The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

1
vote
1answer
79 views

Additional groups for apache user

When configuring the user/group that apache runs under, does the process run only with permissions of the specified group, or also with those of which the user is a member? For example, if Apache ...
1
vote
0answers
63 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
2
votes
1answer
1k views

(Powershell) Method to return a list of groups where a specific user has 'write member' security

We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have '...
2
votes
3answers
892 views

Automatically add ActiveSync users to AD group?

Is there a way that, upon first successful sync via ActiveSync, a user could be added to an Active Directory group?
1
vote
1answer
472 views

can i allow End Users to change the desktop background on Windows Server 2008 r2?

we are currnetly building a system consisting of windows server 2008 r2 (1 of 2 redundnacy) and 2 Win7 workstations. we would like to allow the customer (end users) to change the background at their ...
5
votes
2answers
7k views

Security Group vs Distribution Group

Within our AD set-up there are a lot of security groups, but only 1 distribution group (that a previous admin created). Both types of group contain lists of domain objects (users in the one I was ...
1
vote
0answers
338 views

Allowing Backup Operator group to use NetBackup

I have a Windows Server 2008 installed with Microsoft SQL Server 2008 and NetBackup. I have a local ID called bckopr1 and is a member of the Backup Operator group. Subsequently, this ID also able to ...
1
vote
1answer
408 views

Can users added to certain OU automatically be member of particular group

Windows Server 2008 R2. Can AD be set up so that any user added to a particular OU automatically be assigned to a particular user group?
2
votes
0answers
812 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
0
votes
1answer
2k views

Remote Administer Local Groups with PowerShell and WMI

How do I administer local groups on a remote server with PowerShell and WMI? For example, I would like to add and remove domain AD groups from the "Remote Desktop Users" group. This article provides ...
3
votes
3answers
791 views

Allow members of a group to be unlocked by a specific account on AD

Background I'm creating a service to allow support staff to enable their firecall accounts out of hours (i.e. if there's an issue in the night and we can't get hold of someone with admin rights, ...
0
votes
2answers
168 views

Logging into Linux server gives users 'domain users' for default group can it be changed?

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
1
vote
1answer
1k views

Folder rights doesn't work on group, but does on user

I've got this share where I want to restrict access to two folders so that only members of a group can get access to them. I've done this countless of times, but this time there's something odd going ...
1
vote
1answer
72 views

Win Group Overlap: Authenticated Users and System

I'm seeing some weird behaviour with a few of my ACEs at the minute, particularly when denying the Authenticated Users instead of the usual Domain\Domain Users. As a consequence of this, I can only ...
0
votes
1answer
264 views

Ubuntu - Group users create new files/directory always: -rwxrwxr-x / drwxrwxr-x

I got a directory in which my group is the owner. The group has two users, however, when a user create a directory the other user can't move the files. Why is that and how can I change so that the ...
3
votes
1answer
753 views

Dynamic group membership to work around no nested security group support for Active Directory

My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
1
vote
1answer
5k views

Cross-forest universal groups on Windows Server?

I would like to create a Universal Group whose members are a mix of cross-forests users and groups. In the following example, two forests are mentioned (US and UK) and two domains in each forest (...
1
vote
1answer
165 views

ADSIEdit freezes gettings properties of a group with hundred of thousands members

Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group. When ...
0
votes
1answer
92 views

Linux Permissions via group and user IDs

This is such an elementary question, and I can't believe I've been using Unix (Linux and Mac) for over 5 years without knowing this! The root user has group id 0 and user id 0. Hence lower group ids ...
1
vote
0answers
128 views

Hosted Exchange and distribution group segregation

To keep my question as simple as possible, this is what I would like to address Environment Exchange 2010Sp2 Give users the ability to manage distribution groups that they own through Outlook and ...
3
votes
2answers
336 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
1
vote
1answer
1k views

How many users can be in a AD LDS group?

Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says : Starting with Windows Server 2003, the ability to replicate discrete changes to ...
0
votes
2answers
983 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
1
vote
2answers
433 views

Unix: how can I change Program's running user and running group?

I changed the APACHE_RUN_GROUP in /etc/apache2/envvars to APACHE_RUN_GROUP=web-content because I want Apache to run us www-data:web-content, insetad of www-data:www-data. I hate monotonous manual ...
0
votes
2answers
170 views

How can I make user and group ids the same on two servers?

I have two servers, one of which has a volume from the other mounted as an NFS device. I have an application on the mounter that creates files that must then be manipulated by an application on the ...
0
votes
1answer
808 views

Determine local group membership of an AD user?

I have several local groups on a Server 2008 instance. In this group are several members from our AD domain. Is there a way to determine all of the local groups a given AD domain user belongs to by ...
0
votes
1answer
95 views

Is it safe/secure to use NIS for user and group info (no password hashes)?

I have some systems which currently use Likewise Open to integrate into an AD environment, but this creates UIDs/GIDs which are not compatible with the Unix UIDs/GIDs which some other systems use. ...
0
votes
1answer
82 views

Where can I find a documented lists of permissions given when adding a user to stock groups in major distributions?

I am trying to work out a strategy to appropriately hand out certain levels of permissions to junior admins on the system across multiple distributions, especially Ubuntu Server and RedHat Enterprise ...
2
votes
2answers
2k views

How to Lock Down an Active Directory Remote Desktop User

Please advise me on how I can ensure that remote desktop users cannot install software onto the Active Directory Server they are logging into remotely. Some Background: I have a client whose Server ...
2
votes
3answers
1k views

Execute a command from another group

In Linux, I have the following id: uid=1005(username) gid=1005(username) groups=1005(username),33(www-data),1002(git) I'd like to change my effective gid to git so that everything I create will ...
2
votes
1answer
180 views

SSH jumpbox with group Authorisation

I'm trying to setup a SSH Jumpbox. Users logged on the Jumpbox needs to be able to authorize to another SSH servers depending on their group. (UserA is on group Project1, UserB is on group Project2, ...
4
votes
3answers
674 views

Apache multiple ldap groups

I am configuring Apache to authenticate against LDAP and require multiple groups to be present. I have done this with require statements, however I need the authentication to be successful if all ...
3
votes
1answer
3k views

Create group to restart services in CentOS

SYSTEM: CentOS release 6.2 (Final) I am attempting to allow only users of a certain group lets call it websupport access to restart 2 services: mysqld and httpd EDIT: I do not want to give these ...
1
vote
1answer
383 views

group permission not working

I'm installing gitlab at my server but I got a permission problem: I have two users, 'git' and 'gitlab', both are part of group 'git', the home dir of 'git' has the drwxr----- permissions. Therefore '...
2
votes
1answer
3k views

Automatically remove recipients from distribution lists when mailbox is deleted

I thought this was the default behavior in Exchange 2010 but apparently it is not - how can I ensure that when I mark a mailbox for removal in Exchange 2010 console, it will remove all instances of ...
0
votes
2answers
265 views

how to add groupOfEntries object class to openLDAP

I am working on the design of LDAP structure, that basically should hold users and groups. There should be support for nested groups (so I thought on using groupOfNames object class) and for the ...
3
votes
1answer
362 views

Restricting ssh tunnel port access by group

My understanding is when creating an ssh tunnel to a remote machine, the ports become open on that machine for anyone to use and connect back to my local box (not just the user who opened the tunnel). ...
1
vote
2answers
3k views

Ubuntu Server 12.04: Write Files via Samba with Group Ownership

I have a shared samba drive set up on my virtual machine guest running Ubuntu Server 12.04. \\ubuntu\www The file path /var/www has the permissions www-data:www-data set up. My user name abe is ...
1
vote
3answers
2k views

A user in multiple user groups not receiving correct permissons

A little intro: I'm not a server admin, but I do some tech support for a small software company whose product requires users to have full control permissions to a mapped drive on the server in order ...
2
votes
2answers
1k views

How are group ids assigned?

I want to create a developers group on my OS-X system. I'm executing: sudo dscl . -create /groups/developers sudo dscl . -append /groups/developers passwd 'blah' My understanding from reading ...
3
votes
1answer
281 views

Can active directory GPO's apply to a group object?

I know I can set up an OU, move user objects in to it, and link a GPO to that OU and that GPO will apply to those users. Is it possible to set up an OU, move a group in to the OU, and have a linked ...
12
votes
2answers
5k views

Puppet: how to create and manage unix users and groups

This last week I spent all effort into learning Puppet. Now I suffer from a mental buffer overflow and little confidence of ever being able to tame this beast. I came across many annotated examples ...
3
votes
2answers
216 views

Only a subset of groups available

I have installed RHEL 6.2 and configured for using LDAP with the setup utility and I can login. What is stange is that only three LDAP groups are recognized per user. It is different groups, even for ...
1
vote
2answers
3k views

Linux user group configuration for Git bare repository

I'm using a Ubuntu box to host my bare Git repositories for developers to work off. At the moment I'm creating a user account for each developer on the box because it doubles as a filestore and local ...
0
votes
1answer
322 views

Automatically change UID of file

Due to development policies, all my relevant server files have g+w policies. This is working great, but, for added accountability, I'd like the files to change owner UID upon being edited by other ...
2
votes
2answers
885 views

Why can't I run sudo -g?

$ sudo -u fish -g fish bash Sorry, user steve is not allowed to execute '/bin/bash' as fish:fish on myserver. $ sudo -u fish bash $ groups fish What's the -g option meant to be used for, and why I ...
1
vote
2answers
90 views

Script adding domain groups to local groups fails 50% of the time

We have a script that automatically adds a freshly imaged computer to the domain. The functionality of joining the domain is always successful. However, when the script attempts to add the domain ...
1
vote
2answers
5k views

How to add LDAP user to existing group?

I'm attempting to add some of our LDAP users to a locally defined group on our RHEL server, however I get an error stating that the LDAP user is not found in /etc/passwd. What would be the best way ...
1
vote
0answers
556 views

Force AD Security Group Changes to Appear in Exchange

I made changed to security groups within AD, and when I go to the GAL in Outlook I noticed that the changes were not reflected, even after forcing an update by clicking Send Receive | Send Receive ...
4
votes
2answers
449 views

Linux shared writable directory recursively

How can I make a directory recursively read/writable to a group of users? PROBLEM: This is a directory used by apache so access rights should be fairly strict. The only way I could make it ...