Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

3
votes
1answer
5k views

How do I add a domain user to a group on a non-domain server?

If we are running a server that is not attached to the domain, how would I go about adding a domain user to a local group on that server?
3
votes
3answers
867 views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
3
votes
4answers
10k views

Apache2 - Run Apache as the user's account

I just got my very own Linux (Debian Stable) server, and installed Apache2, PHP5 and MySQL. It's supposed to be used for hosting of my own and others websites. As it is now, Apache is running as its ...
3
votes
3answers
212 views

Find users with unchanged passwords?

I recently added a bunch of users and gave them randomly generated passwords. We've since instructed them to change their passwords, but we suspect that a large number of them have not. How can we ...
3
votes
3answers
7k views

PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well

Hey I've got this cmdlet here: Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com" I've built it to find disabled ...
3
votes
2answers
474 views

Linux Server user copy

Is there a way to copy user list (with data and passwords) from one server to another. We have two servers and one of those is new. I need to create same users (that exist in /home/) and set same ...
3
votes
2answers
8k views

How do I migrate user-accounts from OpenLDAP to Active-Directory?

We want to migrate our user-accounts from OpenLDAP to Active-Directory without changing the passwords and such. The users shouldn't notice the difference against which server they're authenticating ...
3
votes
2answers
216 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...
3
votes
2answers
140 views

How can I correlate a wall jack to a user/machine on the domain?

After reading Valve's new employee handbook, I was really interested in setting up a company map like they described on page 6: "The fact that everyone is always moving around within the company ...
3
votes
1answer
1k views

new user with authorized_keys: how to NOT ask for the old password when setting one?

when I create a user in the system with Chef, I always upload its public key to .ssh/authorized_keys. When user logs in for the first time, he is required to "change" his password. For that a stub ...
3
votes
4answers
1k views

Recommendations on managing dot files for users using Puppet

Goal is to have a collection of dot files (.bashrc, .vimrc, etc.) in a central location. Once it's there, Puppet should push out the files to all managed servers. I initially was thinking of giving ...
3
votes
4answers
1k views

What happens to my SQL Server logins if I change a windows domain username

My question is very similar to this question Changing Windows Domain UserName but the original question doesn't explicitly answer my slight variation. If I change a windows users username (if they ...
3
votes
4answers
21k views

FTP Error 530, User cannot log in, home directory inaccessible

I've been tasked with setting up an FTP directory for a client of ours. I'm working from a Windows 2008 Server with IIS 7 installed. To create the FTP user directory I've followed this eHow tutorial. ...
3
votes
3answers
208 views

What is a good configuration for networked Linux computers?

We are on a University campus network, and I am working for a professor who wants to network at least three new computers with four existing machines. I'd like to know the best way to setup these ...
3
votes
1answer
3k views

When does password expire when unchecking “Password never expires”

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the ...
3
votes
2answers
113 views

How to set permissions to use 'ls'

I have a folder (which is owned by another user but the same group) and I want to view it's contents, but I always get the following error message: "ls: cannot open directory .: Permission denied" ...
3
votes
1answer
115 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
3
votes
1answer
3k views

How to automatically reconcile /etc/group and /etc/gshadow

Running grpck to check the groups, I see these errors: 'twinky' is a member of the 'foo' group in /etc/group but not in /etc/gshadow 'dipsy' is a member of the 'foo' group in /etc/group but not in ...
3
votes
2answers
5k views

Trouble creating FTP in Server 2008

I have been trying to create an FTP server on my new Server 2008. I have been following both (very detailed and highly published here guides) For setting up using IIS Manager ...
3
votes
5answers
1k views

Ubuntu - Identifying a logged in user's bash session

I'm trying to delete a user logged into my ubuntu system. Let's call the user bob. I'm running sudo userdel -r bob The response I get is userdel: user bob is currently logged in So I run ps ...
3
votes
1answer
1k views

Adding security to privoxy

I have this little proxy that i run with privoxy on my server, basically to take advantage of my server's static IP to connect to my office's VPN. I'm using it on a, let's say, uncommon port without ...
3
votes
2answers
219 views

What is the minimum architecture required for per-user history logging and password protection on a small network?

I'd like to set up and administer a small network which would supply a captive portal where users type in a unique password and/or username to connect to the internet and to each others' computers, ...
3
votes
3answers
852 views

Single-Purpose SSH account, exclusively for Reverse Port Forwarding

On my Debian system, I'd like to create a user that is only allowed to do a Reverse Port Forward from their machine to my server, but I'm not sure how to create a limited user specifically for this ...
3
votes
2answers
207 views

setting up a project development environment

not sure if this is ok for this site, but here goes! Looking for a skilled/experienced linux sysadmin that i can talk to about setting up a development environment for remote people to use for a ...
3
votes
2answers
2k views

Easy workflow for migrating home folders (from clients to OS X server)?

Let's say you have an office with 20 free range iMacs. One day they buy an Xserve to host network home folders. What steps would you perform to move their local accounts, and local home folders, to ...
3
votes
3answers
2k views

Users changing their name

When users need a username changed, is there a set of places to have to check that the bases are covered? I know that AD uses a SID to actually identify users, but in this example we have a user that ...
3
votes
1answer
5k views

Add a new user on OSX Snow Leapard Server from the command line?

I have a Mac OSX server running Snow Leapord. I only have ssh access, and I have root access. I want to add a new user. I'm a long time unix user and was a bit suprised to see adduser and useradd not ...
3
votes
1answer
731 views

Active Directory: How to answer “does this user belong to this group (directly or indirectly)”

There are various ways to either list all users & groups belonging to a group (or via gui), or conversely list all groups a group or user belongs to... However, I am in a position where I wish to ...
3
votes
3answers
1k views

How to allow a group to change user passwords?

I have the following openldap server configuration: access to attrs=userPassword by self write by anonymous auth by set="[cn=users,ou=Group,dc=my-company,dc=de]/memberUid & user/uid" ...
3
votes
3answers
199 views

End-User AD Management solution [closed]

We've just migrated to a pure Microsoft environment and are looking for an end-user AD management solution. Ideally we'd like users to be able to manage their personal info in AD. We have ~500 users ...
3
votes
3answers
205 views

How is your “maintenance account” configured?

I know I'm not supposed to log in as root directly to configure things on my server. So, I always make a new account and add it to /etc/sudoers. I'd like to get some tips on configuring this ...
3
votes
0answers
903 views

Nginx, uWSGI, Python, users, groups and permissions. Questions about security [closed]

Ok, yesterday I finally get nginx and uWSGI servers running on my PC. Nginx and uWSGI configuration files, new users, groups and their privileges, and chrootdir for SSH I configured based on knowledge ...
2
votes
9answers
1k views

Decentralized usermanagement

I need some usermanagement for a serverfarm of +/- 30 linux servers. Normally I would think of something like LDAP, but we don't want to rely on a global server to which we need to authenticate, in ...
2
votes
2answers
2k views

What files are created/modified when adding a user (useradd) in linux?

I know that /etc/group and /etc/passwd are modified, and /home/user/* is created, but are there others? Thanks.
2
votes
6answers
4k views

How can I quickly add a lot of users to an Ubuntu server from the command-line?

I've just become familiar with basic usage of adduser. I'd like to eliminate the interaction/prompts. Since I'll be rebuilding this machine often, I'd like to script the process or at worst just ...
2
votes
5answers
2k views

SSH keys fail for one user

I just set up a new Debian server. I disabled root SSH and password auth, so you've gotta use a key file. For my primary user, everything works exactly as expected. I used ssh-keygen -t dsa and got ...
2
votes
2answers
3k views

Whould changing the administrator username effect the other setting on my windows server 2008 R2?

I would like to change the default administrator username on my Windows Server 2008 R2 but not sure whether it would effect my environment badly or not. I am also connecting to my server with this ...
2
votes
4answers
109 views

1 server for only 1 website, should I use the root user or another user?

So I need a server that will host only 1 website. I will install debian as O.S. I want to know: do I need to setup an user to do my stuff or, considering I will the only user of the server, I can use ...
2
votes
1answer
2k views

How do I limit the users a specific user can run commands in linux?

I have 2 user accounts, foo and bar I want to allow user foo to execute commands as root and any other user ie: sudo su root -c'./run-my-script' sudo su bar -c'./another-script' sudo su ...
2
votes
3answers
5k views

Users cleaning in debian

I'm running a webserver at slicehost and decided to delete unused/unnecessary users. But I really don't know which ones are necessary for the system to work I use it as apache webserver with mysql, ...
2
votes
3answers
2k views

Linux: how to create a super user?

I have three users: user_1, user_2, and user_super. There are two directories, /root/user_1 (chown -R user_1:user_1) /root/user_2 (chown -R user_2:user_2) I want my user_super to be able to ...
2
votes
3answers
2k views

How do I create an interactive daemon login?

I run a service on a debian/linux machine which runs at boot with a 'screen' session I can always attach to. I would like to create a username which I can run this service as. At the moment I use a ...
2
votes
2answers
241 views

How to reduce our AD account creation and maintenance requests and work load

Where I work, almost 40% of our support requests are for account management tasks : Create new account and assign in groups Unlock an account Reset a password Change an account's groups following a ...
2
votes
7answers
12k views

A way to find the (Windows) computer name via the browser?

Ideally I'd like to send a link via staff email that staff could click on to reveal their computer name. (Specifically first part of the 'Long computer name' found in the second tab of My Computer ...
2
votes
2answers
8k views

See all logged in users on Debian server [duplicate]

Possible Duplicate: How to know what user belongs to what ip on debian Is there a way to see a list of all current logged in user on a Debian server? Sometimes it is very useful to do so, ...
2
votes
4answers
1k views

Temporary changes to /etc/passwd or /etc/group - how-to

I want to temporarily modify /etc/passwd and/or /etc/group to "remove" a user/group without deleting the line. Is there a way to do that? ...
2
votes
2answers
78 views

Are these MySQL user settings vulnerable?

I'm using PHPMyAdmin to manage the databases and I'm new to SQL in general. Am I suppose to keep an open anonymous user on localhost so things like Drupal can access MySQL? It seems like having a ...
2
votes
1answer
90 views

instanceType attribute in Active Directory

I need to change the instanceType attribute of a service account. If I try to change it from Active Directory Users and Computers console it's greyed out and if I try to change it via powershell with ...
2
votes
1answer
1k views

Disable non admin users to logon

I have installed Windows Server 2008 @ my office, I have created 2 admin accounts and one user account(publicly shared to all team members for backup of their data on some shared folders). They are ...
2
votes
3answers
274 views

“uptime” and “who” disagreeing

I've got an Ubuntu server that's exhibiting a somewhat strange behavior. uptime reports the following: 07:48:10 up 627 days, 21:19, 3 users, load average: 0.04, 0.01, 0.00 w reports: 21:59:25 up ...