The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

0
votes
2answers
158 views

List linux users

I need to find a group in linux that doesn't appear in my /etc/groups file. I run the following command and get an error sudo adduser --disabled-login --gecos 'GitLab' git adduser: The group `git' ...
3
votes
1answer
2k views

Mac OS X Server (10.8) - SMB sharing permissions don't update (when a user is removed from a group)

We're running a Mac OS 10.8.3 server using the File Sharing feature. We have both AFP and SMB sharing enabled. When we change a user's permissions, their permissions are set properly when accessing ...
8
votes
2answers
2k views

What is the canonical use for the “sys” and “adm” groups?

Since the beginning of time (or as long as I remember anyway) linux systems have had a "sys" and an "adm" group. What is the canonical use for them? Would it be appropriate to use either for a "super ...
0
votes
1answer
65 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
2
votes
2answers
88 views

How to make Groups as not readable to Users in AD

We are using taskpads to delegete tasks(such as reset password) to remote admins; the delegation is done at the OU level ; but unfortunately OU contains some special accounts/groups(such as ...
1
vote
1answer
67 views

Additional groups for apache user

When configuring the user/group that apache runs under, does the process run only with permissions of the specified group, or also with those of which the user is a member? For example, if Apache ...
2
votes
3answers
570 views

Automatically add ActiveSync users to AD group?

Is there a way that, upon first successful sync via ActiveSync, a user could be added to an Active Directory group?
2
votes
2answers
962 views

Security Group vs Distribution Group

Within our AD set-up there are a lot of security groups, but only 1 distribution group (that a previous admin created). Both types of group contain lists of domain objects (users in the one I was ...
1
vote
0answers
209 views

Allowing Backup Operator group to use NetBackup

I have a Windows Server 2008 installed with Microsoft SQL Server 2008 and NetBackup. I have a local ID called bckopr1 and is a member of the Backup Operator group. Subsequently, this ID also able to ...
0
votes
1answer
804 views

Remote Administer Local Groups with PowerShell and WMI

How do I administer local groups on a remote server with PowerShell and WMI? For example, I would like to add and remove domain AD groups from the "Remote Desktop Users" group. This article provides ...
0
votes
2answers
113 views

Logging into Linux server gives users 'domain users' for default group can it be changed?

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
0
votes
1answer
439 views

Folder rights doesn't work on group, but does on user

I've got this share where I want to restrict access to two folders so that only members of a group can get access to them. I've done this countless of times, but this time there's something odd going ...
1
vote
1answer
50 views

Win Group Overlap: Authenticated Users and System

I'm seeing some weird behaviour with a few of my ACEs at the minute, particularly when denying the Authenticated Users instead of the usual Domain\Domain Users. As a consequence of this, I can only ...
3
votes
1answer
486 views

Dynamic group membership to work around no nested security group support for Active Directory

My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
1
vote
1answer
3k views

Cross-forest universal groups on Windows Server?

I would like to create a Universal Group whose members are a mix of cross-forests users and groups. In the following example, two forests are mentioned (US and UK) and two domains in each forest ...
1
vote
1answer
130 views

ADSIEdit freezes gettings properties of a group with hundred of thousands members

Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group. When ...
2
votes
2answers
230 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
1
vote
1answer
697 views

How many users can be in a AD LDS group?

Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says : Starting with Windows Server 2003, the ability to replicate discrete changes to ...
0
votes
2answers
503 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
3
votes
2answers
437 views

Apache groups & users web administration

I am looking for a web administration interface to manage my Apache users & groups. Basically, I would like to be able to : List all users Add a new user Remove a user Create a new group Delete ...
0
votes
1answer
534 views

Determine local group membership of an AD user?

I have several local groups on a Server 2008 instance. In this group are several members from our AD domain. Is there a way to determine all of the local groups a given AD domain user belongs to by ...
0
votes
1answer
83 views

Is it safe/secure to use NIS for user and group info (no password hashes)?

I have some systems which currently use Likewise Open to integrate into an AD environment, but this creates UIDs/GIDs which are not compatible with the Unix UIDs/GIDs which some other systems use. ...
0
votes
1answer
48 views

Where can I find a documented lists of permissions given when adding a user to stock groups in major distributions?

I am trying to work out a strategy to appropriately hand out certain levels of permissions to junior admins on the system across multiple distributions, especially Ubuntu Server and RedHat Enterprise ...
2
votes
2answers
1k views

How to Lock Down an Active Directory Remote Desktop User

Please advise me on how I can ensure that remote desktop users cannot install software onto the Active Directory Server they are logging into remotely. Some Background: I have a client whose Server ...
2
votes
1answer
158 views

SSH jumpbox with group Authorisation

I'm trying to setup a SSH Jumpbox. Users logged on the Jumpbox needs to be able to authorize to another SSH servers depending on their group. (UserA is on group Project1, UserB is on group Project2, ...
3
votes
1answer
1k views

Create group to restart services in CentOS

SYSTEM: CentOS release 6.2 (Final) I am attempting to allow only users of a certain group lets call it websupport access to restart 2 services: mysqld and httpd EDIT: I do not want to give these ...
1
vote
1answer
314 views

group permission not working

I'm installing gitlab at my server but I got a permission problem: I have two users, 'git' and 'gitlab', both are part of group 'git', the home dir of 'git' has the drwxr----- permissions. Therefore ...
0
votes
2answers
186 views

how to add groupOfEntries object class to openLDAP

I am working on the design of LDAP structure, that basically should hold users and groups. There should be support for nested groups (so I thought on using groupOfNames object class) and for the ...
2
votes
2answers
591 views

How are group ids assigned?

I want to create a developers group on my OS-X system. I'm executing: sudo dscl . -create /groups/developers sudo dscl . -append /groups/developers passwd 'blah' My understanding from reading ...
3
votes
1answer
212 views

Can active directory GPO's apply to a group object?

I know I can set up an OU, move user objects in to it, and link a GPO to that OU and that GPO will apply to those users. Is it possible to set up an OU, move a group in to the OU, and have a linked ...
10
votes
2answers
5k views

Puppet: how to create and manage unix users and groups

This last week I spent all effort into learning Puppet. Now I suffer from a mental buffer overflow and little confidence of ever being able to tame this beast. I came across many annotated examples ...
3
votes
2answers
190 views

Only a subset of groups available

I have installed RHEL 6.2 and configured for using LDAP with the setup utility and I can login. What is stange is that only three LDAP groups are recognized per user. It is different groups, even for ...
1
vote
2answers
2k views

Linux user group configuration for Git bare repository

I'm using a Ubuntu box to host my bare Git repositories for developers to work off. At the moment I'm creating a user account for each developer on the box because it doubles as a filestore and local ...
0
votes
1answer
252 views

Automatically change UID of file

Due to development policies, all my relevant server files have g+w policies. This is working great, but, for added accountability, I'd like the files to change owner UID upon being edited by other ...
2
votes
2answers
555 views

Why can't I run sudo -g?

$ sudo -u fish -g fish bash Sorry, user steve is not allowed to execute '/bin/bash' as fish:fish on myserver. $ sudo -u fish bash $ groups fish What's the -g option meant to be used for, and why I ...
1
vote
2answers
3k views

How to add LDAP user to existing group?

I'm attempting to add some of our LDAP users to a locally defined group on our RHEL server, however I get an error stating that the LDAP user is not found in /etc/passwd. What would be the best way ...
1
vote
0answers
367 views

Force AD Security Group Changes to Appear in Exchange

I made changed to security groups within AD, and when I go to the GAL in Outlook I noticed that the changes were not reflected, even after forcing an update by clicking Send Receive | Send Receive ...
3
votes
2answers
356 views

Linux shared writable directory recursively

How can I make a directory recursively read/writable to a group of users? PROBLEM: This is a directory used by apache so access rights should be fairly strict. The only way I could make it ...
2
votes
2answers
2k views

Setting up user permissions for new user

I want to add a new user to my CentOS 6 server (let's call him Barry). I've made the user account Barry and added him to a group I created called webusers like this: groupadd webusers useradd -G ...
2
votes
1answer
80 views

How to secure a group of *nix users to a single directory and it's subdirectories?

We're setting up a CentOS 6.2/ Apache web server with higher security requirements than I'm used to. I've set up a user group called "web" and I want to limit it's members to only being able to read, ...
1
vote
0answers
254 views

How to grant NetworkService access to a share by placing computers in security groups

I'm trying to configure a file share that will be accessed by ASP.Net applications on a set of computers, all running under the NETWORKSERVICE account on those computers. I can get it to work fine ...
0
votes
2answers
2k views

Some users sometimes recieves two identical email

We have problem in our Lotus Notes/Domino environment, sometimes users recieve two identical emails (at the same time) from a recipient. I am not sure, but I think this happens if I send an email to ...
0
votes
1answer
652 views

Inconsistent information in Active Directory Members and Member Of properties

I'm trying to get a list of the members of a group in Active Directory. I'm using LDAP queries, but I think that's not relevant. I've found what I believe to be an inconsistency in Active Directory's ...
0
votes
1answer
313 views

Active Directory / ADAM Group Name Uniqueness

Can I have 2 different groups in Active Directory in different containers that have the same name? For example, can I have an OU=baz that contains a group CN=foo and an OU=bar with a group CN=foo? ...
1
vote
2answers
2k views

Show all users and their groups/vice versa

I know I have existing groups and users but I'm not sure about their association. Is there an shell command I can use to list all users or all groups and a command to list all groups/users for a ...
3
votes
3answers
2k views

What are the consequences of an AD group that has as its member a group, that is already a member (Cyclic references)

I have been looking at an Active Directory that has several thousand groups, where pairs of groups are members of each other. GroupA has GroupB as a Member. GroupB has GroupA as a Member. Oy. I am ...
0
votes
1answer
480 views

External recipients in internal distribution groups

Just some backgroud, we have several users that are contracted to highly secure 3rd party locations they are not able to access webmail! Instead they are given temp user accounts and email address to ...
6
votes
1answer
176 views

Directory with read and write for a user is permission denied, but fine with execute permissions

I have some weirdness with my users/permissions. I currently have a user named world that has the groups world www-data admin. I have a directory at /var/abc which has the permissions 0644 or ...
2
votes
3answers
1k views

Assign log on as local admin to domain account

What I would like to do is grant permission for a domain account to log on to any server/workstation and be a local administrator with having to add this account to domain admin group? This account ...
5
votes
3answers
10k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...