Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

-1
votes
1answer
22 views

Powershell Security Groups

Active Directory via powershell want to add users to a specific group. But that is a member of a particular group of users that other members do not want to be included in the relevant group. For ...
0
votes
0answers
17 views

Create account for service

I am configuring a new server. The server is running Hudson that is going to copy some files from this server to another. The other server is a virtual machine. Both running Windows Server 2012. ...
0
votes
2answers
27 views

How to import bulk data into specified field in active directory

I have about 500 users in my AD and I need to Modify an specified field data. But I don't want to do that one by one. How can I do that?
0
votes
1answer
39 views

Securing MySQL debian-sys-maint

With a fresh (but old) install of Ubuntu and MySQL, I found I could access the MySQL via command line client without being asked for any user or password. This bothered me as the default situation, ...
1
vote
2answers
67 views

How to get the port number a user ssh'd in on?

I am transitioning servers away from port 22 in an existing multiuser environment. I have configured sshd to listen on two ports: 22 and the new port. Now I would like to detect when a user connects ...
1
vote
1answer
36 views

How to manage local groups on a remote machine?

I have a Windows Server 2008 machine that exists as part of a domain, but I have no permissions to modify Domain Users, Domain Groups, Group Policies, etc. I have a few file shares on this machine and ...
0
votes
1answer
49 views

Automated third party software for Active Directory administration [closed]

I have a situation where there are multiple Active Directory (AD) groups that each account is added to but each group have different expiration dates. For example, user1 will be in groupA and ...
0
votes
2answers
35 views

puppet nis user management

I started using puppet for managing our RHEL servers. At this point I try to setup the user management. We are running a NIS environment on our campus, so until now I added the line +testuser::::: to ...
0
votes
1answer
50 views

Postfix virtual mailbox base, uid, gid — good user and group choice?

I often see tutorials for setting up Postfix with the virtual mailbox delivery agent on Linux that instruct to create a new disabled-login user and group to own virtual mailboxes in ...
0
votes
1answer
24 views

Including default files and folders in User's home directory

I'm using ubuntu server 14.04. I want to include some default files and folders in home directory for every user, whenever a new user account is created. How to make this. Can anyone help me in this. ...
2
votes
1answer
43 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
0
votes
1answer
68 views

Need help - limit access to sftp user to other users home->subfolder

I have been able to find a lot of help with jailing a user to their own home folder and restricting them only to sftp but I working on a more advanced solution. What I am trying to do and can't find ...
0
votes
1answer
25 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group ...
-1
votes
1answer
28 views

Deletion of User and home directory from NFS

I have 10 systems with opensuse installed in each of them.I have created 2 servers such that one is NIS and other is NFS , i have added lets say 5 users to NIS and their corresponding home ...
1
vote
1answer
14 views

Permissions issue in Munin

I have a Fedora machine on which I have successfully installed and configured Munin. The issue that I now face is of permissions. So basically, I have a directory where I have pointed all my html ...
0
votes
1answer
60 views

Set Linux user account expiration after user logs in

I'm looking to have Linux user account expire 7 days after the user logs in. Is there any solution aside from a custom-written script which checks and updates user accounts? I have already looked at ...
3
votes
1answer
620 views

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
2
votes
2answers
344 views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use ...
3
votes
3answers
715 views

PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well

Hey I've got this cmdlet here: Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com" I've built it to find disabled ...
0
votes
1answer
27 views

Powershell waiting for more parameters when asking for all users from a specific OU?

I want to get all the users from OU "myusers" so I have this cmdlet right here: get-aduser -filter * -searchbase"ou=myusers,dc=domain,dc=com" But when Im running it, powershell prints a >> ...
0
votes
1answer
33 views

What account should own the files on a shared ubuntu webserver? [duplicate]

I have multiple users with FTP access to my ubuntu server, each running their own website. Apache is running as default after installed through apt-get. I believe www-data is the apache user. If the ...
-1
votes
2answers
70 views

Count of Unix users: how many is too much? [closed]

I know about Postfix MTA configuration concepts: there's tree of them and the last one is most-appropriate only because it doesn't require new Unix user to be created for new mailbox creation. From ...
1
vote
0answers
23 views

Can end user using Forefront Identity Manager to leave security group?

In our company, users logon their desktop with AD and access Sharepoint using Windows authentication. Our users frequency changing teams. After they changed team, their access to old Sharepoint team ...
2
votes
2answers
141 views

What's the best way to see logged in users on Windows Server 2012?

Right now I use a powershell script to see the currently logged in users. But I don't see if there session is idle, active or inactive. I can see when the session was started but that's it. Is there a ...
0
votes
0answers
13 views

Use the command prompt to prevent a user from logging in locally [duplicate]

I would like to use some sort of command prompt commands (SunbinACL, etc) to prevent a certain local user from logging in locally. I am the system administrator. I know that there is a GUI way of ...
1
vote
0answers
47 views

Set git config for a group instead of user or systemwide

We have configured git config --system init.templatedir /path/ on our system to automatically create required githooks for each new repository created via git init. However, there is another group of ...
2
votes
1answer
16k views

How to disable user's password via puppet securely?

I have my SSH servers setup to use only Public Key authentication with password authentication disabled. When adding users through puppet I would like to disable user passwords. So far I have came ...
1
vote
1answer
33 views

Lock user account and still be able to log in through ssh public key?

is it possible to have a user account in Linux that can only login through its SSH public key? I thought to simply do sudo passwd -l myuser and lock the account (so I don't need to generate some ...
0
votes
1answer
62 views

How do I apply NTFS permissions to protect user profiles?

I want to set NTFS permissions on a users home directory so that one user cannot access another users home directory. How do I go about doing that? I need to be able to apply this to hundreds of users ...
6
votes
1answer
209 views

Providing normal users(non-root) with initialization and shutdown auto-run capabilities

I'm hosting an experimental/testing Linux box, running Debian Wheezy 7.4.0 distribution. Different users log into the machine over ssh to their accounts and are allowed to run the development tools ...
-1
votes
1answer
152 views

User authentication; PAM or Radius? [closed]

At college I'm part of a group of students that keep a server infrastructure running for the students. Lately we've been having a lot of trouble with the servers, and we decided that it's probably ...
1
vote
1answer
41 views

Where does adduser's Directory Information Go?

When I use the command adduser it asks me for all sorts of directory-like information such as: Full Name Room Number Work Phone etc. Where is this information stored and how does one retrieve or ...
5
votes
2answers
117 views

Issues With Printer GPO

I have a Windows Server 2008 R2 print server. The client machines are Windows 7 Professional. I am having issues with user accounts not getting the printer added when they login. Things that I have ...
1
vote
2answers
77 views

Account name changes

The way we currently handle account name changes is quite cumbersome and wondering if there is an easier way to go about things. Name change request comes through and we create a new AD account, ...
0
votes
0answers
29 views

Script to apply Simple Finder restrictions to Mac OS X user?

Is it possible to script (e.g. with AppleScript or bash shell script) applying the Simple Finder and an associated application whitelist to a local user account on Mac OS X? We are using Mac OS X ...
2
votes
1answer
76 views

Share Ruby Programs between Linux users

Our Linux (Mint) system has 2 admin users - mint & admin. What do we need to do for admin & mint to be able to share gems? Mint has chef, berkshelf & knife-ec2 installed via bundler in ...
3
votes
1answer
664 views

When does password expire when unchecking “Password never expires”

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the ...
1
vote
2answers
186 views

How do you tell if a user is “allowed to log in” on Linux?

The question is simple, I want to list all the user accounts which can log in to my system, but I'm not sure if that all the users in /etc/passwd are "could login" users? Details: I can see users ...
13
votes
3answers
3k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
2
votes
0answers
21 views

Specialized access control for directories in RedHat 6?

I have a requirement where I want to set permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able to ...
1
vote
1answer
78 views

How can I either through vbscript or GPO push a Windows 7 Logon Screen to all my users

I know how to change the login screen, it's easy. But I would like to figure out a way to do it through GPO or login script. I have tried running the script as the computer start-up script as well as ...
0
votes
3answers
458 views

deny local logon for a new user through command line windows server 2008

I am creating a local user account that I want to be able to connect over ftp, but not log on to the server, I believe the way to do this is to deny local logon but am unsure how to achieve this via ...
1
vote
1answer
31 views

command to add permissions to a folder for a local user in windows server 2008

as part of an installer I need to create a user with limited permissions to add the user I will use net user "<username>" <password> /add /fullname:"<username>" I now need to ...
0
votes
2answers
59 views

Should I set the password when creating new user using useradd command?

I know that when creating a new user by useradd, I could set his password by -p option, but it seems insecure, then what the right way to create a user and set his password? I do this in two steps: ...
0
votes
0answers
29 views

NFS-mounting utmp

I've got a Slackware Linux cluster I'm planning on using for general-purpose shell accounts. Accounts are managed such that there are no UID or username conflicts among nodes. Given this, would ...
1
vote
0answers
48 views

Limit size using Quota per file for a user

I am working on a linux machine . i have a user name dave. i want to implement quota on /home/dave . that dave could not create more than 2 MB file in this main directory. user can create any sub ...
4
votes
0answers
43 views

solaris : useradd does not work but has exit code 0 [closed]

One of my Solaris 10 servers will not add new users. Existing users are able to log in. The useradd command appears to work normally but it does not add the user. I checked my other Solaris servers ...
4
votes
0answers
39 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
0
votes
1answer
29 views

Is there a decent way to manage accounts across disparate web services?

I'm in the position of needing to manage the accounts of multiple people across many different types of services, including onboarding and offboarding users. Being that we're using multiple different ...
1
vote
1answer
251 views

Access secured windows folder with java on a linux server

We're trying to mount a secured windows share on a linux server, but until now we're unable to do so. This is the setup we're having: A linux server that runs a java application A windows share that ...