0
votes
1answer
46 views

Set Linux user account expiration after user logs in

I'm looking to have Linux user account expire 7 days after the user logs in. Is there any solution aside from a custom-written script which checks and updates user accounts? I have already looked at ...
1
vote
0answers
37 views

Set git config for a group instead of user or systemwide

We have configured git config --system init.templatedir /path/ on our system to automatically create required githooks for each new repository created via git init. However, there is another group of ...
2
votes
1answer
16k views

How to disable user's password via puppet securely?

I have my SSH servers setup to use only Public Key authentication with password authentication disabled. When adding users through puppet I would like to disable user passwords. So far I have came ...
1
vote
1answer
31 views

Lock user account and still be able to log in through ssh public key?

is it possible to have a user account in Linux that can only login through its SSH public key? I thought to simply do sudo passwd -l myuser and lock the account (so I don't need to generate some ...
6
votes
1answer
158 views

Providing normal users(non-root) with initialization and shutdown auto-run capabilities

I'm hosting an experimental/testing Linux box, running Debian Wheezy 7.4.0 distribution. Different users log into the machine over ssh to their accounts and are allowed to run the development tools ...
-1
votes
1answer
100 views

User authentication; PAM or Radius? [closed]

At college I'm part of a group of students that keep a server infrastructure running for the students. Lately we've been having a lot of trouble with the servers, and we decided that it's probably ...
1
vote
1answer
40 views

Where does adduser's Directory Information Go?

When I use the command adduser it asks me for all sorts of directory-like information such as: Full Name Room Number Work Phone etc. Where is this information stored and how does one retrieve or ...
1
vote
2answers
132 views

How do you tell if a user is “allowed to log in” on Linux?

The question is simple, I want to list all the user accounts which can log in to my system, but I'm not sure if that all the users in /etc/passwd are "could login" users? Details: I can see users ...
0
votes
0answers
29 views

NFS-mounting utmp

I've got a Slackware Linux cluster I'm planning on using for general-purpose shell accounts. Accounts are managed such that there are no UID or username conflicts among nodes. Given this, would ...
1
vote
0answers
46 views

Limit size using Quota per file for a user

I am working on a linux machine . i have a user name dave. i want to implement quota on /home/dave . that dave could not create more than 2 MB file in this main directory. user can create any sub ...
1
vote
1answer
178 views

Access secured windows folder with java on a linux server

We're trying to mount a secured windows share on a linux server, but until now we're unable to do so. This is the setup we're having: A linux server that runs a java application A windows share that ...
1
vote
1answer
75 views

Is using Capistrano for user maintenance tasks on university lab feasible?

I've been looking around for tools to replace some legacy scripts for creating and maintaining accounts in a university computer lab ecosystem consisting of things like: LDAP and Kerberos for ...
3
votes
1answer
144 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...
0
votes
1answer
229 views

Audit of who ran what command via ssh with shared account

We use shared accounts on our servers. Each uses a different ssh key. Is there a way to create an audit trail of who ran what commands? We can distinguish real "users" by the ssh key used.
2
votes
2answers
100 views

How to set permissions to use 'ls'

I have a folder (which is owned by another user but the same group) and I want to view it's contents, but I always get the following error message: "ls: cannot open directory .: Permission denied" ...
2
votes
3answers
230 views

Replace gitolite3 user with git

I am installing gitolite3 on a server, with ssh and http pulling/pushing/alltherest. During the process, a user and group gitolite3 is created. When I run: $ ssh gitolite3@server info I get the ...
0
votes
1answer
29 views

Custom user and custom permission on Linux

I've this need, I have to install ubuntu on a machine for a specific purpose, and I have to create a particular locked user account. On startup i need to display the login box (so I have to admin the ...
0
votes
1answer
299 views

How can I “fix” a user that has no home dir but is logged in

I created postgres using the useradd command without thinking twice about it. I've already got postgres installed and running. I'm unable to add a home directory to postgres because the user is ...
0
votes
1answer
51 views

Linux user permissions setup for monitoring tool

We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
1
vote
2answers
119 views

Linux user groups : how to create shared directory under home

I have created 3 users 'u1','u2','u3'. Now I want to provide access to u1's /home/u1/share directory users u2,u3. I don't want to create a new common group named 'shared' and add 3 users there. Is ...
0
votes
1answer
201 views

Multiple users, one public_html directory

New to creating users with linux. Trying to add users in a secure manner, limiting damage a user can do give all members of the webadmins group access to the public_html folder as projects are often ...
-2
votes
2answers
56 views

setting up sudo account

I want to create a managed account with root powers and the ability to su as root if need be to manage the box without needing root. What is the correct way to do it? Does this work? ...
1
vote
2answers
377 views

Dead simple tool to administer users on multiple servers?

I'm responsible for several web servers which all hosts the excact same content. They are all participating in a load balanced setup. Whenever I need to create a new website on one of these servers, ...
0
votes
1answer
146 views

Easiest way to replicate users between two (or more) servers?

I've got two webservers which takes part in a load balanced setup. The two webservers are in other words mirrors of each other. As it is right now I'm synchronizing data between these two servers ...
2
votes
1answer
299 views

puppet loops to create users with values in a raw file

I would like to use puppet to create mailboxes. Basically, I only need a directory to be created when a new user arrives. However, the users list is quite huge and creating a file stanza per user is ...
0
votes
1answer
75 views

Ubuntu, How to prevent listing sub-directory if parent-directory is protected

I remember last time when I am on some Linux OS ( cannot remember ), when I change the mod of a directory to 711, that folder together with all of its sub-directories cannot be listed (ls -al) by any ...
2
votes
1answer
78 views

Linux single user logon for Website, SVN, Trac, and MediaWiki

I'm looking for a way to grant new (remote, public) users the possibility to sign up for a new account via a web form, which will grant access to a restricted area of our website, an SVN repository, a ...
0
votes
2answers
88 views

Security: How to improve security of Linux servers when few resident developers need shell access? [duplicate]

Possible Duplicate: SysAdmin & Developer: Responsibilities Suppose, I have 20 servers: We keep data in Linux servers Developers often need to Login to the server to debug some issue ...
3
votes
3answers
2k views

Restrict SSH commands for a group of users

I'm trying to set up an environment where a number of users in a certain group can SSH into a server and then execute a set of predefined commands on it, using either a key exchange or a password. So ...
1
vote
1answer
175 views

Execute commands on user login/logout

When I log into my linux user through ssh, the user should automatically execute a set of commands. Same thing when I log out of my user. How can I accomplish this?
3
votes
2answers
3k views

How can I rename an unix user?

I have a user named hedgehog and I want him to be named squirrel, but I don't want to change his numeric user ID. How can I accomplish this?
4
votes
2answers
658 views

puppet execution of a python script where os.system(…) command is not working

I am trying to manage Unix users with puppet. Puppet provides enough tools to create accounts and provide authorized_keys files for instance, but no to set up user password, and it tell to the user. ...
2
votes
1answer
202 views

puppet trying to define global class variables

I'm trying to use puppet as a unix users management. Here is the class I created to add new users: class unix_accounts( $username, $forename, $name, $email, $uid) { user { $username: comment ...
2
votes
2answers
4k views

Adding an existing user to a group with puppet

Is it possible to add an existing user to a group with puppet 2.7.18? We have two modules, each one defines one class : module "user" creates all users, including user foo and user bar. module ...
2
votes
1answer
1k views

How to automatically reconcile /etc/group and /etc/gshadow

Running grpck to check the groups, I see these errors: 'twinky' is a member of the 'foo' group in /etc/group but not in /etc/gshadow 'dipsy' is a member of the 'foo' group in /etc/group but not in ...
-1
votes
3answers
201 views

How to Set Multiple Passwords for “HIgh Profile” Accounts

I generally set up servers with "important" services listening on nonstandard ports (e.g. SSH != 22) and rename or completely remove root/admin users. I recently thought that it might be fun to create ...
2
votes
1answer
143 views

Importing users from passwd

I'm migrating from one Linux server to another with a very similar configuration. Both have Plesk, which has automatically migrated much of the data. However, there are a number of FTP users created ...
5
votes
4answers
3k views

How to add a user without knowing the encrypted form of the password?

I use the following command to create a user in a linux machine: useradd -d /home/dummy -g idiots -m -p 12345689 dummy The user is created and the home directory as well. The problem is that I ...
7
votes
1answer
3k views

How can I have puppet only set password when creating a user?

I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user. I was thinking of doing a notify to an Exec resource that sets ...
1
vote
2answers
387 views

Copying file from one user to another with PHP

I'm sure the answer to this is pretty simple, and it might not be PHP-specific, but I'm trying to use PHP's copy() function to copy an image from one user to another as part of a custom CMS setup. ...
12
votes
4answers
1k views

how many user accounts can a unix-like OS host?

Let's say I want to have a server with as many user accounts as possible. How many is the max? I want millions of user accounts. Is that crazy? I'd host dozens of load-balance mirrors of the box, ...
-1
votes
1answer
787 views

How to create dummy user?

I want to create user with least privileges. Without home, without rights, without shell. How to do that? When I call useradd it creates user with home
4
votes
3answers
1k views

Sync user accounts over multiple linux servers

What is the best way to sync multiple user accounts and home directories over multiple servers, they will all be the same OS. The servers are in different locations around the world, so if one goes ...
11
votes
2answers
10k views

How do I log every command executed by a user?

I want to monitor all user's activity in my server. Even when the user executes a shell command from some editor like vim I want to see them in the log file. I have checked the tool acct but it is ...
3
votes
4answers
1k views

Recommendations on managing dot files for users using Puppet

Goal is to have a collection of dot files (.bashrc, .vimrc, etc.) in a central location. Once it's there, Puppet should push out the files to all managed servers. I initially was thinking of giving ...
5
votes
2answers
228 views

Any repercussions from not using default primary groups for Linux users?

We were thinking of not using the default primary group for our RHEL users. What I mean by default: User: melbin Primary group: melbin We will instead do something like: User: melbin Primary ...
1
vote
1answer
159 views

I'm not able to add passwordless entry to a new user on EC2

I'm trying to add a deploy user to a EC2 instance to work with capistrano. I've been able to add passwordless entry for user ubuntu, but it's not working with "deploy". I'm setting up this user as ...
5
votes
3answers
1k views

Linux User and Permission Management within an AD Environment

Issue: Centralized user management and user permission mangement of user access needs for resources (access to services, home directories, joining to local user groups, file system permissions, etc.) ...
1
vote
3answers
466 views

Where to store application that I develop?

I'm developing a server application for ubuntu server, clients will connect to in through socket connection. It's in beta stage and under heavy development. At the moment lots of people are using it ...
0
votes
4answers
155 views

New administration user's $PATH seriously differs from the root's

I'm administering a rented CentOS 5.6 Dedicated Machine as root like initially setup but I'm aware it's extremely bad practise, so I created an User named administrator, placed into groups ...