Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

4
votes
1answer
585 views

Running a service with a user from a different domain not working

I've been stuck on this for a while, not sure what permission I'm missing. I've got domain A and domain B, A trusts B, but B does not trust A. I'm trying to run a service in domain A with a user ...
4
votes
2answers
700 views

setfacl equivalent to chmod for setting/unsetting individual flag

Using setfacl command line arguments, is there a way to set/unset a single flag as the following command will do ? chmod g+x FILE Please note that: setfacl g::x FILE setfacl g::--x FILE are ...
4
votes
1answer
2k views

Share Point ACL on OSX Lion Server - Posix group always takes over ACLs

Trying to configure a share point on a Lion Server machine. The directory is created by the local server admin (serveradmin) and has rwxr-x--- given to it. The serveradmin user belongs to the local ...
4
votes
1answer
841 views

Default file permissions when copying from Windows share to OS X

I have an issue that I haven't been able to find an answer for. I have a handful of Mac designers here that started using a program called Articulate to generate flash objects to embed on our ...
4
votes
2answers
3k views

Linux acls uses wrong gid for domain groups, but numerical gids ok

Please see edit below, as it turns out that the problem is with uid/gid to sid mapping and shows a workaround that will help understand the problem more quickly. We have a Ubuntu 11.04 server ...
4
votes
2answers
928 views

How can I change the umask for a user when he logs on to an alternate group?

I want the umask to be more permissive for users when they switch to a non-default group. Just to demonstrate what I mean: $ id uid=500(beamin) gid=500(beamin) groups=10(wheel) $ umask 0022 $ sg ...
4
votes
5answers
604 views

Ideal permissions scheme for multiple Apache/PHP sites

I'm hosting multiple sites from one server where each site has it's own user and www directory in their home dir. Currently our web server runs as user nobody(99). We're noticing that to run several ...
4
votes
4answers
349 views

Starting/Stopping Services on a remote PC

I need to be able to remotely start and stop services on another windows machine in the domain. If I open up the "Service Manager" I can connect to the remote machine and view all its services ...
4
votes
1answer
214 views

SQL 2005 Security - Users: What are they used for? (and other various questions)

I am not a DBA and so dont really know anything about SQL 2005 security settings, etc. I am attempting to set up an empty copy of our database by generating the full database from SQL Management ...
4
votes
2answers
2k views

Samba Public and “Dropbox” folder

I want to create a special Group Directory structure for my Users. /home/groupA <-- home folder for groupA where every user of groupA can create/edit/delete files /home/groupA/Public <-- ...
4
votes
1answer
186 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
4
votes
2answers
676 views

zfs-fuse file permissions problems on CentOS/RHEL 5

I'm working with zfs-fuse as a way to provide filesystem compression on existing CentOS 5 servers. I'm dealing with a highly-compressible dataset (80%), so zfs-fuse comes in handy. I'm encountering ...
4
votes
2answers
6k views

How to give a user NTFS rights to a folder, via Powershell

I'm trying to build a script that will create a folder for a new user on our file server. Then take the inherited rights away from that folder and add specific rights back in. I have it successfully ...
4
votes
2answers
2k views

built in “Offer Remote Assistance” not working because of permissions

I'm trying to enable permissions for a user on a Windows7 machine to use the built in feature called "Offer Remote Assistance" or "Windows Remote Assistance". This feature works fine if the user is ...
4
votes
2answers
752 views

ESENT fails to determine the minimum I/O block size

I'm trying to get RavenDB running in embedded mode on a shared/multi-tenant webhost. RavenDB relies on the ESENT storage API. The filesystem on the hosting machines is locked down. The RavenDB ...
4
votes
4answers
891 views

IIS7 folder permissions

I build a basic WCF service that I now want to host in IIS7 under Windows Server 2008 R2. I added the service as an application under the default web site but whenever i try to run the application I ...
3
votes
7answers
3k views

security issue of Linux sudo command?

I am using a Red Hat Enterprise 5 Linux box. I find if a user is in /etc/sudoers file, then if the user run command with sudo, the user will run this command with root privilege (without knowing root ...
3
votes
6answers
792 views

Correct recursive chmod, separate for files & dirs

I'd like to recursively chmod a directory so that: Files are 0664 Directories are 0775 How to do it better, shorter, fancier? :) Maybe, use umask somehow? All find solutions are too long: I ...
3
votes
3answers
1k views

Copy a file's owner permissions to group permissions

How can I copy a file's user/owner permissions to it's group permissions? For example if the permissions are 755 I want them to become 775. Clarification: 755 -> 775 123 -> 113 abc -> aac Bonus if ...
3
votes
4answers
8k views

I have administrative rights on Windows Server 2003, so why am I denied access to a folder?

A recent attempt to upgrade a piece of software failed because it couldn't access a folder. I tried to take a look at the folder in Explorer and was told: D:\folder is not accessible. Access ...
3
votes
2answers
140 views

Found a service which logs on using the account name “.\AccountName” - What does “.\” mean? [duplicate]

Possible Duplicate: Is there a specific name for the “.\” (dot-slash) shorthand used to log onto a Windows machine? I came across a server on an older windows server 2003 box today which ...
3
votes
3answers
2k views

Backup data while keeping POSIX ACLs and permissions

I'm looking for a practical way to backup data from a server and keep all ACLs and permissions. I've looked at tar, but according to Google tar doesn't keep ACLs . I know rsync can keep ACLs and ...
3
votes
9answers
1k views

When to grant admin rights

We always have at least one contractor on site and because they are involved in different products / technologies, different software needs to be installed on their PC's. This takes up a lot of ...
3
votes
2answers
369 views

Recovering from a system-wide chown?

I have a Linux web server with multiple sites being hosted with CPanel. I was having trouble accessing a site, so I ran this command: chown -R root:root /home/evalreal/. While waiting for the command ...
3
votes
7answers
521 views

Users as local admins on Windows machines

I am in charge of a Windows-based network of over 70 computers at work. Servers are Windows Server 2008 and workstations are Windows Vista and Windows XP. Most users are researchers, and some of them ...
3
votes
4answers
1k views

How to restore remote access to a RHEL system from expanded permissions set over the entire filesystem? [duplicate]

Cause of the problem I intended to add group write permission on hidden files like '.hgignore' with the following: # pwd /opt # sudo chmod -R g+w .* The problem is that '..' matched this pattern, ...
3
votes
2answers
2k views

What exactly does this dpkg command do?

I fixed a permissin problem for nagios like discribed here. The command was: sudo dpkg-statoverride --update --add nagios www-data 2710 /var/lib/nagios3/rw sudo dpkg-statoverride --update --add ...
3
votes
4answers
2k views

Why is it so important to remove 777 permissions?

I'm writing installer for my PHP web app. It requires user to change permissions of a few files and directories (config.php, cache, uploads, .htaccess) to 777 (so that it's writable). I've seen in ...
3
votes
4answers
3k views

Restore default ownership in CentOS after terrible chown [duplicate]

Possible Duplicate: How do I recover a RHEL 4.3 server from bad permissions set over the entire filesystem? Is there any way to restore the default ownership of a CentOS filesystem after an ...
3
votes
2answers
2k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
3
votes
3answers
355 views

Active Directory delegation best practices

I am in the process of delegating some Active Directory tasks to a group of users. These users do not have domain administration rights and will only perform tasks such as creating/disabling accounts ...
3
votes
3answers
880 views

Any fast way to assign NTFS permissions to a folder with a very big amount of subfolders and files?

I'm trying to change NTFS permission to a folder containing a very big hierarchy below. I'm using the traditional approach (right mouse button, properties, security, etc) It's taking really long and ...
3
votes
3answers
2k views

Rsync - maintain 'root' permission on another machine?

I'm just trying to copy a directory from one home server to another, both running Ubuntu (9.04 and 9.10), using rsync. The trouble I'm having is that some of the files in the directory (and ...
3
votes
3answers
7k views

Excel file always opens in Read-Only mode over WebDAV

I mapped a WebDAV drive in my Windows Explorer. I can access files and browse etc. But. When I try to open my Excel file it always opens in Read-only mode. How do I open a file so it opens with write ...
3
votes
3answers
264 views

Maintain setgid bit (after bower install or gulp build)

We run web servers where we have the following situation: The www-data user runs the web server and must have read+write access to the files The deploy user deploys all the code The bob and alice ...
3
votes
3answers
245 views

Weird executable behaviour

I have a server machine with ubuntu 9.10. I am trying to put in place an executable, which turns out to be the latest flashplayer (debugger version). Somehow the file appears as present and ...
3
votes
3answers
4k views

Why does FIND on Windows 7 give an “Access Denied” error?

I have an administrator account on a Windows 7 x64 machine. It is not THE administrator account, the account is simply a member of the administrators group. The install is default. When the user ...
3
votes
2answers
650 views

Prevent file from being changed under Linux

What's the command under Linux to mark a file as "locked"/to prevent any changes from being made to it? I'm not talking about chmod. There's a property that can be set (the name escapes me at the ...
3
votes
2answers
6k views

Setting Windows ACLs to allow sub-subdirectory access

We're in the process of moving some directories from NetWare to Windows, and have run into a difference of permissioning. Because NetWare makes this easy, we have whole volumes where no users have any ...
3
votes
1answer
645 views

How can I set the NTFS permissions on a folder for a WORM like behaviour

Is it possible to set group permission on a folder at a Windows server so that a file can be created, populated and closed, BUT not changed or deleted after that?
3
votes
3answers
1k views

Allow PHP to write file without 777

I am setting up a simple website on webspace provided by my university. I do not have database access so I am storing all the data in a flat file. The issue I am experiencing is related to file ...
3
votes
4answers
3k views

CentOS Adding a user restricted to one directory

What's the easiest and standard way to create and restrict a new user to /var/www/ in CentOS ? Edit: Ideally restricted to SCP only.
3
votes
2answers
292 views

Under which account are startup and shutdown scripts executed on Windows 7 & XP?

I'm trying to manually install and register xvid.ax and related DLLs on a bunch of Windows 7 and XP machines, which involves copying them to %windir%\system32. My attempts to effect this from startup ...
3
votes
2answers
2k views

Can I run SVN update and commit without using sudo?

Under my local development environment (Ubuntu) I have a checked out SVN repository. The files have the owner myuser:myuser. However, I must use sudo for the "svn up" and "svn ci" commands. Also in ...
3
votes
4answers
8k views

Quickly changing Windows permissions for a huge directory tree?

I have a huge directory on an NTFS filesystem (i.e. a top-level directory containing tens or hundreds of millions of descendant nodes, with the file nodes probably on average about 3 levels deep) that ...
3
votes
1answer
841 views

Different permissions per log file when using rsyslog

Is it feasible to define different permissions per log file, using rsyslog? $FileCreateMode applies to all, but I want different permissions for a specific file.
3
votes
1answer
340 views

How to give user limited active directory perms?

We are a very small company, and for some time I've been the only guy managing our domain/Active Directory. I'm NOT a sys admin, I'm a software dev, but I've done the best I could for them. We're ...
3
votes
4answers
3k views

How to configure PHP CLI on linux ubuntu to run as www-data?

I have a symfony2 application on my ubuntu. Symfony has a plenty of useful console commands (like php app/console cache:clear or php app/console assets:install web). The problem is If I run them as ...
3
votes
2answers
231 views

Allow AD user to set passwords but no other attributes

I need an Active Directory user that can set passwords of other users but only passwords and not other attributes of the users. How can I configure that?
3
votes
3answers
3k views

Permission denied in vhost document root

I'm having a problem setting up a vhost on Apache 2.4, using CentOS 6.3. This question seems to have been answered several times on this forum, but none of the solutions work for me. Basically, I ...