Tagged Questions
0
votes
1answer
42 views
How to provide IIS Basic authentication access without a general user account
I want to provide access to my website through IIS Basic auth (already working) but I don't want to give out OS level logins, to my testers/previewers.
Is this possible? How can I do this? I ...
0
votes
1answer
110 views
Multiple users, one public_html directory
New to creating users with linux. Trying to
add users in a secure manner, limiting damage a user can do
give all members of the webadmins group access to the public_html folder as projects are often ...
1
vote
1answer
59 views
Which user account should I use for an intranet web-app service?
I've written a web-application to run on Windows (XP,7,2008, etc), not using MS tools (python/django/nginx, though it should not matter). To run the app I've created a Windows Service which installs ...
0
votes
1answer
273 views
Create restricted user on Debian server
I want to create a user account for each of the key programs installed on my debian server. For example, for the following programs:
Tomcat Nginx Supervisor PostgreSQL
This seems to be recommended ...
-5
votes
1answer
186 views
check local user accounts for blank passwords
I need a tool/script that can help me find local user accounts that do not have passwords across a network. Not all computers will be on the domain, but 90% are (win2003). But I need to audit/check ...
1
vote
1answer
58 views
Enable usr account external hardisk? [closed]
I have a Windows 2008 installation on an external harddisk, it turns out that my account is disabled on this external harddisk. Can I enable this account again? For example by booting into my default ...
0
votes
3answers
119 views
Can an attacker remotely abuse a Windows 2008 server if he knows the username/password of a user included into “Users” group only?
There's a Windows 2008 server where there's a local user account with a known password - let it be user "dummy" and password "dummy1". That local user only belongs to "Users" group.
The attacker has ...
2
votes
3answers
132 views
Is it ever good to share a userid?
On Un*x, Is it ever a good idea to have one userid that many different people log into when they do stuff?
Often I'm installing software or something on a Linux or BSD system. I've developed software ...
3
votes
1answer
55 views
Is there a standard behind the default system accounts in a linux system like fedora or debian?
By system accounts I mean the ones that comes preinstalled with the system, for example nobody, daemon and bin. I know these tend to vary depending to the distro and the installed packages, but:
is ...
0
votes
0answers
31 views
Clone windows account privileges
I need to create few domain accounts to run my applications under. The accounts should be equivalent to standard accounts like NETWORKSERVICE and IIS APPPOOL\ASP.NET v4.0. How can i easily do that ...
4
votes
2answers
161 views
When should I create a new user account to run software on a server?
In general, when should one create a new user account to run a piece of internet-facing software on a server?
For instance, suppose I'm using a shared Debian server (e.g. via Dreamhost) and I want to ...
0
votes
1answer
55 views
Secure Direct Access to Webapps folder on Windows Machine
I asked this question previously but recieved a unix account response.
I am going to host a webapplication on a windows machine. Are the user access roles on Windows 7 sufficient to deny direct ...
2
votes
1answer
813 views
How to run Apache as another user? (as 'www', or 'apache') on my
I just recently deployed a LAMP stack that came as a package for Linode (a VPS host), I can successfully run Apache 2 but the process and all my files within are owned by root. On my shared web host I ...
4
votes
2answers
903 views
Can I use Active Directory for user-level security in an Access application? Pretty Please?
My company makes fairly extensive use of an Access + MySQL application that would probably see some significant traffic on the Daily WTF if I posted the source code. The management of users and their ...
