The acl tag has no wiki summary.
1
vote
1answer
29 views
How to map Windows ACL to Linux ones on a CIFS share?
Context
We have a Windows server with an Active Directory domain and a network share.
I have a Linux machine and I want to mount the share.
sudo mount -t cifs //server/share /mnt/share -o ...
3
votes
0answers
49 views
Weird permission issue with POSIX ACLs, NFS v3 on Linux
I have two Linux systems, both running Debian Squeeze. Versions of (I think) the stuff involved are:
kernel: 2.6.32-5-xen-amd64
ii nfs-kernel-server 1:1.2.2-4squeeze2 ...
0
votes
1answer
26 views
ACL multiple default groups?
With Linux ACL, can you have multiple groups with default access to a folder? I want this for sharing code repositories between different coding groups + several processes. My thinking is, if a user ...
0
votes
1answer
15 views
Squid access logging only specific ACLs?
In squid, is it possible to enable access logging only on a specific ACL?
If so, how?
We have done quite a few searches and were unable to find the proper conf syntax :(
0
votes
0answers
10 views
How do I match a wildcard host in ACL lists in HAproxy?
I have the following lines in my haproxy.conf:
acl valid_domains hdr(Host) -i mysite.com images.mysite.com docs.mysite.com admin.mysite.com
redirect location http://mysite.com/invalid_domain if ...
0
votes
0answers
16 views
How to create an egress ACL for an SPI firewall if policy only forbids connections to external FTP servers?
Well, I want to create an egress ACL for an SPI firewall as described above. The connection also comes from inside and connect to external FTP severs.
Could any body help me to create this ACL?
...
3
votes
1answer
67 views
Extended ACLs Not Always Being Inherited
I have an application that generates report files in /opt/reports with files owned root:root at 0600. In an attempt to allow an external system to automagically process these reports I created a new ...
3
votes
2answers
78 views
Centralised Password Management Software
Currently, the company I work for has nothing in the way of password management - everything is in a big excel spreadsheet that everyone has access to. Obviously this has a whole rash of issues ...
1
vote
1answer
98 views
Linux file ACL and secondary groups
The Problem:
CentOS does not seem to look at secondary groups when using ACL's on a folder or file
Scenario: CentOS 6 basic install, uses LDAP accounts to authenticate users. I am trying to setup ...
2
votes
1answer
74 views
Recursively apply ACL permissions on Mac OS X (Server)?
For years I've used the strong-armed-duo of these two suckers...
sudo chmod +a "localadmin allow read,write,append,execute,\
delete,readattr,writeattr,readextattr,writeextattr,\
...
2
votes
1answer
42 views
openldap search acl
I'm trying to write an access control for OpenLDAP to allow a user to search with a certain base dn, but only get results back from certain sub dn's.
I've played with lots of different rules but cant ...
0
votes
0answers
32 views
How To Grant Folder permissions for WMSvc IIS
Im using Web Deploy with IIS7 and I want to grant permissions on a web site physical folder.
Ive done this before (as I have another physical folder with r/w for WMSvc) but I have forgotten how I did ...
1
vote
1answer
124 views
Change owner recursively with Powershell?
I'm trying to use Powershell to change owner of a folder, recursively.
I'm basically using this code:
$acct1 = New-Object System.Security.Principal.NTAccount('DOMAIN\Enterprise Admins')
...
0
votes
0answers
76 views
Access Control “easy” management for Linux ACLs
We have an Ubuntu server where file-level ACLs are applied on a certain volume. Its params are "rw, acl".
We are evaluating the ease of managing users for this volume. We need to be able to:
...
3
votes
1answer
72 views
Exclude some IPs from a subnet in squid
I have squid configuration to allow access to the proxy from a particular network localnet. I'm blocking access to media to all users except some IPs within the subnet. Here is the relevant part from ...
0
votes
8answers
403 views
Rsync for Windows with support for ACLs
I have a need for a free rsync-like tool for Windows (very preferably with some sort of delta encoding) that supports synchronizing Windows ACLs and can copy open files, probably via VSS/Shadow ...
0
votes
1answer
110 views
HAProxy - Perform multiple rewrites based on conditions
I am trying to rewrite a URI as well as a host header based on some conditions. Here is an example of what I'm trying to accomplish:
I request http://sub1.example.com/test/files/other
if ...
3
votes
0answers
125 views
NFSv4 - ACLs not working
I've setup an NFSv4 server (Debian) and client (Ubuntu/Mythbuntu). It seems that uid username mapping is working nicely out-of-the-box (I get correct usernames on ls -l if the usernames match between ...
0
votes
1answer
180 views
Force SFTP/SCP to copy files with a remote directory's permission
I am having a problem with SFTP and SCP where files that are copied are not inheriting the permissions of the remote parent directory. I have seen similar questions on serverfault where the umask of ...
2
votes
2answers
118 views
Linux shared writable directory recursively
How can I make a directory recursively read/writable to a group of users?
PROBLEM:
This is a directory used by apache so access rights should be fairly strict.
The only way I could make it ...
1
vote
1answer
71 views
Cisco Extended ACL on 2811 Not Working Properly
I am almost positive this is an issue of missing a key component or not declaring/applying the ACL properly, but I am unable to figure out the fix on my own. What I am trying to do is only allow PC2 ...
3
votes
1answer
114 views
Inherit or set permissions for all new files under a specific path
I would like the Linux filing system to set a specific group when new files and directories are created by different users under a specific directory. I know I can use chmod to change existing files ...
1
vote
2answers
74 views
Controlling traffic on a small subnet
I have a small network with a business-class cable modem. I have a *.192/29 block assigned to the internal side of the modem. The first usable IP, .193, is assigned to the cable modem interface. I ...
0
votes
2answers
167 views
Cisco Route-Map Multiple ACL Match (Logical AND)
I'm having difficulty to configure a route-map with multiple matches in AND operation.
The issue is, both match criteria are against ACL, but different ACL.
What I want to do is
route-map TEST ...
0
votes
1answer
102 views
Linux ACL behaviour: settings the mask changes 'ls' output, but not actual permissions
It might be the time of night, but this is puzzling me. Picture the following.
[root@node1 acltest]# getfacl foo/
# file: foo
# owner: root
# group: testuser
user::rwx
group::r-x
other::---
...
3
votes
2answers
131 views
How to allow some (non-admin) users to edit address/phone properties for all AD users?
I need to allow HR people to edit some attributes for all Active Directory users (phone numbers, address, and similar contact informations), without giving them full administrative rights. They will ...
0
votes
0answers
49 views
Set and Force Ownership to SID Everyone
I am trying to set ownership to SID Everyone S-1-1-0 for a mapped network drive. It is mounted in Windows from a linux machine share path using SMB. I can easily do this through the Windows ACL, but ...
3
votes
0answers
135 views
Rate/Bandwidth limiting with haproxy, what are the options?
I have tried reading up on different methods of limiting (rate/bw) with haproxy,
but seems the only working implementation I find is per /32 ip based limit.
Is it possible to do rate limiting based on ...
1
vote
1answer
120 views
Add Port Forward to ASA5505 with IPSEC Tunnel
I have an ASA 5505 on 8.2 in the field already working. It has two interfaces, LAN/inside and WAN/outside. There is an L2 site-to-site IPSec tunnel configured from the outside interface of the local ...
1
vote
2answers
99 views
Why does chmod(1) on the group affect the ACL mask?
I am trying to understand this Unix behavior (which I happen to be testing on Ubuntu 11.10):
$ touch foo
$ setfacl -m u:nobody:rwx foo
$ getfacl foo
# file: foo
# owner: michael
# group: michael
...
0
votes
1answer
70 views
Windows Server : role of SYSTEM and CREATOR OWNER users?
I'm working on a SBS2003 server, and I'm about to clean up on folder permissions. I notice that quite a few folders have the users SYSTEM and CREATOR OWNER set.
Now, I've found descriptions of the ...
1
vote
0answers
86 views
Can I make an ACL in squid for transparent connections?
I have a squid proxy that transparently intercepts connections from an internal network, and is explicit for connections from another network.
I want to use authentication for the external network, ...
1
vote
2answers
206 views
Can I override my umask using ACLs to make all files created in a given directory world readable?
Assume that my umask is 0077.
I have a directory, foo, that I want to have special permissions applied to it. All files I create in foo should be world readable, and all directories should be world ...
0
votes
1answer
149 views
store users and groups permission (ACL) to LDAP
I'm trying to store ACL permissions to LDAP. I have permission for users and for groups (user belongs to many groups). Here is structure i create:
ou=Groups
cn=Admin [posixGroup] ...
3
votes
1answer
177 views
haproxy acl - accept only from specific IPs
I've got haproxy and need to provide smtp to servers which does not have direct connection.
Here is portion of my config:
listen smtp 10.12.23.10:3025
mode tcp
server smtp ...
2
votes
1answer
88 views
Samba SGID directories and delegation of privileges
What I basically want to do, is to be able to set SGID (setgid) on certain directories from Windows on Samba shares.
Reminder: Files and directories created within directory with SGID set inherit the ...
0
votes
1answer
79 views
How do I configure Squid Proxy located at a different location to route internet traffic?
I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work.
My current ...
1
vote
0answers
156 views
Looking for tutorial on FreeBSD based Samba server on ZFS filesystem with OpenLDAP backend [closed]
I am looking for a tutorial for specially:
FreeBSD 8.2 with ZFS as storage (this has been done)
Samba as fileserver
OpenLDAP as user storage
I have set up a FreeBSD 8.2 with ZFS for filestorage, ...
0
votes
1answer
232 views
Impossible to modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap
I start with a fresh installation of openldap 2.4.28 on debian.
They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library.
It's hard to understand ...
1
vote
1answer
26 views
Apache's configuration: sharing same “Deny From” between multiple virtualhosts
I'd like to be able to share same "Deny From" from one VirtualHost to another in Apache's httpd configuration, is there a way to do it?
0
votes
2answers
110 views
Permission, apache user and www folder in Linux
The httpd process runs with apache user/group credential, while /var/www/html folder is owned by root user/group.
What's the best practice to manage permissions on public html folder? Leave them as ...
0
votes
1answer
65 views
Cisco 12.4 ACL with DHCP-obtained address
I figured this would be an easy one, but I've had a good amount of trouble finding this answer myself. I have a Cisco router that I'm setting up to have my Internet connection on one interface ...
0
votes
1answer
189 views
AuthzSVNAccessFile for git-http-backend?
I want to host some git-Repositories.
Is it possible to setup them like SVN-Repos with a central ACL-File? (Have a look at AuthzSVNAccessFile-Directive for example)
Thanks,
Philipp
0
votes
0answers
88 views
ZFS - use pure ACLs to force group write permissions to be inherited
I am migrating a directory structure from a UFS filesystem to ZFS. In the old location I had POSIX ACLs set to force all new files/directories within the structure to be created with group write ...
2
votes
1answer
164 views
icacls granting access to all users on windows 7
I'm trying to give full access (read, write) to a specific folder to all users on Windows 7. The problem is that I don't know how to do that using icacls.
6
votes
3answers
360 views
A network share folder is invisible to users
I have a network share folder that I was recently cleaning up permissions to. I took off the four individual names from the access permissions to the folder, and added a new security group (Universal) ...
0
votes
0answers
69 views
Rsync on AIX w/ ACLS - Unsupported attribute value (124)
Has anyone successfully used rsync to copy ACLs in AIX?
I'm having trouble convincing rsync to apply ACLs to
files as root or otherwise. Googling, reading the source and docs have not
helped so ...
1
vote
2answers
115 views
JBoss basic access
I have JBoss 5 deployed on Solaris 10 - the servers connection has unrestricted high ports (>1023) open to the internet.
I can access the box via ssh & FTP from a second server on the same subnet ...
0
votes
1answer
67 views
Revoke directory access for a particular user in Solaris
I have a need to allow directory access to a particular user on my file system. I want this user to be unable to access any other directory in my file system (initially anyway. It may need access to ...
0
votes
1answer
57 views
Specifying multiple acl conditions on one acl line of squid.conf
In squid I need to combine acl conditions in one line:
e.g.
acl allowed_conn src 10.40.50.5 && dstdomain intranet.loc
acl allowed_conn src 10.40.50.6 && dstdomain anothersite.net
I ...
