password

I have configured my MySQL Database to require passwords on all users, even root from the machine itself. Now I discovered that there are empty Users in my Database Reproduce: mysql -u root -p and ...
2
votes
2answers
234 views

Can Non-login accounts in Linux make scp connections?

We have some generic Ids for working on the Linux boxes. Recently we decided that the generic account will be locked out for logins and people will get individual IDs (which is always the best choice, ...
2
votes
2answers
196 views

Setting up network of linux servers for multiple user access

looking for a good/best practice soln for dealing with multiple users, accessing multiple linux servers within a network... the users will be accessing the network remotely, tunneling behind the ...
2
votes
2answers
2k views

How to protect a folder in Apache but allow PHP scripts to access it?

I've been thinking a lot about this and can't find a way to do it, maybe it's not possible or maybe I just can't think of way. That's why I'm posting this here right... Basically, I need to protected ...
2
votes
1answer
835 views

Relay Access Denied (State 13) Postfix + Dovecot + Mysql

So we have been scratching our heads for quite some time over this relay issue that has presented itself since we re-built our mail-server after a failed Webmin update. We are running Debian Karmic ...
2
votes
1answer
53 views

central certificate management for server access

I am in charge to realize something similar to this: We are an upcoming startup, expanding pretty fast. Our development team increases nearly every month by 3-5 developer. Our infrastructure now ...
2
votes
2answers
960 views

How to get access denied for files logged in WIndows event log

I need to log access denied events for files and directories on a Windows Server 2008 R2. How do I go about getting them into the Windows Event Log?
2
votes
2answers
993 views

Mounting an Amazon EC2 instance on MAC OS X

What are some methods for transferring files to and from Amazon EC2 instances. I'm looking for solutions / tools for editing files as well as copying files to EC2 instances from both Mac and Windows. ...
2
votes
1answer
694 views

Squid / IPtables allow only connections when accessing a certain proxy domain

I'm not sure if this is a Squid subject or IPTables. In my Squid configuration I have something like this setup: http_port proxy.example.com:8080 I would like Squid to only accept connections from ...
2
votes
4answers
2k views

Restrict access to ESXi

What is the best option to restrict access to ESXi machine so that it could be managed using VSphere client from only certain hosts? I know there is no built-in firewall and everyone recommends ...
2
votes
3answers
786 views

Avoid password check for read of a single file (Apache + dav_svn)

I've got a Subversion repository of private files, served by Apache over HTTPS using dav_svn. I'd like to give users in a single domain read access to a single file from this repository using HTTP. ...
2
votes
1answer
43 views

Should usergroups be enabled?

All our users are managed with a central LDAP. When my predecessor in managing the infrastructure created the ldap he decided against creating usergroups (meaning groups of the same name and GID as ...
2
votes
0answers
112 views

Can't link Deltek Advantage 8.0 (Access 95 bookkeeping GUI) to SQL Server 2005

I have a client with an old 2003 server that bit the dust - I was able to recover the mdf/ldf of their project tracking database and am in the process of building a virtual machine to run it along ...
2
votes
1answer
428 views

Change users timezone settings in MOSS

In MOSS 2007 I am trying to change the timezone settings per user using the follow link (domain removed): https://(domain removed).com/_layouts/regionalsetng.aspx?Type=User&Source= screenshot: ...
1
vote
5answers
535 views

Protecting files from system administrator [duplicate]

Possible Duplicate: protecting my files from root Hi, I am looking for a solution to allow storing files with sensitive information on a remote server in such way that system administrators ...
1
vote
4answers
29k views

How to access localhost from by ip address? [closed]

I am trying to access localhost by my ip address. My ip address is/was http://217.164.79.62/ (It is set to be automatically assigned so it keeps changing). When I enter http://localhost/ into the ...
1
vote
9answers
38k views

Windows 2008 Server cannot access any network share

I run a Windows 2008 server with SP2. This server acts as a desktop alone. Recently, I switched between two networks (corporate and other) using this system. Ever since, I am unable to access any ...
1
vote
1answer
182 views

Weird http request in access_log

I'm seeing weird requests in my access_log 124.31.204.10 - - [24/Jan/2010:09:37:29 +0000] "CONNECT 205.188.251.43:443 HTTP/1.0" 500 10488 "-" "-" None of those IP's are mine: 124.31.204.10 - this ...