Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

-1
votes
1answer
327 views

User authentication; PAM or Radius? [closed]

At college I'm part of a group of students that keep a server infrastructure running for the students. Lately we've been having a lot of trouble with the servers, and we decided that it's probably ...
1
vote
1answer
42 views

Where does adduser's Directory Information Go?

When I use the command adduser it asks me for all sorts of directory-like information such as: Full Name Room Number Work Phone etc. Where is this information stored and how does one retrieve or ...
5
votes
2answers
227 views

Issues With Printer GPO

I have a Windows Server 2008 R2 print server. The client machines are Windows 7 Professional. I am having issues with user accounts not getting the printer added when they login. Things that I have ...
1
vote
2answers
136 views

Account name changes

The way we currently handle account name changes is quite cumbersome and wondering if there is an easier way to go about things. Name change request comes through and we create a new AD account, ...
0
votes
1answer
48 views

Script to apply Simple Finder restrictions to Mac OS X user?

Is it possible to script (e.g. with AppleScript or bash shell script) applying the Simple Finder and an associated application whitelist to a local user account on Mac OS X? We are using Mac OS X ...
2
votes
1answer
150 views

Share Ruby Programs between Linux users

Our Linux (Mint) system has 2 admin users - mint & admin. What do we need to do for admin & mint to be able to share gems? Mint has chef, berkshelf & knife-ec2 installed via bundler in ...
3
votes
1answer
1k views

When does password expire when unchecking “Password never expires”

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the ...
1
vote
2answers
814 views

How do you tell if a user is “allowed to log in” on Linux?

The question is simple, I want to list all the user accounts which can log in to my system, but I'm not sure if that all the users in /etc/passwd are "could login" users? Details: I can see users ...
15
votes
3answers
10k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
2
votes
0answers
24 views

Specialized access control for directories in RedHat 6?

I have a requirement where I want to set permissions for a directory so that the directory owner (user/group) would be able to create files inside the directory and modify them, but won't be able to ...
1
vote
1answer
133 views

How can I either through vbscript or GPO push a Windows 7 Logon Screen to all my users

I know how to change the login screen, it's easy. But I would like to figure out a way to do it through GPO or login script. I have tried running the script as the computer start-up script as well as ...
0
votes
3answers
845 views

deny local logon for a new user through command line windows server 2008

I am creating a local user account that I want to be able to connect over ftp, but not log on to the server, I believe the way to do this is to deny local logon but am unsure how to achieve this via ...
1
vote
1answer
105 views

command to add permissions to a folder for a local user in windows server 2008

as part of an installer I need to create a user with limited permissions to add the user I will use net user "<username>" <password> /add /fullname:"<username>" I now need to ...
0
votes
2answers
85 views

Should I set the password when creating new user using useradd command?

I know that when creating a new user by useradd, I could set his password by -p option, but it seems insecure, then what the right way to create a user and set his password? I do this in two steps: ...
0
votes
0answers
33 views

NFS-mounting utmp

I've got a Slackware Linux cluster I'm planning on using for general-purpose shell accounts. Accounts are managed such that there are no UID or username conflicts among nodes. Given this, would ...
1
vote
0answers
50 views

Limit size using Quota per file for a user

I am working on a linux machine . i have a user name dave. i want to implement quota on /home/dave . that dave could not create more than 2 MB file in this main directory. user can create any sub ...
4
votes
0answers
93 views

solaris : useradd does not work but has exit code 0 [closed]

One of my Solaris 10 servers will not add new users. Existing users are able to log in. The useradd command appears to work normally but it does not add the user. I checked my other Solaris servers ...
5
votes
1answer
56 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
0
votes
1answer
30 views

Is there a decent way to manage accounts across disparate web services?

I'm in the position of needing to manage the accounts of multiple people across many different types of services, including onboarding and offboarding users. Being that we're using multiple different ...
1
vote
1answer
452 views

Access secured windows folder with java on a linux server

We're trying to mount a secured windows share on a linux server, but until now we're unable to do so. This is the setup we're having: A linux server that runs a java application A windows share that ...
2
votes
3answers
464 views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
0
votes
3answers
34 views

vSphere: change users on virtual machine

Is there any way to affect user accounts an a virtual machine, directly from vSphere Client? Let's say I have a virtual Ubuntu machine and I'm not able to log in onto this machine. Can I somehow use ...
2
votes
1answer
2k views

Limit number of concurrent user logins in Windows Server 2008 Active Directory

Is there the possibility to limit Active Directory users' max concurrent login sessions? I've read many articles and discussions about the solution, but none of them seem to be working. Many had ...
1
vote
1answer
92 views

How to inactive Active Directory users, 1 month after their FIRST LOGIN, instead of defining a solid expiration date

We want to give access to some Active Directory users, so they can remotely have access to our server and download from a special folder of the server. The licenses we give to users, are time base. ...
1
vote
1answer
98 views

Is using Capistrano for user maintenance tasks on university lab feasible?

I've been looking around for tools to replace some legacy scripts for creating and maintaining accounts in a university computer lab ecosystem consisting of things like: LDAP and Kerberos for ...
0
votes
1answer
84 views

How to inactive windows users, 1 month after their FIRST LOGIN, instead of defining a solid expiration date for them

We want to give access to some Windows Server users so they can remotely have access to our server and download from a special folder of the server. The licenses we give to users, are time base. ...
1
vote
1answer
109 views

Using Kerberos only for SSO

I've installed Kerberos on the Debian machine that hosts an internal application, to be able to use it to authenticate users against our AD. This works. However, Kerberos seems to feel responsible ...
3
votes
1answer
241 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...
0
votes
1answer
545 views

Audit of who ran what command via ssh with shared account

We use shared accounts on our servers. Each uses a different ssh key. Is there a way to create an audit trail of who ran what commands? We can distinguish real "users" by the ssh key used.
1
vote
1answer
90 views

Which way is more secure: apache:admin or folder group owner:apache?

I have been learning in recent days how to set up var/www/ permissions. I understand the common solution is set a group owner of all new folders to apache via sticky bit. How about giving the Apache ...
1
vote
1answer
63 views

user and groups for LAMP

I have written a script that installs a LAMP environment and a few other helpful programs. All of this has been installed under root. I would now like to create a new user called webmaster that will ...
0
votes
1answer
1k views

CentOS 6 restrict user ssh access to his home folder

I am trying to restrict a newly added user to his homedir /home/username. Don't want him to be able to cd out of it. I have this my sshd_config: Match User username ChrootDirectory %h ...
0
votes
1answer
248 views

Windows Active Directory “Last Logon” of deleted user

How can I find last logon information in Active Directory of a user that has been deleted?
3
votes
2answers
105 views

How to set permissions to use 'ls'

I have a folder (which is owned by another user but the same group) and I want to view it's contents, but I always get the following error message: "ls: cannot open directory .: Permission denied" ...
2
votes
3answers
475 views

Replace gitolite3 user with git

I am installing gitolite3 on a server, with ssh and http pulling/pushing/alltherest. During the process, a user and group gitolite3 is created. When I run: $ ssh gitolite3@server info I get the ...
0
votes
0answers
47 views

Handling user state across servers

I have two servers running Apache for the same domain name. Server A runs most of the web site (www.domain.com), except for one sub-directory (www.domain.com/photos/) that is set up as an HTTP proxy ...
1
vote
2answers
217 views

How can I allow users to change their local passwords?

We use an LDAP-server, but we also use local accounts. [jdoe@tst-03 ~]$ passwd Changing password for user jdoe. Changing password for jdoe. (current) UNIX password: Enter login(LDAP) password: This ...
0
votes
1answer
31 views

Custom user and custom permission on Linux

I've this need, I have to install ubuntu on a machine for a specific purpose, and I have to create a particular locked user account. On startup i need to display the login box (so I have to admin the ...
0
votes
1answer
137 views

Lync 2013 user setup

Couple simple questions on Lync Server 2013. We have setup a standard edition environment for a single domain. The domain is not the same the email address domain (e.g.: domain is something like ...
3
votes
4answers
5k views

What do I need to be cautious of when changing a User Logon Name in Active Directory?

I'm new to my current employer, being their only Sysadmin. I'm seeing a small handful of users who have User Logon Names which don't conform to the naming convention standard which majority of users ...
0
votes
3answers
566 views

How to change users full name on Debian

I'm working on a Debian server as an inexperienced admin. I need to change the full name of a user (not the login name) provided during adduser USERNAME. How can I do this? I didn't find such an ...
1
vote
1answer
50 views

Mysql slow.log user specific

I use a slow.log logging on my MySQL server, to catch bottlenecks in my script, but at the same time, i use phpmyadmin on this server. My script and phpmyadmin has different MySQL user accounts and ...
9
votes
4answers
865 views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
0
votes
1answer
424 views

How can I “fix” a user that has no home dir but is logged in

I created postgres using the useradd command without thinking twice about it. I've already got postgres installed and running. I'm unable to add a home directory to postgres because the user is ...
0
votes
1answer
882 views

new user and problems with ssh key configuration (pub vs pem files)

We access our ubuntu server from outside over ssh this way : ssh -i securityTier.pem -l someUsername serverDnsName I need to create new user which will use separate *.pem file. So far i created : ...
0
votes
1answer
59 views

Linux user permissions setup for monitoring tool

We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
1
vote
2answers
207 views

Linux user groups : how to create shared directory under home

I have created 3 users 'u1','u2','u3'. Now I want to provide access to u1's /home/u1/share directory users u2,u3. I don't want to create a new common group named 'shared' and add 3 users there. Is ...
0
votes
1answer
177 views

PXE server - ubuntu setting username/password later - is it possible?

so I am writing a program in mainly C/C++, though I think this question fits under server fault as it is related to the Linux distro Ubuntu. So what I am looking for is a way (possibly hackerish-way) ...
0
votes
1answer
463 views

Cannot log in via chroot SSH

I not only want to transmit files via sftp, but also want to log in via ssh. Here is what I changed in sshd_config Match Group ssh_jail ChrootDirectory /mnt/chroot I have mounted ...
0
votes
1answer
42 views

Should I use system user account as opposed to normal user account for deploying the code in App server?

I have a Tornado app-server running behind an Nginx web-server. The app server contains python scripts for tasks like processing client requests, database call, running business logic, etc. Of ...