Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

1
vote
1answer
123 views

Is using Capistrano for user maintenance tasks on university lab feasible?

I've been looking around for tools to replace some legacy scripts for creating and maintaining accounts in a university computer lab ecosystem consisting of things like: LDAP and Kerberos for ...
0
votes
1answer
130 views

How to inactive windows users, 1 month after their FIRST LOGIN, instead of defining a solid expiration date for them

We want to give access to some Windows Server users so they can remotely have access to our server and download from a special folder of the server. The licenses we give to users, are time base. ...
1
vote
1answer
115 views

Using Kerberos only for SSO

I've installed Kerberos on the Debian machine that hosts an internal application, to be able to use it to authenticate users against our AD. This works. However, Kerberos seems to feel responsible ...
4
votes
1answer
390 views

Should I manage Linux Groups in LDAP on a per machine basis?

I am currently running an OpenLDAP Server managing my Linux Users as posixaccount and posixgroup elements like so: dn: cn=shellinger,ou=groups,dc=company,dc=com cn: shellinger gidNumber: 5001 ...
0
votes
1answer
1k views

Audit of who ran what command via ssh with shared account

We use shared accounts on our servers. Each uses a different ssh key. Is there a way to create an audit trail of who ran what commands? We can distinguish real "users" by the ssh key used.
1
vote
1answer
93 views

Which way is more secure: apache:admin or folder group owner:apache?

I have been learning in recent days how to set up var/www/ permissions. I understand the common solution is set a group owner of all new folders to apache via sticky bit. How about giving the Apache ...
1
vote
1answer
79 views

user and groups for LAMP

I have written a script that installs a LAMP environment and a few other helpful programs. All of this has been installed under root. I would now like to create a new user called webmaster that will ...
0
votes
1answer
1k views

CentOS 6 restrict user ssh access to his home folder

I am trying to restrict a newly added user to his homedir /home/username. Don't want him to be able to cd out of it. I have this my sshd_config: Match User username ChrootDirectory %h ...
3
votes
2answers
110 views

How to set permissions to use 'ls'

I have a folder (which is owned by another user but the same group) and I want to view it's contents, but I always get the following error message: "ls: cannot open directory .: Permission denied" ...
2
votes
3answers
778 views

Replace gitolite3 user with git

I am installing gitolite3 on a server, with ssh and http pulling/pushing/alltherest. During the process, a user and group gitolite3 is created. When I run: $ ssh gitolite3@server info I get the ...
0
votes
0answers
50 views

Handling user state across servers

I have two servers running Apache for the same domain name. Server A runs most of the web site (www.domain.com), except for one sub-directory (www.domain.com/photos/) that is set up as an HTTP proxy ...
1
vote
2answers
322 views

How can I allow users to change their local passwords?

We use an LDAP-server, but we also use local accounts. [jdoe@tst-03 ~]$ passwd Changing password for user jdoe. Changing password for jdoe. (current) UNIX password: Enter login(LDAP) password: This ...
0
votes
1answer
34 views

Custom user and custom permission on Linux

I've this need, I have to install ubuntu on a machine for a specific purpose, and I have to create a particular locked user account. On startup i need to display the login box (so I have to admin the ...
0
votes
1answer
184 views

Lync 2013 user setup

Couple simple questions on Lync Server 2013. We have setup a standard edition environment for a single domain. The domain is not the same the email address domain (e.g.: domain is something like ...
3
votes
4answers
9k views

What do I need to be cautious of when changing a User Logon Name in Active Directory?

I'm new to my current employer, being their only Sysadmin. I'm seeing a small handful of users who have User Logon Names which don't conform to the naming convention standard which majority of users ...
1
vote
3answers
787 views

How to change users full name on Debian

I'm working on a Debian server as an inexperienced admin. I need to change the full name of a user (not the login name) provided during adduser USERNAME. How can I do this? I didn't find such an ...
1
vote
1answer
81 views

Mysql slow.log user specific

I use a slow.log logging on my MySQL server, to catch bottlenecks in my script, but at the same time, i use phpmyadmin on this server. My script and phpmyadmin has different MySQL user accounts and ...
11
votes
4answers
1k views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
0
votes
1answer
629 views

How can I “fix” a user that has no home dir but is logged in

I created postgres using the useradd command without thinking twice about it. I've already got postgres installed and running. I'm unable to add a home directory to postgres because the user is ...
0
votes
1answer
1k views

new user and problems with ssh key configuration (pub vs pem files)

We access our ubuntu server from outside over ssh this way : ssh -i securityTier.pem -l someUsername serverDnsName I need to create new user which will use separate *.pem file. So far i created : ...
0
votes
1answer
64 views

Linux user permissions setup for monitoring tool

We have external monitoring tool which will access our linux machines through SSH and will read top/ping/netstat/disk activity. As i am creating separated ssh key and separated user for this purpose i ...
1
vote
2answers
310 views

Linux user groups : how to create shared directory under home

I have created 3 users 'u1','u2','u3'. Now I want to provide access to u1's /home/u1/share directory users u2,u3. I don't want to create a new common group named 'shared' and add 3 users there. Is ...
0
votes
1answer
211 views

PXE server - ubuntu setting username/password later - is it possible?

so I am writing a program in mainly C/C++, though I think this question fits under server fault as it is related to the Linux distro Ubuntu. So what I am looking for is a way (possibly hackerish-way) ...
0
votes
1answer
539 views

Cannot log in via chroot SSH

I not only want to transmit files via sftp, but also want to log in via ssh. Here is what I changed in sshd_config Match Group ssh_jail ChrootDirectory /mnt/chroot I have mounted ...
0
votes
1answer
48 views

Should I use system user account as opposed to normal user account for deploying the code in App server?

I have a Tornado app-server running behind an Nginx web-server. The app server contains python scripts for tasks like processing client requests, database call, running business logic, etc. Of ...
2
votes
3answers
652 views

libvirtd: kvm: User Permissions Centos 6

I need to have user access control over how they can use the Virtual machines and what they can do via Virsh on a KVM based hypervisor. So far what I learned from http://wiki.libvirt.org is that I ...
1
vote
4answers
501 views

Is it a bad practice to turn on multiple sessions for same user account?

We have 4-5 people technicians using a server and as they share a single user account, one person logging in ends the RDP session for someone else. Which would be a better practice - Using multiple ...
1
vote
1answer
347 views

Add a trust hostname in mysql

how have I to add a trusted hostname in the mysql configuration? webserver.mysomain.com dbserver.mydomain.com I would like to add the webserver.mydomain.com in the mysql database installed in the ...
0
votes
0answers
142 views

How to automatically log in into 2 accounts on Windows 7 on startup

I have a task scheduler job that fires Selenium unit testing server and runs some tests. It takes some resources because it opens a lots of websites. Moreover the Selenium with Firefox Driver has a ...
0
votes
2answers
24 views

W2k Server: delete specific users by console

I want to delete specific user profiles in win2k-Server. I thought I could achieve that with microsofts Delprof. But there I cant specificly declare userXY. So is there an other console way to delete ...
2
votes
1answer
173 views

Maximum amount of users in 2003 Active Directory

Could you please number the maximum amount of users for 2003 Active Directory?
1
vote
2answers
38 views

How to avoid restoring deleted user accounts when recovering from backup?

Typically in websites, when a user wants to permanently delete his/her account, is necessary to remove this account also from the backups to avoid unwanted reactivations in case of backup restoration? ...
1
vote
4answers
6k views

How can I limit a users bandwidth in Windows Server 2008 R2 [closed]

We have a user that likes to download movies with torrents in our office and it just kills the overall network performance. Unfortunately we need this user and don't want to confront him directly ...
0
votes
1answer
315 views

Multiple users, one public_html directory

New to creating users with linux. Trying to add users in a secure manner, limiting damage a user can do give all members of the webadmins group access to the public_html folder as projects are often ...
-2
votes
2answers
57 views

setting up sudo account

I want to create a managed account with root powers and the ability to su as root if need be to manage the box without needing root. What is the correct way to do it? Does this work? ...
2
votes
1answer
208 views

How to manage users and resources in a multiple server environment? [duplicate]

Possible Duplicate: A system for distributing SSH public keys Need help managing developer authentication on our system. We have multiple CentOS servers (database, Web, Redis, etc.), and ...
32
votes
5answers
6k views

How do admins maintain user accounts across hundreds of linux servers?

Dealing with hundreds of RHEL servers, how can we maintain local root accounts and network user accounts? Is there an active directory type solution that manages these from a central location?
0
votes
1answer
295 views

Puppet do wrong command for create user

I have 2 debian boxes. One with puppetmaster, second with puppetd. # puppet -V 2.7.18 In manifest i have: group { "tipadima": ensure => present, } user { "tipadima": ...
0
votes
1answer
116 views

Setting user quota on a share in Win Server 08r2

I have several shares on a server running 08r2 that I have users dumping files to. I would like to limit each user to be able to use only a specific amount of the space (quota) Any help on how to ...
3
votes
1answer
3k views

Add system user to CentOS 6

I need help adding a system user to my CentOS server. I have two commands that works on Ubuntu Server, however I have to find a replacement for CentOS while keeping the same result. The commands are: ...
1
vote
2answers
563 views

Dead simple tool to administer users on multiple servers?

I'm responsible for several web servers which all hosts the excact same content. They are all participating in a load balanced setup. Whenever I need to create a new website on one of these servers, ...
2
votes
1answer
196 views

Puppet - groupid (gid) for mysql group differs between prod and dev

I just puppetized mysql and ran into a weird issue where the gid for the mysql group on dev differs from production. Apparently on production I have a user that doesn't exist on the dev environment ...
0
votes
1answer
245 views

Easiest way to replicate users between two (or more) servers?

I've got two webservers which takes part in a load balanced setup. The two webservers are in other words mirrors of each other. As it is right now I'm synchronizing data between these two servers ...
2
votes
1answer
482 views

puppet loops to create users with values in a raw file

I would like to use puppet to create mailboxes. Basically, I only need a directory to be created when a new user arrives. However, the users list is quite huge and creating a file stanza per user is ...
2
votes
2answers
54 views

Safely create accounts from a non-root web applicaion

I have a web app that runs as a non-privileged user that needs to create linux accounts. I'd prefer not to run it as root, so the only scheme I think of is to create a simple C suid program that ...
0
votes
1answer
110 views

Ubuntu, How to prevent listing sub-directory if parent-directory is protected

I remember last time when I am on some Linux OS ( cannot remember ), when I change the mod of a directory to 711, that folder together with all of its sub-directories cannot be listed (ls -al) by any ...
2
votes
1answer
89 views

Linux single user logon for Website, SVN, Trac, and MediaWiki

I'm looking for a way to grant new (remote, public) users the possibility to sign up for a new account via a web form, which will grant access to a restricted area of our website, an SVN repository, a ...
3
votes
4answers
140 views

What are the dominant purposes of having random user names vs fixed-format email addresses with AD/LDAP?

Example, a user name might be "ekg7d9a", but the user's real name is "Charlie Hanes", and the email is "chanes@example.com". What are the dominant reasons to use non-related user names with logins ...
0
votes
2answers
108 views

Security: How to improve security of Linux servers when few resident developers need shell access? [duplicate]

Possible Duplicate: SysAdmin & Developer: Responsibilities Suppose, I have 20 servers: We keep data in Linux servers Developers often need to Login to the server to debug some issue ...
3
votes
1answer
2k views

Force “net user” command to set password longer than 14 characters

I'm issuing some "net user" commands to setup a local user on my desktop for some testing purposes and require setting a password longer than 14 characters. In doing so Windows barks back a propmt to ...