An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

0
votes
0answers
6 views

Windows: “No permissions have been assigned for this object” - damaged permissions / ACL

We occasionally observe damaged filesystem ACLs. The dialog shows then this message: No permissions have been assigned for this object. Warning: this is a potential security risk because anyone who ...
1
vote
1answer
27 views

CentOS 7 acl not working for apache

I want to access a user's directory from a cgi script. I set the acl on the directory successfully but the script still gets "Permission denied" when trying to access that directory. I su'd to ...
-2
votes
1answer
22 views

Exim4 ACL - Cannot set a global ratelimit

This is the first time I post on this forum, but since I have found a few leads on my problem I am hoping that I will find a solution. I think what I want to do is very simple. I have a web server ...
1
vote
2answers
21 views

ACL permissions failing in ubuntu

Problem I need to give read/write access to a system group called "mongodb" on a USB key that's been formatted as ext4. It seems that the command worked, but when I try to have the system user write ...
0
votes
2answers
54 views

Proxying TCP by hostname

I've got multiple game servers TCP ports on my single host machine. The goal is to have users be able to connect to server1.domain.net and have their directed based on that subdomain. My first ...
2
votes
2answers
128 views

How are Windows MachineKey Container File Name's Derived?

In the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys directory there's an enumeration of Key Containers. The naming convention is <uniqueGUID>_<staticGUID> and I presume the ...
1
vote
2answers
50 views

Active Directory user rights

I'm currently working on a ASP MVC Website solution that I retrieved from a predecessor, and I had to create an active directory machine to support the login implementation using it. Upon a user's ...
0
votes
1answer
18 views

Samba: per-user ip restriction

We have a Samba server with LDAP authentication running. User privileges are controlled by UNIX groups and ACL and everything works just nicely. In the future we will allow users to connect via VPN ...
0
votes
0answers
15 views

ACL settings not being inherited properly when creating sub directory

I am trying to extend ACLs across sub directories that are being created under a parent but for some reason one of my groups is being switched to #effective r-x and the mask is being changed. Any ...
3
votes
0answers
16 views

Recommended Permissions for Virtual Service Accounts on Windows 7+

I'm trying to have an NSIS Installer install a custom service as part of an installation. It would be nice to run the service with one of those typical 'NT Service\xyz' style virtual service accounts ...
0
votes
0answers
45 views

Allow some destination ip/hostnames to bypass acl in squid

We have setup squid for an office environment. We are blocking many multimedia file types like mp3, mp4 etc to prevent bandwidth misuse. Now we have setup media streaming server on our gateway server ...
1
vote
1answer
109 views

Apache2: Allow directory indexing, but restrict file access by type

I need to configure my Apache2 server (version 2.2.22) such that I allow auto-indexing of the WWW root folder and its sub-directories, but restrict access (i.e. restrict download) to just a set of ...
1
vote
1answer
23 views

Is “dc=nomain” a in LDAP ACLs?

I'm trying to set up my first LDAP server. I can't get clients to authenticate using it even though everything seems to be working. i suspect the ACLs might be the problem since i can't see the ACLs ...
0
votes
0answers
14 views

RNDC is not reloading my ACL list in Bind, how can I make it reload without losing Cache?

I have two ACL's, one expired, and one authorized. When I make a change to the ACL and try: rndc reload and rndc reconfig I do not see that the ACL was refreshed. Any ideas?
0
votes
1answer
78 views

SpamAssassin filtering by Exim 4 with virtual user preferences

I would like to configure spam filtering with exim's built-in spam filter support in acl_check_data config section. The piping, exim header modification (to store result) works well. As well as ...
0
votes
1answer
52 views

squid3 blocking access to particular IP not working

I have installed a squid3 on debian and using it as a proxy server. after some time I want to block the particular user using IP address. So I have defined this rule in my squid.conf file but it is ...
0
votes
0answers
34 views

Deny access from from/to subnet

We are running a VPC on Amazon. Our main network is 192.168.0.0/16 We have a subnet at 192.168.1.0/24 Two subnets which are entrypoints for our VPNs at 192.168.2.0/24 and 192.168.3.0/24 And more ...
0
votes
0answers
71 views

Allow ELB healthcheck against nginx but block proxied connections

I have a daemon process that polls a page to monitor system status, as long as everything is happy magic_check.html will exist. As soon as something goes down the file is deleted. I have the AWS ELB ...
0
votes
0answers
636 views

freenas windows acls folder permissions

We have FreeNAS-9.2.1.3-RELEASE-x64 providing a samba share to IIS (hosted by 2012 R2, if that's relevant) ssasan01# smbd --version Version 4.1.6 The freenas server is joined to an AD provided by ...
1
vote
0answers
40 views

Recalculate Windows inherited ACLs for hardlinks

How do I get Windows to recalculate the inherited permissions of a file? A tool (Mercurial) created multiple NTFS hardlinks to the same file from different directories. I can see them using fsutil ...
0
votes
1answer
44 views

Completely block access to Cisco

There is Cisco Catalyst 3850 (WS-C3850-48T-E) which is managed only via management port. There are several VLANs on the switch. Also the switch works as a DHCP server. SNMP & SSH are already ...
-2
votes
1answer
36 views

Removing all ACLs from Directories and Subdirectories in FreeBSD

how do I remove all ACLS in a folder and subfolder and all their content. Really I just want to stop using ACLs. Currently im using setfacl -b NAME But this is per ACL basis. Is there a ...
1
vote
2answers
264 views

Struggling with Haproxy 1.5 ACLs using regular expressions and URL Parameters

I am using Haproxy 1.5.3 setup with ssl on the frontend and also sending ssl to the backend servers. the mode is http and using acls to determine stickyness. My test requests are as follows: wget ...
0
votes
1answer
110 views

Exim4: Deny outgoing emails with specific destination domains to being sent to the smarthost

I try to deny outgoing emails with specific destination domains to being sent to the smarthost but unsuccessfully. I'm on a debian "squeeze" configured to use a smarthost. vi ...
2
votes
0answers
93 views

Windows security: default owner configurable?

The "How owners are assigned and set" Technet article is stating: By default, a new object's owner is the security principal identified as the default owner in the access token attached to the ...
0
votes
0answers
41 views

Partition does not mount with ACL option

Debian 7.5 : Installing package acl I've edited /etc/fstab and added the acl option to / I've remunted the partition to avoid reboot by doing sudo mount -o remount,acl / Problem : The mount command ...
1
vote
1answer
500 views

Can't delete Active Directory object

I've been trying to solve this mystery for a couple of days but I think I've reached a dead end. We have delegated user creation and administration to a group. This permissions are applied to a ...
3
votes
0answers
138 views

Cannot set ACL on ACL-enabled EXT4 partition

I am trying to enable xattrs and acls on a Debian machine. I've (re)mounted the partition in question with user_xattr and acl. (/dev/md3 is the partition in question) root@fs01:/# mount | grep ...
0
votes
1answer
225 views

How to disable ACLs on ZFS in FreeNAS?

I inherited a FreeNAS installation that I recently upgraded to version 9. I have some ZFS mounts that are mounted like this: data1/data on /mnt/data1/data (zfs, NFS exported, local, nfsv4acls) ...
0
votes
2answers
58 views

set ACL for BackupUser

I want to backup a whole bunch of folders from different users remotely. Therefore I created a special user that is able to log into the machine and (should) have the right to read all the files via a ...
0
votes
0answers
303 views

Cisco ASA + FreeRadius: Downloadable ACL configuration

VPN users that are using FreeRadius are having access to all VLANs. VPN users using local authentication have local ACLs applied to their access. I need to know what configuration change I need to ...
1
vote
1answer
67 views

Replace User within Active Directory File Server Share

I have a file server role utilizing an Active Directory Domain on Windows Server 2012 and I'm attempting to replace one User Object with another User Object across all existing file server share ACLs. ...
0
votes
1answer
57 views

copy files to remote server, maintain remote acls

Currently I am using rsync to copy files from local machine to remote. local does not have ACLs while remote does have ACLs. I would like the files that are rsynced across to maintain the ACL's that ...
2
votes
1answer
33 views

Is it possible for the Guest user to lose “Everyone” membership?

It seems that the "Guest" user under certain circumstances is logged in without the membership in the "Everyone" Built-in group on Windows Server 2003. I would like to know in more detail why and when ...
0
votes
2answers
176 views

Varnish ACLs Behind Load Balancer Based on Client's IP

In the following setup: Client -> LB -> Varnish I would like to configure Varnish acls to take certain action based on the Client's IP. The LB sends the client's IP in a variable called ...
1
vote
0answers
36 views

squid apply rules to a some users

Good day: I have a squid 2.7 stable9 installation that works. It is connected to LDAP and the users can authenticate perfectly. I have different rules for instance to block a few websites during ...
0
votes
1answer
90 views

How do I allow users to add/modify files in a directory but not change the directory - Linux

How can I modify a directory so that it is owned by a group and users in that group can add and delete files and create sub directories but are unable to change the permissions on the parent ...
1
vote
0answers
97 views

How can I add ACL entry comments on a Cisco 3750?

I'm trying to find the best way to add comments into my access-lists. For the moment, the only maneer I found is the following one: switch#conf t switch(config)#ip access-list extended VLAN-TEST3 ...
6
votes
1answer
127 views

Best practice for printer ACLs

I have a question about shared printers, and how to best limit access to them. I have a printer shared from our print server (\\server01\printer01) and I locked it down to just the security groups ...
4
votes
4answers
1k views

How can I make an internet facing TFTP server secure?

I have many Cisco IP phones that operate in the following manner (oversimplified): Negotiate with DHCP for IP, DNS, TFTP, etc. Look for SEPXXXXXXXXXXXX.cnf.xml configuration file on TFTP server ...
0
votes
1answer
665 views

QNAP: ACL does not work over NFS

Having difficulties making Linux ACL (getfacl/setfacl) work with NFS shares. We are using Ubuntu clients and QNAP storage as server. At the moment only root user on Ubuntu has read/write access. ...
0
votes
1answer
78 views

Block specific URI with Query String in Varnish

Can someone help to block an URL which has querystrings as part of it in Varnish ? For eg: /abcd.php? Blocking /abcd.php works good yet with ? I'm able to access the page Thanks, Raj
0
votes
0answers
190 views

CygWin SSH server and “StrictModes” via Windows ACL

I have successfully set up the SSH server in a CygWin installation on Win2k3. It works properly through both password authentication and public/private keys. However, once I set 'StrictModes' in ...
1
vote
0answers
248 views

Sharing a folder through NFSv4 and Samba on Ubuntu

I encountered problem with configure samba server above nfsv4. I have 2 servers with Ubuntu 12.04 on both of them. First server serve as NFSv4 storage, for VDI and user shares. File system is ext4. ...
2
votes
1answer
546 views

Powershell: Piping input to Set-Acl

have a messed up folder with inconsistent ACLs which I need to uniform. I hoped to accomplish this with powershell. So I'm trying to search for all files missing the required group and applying the ...
0
votes
0answers
32 views

Program / Service to Allow Multiple Users to use a Single Shared Account

I've found it very common for teams to share a single username / password for online services, such as domain registrars. Clearly, giving multiple people access to a single account by passing around ...
0
votes
1answer
232 views

How do I chmod ACLs to groups with spaces in the name on Mac OS X?

I'm trying to add an ACL for the group "Domain Users", but since it has spaces in the group name it isn't parsed correctly by chmod: $ chmod -R +a 'DOMAIN\Domain Users allow ...
1
vote
1answer
224 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
0
votes
0answers
46 views

windows 2003 Terminal server, “users” item removed from ACL of “HKLM\SOFTWARE\Classes”

After having installed a software on my Windows 2003 terminal server, no user has been able to launch applications anymore. When they log to the server via remote desktop, each icon they click ...
1
vote
1answer
536 views

Logrotate: Postrotate setfacl failed with no such file or directory error

I set some extended ACL entries for /var/log/squid3/ and /var/log/squid3/access.log. sudo setfacl -m u:jetty:r-x,g:adm:r-x /var/log/squid3 sudo setfacl -m u:jetty:r--,g:adm:r-- ...