0
votes
1answer
37 views

Securing MySQL debian-sys-maint

With a fresh (but old) install of Ubuntu and MySQL, I found I could access the MySQL via command line client without being asked for any user or password. This bothered me as the default situation, ...
2
votes
1answer
43 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
13
votes
3answers
3k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
1
vote
1answer
87 views

Which way is more secure: apache:admin or folder group owner:apache?

I have been learning in recent days how to set up var/www/ permissions. I understand the common solution is set a group owner of all new folders to apache via sticky bit. How about giving the Apache ...
0
votes
1answer
575 views

new user and problems with ssh key configuration (pub vs pem files)

We access our ubuntu server from outside over ssh this way : ssh -i securityTier.pem -l someUsername serverDnsName I need to create new user which will use separate *.pem file. So far i created : ...
0
votes
1answer
54 views

Linux user permissions setup for monitoring tool

We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
0
votes
1answer
222 views

Multiple users, one public_html directory

New to creating users with linux. Trying to add users in a secure manner, limiting damage a user can do give all members of the webadmins group access to the public_html folder as projects are often ...
0
votes
1answer
78 views

Ubuntu, How to prevent listing sub-directory if parent-directory is protected

I remember last time when I am on some Linux OS ( cannot remember ), when I change the mod of a directory to 711, that folder together with all of its sub-directories cannot be listed (ls -al) by any ...
3
votes
4answers
134 views

What are the dominant purposes of having random user names vs fixed-format email addresses with AD/LDAP?

Example, a user name might be "ekg7d9a", but the user's real name is "Charlie Hanes", and the email is "chanes@example.com". What are the dominant reasons to use non-related user names with logins ...
0
votes
2answers
89 views

Security: How to improve security of Linux servers when few resident developers need shell access? [duplicate]

Possible Duplicate: SysAdmin & Developer: Responsibilities Suppose, I have 20 servers: We keep data in Linux servers Developers often need to Login to the server to debug some issue ...
-1
votes
3answers
207 views

How to Set Multiple Passwords for “HIgh Profile” Accounts

I generally set up servers with "important" services listening on nonstandard ports (e.g. SSH != 22) and rename or completely remove root/admin users. I recently thought that it might be fun to create ...
1
vote
0answers
630 views

Nginx, uWSGI, Python, users, groups and permissions. Questions about security

Ok, yesterday I finally get nginx and uWSGI servers running on my PC. Nginx and uWSGI configuration files, new users, groups and their privileges, and chrootdir for SSH I configured based on knowledge ...
-1
votes
1answer
838 views

How to create dummy user?

I want to create user with least privileges. Without home, without rights, without shell. How to do that? When I call useradd it creates user with home
2
votes
1answer
943 views

How to change user for more rights on a SFTP client?

It is always suggested on first step to disable the remote root login for the SSH protocol. I have a low-right user able to connect via SSH and once connected, I simply su in order to gain more ...
6
votes
1answer
406 views

How do I re-enable an sudo lecture, once it's been seen

I have sudo set to show the usual lecture on its first use by a user. Without thinking, I accidentally triggered its display for a new user as I was setting them up, and now it's been shown, they ...
4
votes
2answers
53 views

What are the minimum permissions to grant an Exchange 2007 admin to perform specific mailbox management tasks?

I would like to allow someone else to administer user accounts and mailboxes (add users, reset passwords, disable accounts) on an Exchange 2007 server. Obviously, they should not be able to disable ...
1
vote
3answers
502 views

Where to store application that I develop?

I'm developing a server application for ubuntu server, clients will connect to in through socket connection. It's in beta stage and under heavy development. At the moment lots of people are using it ...
0
votes
1answer
44 views

How do I create a new user on AWS?

I want to give developers individual access to AWS Management Console, and have their own security keys for AWS command line tools. Is it possible for me to do this using the command line tools? And ...
1
vote
3answers
119 views

Virtual users on Solaris

Is it possible to recreate the functionality of pam_userdb.so to make an application authenticate virtual users (valid for one specific service only) on Solaris? Situation is: higher-ups have ...
0
votes
3answers
3k views

Users cleaning in debian

I'm running a webserver at slicehost and decided to delete unused/unnecessary users. But I really don't know which ones are necessary for the system to work I use it as apache webserver with mysql, ...
1
vote
1answer
1k views

SQL Server 2005 Accidentally removed a user from public role, can't add user back into role

I'm trying to crearte a DB user account that only has access to a specific database, and can't read or change other databases, and can't alter credentials for any other accounts. I accidentally ...
2
votes
1answer
274 views

How to setup a user account for a web application

What are the main guidelines to setting up a user account on a Linux machine for a web app? In my case it is a Rails application that does file management. First thing I can think of is to limit ...
1
vote
4answers
392 views

PHP scripts owned by www-data

I use to have owned php scripts on a dedicated server by user "webroot". It would be easier for coding and administration if the scripts were owned by the apache2 user, "www-data" on my system. Also ...
1
vote
0answers
613 views

least privilege account for WinRM remote calls on Windows 2008 Server

ServerFault Windows experts: please consider the following use case: I have 2 Windows 2008 Server SP2 boxes let’s call them – SOURCE, CLIENT. On SOURCE: I create a new user called 'normal'. Just a ...
0
votes
2answers
1k views

LAMP setup + FTP - problem with user privileges

I'm sorry for uber noobish question, I'm new to linux and trying to learn and practice secure LAMP administration for upcoming little project of mine. I've installed vsftpd but can't setup ...
5
votes
5answers
611 views

LDAP for privilege control?

I've been wondering for a while if LDAP can be used to control user privileges. For example, if I have UNIX and web logins, is there an easy way to grant a user access to just or just UNIX (or even ...
6
votes
11answers
154 views

Security, user access, login and reporting. How do you mentally adjust for the negative aspects of security management?

Employees get laid off, do stupid things (like peek at a porn site), talk about personally offensive/suggestive subjects on IM & email. As IT Manager, I am tasked to lock user accounts, change ...
2
votes
2answers
432 views

Secure user setup in Sql Server 2000

I'm looking to setup a user account in Sql Server 2000 in the most secure manner. The criteria is as follows: No access to the master database (db_denydatareader & db_denydatawriter on master) ...
1
vote
1answer
83 views

Software compilation and security

I have compiled different softwares (apache, postgresql, proftpd, and jboss) and installed then into a single directory (with the --prefix configure option). I have something like that: /opt/apache ...
3
votes
6answers
3k views

How to add a linux user with a random or invalid password from a script

I want to add a user to the linux system from a script, but I don't want to invent or care for the password. This should be done automatically. The goal is to generate ssh-keys and this user needs ...
0
votes
2answers
146 views

MySQL Development machine permissions

I'm administrating two servers who follow the model of development and production machines. The production machine is stripped bare-bone software which runs under restrictive set of rules and limited ...
0
votes
2answers
2k views

Adding Windows SharePoint Services users from local users on hyper V

I am running Windows SharePoint Services on a Hyper V server provided by my ISP. My WSS install is standalone and using SQL Express. When I go to add users to the site collection I see all users on ...
3
votes
6answers
309 views

How do you secure your mobile computers?

The possibility of having one of your users' laptop being either stolen or lost is fairly high. What are some of the best practices/policies when protecting your data on mobile computers? ...
1
vote
3answers
286 views

Managing Linux users remotely

In a Linux network, is it possible to manage permissions granulary from a central location? Say I have an LDAP server where users can authenticate, can I manage permissions from there? I'm talking ...
6
votes
2answers
2k views

How does user/group security work on Linux?

For example, how does mount decide if the current user has permissions to mount a filesystem? From what I know, it checks the fstab file and the group the user belongs to (I think plugdev, at least on ...
4
votes
7answers
1k views

Access to the Production Systems for non sys-admins

What's your opinion on access to the Production or Live Systems by non sys-admins? Do you think this access should be provided with nominal usernames? Do you think access to the log files or the ...