Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.

learn more… | top users | synonyms (2)

3
votes
0answers
169 views

Cannot set ACL on ACL-enabled EXT4 partition

I am trying to enable xattrs and acls on a Debian machine. I've (re)mounted the partition in question with user_xattr and acl. (/dev/md3 is the partition in question) root@fs01:/# mount | grep ...
2
votes
0answers
19 views

mkdir -p ignores facl?

I am trying to enforce file perms of 777 across a specific set of dirs. I used "setfacl -m d:o::rwx" and got what appears to be the right permissions $ getfacl . # file: . # owner: blah # group: ...
2
votes
0answers
398 views

Docker: Permission denied on folders added with ADD

I'm trying to configure a postgresql installation using docker. FROM ubuntu:13.10 ADD . /db # install postgres # ... RUN chown postgres:postgres /db -R && \ chmod 700 /db -R USER ...
2
votes
0answers
112 views

Creating an Openstack user with only reboot permissions

What is the best approach for setting up an Openstack user that is limited to only rebooting servers using the Web API. The user needs to be able to access servers under different tenants, by using ...
2
votes
0answers
253 views

SecErr: DSID-031A1190, 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am trying to change the password of the currently logged in user via ldifde using this command: ldifde -i -f pwd.ldif -t 636 My AD server is running in SSL mode with a self signed certificate. The ...
2
votes
0answers
70 views

What permissions are needed on Mailbox database to call FindAppointments for all mailboxes?

I have a small application that retrieves all appointments from Exchange 2010 and puts them in a timesheet management app. The code to retrieve the appointments is as follows (it uses Exchange Web ...
2
votes
0answers
317 views

FUSE mounted Google Drive (via google-drive-ocamlfuse) for Wordpress and permission issues

My objective is to use Google Drive to store media files for a Wordpress multisite using Fuse, and so far I am able to mount Google Drive with google-drive-ocamlfuse as root. I can mount the Google ...
2
votes
0answers
56 views

Windows Server 2012 Shares vs. Windows Explorer Sharing

When I use the server manager in WS2012 and create a new share, point it at a folder and give everybody permission to read, it works very strangely: From a client computer, I can access the server in ...
2
votes
0answers
3k views

iSCSI issue; “the media is write protected”

i've got some serious issues with w2k8 r2 standard and iSCSI controller. i'm running dell server, connected via ethernet to synergy NAS, which is handling LUN via iSCSI. i'm using ms iSCSI initiator ...
2
votes
0answers
210 views

Deny Delete Windows SMB fileshare - Mac OS X client

I'm struggling with this one. We have a folder within a shared drive that a certain group (group1) of users that can read/write and delete their own files and folders. However there is one account in ...
2
votes
0answers
277 views

Trac permission denied for SVN repo

I'm running Apache2,SVN & Trac on OpenSUSE. SVN works like a charm. I've initialized trac environment for one of my SVN repositories for trac to show source code in it's repo browser and I set the ...
1
vote
0answers
79 views

How to force HDFS to use LDAP user's UID

I have a cloudera cluster with HDFS and Hue services and I'm trying to unify the authentication using LDAP. I have my LDAP server running thanks to 389-ds (not sure if is the best way) and I can log ...
1
vote
0answers
116 views

Unable to use rsnapshot to sync non-owned files but able to do it with plain rsync command

I am trying to use rsnapshot to sync remote file to my own computer. However, I have some trouble when I need to access files which are not owned by user who is SSH-ing to the remote machine. My ...
1
vote
0answers
102 views

File permission problems with Apache, FastCGI, and Prestashop

I am running a Prestashop installation on CentOS 6.5 and Apache 2.2.15. A while back I updated Apache and lost the ability to upload product images via Prestashop backoffice along with other problems, ...
1
vote
0answers
28 views

Granting user enough privileges to run ifconfig on IllumOS (OmniOS)

I sense this should be a very simple question, but somehow I cannot find a solution. I have a non-root user and I would like to grant this user enough permissions or privileges, so he can run ...
1
vote
0answers
16 views

Requiring owner auth for non-guest enabled shares

With the following options usershare path = /var/lib/samba/usershare usershare max shares = 9001 usershare allow guests = yes usershare owner only = true I have the following issues: this ...
1
vote
0answers
103 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
1
vote
0answers
46 views

Recalculate Windows inherited ACLs for hardlinks

How do I get Windows to recalculate the inherited permissions of a file? A tool (Mercurial) created multiple NTFS hardlinks to the same file from different directories. I can see them using fsutil ...
1
vote
0answers
57 views

Allow a user to access a single Git repository

Consider a server that hosts several Git repositories: $ ls -l /opt/git/ drwxrwxr-x 7 ubuntu root 4096 Jan 2 2014 george.git drwxrwxr-x 7 ubuntu root 4096 Dec 29 2013 john.git drwxrwsr-x 7 ...
1
vote
0answers
40 views

Why does Windows Installer check the volume information of a shared drive when installing a file within the shared drive?

I'm running into an issue where one of my users is having trouble installing a Windows Installer file. The file is located on a shared drive that the user doesn't have complete access to, but the user ...
1
vote
0answers
91 views

phpmyadmin not working after mysql update

i followed this guide to update my mysql form 5.1 to 5.5. After lots and lots of command and headache, i was able to upgrade mysql. i checked the version via terminal. But now there is another ...
1
vote
0answers
62 views

Set git config for a group instead of user or systemwide

We have configured git config --system init.templatedir /path/ on our system to automatically create required githooks for each new repository created via git init. However, there is another group of ...
1
vote
0answers
41 views

How to write a file from Apache CGI in a user home directory on CentOS

I made a CGI in Python and it works unless I try to write to a file in a user's home. I activated allow_httpd_anon_write and allow_http_sys_script_anon_write to true with graphical tool for ...
1
vote
0answers
158 views

Root cron job can't read file from /root/

I've got a cron job in root's crontab defined like this: 0 1 * * * /usr/local/bin/tarsnap-backup-script > /tmp/tarsnapcron.txt 2> /tmp/tarsnapcron.err The script is a python script that ...
1
vote
0answers
55 views

Domain User blocked by a single server

Today, I had a user call me with an issue. He couldn't access a Desktop shortcut that's defined by group policy. The shortcut was pointing to a shared folder on our web server (W-01). All other ...
1
vote
0answers
109 views

Start/Stop IIS site automated as an administrator, which is not a built-in “Administrator”

There are several ways to start/stop an IIS site, in a way that does not require logon to the system. For example: 1) Command line via APPCMD: C:\windows\system32\inetsrv\appcmd.exe stop site ...
1
vote
0answers
102 views

WebDAV OSX Permissions to restrict upload

I have a WebDav server I have working on OSX ML - access is secure but I just moved my files to an external drive I didn't need to modify directory permissions on the drive and it still works and ...
1
vote
0answers
114 views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...
1
vote
0answers
83 views

NTFS Permissions Overhaul

Essentially I am required to do a complete overhaul on a rather old (and messy) Windows server NTFS permissions. I have a Powershell script which gives me the information I need for permissions but ...
1
vote
0answers
256 views

SQL Server 2012 permissions from AD group login not refreshed until server restart

We have some IIS sites which runs under Managed Service Accounts (Windows Server 2012). Theese MSAs are members of resource groups in Active Directory. We are using resource groups as logins in SQL ...
1
vote
0answers
100 views

Lost web permission after upgrading CentOS from 5.6 to 5.10

I upgraded CentOS from 5.6 to 5.10 using the following simple commands while logged in as root: yum update yum upgrade Now, I can no longer access web pages. All requests, regardless of type of ...
1
vote
0answers
714 views

KVM guest cannot write to 9p share owned by non-root

I am aiming to set up full write access to a 9p share for a KVM guest. Both host and guest have the same users/groups with the same IDs. Both host and guest should be able to write to the share using ...
1
vote
0answers
62 views

Weird permissions getting set on directories after rsync

I've got a drive on a Mac (OSX 10.7.5) that I'm sharing on the LAN. In the system preferences, the share is set so System Administrator has Read & Write access, System Group has Read Only, and ...
1
vote
0answers
104 views

What are recommended permissions for files in /var/log?

I am working on tightening the security for various servers (mainly Debian Linux), and one of the tasks is to tighten permissions on files in /var/log so that files are not world readable. But there ...
1
vote
0answers
41 views

Running an AppFabric Monitoring Script Without Using a Local Admin

According to this page - I must run any AppFabric administration commands as a user w/ administration privileges. "The security identity of the person using these Windows PowerShell commands ...
1
vote
0answers
41 views

Apache, php, maven and me—pemissions…

I have setup a local Apache2, with PHP and mysql. I wrote a maven build script to deploy my page on that local server. All that is working fine except for one thing: When I instruct maven to clean up ...
1
vote
0answers
50 views

Prevent user deleting directory junction

I have a setup where there's a directory junction in a network share which points at a directory outside of the share. No matter what permissions I set, the user is able to delete the junction ...
1
vote
0answers
111 views

Best way to bind multiple RHEL 6 Systems to AD and use NFS?

I am currently migrating systems to an AD domain using winbind. This works fine but I have discovered that NFS mounts don't have proper permissions because users and groups end up with different ...
1
vote
0answers
279 views

How can I achieve Access-Based Enumeration with Mac OS X Server (10.8)?

I would like to replicate the concept of Access-Based Enumeration on a Mac server, in that a connected user will only see folders they have access to Read or Write to, instead of displaying folders ...
1
vote
0answers
102 views

Windows Server 2008 Server in VM, in domain: Can not print, access denied

I'm having an issue with printing from a particular application from our Windows Server 2008 R2 64-bit with licensed Remote Desktop Services (running in Amazon EC2). When I connect via Remote Desktop ...
1
vote
0answers
506 views

Samba Ignoring POSIX ACLs

I have an Ubuntu 10.04.4 LTS server running Samba, and joined to our Active Directory domain using PBIS (formerly likewise-open.) Samba is configured to do authentication using AD users/groups, and ...
1
vote
0answers
57 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
1
vote
0answers
652 views

Disabling all write (cd burning) permissions for a specific group of users on all CD/DVD drives mounted in Windows XP Pro SP3

I want all users within 'Restricted' user group (Windows XP Professional SP3) to be able to read from CDs/DVDs they insert. I don't want these users to be able to burn any CDs/DVDs using CDRW/DVDRW ...
1
vote
0answers
228 views

LAMP Setup, PHP's session_start permission denied

I'm trying to set up a development environment for a legacy system that runs CentOS 4.8, PHP 4.3.9, and MySQL 4.1.22. I'm matching OS and software versions to keep the development server as close to ...
1
vote
0answers
117 views

Limiting user access to local Gitorious repository

I have installed and configured in private server a local git repository using Gitorious. The problem I am facing is that when I set up a new Gitorious project and limit read access permissions to ...
1
vote
0answers
365 views

Exchange 2010 Delegate vs Full Access Permissions

I'm wondering if anyone can help clarify how permissions work on rooms in Exchange. Specifically, we've got a room setup in Exchange, I have assigned users under the 'Resource Policy' tab as ...
1
vote
0answers
310 views

SFTP connection to Windows Azure virtual machine permissions issue

I've set up an Ubuntu 12.04 VM on the Windows Azure cloud. I can connect to it using WinSCP, but I can only alter files in the user directory (/home/myuser). Which really beats the prupose because I ...
1
vote
0answers
271 views

FTP and Apache permission issues … And sftp, and ssh, and php scripts

I've read the previous posts but I'm still looking for a good way to manage directories permissions and users. Here's the layout : You have a php app whose code is provided by 3rd party. Dirty ...
1
vote
0answers
140 views

The description for Event ID (560) in Source (security) cannot be found. with users in specified group

I have some users in a group that look at the audits. They are in a group I created. This group should have permissions to view the security audits. They can see them, but the descriptions are ...
1
vote
0answers
282 views

Plesk Reconfigurator Repairs permissions successfully then fails

I get this when running Plesk Reconfigurator version(8.2). It seems like problems are found, and fixed. BUT then the same problem is found again. Any idea what to believe? Warning: Plesk ...