Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

3
votes
2answers
2k views

Easy workflow for migrating home folders (from clients to OS X server)?

Let's say you have an office with 20 free range iMacs. One day they buy an Xserve to host network home folders. What steps would you perform to move their local accounts, and local home folders, to ...
3
votes
3answers
1k views

Users changing their name

When users need a username changed, is there a set of places to have to check that the bases are covered? I know that AD uses a SID to actually identify users, but in this example we have a user that ...
3
votes
1answer
4k views

Add a new user on OSX Snow Leapard Server from the command line?

I have a Mac OSX server running Snow Leapord. I only have ssh access, and I have root access. I want to add a new user. I'm a long time unix user and was a bit suprised to see adduser and useradd not ...
3
votes
2answers
202 views

setting up a project development environment

not sure if this is ok for this site, but here goes! Looking for a skilled/experienced linux sysadmin that i can talk to about setting up a development environment for remote people to use for a ...
3
votes
1answer
554 views

Active Directory: How to answer “does this user belong to this group (directly or indirectly)”

There are various ways to either list all users & groups belonging to a group (or via gui), or conversely list all groups a group or user belongs to... However, I am in a position where I wish to ...
3
votes
3answers
202 views

How is your “maintenance account” configured?

I know I'm not supposed to log in as root directly to configure things on my server. So, I always make a new account and add it to /etc/sudoers. I'd like to get some tips on configuring this ...
3
votes
3answers
838 views

How to allow a group to change user passwords?

I have the following openldap server configuration: access to attrs=userPassword by self write by anonymous auth by set="[cn=users,ou=Group,dc=my-company,dc=de]/memberUid & user/uid" ...
3
votes
1answer
1k views

Expiring Inactive User Accounts

I want to have some method of determining which user accounts have remained unused for a certain period of time, lock the accounts, and then after a further period, delete the accounts (notifying the ...
2
votes
9answers
996 views

Decentralized usermanagement

I need some usermanagement for a serverfarm of +/- 30 linux servers. Normally I would think of something like LDAP, but we don't want to rely on a global server to which we need to authenticate, in ...
2
votes
2answers
1k views

What files are created/modified when adding a user (useradd) in linux?

I know that /etc/group and /etc/passwd are modified, and /home/user/* is created, but are there others? Thanks.
2
votes
3answers
2k views

Remove user from root group

Somehow I managed to add user Tom to root group in Ubuntu, in order to avoid using sudo everytime (bad decision). Now I want to remove it and I can't. I've tried using usermod -G {groups} Tom My ...
2
votes
6answers
2k views

How can I quickly add a lot of users to an Ubuntu server from the command-line?

I've just become familiar with basic usage of adduser. I'd like to eliminate the interaction/prompts. Since I'll be rebuilding this machine often, I'd like to script the process or at worst just ...
2
votes
2answers
4k views

Adding an existing user to a group with puppet

Is it possible to add an existing user to a group with puppet 2.7.18? We have two modules, each one defines one class : module "user" creates all users, including user foo and user bar. module ...
2
votes
4answers
103 views

1 server for only 1 website, should I use the root user or another user?

So I need a server that will host only 1 website. I will install debian as O.S. I want to know: do I need to setup an user to do my stuff or, considering I will the only user of the server, I can use ...
2
votes
1answer
1k views

How do I limit the users a specific user can run commands in linux?

I have 2 user accounts, foo and bar I want to allow user foo to execute commands as root and any other user ie: sudo su root -c'./run-my-script' sudo su bar -c'./another-script' sudo su ...
2
votes
4answers
9k views

How to create an alias for a user name on Linux?

For example, hot to set-up the system for john.smith and jsmith to be synonyms? UPDATE: the reason is than I want a user to be registered in the system as jsmith and to have john.smith@example.com ...
2
votes
3answers
1k views

Linux: how to create a super user?

I have three users: user_1, user_2, and user_super. There are two directories, /root/user_1 (chown -R user_1:user_1) /root/user_2 (chown -R user_2:user_2) I want my user_super to be able to ...
2
votes
4answers
589 views

What are my options for centralizing Unix user management

We have 15 Debian servers and growing. What's a simple, lightweight method for centralizing user management? Use cases would be adding a user across all servers, tweaking a users access on a specific ...
2
votes
2answers
2k views

Whould changing the administrator username effect the other setting on my windows server 2008 R2?

I would like to change the default administrator username on my Windows Server 2008 R2 but not sure whether it would effect my environment badly or not. I am also connecting to my server with this ...
2
votes
2answers
225 views

How to reduce our AD account creation and maintenance requests and work load

Where I work, almost 40% of our support requests are for account management tasks : Create new account and assign in groups Unlock an account Reset a password Change an account's groups following a ...
2
votes
7answers
8k views

A way to find the (Windows) computer name via the browser?

Ideally I'd like to send a link via staff email that staff could click on to reveal their computer name. (Specifically first part of the 'Long computer name' found in the second tab of My Computer ...
2
votes
3answers
1k views

How do I create an interactive daemon login?

I run a service on a debian/linux machine which runs at boot with a 'screen' session I can always attach to. I would like to create a username which I can run this service as. At the moment I use a ...
2
votes
3answers
279 views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
2
votes
4answers
992 views

Temporary changes to /etc/passwd or /etc/group - how-to

I want to temporarily modify /etc/passwd and/or /etc/group to "remove" a user/group without deleting the line. Is there a way to do that? ...
2
votes
2answers
77 views

Are these MySQL user settings vulnerable?

I'm using PHPMyAdmin to manage the databases and I'm new to SQL in general. Am I suppose to keep an open anonymous user on localhost so things like Drupal can access MySQL? It seems like having a ...
2
votes
2answers
127 views

What's the best way to see logged in users on Windows Server 2012?

Right now I use a powershell script to see the currently logged in users. But I don't see if there session is idle, active or inactive. I can see when the session was started but that's it. Is there a ...
2
votes
1answer
998 views

Force “net user” command to set password longer than 14 characters

I'm issuing some "net user" commands to setup a local user on my desktop for some testing purposes and require setting a password longer than 14 characters. In doing so Windows barks back a propmt to ...
2
votes
1answer
567 views

Disable non admin users to logon

I have installed Windows Server 2008 @ my office, I have created 2 admin accounts and one user account(publicly shared to all team members for backup of their data on some shared folders). They are ...
2
votes
3answers
244 views

“uptime” and “who” disagreeing

I've got an Ubuntu server that's exhibiting a somewhat strange behavior. uptime reports the following: 07:48:10 up 627 days, 21:19, 3 users, load average: 0.04, 0.01, 0.00 w reports: 21:59:25 up ...
2
votes
2answers
3k views

Puppet - how can i copy a file to several user folders?

Well i was using the info on this: Puppet - Any way to copy predefined custom configuration files for software on clients from the puppet master (host)? But i need some more elaborated, because i ...
2
votes
2answers
100 views

How to set permissions to use 'ls'

I have a folder (which is owned by another user but the same group) and I want to view it's contents, but I always get the following error message: "ls: cannot open directory .: Permission denied" ...
2
votes
2answers
119 views

automatic ssh key generation

In linux, If I added a file or a directory in /etc/skel, when I create a user this get the file or dir in skel. with ssh-keygen -t rsa I can create the ssh keys how I can automatically create ...
2
votes
1answer
859 views

new user with authorized_keys: how to NOT ask for the old password when setting one?

when I create a user in the system with Chef, I always upload its public key to .ssh/authorized_keys. When user logs in for the first time, he is required to "change" his password. For that a stub ...
2
votes
1answer
320 views

Group Membership on Linux

I am adding a user using useradd -d /home/testuser -m -g usergroup -s /bin/bash testuser The group 'usergroup' already exists. This command runs fine and the user is created. However, when I try to ...
2
votes
2answers
2k views

Is it possible to set linux user's priority?

I am on Ubuntu system, and I want to create "limited" user. I want all processes started by this user to have lower than normal priority. It would be great if I/O priority could be decreased as well ...
2
votes
3answers
779 views

How can I tell what user account is being used to perform an action (in context of SQL Server)?

For example, when installing SQL Server 2008, I had to pick an account for the database engine to run as. When I went to attach a 2005 database file with SQL Server Management Studio, there was a ...
2
votes
3answers
188 views

What is a good for networked Linux computers?

Ok, this may be a bit of a complicated problem, but I'll try to simplify it as much as possible. We are on a University Campus network, and I am working for a professor who wants to setup at least 3 ...
2
votes
1answer
16k views

How to disable user's password via puppet securely?

I have my SSH servers setup to use only Public Key authentication with password authentication disabled. When adding users through puppet I would like to disable user passwords. So far I have came ...
2
votes
1answer
922 views

Limit number of concurrent user logins in Windows Server 2008 Active Directory

Is there the possibility to limit Active Directory users' max concurrent login sessions? I've read many articles and discussions about the solution, but none of them seem to be working. Many had ...
2
votes
1answer
104 views

Maximum amount of users in 2003 Active Directory

Could you please number the maximum amount of users for 2003 Active Directory?
2
votes
1answer
78 views

Linux single user logon for Website, SVN, Trac, and MediaWiki

I'm looking for a way to grant new (remote, public) users the possibility to sign up for a new account via a web form, which will grant access to a restricted area of our website, an SVN repository, a ...
2
votes
2answers
182 views

FTP user on CentOS with '@' symbol in username

Our previous web server was Windows based, and it hosted multiple domains. As a result, if a user with name "username" wanted to log in via FTP to "example.com", they'd provide their username as ...
2
votes
2answers
302 views

“your users are out of order, click re-order to fix” - what exactly does this mean and why does it effect a programs ability to load?

"your users are out of order, click re-order to fix" - what exactly does this mean and why does it effect a programs ability to load? OS: Windows 7 64 bit ultimate edition What does it mean when ...
2
votes
2answers
2k views

how to view log files for printing made by different users on LAN

I have a windows 2003 server and have attached a printer to this server. This printer is installed on the server and shared to all computers on the local area network. I want to check to see which ...
2
votes
2answers
133 views

Managing a Mobile Work force

One of my responsibilities is to manage my mobile users, Sales, Support, Exec, etc. For those out there who do the same how do you do it? I know it's a very broad question but how do you keep them up ...
2
votes
3answers
230 views

Replace gitolite3 user with git

I am installing gitolite3 on a server, with ssh and http pulling/pushing/alltherest. During the process, a user and group gitolite3 is created. When I run: $ ssh gitolite3@server info I get the ...
2
votes
1answer
150 views

Puppet - groupid (gid) for mysql group differs between prod and dev

I just puppetized mysql and ran into a weird issue where the gid for the mysql group on dev differs from production. Apparently on production I have a user that doesn't exist on the dev environment ...
2
votes
1answer
302 views

puppet loops to create users with values in a raw file

I would like to use puppet to create mailboxes. Basically, I only need a directory to be created when a new user arrives. However, the users list is quite huge and creating a file stanza per user is ...
2
votes
2answers
49 views

Safely create accounts from a non-root web applicaion

I have a web app that runs as a non-privileged user that needs to create linux accounts. I'd prefer not to run it as root, so the only scheme I think of is to create a simple C suid program that ...
2
votes
1answer
1k views

How to automatically reconcile /etc/group and /etc/gshadow

Running grpck to check the groups, I see these errors: 'twinky' is a member of the 'foo' group in /etc/group but not in /etc/gshadow 'dipsy' is a member of the 'foo' group in /etc/group but not in ...