Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
43 views

How are group ids assigned?

I want to create a developers group on my OS-X system. I'm executing: sudo dscl . -create /groups/developers sudo dscl . -append /groups/developers passwd 'blah' My understanding from reading ...
3
votes
1answer
33 views

Can active directory GPO's apply to a group object?

I know I can set up an OU, move user objects in to it, and link a GPO to that OU and that GPO will apply to those users. Is it possible to set up an OU, move a group in to the OU, and have a linked ...
0
votes
0answers
11 views

How to map roleOccupants to a posixGroup using overlays in OpenLDAP?

I'm looking for some automagic way to add roleOccupant(s) to a posixGroup corresponding to the oranizationalRole. The objective is to automatically give access to certain folders on a GNU Debian Linux ...
7
votes
2answers
260 views

Puppet: how to create and manage unix users and groups

This last week I spent all effort into learning Puppet. Now I suffer from a mental buffer overflow and little confidence of ever being able to tame this beast. I came across many annotated examples ...
3
votes
2answers
38 views

Only a subset of groups available

I have installed RHEL 6.2 and configured for using LDAP with the setup utility and I can login. What is stange is that only three LDAP groups are recognized per user. It is different groups, even for ...
1
vote
2answers
52 views

Linux user group configuration for Git bare repository

I'm using a Ubuntu box to host my bare Git repositories for developers to work off. At the moment I'm creating a user account for each developer on the box because it doubles as a filestore and local ...
0
votes
1answer
45 views

Automatically change UID of file

Due to development policies, all my relevant server files have g+w policies. This is working great, but, for added accountability, I'd like the files to change owner UID upon being edited by other ...
0
votes
0answers
71 views

Clients not recognizing secondary LDAP groups?

I'm having an issue where users who are members of secondary groups in LDAP are not being recognized as members of that group by the client. In this case, user jdoe is not being recognized as a member ...
1
vote
2answers
79 views

Why can't I run sudo -g?

$ sudo -u fish -g fish bash Sorry, user steve is not allowed to execute '/bin/bash' as fish:fish on myserver. $ sudo -u fish bash $ groups fish What's the -g option meant to be used for, and why I ...
0
votes
2answers
391 views

How to add LDAP user to existing group?

I'm attempting to add some of our LDAP users to a locally defined group on our RHEL server, however I get an error stating that the LDAP user is not found in /etc/passwd. What would be the best way ...
1
vote
0answers
83 views

Force AD Security Group Changes to Appear in Exchange

I made changed to security groups within AD, and when I go to the GAL in Outlook I noticed that the changes were not reflected, even after forcing an update by clicking Send Receive | Send Receive ...
2
votes
2answers
118 views

Linux shared writable directory recursively

How can I make a directory recursively read/writable to a group of users? PROBLEM: This is a directory used by apache so access rights should be fairly strict. The only way I could make it ...
2
votes
2answers
90 views

Setting up user permissions for new user

I want to add a new user to my CentOS 6 server (let's call him Barry). I've made the user account Barry and added him to a group I created called webusers like this: groupadd webusers useradd -G ...
2
votes
1answer
54 views

How to secure a group of *nix users to a single directory and it's subdirectories?

We're setting up a CentOS 6.2/ Apache web server with higher security requirements than I'm used to. I've set up a user group called "web" and I want to limit it's members to only being able to read, ...
0
votes
0answers
53 views

How to grant NetworkService access to a share by placing computers in security groups

I'm trying to configure a file share that will be accessed by ASP.Net applications on a set of computers, all running under the NETWORKSERVICE account on those computers. I can get it to work fine ...
0
votes
1answer
82 views

Some users sometimes recieves two identical email

We have problem in our Lotus Notes/Domino environment, sometimes users recieve two identical emails (at the same time) from a recipient. I am not sure, but I think this happens if I send an email to ...
0
votes
1answer
132 views

Inconsistent information in Active Directory Members and Member Of properties

I'm trying to get a list of the members of a group in Active Directory. I'm using LDAP queries, but I think that's not relevant. I've found what I believe to be an inconsistency in Active Directory's ...
0
votes
1answer
43 views

Active Directory / ADAM Group Name Uniqueness

Can I have 2 different groups in Active Directory in different containers that have the same name? For example, can I have an OU=baz that contains a group CN=foo and an OU=bar with a group CN=foo? ...
0
votes
2answers
56 views

Show all users and their groups/vice versa

I know I have existing groups and users but I'm not sure about their association. Is there an shell command I can use to list all users or all groups and a command to list all groups/users for a ...
2
votes
3answers
131 views

What are the consequences of an AD group that has as its member a group, that is already a member (Cyclic references)

I have been looking at an Active Directory that has several thousand groups, where pairs of groups are members of each other. GroupA has GroupB as a Member. GroupB has GroupA as a Member. Oy. I am ...
0
votes
1answer
40 views

External recipients in internal distribution groups

Just some backgroud, we have several users that are contracted to highly secure 3rd party locations they are not able to access webmail! Instead they are given temp user accounts and email address to ...
6
votes
1answer
48 views

Directory with read and write for a user is permission denied, but fine with execute permissions

I have some weirdness with my users/permissions. I currently have a user named world that has the groups world www-data admin. I have a directory at /var/abc which has the permissions 0644 or ...
2
votes
3answers
181 views

Assign log on as local admin to domain account

What I would like to do is grant permission for a domain account to log on to any server/workstation and be a local administrator with having to add this account to domain admin group? This account ...
3
votes
2answers
275 views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
1
vote
1answer
318 views

mrepo and grouplist/groupinstall?, mrepo not working as expected with group

All, I'm trying to set up mrepo so we can have internal repositories. After quite the slog, things seem to be working as expected EXCEPT for groups. From man createrepo: EXAMPLES Here is an ...
2
votes
3answers
74 views

Machine/Computer Groups in Active Directory

I was curious when a person should use Machine Groups within Active Directory? What are the common uses cases for them? How does one keep them up to date as machines are shuffled by a multi-tiered ...
0
votes
1answer
86 views

Maximum number of groups in Linux

I have several questions about linux groups Is there a limit to the number of groups a user can create? Is there a limit to the total number of groups in a system? Is there a limit to the number of ...
2
votes
3answers
84 views

Cross-group file permissions in Linux

I have 2 users: Alice and Bob and 2 groups: Management and Personnel. Alice has primary group Management, and secondary groups Personnel and Alice. Bob has primary group Personnel and secondary group ...
0
votes
1answer
50 views

How can I set up a single user that can edit multiple sites' files with correct default permissions?

How can I achieve this setup: There is a primary user that I use to ssh into the server and edit all files for multiple sites. The various sites are stored in the /srv/www directory, so ...
0
votes
3answers
102 views

is there a good tool for viewing the permissions in AD?

I want to be able to see a nice picture of nested groups in AD. Are there any products that do that for me?
2
votes
1answer
45 views

Exchange 2003 - Internal only group allow external delivery

I have a situation, where there are users in a group, who are only allowed to email internally. I have created an external domain, which i need to allow that internal group to be able to send to, but ...
1
vote
1answer
195 views

Find orphaned foreign security principals and remove them from groups

We have a Windows 2008 R2 Domain with multiple outgoing trusts. In this domain we add the users from the trusted domains to domain local security groups. It seems that some or all deleted accounts ...
0
votes
0answers
72 views

AD PrimaryGroupID, has it changed over time?

I am working on an IDM system connecting 1.5 million users, of which about 600K are synced to Active Directory. 2008R2 Functional level for the forest. One of the issues that interests me is the use ...
0
votes
0answers
75 views

How can I configure a user group to authenticate to RADIUS while everybody else defaults to Active Directory for a VPN connection?

I currently have an NPS policy that forwards all VPN connections to RADIUS server for authentication. I need to modify this configuration so that a certain AD user group is either set up for Windows ...
1
vote
1answer
206 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu ...
1
vote
0answers
32 views

DreamHost: Run each site under a different user, with one Webmaster account that can access all the files

As a measure to combat the problem of hitting DreamHost's "soft" (undisclosed) RAM limit on shared hosting, I'd like to try running each domain/subdomain under a different UNIX user. I would also ...
4
votes
1answer
341 views

Prevent user “click-expansion” of Exchange distribution group?

I am a Unix guy who recently picked up powershell to help my Exchange admin coworkers implement a challenging project in Exchange 2010. (The requirements we've been given are challenging if not ...
1
vote
1answer
29 views

groups and owners with ftp

When a user "U" who is part of group "G" uploads a new file to the server with ftp , the permissions are set as U:U instead of U:G . I know the user is also part of his own group called "U" but how do ...
0
votes
1answer
51 views

How to create special groups and give them special process

I have many admins on the network and I want to specify job for them for example I want to create group responsible for install and run yahoo messenger means I don't want to give them full admin ...
1
vote
1answer
62 views

Creating user groups and assigning users in Windows Server 2008

I'm setting up an FTP server on a Windows Server 2008 r2 system. Rather than deal with setting filesystem permissions for users manually, I would like to simply grant a single group read/write access ...
1
vote
1answer
2k views

Jenkins/Hudson - LDAP group *lookup* does not work

I'm trying to get Jenkins to authenticate users via our active directory groups. If I insert users they are correctly looked up. If I insert group names, they are not found. Edit: Through trial ...
1
vote
3answers
311 views

Managing Active Directory Group Membership with a Non-Administrator Account In Server 2008

I am running Server 2008 R2 in an Active Directory Domain Environment. I have created a group in Active Directory and I have delegated management authority to that group to a user. I want this user ...
2
votes
3answers
298 views

How do you discover what permissions an AD group has, if you have no documentation?

You just got hired at company A and the old administrator is no longer there. Requests start coming through for adding users to the internet restrict group. When you look at the groups none of the ...
3
votes
3answers
276 views

Active Directory Bulk Group Edit

Is there a way to update the "Managed By" field for every group in Active Directory? I would also need to check "Manager can update membership list" also.
3
votes
1answer
611 views

Linux computer (Debian) in a Windows Active Directory Domain, Administrator of AD should have root permission after login

I managed to join my Debian machine (Squeeze) to an existing Active Directory (MS Windows 2008 R2 Server). Everything works fine, I can login using accounts from the Active Directory (NTP, Kerberos, ...
2
votes
2answers
684 views

How to authenticate users in nested groups in Apache LDAP?

I've working LDAP authentication with the following setup AuthName "whatever" AuthType Basic AuthBasicProvider ldap AuthLDAPUrl ...
0
votes
2answers
841 views

How do I enable group enumeration on a Linux server that is using LDAP to connect to an AD server?

I've got a set of servers that I need to authenticate against a central Active Directory forest. The AD admins have kindly installed the UNIX AD extensions and the NIS ones as well, so I've got a lot ...
0
votes
2answers
72 views

Is it possible to configure a service to run as a group and add users to that group on Windows XP?

Is it possible to configure a service to run as a group and add users to that group on Windows XP? I need the service to have the permissions of the users in that group so that they can logonn, ...
1
vote
1answer
102 views

Planning sysadmin group permissions in Windows network

I need to set up a plan for organizing permissions for sysadmins in a 200-server Windows 2003/2008 network. The servers exist in 5 separate forests that are connected via 2-way trusts. At the moment, ...
0
votes
3answers
410 views

Unable to get the SSH access for a new user

I created a new user on ubuntu 10 username: codeuser There is an existing user called "admin". Now, my problem is that I cannot directly connect to the server using the codeuser credentials. But, I ...

1 2 3