Questions tagged [groups]

The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

Filter by
Sorted by
Tagged with
0 votes
2 answers
68 views

Do Windows domain builtin groups grant the same permissions as the equivalent machine builtin groups? (eg, Performance Monitor Users)

I am developing a Windows service that uses PDH to query some performance counter data. It is necessary for the service to by run by another user (ie, not the all-powerful SYSTEM). I am aware that the ...
aampere's user avatar
  • 103
0 votes
1 answer
110 views

Kubernetes NFS volume mount group read not working

I'm having an issue where i'm unable to read files with 0660 permission, which indicates that the group membership doesn't work as intended. Listing and reading files with 0664 works fine. On the NFS ...
JazzCat's user avatar
  • 169
0 votes
0 answers
72 views

AD recursive LDAP query for unexpired temporary group memberships

With Privileged Access Management for ADDS (on-premises), it is possible to temporary add a member to a group, e.g. using powershell Add-ADGroupMember. Additionally, it is possible to use LDAPs ...
rrr's user avatar
  • 101
0 votes
1 answer
121 views

Who should be the owner of a group of service accounts on Google Cloud Platform?

I have an app that requires a set of permissions to various resources on the Platform. I want to have several (say 2) service accounts for this app to separate production activity from dev. Generally ...
vindex10's user avatar
0 votes
0 answers
261 views

Automatically add LDAP users to a local group

I manage about 100 servers running Alma Linux 9.1, each with multiple users. Historically we've had a single account "admin" that everyone logs into when working on a server. I'm moving us ...
miken32's user avatar
  • 964
0 votes
1 answer
442 views

Setting up groups and roles correctly on Google Cloud Platform IAM

I have recently been reviewing our roles and IAM on our very small (but set up a long time ago) organization on GCP and realized that we don't have any Essential Contacts defined (https://console....
Tim Diggins's user avatar
0 votes
1 answer
300 views

LDAP auth for hosts : same user should have different posixgroup memberships while login to different machines(hosts)

Any idea on how to achieve following objective with openLDAP server with unix clients Objective : a) Each user should have separate access restrictions to different hosts(unix servers) through LDAP ...
Janaki's user avatar
  • 1
0 votes
1 answer
152 views

Synchronise Office 365 Group Members

Question: I have a list of internal users who are assigned to an office 365 group A. We now want to make other office 365 groups (B, C, ...) that will inherit/synchronize all users from group A and ...
CuriousGoat's user avatar
0 votes
1 answer
422 views

Users and groups not found, but exist in their respective files

I just encountered a bizarre condition on a Debian system I was working on. Out of nowhere, a program complained that its rungroup could not be found. After a bit of digging around, it seems like my ...
InterLinked's user avatar
1 vote
1 answer
1k views

docker group gets dropped from 'groups' after some time, and with it, my user's membership

I have a fresh installation of Linux Mint 22 (Vanessa) and installed docker with $ sudo apt install docker-compose $ docker -v Docker version 20.10.12, build 20.10.12-0ubuntu4 $ sudo systemctl start ...
questionto42's user avatar
0 votes
0 answers
125 views

pam-auth-update update of /etc/pam.d/common-auth doesn't work

I'm trying to match a FreeIPA user to a local group via FreeIPA group membership. When testing the manual edit of common-auth it works. But I'm trying to generate the file with pam-auth-update so that ...
dmgeurts's user avatar
1 vote
0 answers
45 views

How to configure group based LDAP access to Mercurial

I currently have LDAP authentication configured for Mercurial using the following Apache configuration: <Location /hg> AuthBasicProvider ldap AuthType basic AuthName "...
Alan Spark's user avatar
-1 votes
1 answer
497 views

How do you create a dynamic device group in Intune with membership based on the existence of a file?

How do you create a dynamic device group in Intune with membership based on the existence of a file? Within the add new group feature, I don't see a way to specify a file name, nor a way to utilize a ...
user3208239's user avatar
0 votes
1 answer
219 views

Setting cgroup limits to all users in network

I have a FreeIPA user authentication set up. There are many users in the system already, along with many host systems (configured IPA clients). I want to set up cgroup restrictions on the tasks these ...
Avneesh Mishra's user avatar
1 vote
0 answers
137 views

ejabberd: ldap_filter in LDAP Active Directory

TL;DR: How to setup ejabberd to only allow some Active Directory group members? Hello, After having successfully set up an ejabberd service plugged in to our AD, I'd like to narrow the allowed users ...
Nec's user avatar
  • 11
0 votes
1 answer
3k views

How can I get a list of all disabled domain users with group membership, one user per line, but omit results for users that have no membership?

For example, when our users are terminated, we need to remove all groups. I want to check for groups still connected to user, but not show the users where the groups are removed. I have the following, ...
Owen Williams's user avatar
1 vote
1 answer
855 views

NFS: control file/folder access using groups on the server

I feel a bit stupid to ask as it feels to me to be a very basic question, but anyway I haven't found a solution yet: I have a Linux dataserver and several workstations that mount folders on this ...
hcr's user avatar
  • 15
1 vote
1 answer
864 views

Adding domain user to local group when access to active directory no longer exists

We used to have a domain (foo) but the domain controller machine has been dead for a long time. I am logged into my Windows 10 workstation as foo\mike and would like to add foo\mike to a local group ...
Mike Poole's user avatar
0 votes
1 answer
2k views

Active Directory Export/Import - Users, Group, OU's

I have a 2012 R2 domain controller and need to migrate all users, groups and OU's to a new domain controller. This new DC is in a completely different domain. I've exported the users, groups and OU's ...
jrd1989's user avatar
  • 688
3 votes
3 answers
4k views

How to get the group member list from a Linux computer in the domain? Samba AD/DC

If I run the following command in the computer running as Samba AD/DC i have no issues. It works. sudo samba-tool group listmembers 'domain users' The problem is I would like to read the same (and ...
Nicola Mingotti's user avatar
0 votes
1 answer
253 views

Need of distribution groups in active directory

I know the basic purpose of security group and distribution group in active directory. The security group is used to access the network resource and distribution group is used to send distribution ...
Sathishkumar Thangaraj's user avatar
1 vote
0 answers
370 views

Unix group-based access control with SVN over Apache

I have an SVN repository hosted over HTTPS wiht Apache 2. In an attempt to unify access control lists for SVN as well as other services on the server, and prevent having to deal with multiple copies ...
9a3eedi's user avatar
  • 111
0 votes
1 answer
5k views

LDAP query to get members for all groups in a sub OU

I need to get all users that are members of a set of groups that are configured on a sub OU. The DN for this sub OU is "OU=OU2,OU=1,DC=labo,DC=test". The groups would be in "CN="&...
Matías Mendoza's user avatar
1 vote
0 answers
401 views

Systemd-journal-upload service cant read ssl key file

I am trying to get one of my VM servers (server1) to connect the systemd-journal-upload service to connect to the systemd-journal-remote service on another VM (server2). I already have multiple other ...
D.Joe's user avatar
  • 13
0 votes
1 answer
1k views

getent group database does not match /etc/group

I have a GID which is present in the getent database but not in /etc/group : $ getent group 61876 earlyoom:x:61876: $ cat /etc/group | grep earlyoom $ Is it normal or should I worry ? Shouldn't ...
John Doe's user avatar
  • 137
0 votes
1 answer
912 views

list the users name in specific OU+ the Groups

I need to write a Powershell Script to list the users name in specific OU+ the Groups in which the user belongs to (but I need to list specific Group and not to see all Groups). Ex : OU : A Users ...
Adam2020's user avatar
0 votes
1 answer
354 views

How can I restrict access to Linux server shared directories based on LDAP groups?

Say I have a shared directory "SHARED" on my Linux server, and sub-directories like "REPORTS", "PROJECTS" etc. "REPORTS" belongs to the group "MANAGERS". Every client in the LAN (LDAP logged-in) ...
Marcelo Tenorio de Souza's user avatar
2 votes
0 answers
183 views

Autofs and udev rules to restrict usb permissions to groups

I need some help trying to figure out how to restrict the reading and writing access of usb devices. There are two groups on my system: usbreaders: only should have rights to access and read the usb ...
DG DM's user avatar
  • 35
0 votes
1 answer
66 views

After adding user to a group, can't tell if I'm in it or not?

I added a group called developers sudo groupadd developers then added myself to that group $ sudo usermod -a -G developers nick.weavers Then I issued the command groups to check I'd been added, ...
Nick Weavers's user avatar
7 votes
1 answer
130 views

In what ways can access token update be triggered for administrator accounts on workstations?

This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
alx9r's user avatar
  • 1,653
0 votes
1 answer
148 views

Outlook team calendar in overlay mode

Scenario: We are 4 employees in a team and are using outlook for emails and calendar. We as a team want to be able to have one single calendar view that displays: - the events where our whole team is ...
mhombach's user avatar
0 votes
1 answer
60 views

hyper-v availability group

We are setting up SQL AG's (availability groups) on Hyper-V. We want to use SQL Server for HA and DR. IE:- We want SQL Server to perform failovers between SQL replicas, we don't want SQL and Hyper-V ...
Gary Wright's user avatar
1 vote
0 answers
362 views

Cannot execute pip, even with correct permissions

I am looking to run pip that is located in a conda environment here: /opt/conda/envs/myenv/bin After activating the conda environment and running pip: $ conda activate myenv $ pip --help I ...
sccrthlt's user avatar
  • 111
5 votes
2 answers
82 views

Linux complex file sharing between users [closed]

Let's start with the elephant in the room: I have no formal training and I've been given a couple of small servers to manage for various, off-topic reasons. This to say that my knowledge is patchy. ...
theuncle2k's user avatar
2 votes
1 answer
2k views

Ansible user module fails when group parameter matches name parameter (e.g. creating user & group name)

Trying to create an Ansible playbook to create a user (user module) on RH/Cent system (e.g. useradd). The playbook fails anytime I include the group parameter despite setting the group value to ...
Bryan's user avatar
  • 71
1 vote
0 answers
100 views

PAM LDAP add user to mail group

I've mount a LDAP Server (Debian) using PAM to let my clients connecto via SSH. I'd like to add them to the mail group o let them use the mail somehow. I've tried to create a new CN with gidnumber=8 (...
manulqwerty's user avatar
1 vote
2 answers
289 views

SSH Gateway for accessing remote ssh servers

I am currently have multiple users accessing multiple customer servers with ssh access (which all only allow access from our public office IP). This kind of gets annoying if a new employee enters the ...
jcrosel's user avatar
  • 111
1 vote
0 answers
34 views

Is delegating a granular "Modify permission" on a group possible?

A certain user "x" has below permissions on a group "g"; -> Read/Write all the properties on group. -> Delete the group. Need to add "modify permissions" on the group "g" for user "x" ; but the only ...
Darktux's user avatar
  • 837
3 votes
0 answers
4k views

Local groups mapped to AD users via groups.conf working - but only with ssh login

I'm running a Samba Active Directory domain with Ubuntu 18.04 clients. I used the /etc/security/group.conf file to successfully create a mapping for domain users to the "dialout" group. I tested it ...
BurningKrome's user avatar
0 votes
2 answers
1k views

Unable to remove user from group

Sometime ago for who knows which testing purposes I added www-data to a group of developers called devs. I want to remove it now but it don't let me with the following message: $ sudo deluser www-...
ABu's user avatar
  • 499
0 votes
0 answers
346 views

Incorrect list of groups membership for one user

On one of my servers, my user has a strange problem of group membership. When using id or groups without arguments, the list of groups includes those from the root user, and groups common to my user ...
Mickaël Bucas's user avatar
0 votes
0 answers
1k views

CentOS 7 local repository working for clients but unable to do yum groupinstall(s)

Our internal repository (CentOS 7 mirror) is working with the exception of the groups. I've had a request to convert some of our cli only boxes to a gui and using yum grouplist on any other client ...
Johnny Doe's user avatar
4 votes
1 answer
4k views

Why is the "Domain users" group missing from this PowerShell AD query?

I ran the following PowerShell script to compare a list of groups.... $dasMem = Get-ADUser -Server "<some-srv>" -Identity "<some-usr>" -Properties MemberOf | Select MemberOf $blahx = $...
leeand00's user avatar
  • 4,919
3 votes
5 answers
11k views

Get list of users in a group in FreeBSD

How to get a list of usernames assigned to a group in FreeBSD 11.1? This Question asks for a list of users or a list of groups. This Question asks for users who happen to be members of multiple ...
Basil Bourque's user avatar
2 votes
1 answer
776 views

How Apache and ProFTPD should work together, users and groups ect

I have Apache server running on apache:apache and ProFTPD running on ftpuser:ftpgroup, all my websites are under /var/www/ which is owned by root:root. So the question is when I create a new website ...
Alex's user avatar
  • 121
-1 votes
2 answers
11k views

sudo user is not allowed to execute systemctl

I'm trying to allow a user to use sudo to manage a custom systemctl service, this however seems to fail and I can't figure out why. [root@testvm sudoers.d]# ll total 16 -r--r-----. 1 root root 334 ...
Mark Visser's user avatar
1 vote
1 answer
4k views

Windows users/groups - Anonymous Logon, Everyone, Guest - what is what?

During installing and scheduling connection via DB-links, I've come accross settings permissions for the libraries (DLLs) for the account/group Everyone and account/group ANONYMOUS LOGON. So far, I ...
Tatranskymedved's user avatar
1 vote
4 answers
2k views

Do not show all docker containers to a particular user

I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, ...
noisy's user avatar
  • 91
2 votes
2 answers
10k views

How can I list all of the groups given user belongs to in the samba4 domain?

I have a samba4-based domain. How can I list all of the groups to which given user belongs? I know I can go the reverse way - iterate via all the groups [ samba-tool group list ] and see their ...
pQd's user avatar
  • 30.1k
1 vote
0 answers
860 views

php-fpm cannot acess unix socket

I'm using different PHP-FPM pools with specific users each one. I just switched memcached to use a socket instead of tcp/udp ports (for many reasons including the recent attacks on the 11211 port). I’...
Chazy Chaz's user avatar

1
2 3 4 5
10