An acl, or Access Control List, is part of a security technology which employs a list of object access permissions for each user who can access that object. The term is used in several common implementations ranging from the Microsoft Windows NTFS filesystem to Cisco Internet firewall device rules.

learn more… | top users | synonyms

5
votes
1answer
754 views

Extended ACLs Not Always Being Inherited

I have an application that generates report files in /opt/reports with files owned root:root at 0600. In an attempt to allow an external system to automagically process these reports I created a new ...
3
votes
1answer
49 views

Squid 3.2 - Proper configuration for random outbound IP with a single user authentication?

I'm attempting to use AclRandom for Squid 3.2 and I think I'm a bit confused on the proper method for this. Here is my configuration: http_port 3128 auth_param basic program ...
3
votes
1answer
410 views

Weird permission issue with POSIX ACLs, NFS v3 on Linux

I have two Linux systems, both running Debian Squeeze. Versions of (I think) the stuff involved are: kernel: 2.6.32-5-xen-amd64 ii nfs-kernel-server 1:1.2.2-4squeeze2 ...
2
votes
1answer
319 views

Samba SGID directories and delegation of privileges

What I basically want to do, is to be able to set SGID (setgid) on certain directories from Windows on Samba shares. Reminder: Files and directories created within directory with SGID set inherit the ...
1
vote
1answer
52 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
1
vote
1answer
54 views

OpenLDAP - ACL “set” notation not matching properly

I've got to set up an externally-anonymous accessible LDAP directory on an Ubuntu 12.04 Server, and I want to keep authentication and internal data in a different subtree. Example of the LDAP layout ...
3
votes
0answers
196 views

What Samba settings to use for perfect emulation of Windows ACLs

Can anyone suggest what settings I should use with Samba to get full support for Windows ACLs? At the moment I have the following configuration: /etc/fstab: acl,user_xattr ...
2
votes
0answers
36 views

find nouser equivalent for POSIX ACLs

On a Linux system it is possible to find files that are owned by a uid that does not have a user name assigned with "find -nouser". I have been looking for an equivalent that will search the POSIX ...
2
votes
0answers
30 views

Mercurial storing metadata on OS X

I was searching for convenient incremental snapshot & rollback & show-what-changed solution for my OS X boxes, and ended with simple yet powerful idea — why not create Mercurial repository at ...
2
votes
0answers
59 views

access control list not working on folders

ive got a problem with setting up access control lists for a folder that i want a single user to be able to edit, the permissions were set with the command setfacl -R -m u:mik:rwx ...
2
votes
0answers
460 views

How to configure SAMBA file server to be a windows look-alike?

I'm using an openfiler appliance in an Active Directory (W2k8R2 DC) environment. I would like to make my shares as quite as possible look like windows shares for my users. Most things work well but ...
2
votes
0answers
367 views

Folder shares over NFSv4 private to user groups

I want to share a folder over NFSv4, available to some users, and I'm having permission issues. I set up the folder permissions with setGID so new files are created with the folder group owner. But ...
2
votes
0answers
140 views

Ubuntu: How to force default ACLs to take effect for newly created files/dirs?

I've created the following ACLs for a directory: # file: . # owner: www-data # group: root user::rwx user:www-data:rwx user:deploy:rwx group::--- mask::rwx other::--- default:user::rwx ...
2
votes
0answers
361 views

NFS inherit permissions from shared directory - Mac OS client

Short question: Is there a way to have files on a NFS share on a Mac OS client inherit the permissions of the shared directory? Scenario: Ubuntu 12.04 server Mac 10.7.4 client shared directory has ...
2
votes
0answers
3k views

Can't reset Windows 7 Registry permissions

I am trying to reset win 7 registry permissions using secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose /areas REGKEYS But i am receiving the following error: An ...
1
vote
0answers
24 views

Sharing a folder through NFSv4 and Samba on Ubuntu

I encountered problem with configure samba server above nfsv4. I have 2 servers with Ubuntu 12.04 on both of them. First server serve as NFSv4 storage, for VDI and user shares. File system is ext4. ...
1
vote
0answers
68 views

Default owner and setting sticky bit by default

I have a RHEL 5.5 server and want to set up some specific security for a directory: Please note that I am not asking how to do this one time... that has already been done. I want all new ...
1
vote
0answers
184 views

ACL mask assigned when a group member creates files/directories on a Samba server from Windows effectively make them read-only

Home directories are shared by Samba running on CentOS 6.3 with the following configuration: [homes] comment = Home Directories read only = No inherit acls = Yes ...
1
vote
0answers
40 views

Can Squid3 access PHP Helpers

Can Squid3 use PHP helper programs other than for ACL and redirect? I need Squid to use a PHP program (with mysql access) to set the parent proxy that should be used for a particular connection, so ...
1
vote
0answers
156 views

Sharing a folder through NFSv4 and Samba

I have some trouble getting the proper access right to work for a folder shared through samba and nfs. Connected like this: ┌────────────┐ ┌──────────────┐ ┌──────────────┐ │ NFS-Server ├────┤ ...
1
vote
0answers
2k views

HP Procurve 2910AL allow traffic from VLAN to VLAN

We are trying to setup so that the switch handel routing and communication between a few vlans. And then have a link network up to the fw. Here is the config: Running configuration: ; J9145A ...
1
vote
0answers
118 views

Apache not working with Linux ACL

I'm having a big problem with Apache and ACL. I have two servers, both running CentOS 6.3, but the first one is running CPanel/WHM and the second one is just Apache, ACL and Samba for local sharing. ...
1
vote
0answers
330 views

Squid Random Shared ip proxy

Running Squid with a acl random ip setup, Have 745 ip's in the pool and we are about 10 users that use it with tools that are running multiple threads, Check rankings on Google etc Issue: We did ...
1
vote
0answers
207 views

Squid 3.1: external_acl_type ttl won't work

I have custom script for handling Squid3's external_acl_type and it works fine. In this script (btw, its PHP) I turned on logging every request into the file. As far as I know from docs TTL value ...
1
vote
0answers
174 views

Can I make an ACL in squid for transparent connections?

I have a squid proxy that transparently intercepts connections from an internal network, and is explicit for connections from another network. I want to use authentication for the external network, ...
1
vote
0answers
277 views

NFSv4 ACLS vs NFSv3 KRB5 - problems - alternatives?

So NFSv4 acls don't ignore the umask as far as I can tell. And nfsv3 with kerberos has its own host of problems (with autofs - race conditions with pam). So if we want to use an nfs like system with ...
1
vote
0answers
223 views

Periodically completely lose access to a file (cannot take ownership) in Win 2k8 R2

Running Win 2k8 R2 SP1 64 bit as a web server box with IIS 7/.NET 4. Periodically, I completely lose access to the membership database in one of my sites (ASPNETDB) which causes a "Network Service ...
1
vote
0answers
194 views

Is there a convenient UI to control squid acls?

I'm looking for a convenient way to control access controls (specifically, to block URLs based on regex matching) of a squid server running on OS X. I checked out webmin and it seems incredibly ...
1
vote
0answers
195 views

Combining IP access control with digest authentication in Apache

I want to restrict access to a given site based on two criteria: The IP address of the client (i.e. is it within an allowed range) and; Digest authentication. However, for each range of IPs there ...
1
vote
0answers
129 views

Managing permissions for shared folders on linux the same way we do it in Windows 2003 server

I have a usual file server on windows 2003 server. The users are organized in the active directory per OU, each OU has different access rights to the shared folders. They're all using Windows XP / ...
1
vote
0answers
393 views

AFP AD ACL permissions issues with external drive

Mac OS X Server 10.4.11 connected to an AD domain system serving AFP shares to Mac OS X 10.5.8. If I create a share on the the internal RAID of the server with an ACL that allows RW to all ("Domain ...
0
votes
0answers
20 views

CygWin SSH server and “StrictModes” via Windows ACL

I have successfully set up the SSH server in a CygWin installation on Win2k3. It works properly through both password authentication and public/private keys. However, once I set 'StrictModes' in ...
0
votes
0answers
11 views

Program / Service to Allow Multiple Users to use a Single Shared Account

I've found it very common for teams to share a single username / password for online services, such as domain registrars. Clearly, giving multiple people access to a single account by passing around ...
0
votes
0answers
12 views

windows 2003 Terminal server, “users” item removed from ACL of “HKLM\SOFTWARE\Classes”

After having installed a software on my Windows 2003 terminal server, no user has been able to launch applications anymore. When they log to the server via remote desktop, each icon they click ...
0
votes
0answers
14 views

NFSv4 ACL with directory create perm, but can not read/write files under the directory

Next is what I need to do: Two users admin-x as directory administrator, user-m as the data producer, user 1: admin-x user 2: user-m In the directory named '/share' which with nfsv4 acls set on it, ...
0
votes
0answers
32 views

Samba file mask calculation on ACL - missing r

I would like to ask a detail how samba deals with permission on ACL on servers. I did dig very hard and deep but no luck with this one. I have set ACL support over this think and again, regardles of ...
0
votes
0answers
29 views

Set ACL to allow owner to delete files in share

I have a main shares folder which has the following structure: Share->User Folder->Files I want the users to be able to add files to other users folder, but only the fodler owner to be able to ...
0
votes
0answers
215 views

subinacl.exe does not seem to work for “trustedinstaller” — what is the SID to use instead?

I am looking at re-setting the owner of a big pile of files after changing the owner of the Windows directory and all its subdirectories and files (in a backup made by "cloning" a drive -- if I don't ...
0
votes
0answers
97 views

No acl on nfs mount in RHEL6?

I have several RHEL6 machines. One is exporting an nfs mount to the rest. I have ACL's set on the server (set using setfacl -m), but none of the clients are seeing any of them. Here is my export on ...
0
votes
0answers
19 views

In openldap, how to grant write access to automountMap to a user additional to rootDn?

The need is to define/create a user/account other than rootDn to have all rights on Dn:automountMapName=auto_environments,dc=company,dc=com to add/delete of mount entries. I'm a newbie to openldap ...
0
votes
0answers
106 views

Applying exim ACL to mail from backup server

I use exim as a mail server. To combat spam, I have a catch-all email address, and use a custom email address for every service I sign up to. If they leak my address to a spam list, I can just block ...
0
votes
0answers
37 views

Apache2 block all but static media ( images, js & css )

I have apache on a low-powered server I want to use for static content only. I am looking for a way to stop apache serving any file other than images / css / js etc. I have tried the following ...
0
votes
0answers
41 views

GitHub Enterprise ACLs

Is there a way to do github repos acls on the branch level? Or only on repositories level? Sorry might be a very easy answer, but I can't find the answer in their documentation.
0
votes
0answers
37 views

Openldap disable Anonymous access to userPassword

I would like to disable my openldap server anonymous users to be able to read userPassword field. After I set this ACL: vim olcDatabase\={0}config.ldif ... olcDatabase: {0}config ...
0
votes
0answers
146 views

Trying to block two sites with squidGuard using ACL

this is a proof of concept. I am trying to add two domains to a custom blocklist that I am setting up for only users on a single subnet. I don't want to touch the other subnets that use the proxy. ...
0
votes
0answers
258 views

Squid Proxy Splash page always showing up

I am further along with using Squid to present a splash page to guest users, and I wrote a basic HTML splash page to be presented to users. I wrote the Splash page HTML to grab the url from Squid ...
0
votes
0answers
34 views

modifying user's group nuked ACL…why?

i was configuring vsftpd (Centos 6, btw) and when i changed the primary group, it broke my ACL. i get that the directory got re-chown/grp'd but what was really weird is that i when i reset the group, ...
0
votes
0answers
27 views

Need help adding a group to all folders and files with icacls

We have a shared drive that is managed by one department, but monitored by another for reporting/auditing purposes. Someone accidentally removed the group for the department that has to monitor/audit ...
0
votes
0answers
287 views

Access Control “easy” management for Linux ACLs

We have an Ubuntu server where file-level ACLs are applied on a certain volume. Its params are "rw, acl". We are evaluating the ease of managing users for this volume. We need to be able to: ...
0
votes
0answers
450 views

Squid Reverse Caching Proxy with ACL and Delay Pools

I have to configure a Reverse Proxy Caching Squid box to do: Define Content groups, e.g. images containing gif, png, ico, jpg, jpeg, etc Audio containing mp3, wav, ogg etc Video Archives Binary ...