Tagged Questions

Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

1
vote
1answer
27 views

Apache can't reading from documentroot with permissions for www-data

My OS is Linux Mint 17. My goal is allow reading of /mnt/wwwdata for root and apache only. I trying to setup apache document root in directory /mnt/wwwdata, with rights 0770 for group wwwadmins, ...
1
vote
1answer
31 views

Copy file from Windows host to Linux host via Rsync, then set permissions

So I have a Windows SFTP server (SFTPSERVER), which receives files (duh). I then need to push those files to a Linux server (AD authenticated to my domain) elsewhere in my organzation. So that bit I ...
2
votes
0answers
18 views

mkdir -p ignores facl?

I am trying to enforce file perms of 777 across a specific set of dirs. I used "setfacl -m d:o::rwx" and got what appears to be the right permissions $ getfacl . # file: . # owner: blah # group: ...
0
votes
1answer
21 views

nginx server, multiple users editing their own files via SFTP

I'd like to have a Debian server set up so that different users have their own domains that only they can edit, e.g.: /home/ + /bob/www/ + oldsocks.com/ + nosepickers.org/ + /joe/www/ + ...
0
votes
1answer
15 views

Messed up permissions of mail folders

i just messed up the permissions of all /var/spool/mail folder on a 250 user system. I have the homefolders with the correct permissions and the same name. Is there an easy way to make the permissions ...
0
votes
1answer
12 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: ...
2
votes
1answer
36 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I asked this question over at SuperUser to no avail a while ago, before realizing that serverfault may be a better option. I'm configuring execution control on a computer running Windows 7 SP1 ...
3
votes
1answer
43 views

Tool to show permissions of path in Linux?

Is there a tool in Linux that will take a path such as /var/log/httpd/error_log, and print the permission for each branch of the path, i.e.: /var: root:root, 0755 ...
1
vote
0answers
19 views

Granting user enough privileges to run ifconfig on IllumOS (OmniOS)

I sense this should be a very simple question, but somehow I cannot find a solution. I have a non-root user and I would like to grant this user enough permissions or privileges, so he can run ...
11
votes
2answers
1k views

Linux ssh: allow public-key authentication without giving user read rights to private key

Users logged in on my Linux server should be able to ssh to a specific remote machine with a default account. The authentication on the remote machine uses public key, so on the server the ...
0
votes
1answer
27 views

Windows cant open mac shared files unless read only

I recently setup a mac server (Mavericks 10.9.5, Server 3.2.1) in our office environment, mostly mac but there are two windows pcs. The windows 8 machine can connect and open files/folders without ...
0
votes
1answer
19 views

Setting COM permissions

Our little COM library is getting the dreaded 80004005 error on a customer's new computer. I recall this has to do with COM permissions, but for the life of me I can't find these any more on this ...
0
votes
1answer
37 views

MySQL user:pass in roundcube php config

Is it considered bad practice to have a MySQL query with user:pass as plaintext? I'm doing this right now (in nginx/roundcube to modify my dovecot passwords) but it seems strange because if I had ...
-1
votes
0answers
22 views

Toshiba eStudio350 scan to SMB file in Windows 8 Homegroup causing file storage error

The network consists of 3 Windows 8.1 PCs in a Homegroup with no windows servers, no active directory, etc. Toshiba eStudio350 printer scanner copier fax IP: 192.168.1.6 (static outside DHCP ...
-3
votes
0answers
21 views

Can I checkout with svn a repository if permissions are 774

I have to give the right permissions to let some people to checkout 2 repositories that I created with svn, but I am not sure that with the sequence 774 they can checkout it. I have given 774 ...
-1
votes
0answers
10 views

Anonymous Authentication in IIS not allowing access to aspx [closed]

I've got a fun IIS issue today. My iis site is configured for anonymous authentication, as the administrator account (testing purposess) And the directory in which my files exist, I've granted full ...
1
vote
1answer
69 views

Exchange 2013 Calendar Issues

I have an ongoing Exchange 2013 problem with some users not being able to add/edit Calendar entries into the Calendars of other users. I'm hoping for a clue as to why this may be happening. We have ...
1
vote
2answers
28 views

Hourly Clamscan cron script failes at reading file list

I've this piece of code located in /etc/cron.hourly/hourlyclamscan. #!/usr/bin/bash # Create Hourly Cron Job With Clamscan # Directories to scan SCAN_DIR=/home/transmission/Downloads # Temporary ...
0
votes
0answers
17 views

Fix Account issues after removing DC from server with IIS?

We recently upgraded our single-domain Windows network by adding two new servers. We promoted them both to domain controllers and removed the domain controller from our webserver (which was set up ...
0
votes
1answer
53 views

dovecot 2.1 new imap folder permissions

I am migrating an old mail (postfix/dovecot) server to a new one. Everything works much as expected. I have a small obstacle though. I use mbox format and the setup is pretty much simple. Suppose a ...
0
votes
0answers
18 views

how to run a web app: users/groups to use for each component?

How do you organize your users/groups to run the different components of your web app? Any best practices? The answer of this question (What permissions should my website files/folders have on a ...
0
votes
0answers
25 views

How to assign different permissions to folders through WebDAV by NGINX

I can't set up Nginx with WebDAV as I need to. The task is: There is a folder '/srv/root' with two subfolders - 'folder1' and 'folder2' and 3 users - 'admin', 'user1' and 'user2'. I want 'admin' to ...
0
votes
1answer
28 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
2answers
44 views

Give Apache Permission to Serve Files Outside of /var/www

I have my apache server and its specific files in /var/www and I have a bunch of group documents that I want to serve out in another directory /company/shared_files. I wrote and alias and it seems ...
0
votes
2answers
22 views

Disallowing interactive login for specific mysql users

I want to create some mysql users for different web sites but disallow interactive connections for them. If a evil-user get the mysql login credentials of a website, creating a conexion from ...
0
votes
0answers
29 views

Shell script permission denied despite +x flag [migrated]

This is an odd one, it only happens on one server (shared hosting, so I have limited access to configuration and logs), but I can't wrap my head around it. I have a shell script which runs some app's ...
0
votes
1answer
30 views

Git on Amazon Server

I have git running on an Amazon server and up til now I have been the only one to use the server. I use my Amazon ssh key to connect and am then connected as root on the server without the need for ...
-1
votes
1answer
37 views

windows 7 cant open files from osx mavericks server

I have recently setup OSX Server (on Mavericks) with an external harddrive. I have setup users and groups and created two sharepoints (public (on the internal drive), work (on the external)). Last ...
1
vote
1answer
45 views

Top level folders show permissions inherited from Parent Object - who's the Parent?

Looking at a Windows 2012 R2 server that has D:\Users, D:\Admin, D:\Repository and a few more like that that are shared. When looking at security, they show inheriting permissions from Parent Object. ...
0
votes
1answer
36 views

NFS permissions on a directory

I feel stupid not knowing this, but alas, I need to ask. I have a few directories being automounted via NFS on my CentOS boxes. Source is a Dell NAS or Openfiler (which we are working on migrating ...
0
votes
0answers
21 views

Mysql Insert query not working in php scripts - permission issue? [migrated]

Problem Description I cannot write to a Mysql table using php. Native command line using mysql client works. But I can make "select" in all variants - seems like a permission problem, but what kind? ...
0
votes
1answer
50 views

Using sudo in a Git hook to set permissions after deploy

I run a few sites on Ubuntu and I'm setting up a new deploy worflow as follows (the example uses the staging environment): On my dev machine, I do git push staging which pushes to a bare repository ...
2
votes
1answer
56 views

Is there an easy way to add yourself to an Active Directory group, with only Add/Remove Self permission?

At my work where there is an Active Directory / Exchange / Outlook setup (sorry I'm not a Microsoft pro), I'm trying to set up a distribution list to act like a mailing list. That means users should ...
0
votes
2answers
30 views

Allow mysql user to be used just by specified user

Currently any system user can run: systemuser$ mysql -u mysqluser -p (assuming he knows the password). Is there a way to deny mysql (cli) to use particular mysql user? eg. systemuser$ mysql ...
0
votes
1answer
35 views

Password less mysql access to specified user/script only

In addition to this question: Performing root mysql operations in bash scripts I'd like to ask how to limit/allow this action (performing root administrative actions): mysql --local-path=mypath -e ...
0
votes
1answer
55 views

file created by ansible seems to have mangled permissions

Issue with files created by Ansible I’m looking at using to setup some new servers at a new ISP and I’ve been doing some basic steps to test first. I am new but have done some testing on diff servers ...
1
vote
2answers
85 views

Locked out after installing a bash without executable bit

After scp-ing a shellshock-patched bash binary to an openSUSE 12.2 Linux VM and replacing the login shell with it, no user can log in via ssh or the console. As it turned out, the executable bit got ...
0
votes
1answer
57 views

Logstash not reading logs unless world-readable

I recently set up Logstash with Kibana and Elasticsearch, but am having a problem whereby it's not reading logs unless the directory permissions are world read/execute (and the files at least world ...
0
votes
0answers
35 views

Impossible to get Folder Redirection working with Network Share (Access is denied, 502)

Group: G_Developers User: David (Member of G_Developers group) Local Path: E:/Shares/Users/Developers UNC Path: \\DC01\Developers$ Share Permissions: Everyone Full Control Folder Permissions: ...
0
votes
0answers
32 views

Can't change files with Transmit through SFTP. Wrong permissions

I'm having an Ubuntu Server installation. In a folder deployed a wordpress installation and because of the file uploads, plugin updates etc I chowned the entire folder and its subdirectories to ...
0
votes
1answer
18 views

Allow user to execute “repquota -g /”

I need to allow an user to execute "repquota -g /" from a script without superuser permissions on debian Wheezy. I would not allow all superuser permissions to the user (in my case it is the www-data ...
2
votes
2answers
33 views

Maintaining Linux file owner and group info in a multi-user system

I have a web application running on Linux (using CentOS 6) using a generic non-root user name, say app1. I've associated all the files under the folder /home/app1 with that user/group (using chown -R ...
2
votes
1answer
66 views

Performing root mysql operations in bash scripts

What is a good practice to execute root operations on mysql databases in bash scripts? For example, I want to create new database and grant privileges, I have to use: mysql -u $ROOT -p"$ROOTPASS" -e ...
0
votes
0answers
35 views

Samba Permissions Issues

I am having some issues with samba on my Fedora file share server. I've logged into the vncuser below on the server itself and I can access the directory, however I get permission denied errors when I ...
0
votes
0answers
65 views

Cannot configure Exchange Server 2010 on mobile device because of “the connection to the server failed” error

I have a server with Exchange Server 2010 in a Win2008R2 domain. The fact is that whenever I try to configure Exchange access from a mobile device I get the following error in the event viewer: Log ...
0
votes
0answers
54 views

Hadoop data node start fails with error: java: cannot execute: Permission denied

I am facing an error in starting a Hadoop Data Node from Ambari WEB interface, and I need your help to resolve this. As always the error message is very comlex and long, but first thing first. Even ...
2
votes
2answers
60 views

How do I make it impossible for a Windows machine to delete a directory (not its contents) on a Linux Samba server?

The title says it all. (One of the rare occasions where it actually fits. :P)
0
votes
0answers
37 views

Active Directory Root Permissions

We currently have way too many users in our Domain Admins group so I'm working on redesigning our active directory structure and I'm looking at the current permissions and looking at the root our our ...
1
vote
1answer
19 views

Trying to add a new SQL Server user throws the error "is not a valid login or you do not have permission”

I am trying to add a new user to an SQL Server 2012 database using SQL Server Management Studio. I right-click and select 'Add User' under Security -> Users, fill out the user information, and click ...
-1
votes
1answer
36 views

Retiring Windows file server - moving files to new NAS - need to add domain account to files and folders

Summary: How can I automatically (script) check all the permissions for files and folders on a drive, and if a permission is tied to a local computer account have a new permission added: with a Domain ...