Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

2
votes
1answer
854 views

new user with authorized_keys: how to NOT ask for the old password when setting one?

when I create a user in the system with Chef, I always upload its public key to .ssh/authorized_keys. When user logs in for the first time, he is required to "change" his password. For that a stub ...
1
vote
2answers
387 views

Copying file from one user to another with PHP

I'm sure the answer to this is pretty simple, and it might not be PHP-specific, but I'm trying to use PHP's copy() function to copy an image from one user to another as part of a custom CMS setup. ...
3
votes
1answer
554 views

Active Directory: How to answer “does this user belong to this group (directly or indirectly)”

There are various ways to either list all users & groups belonging to a group (or via gui), or conversely list all groups a group or user belongs to... However, I am in a position where I wish to ...
12
votes
4answers
1k views

how many user accounts can a unix-like OS host?

Let's say I want to have a server with as many user accounts as possible. How many is the max? I want millions of user accounts. Is that crazy? I'd host dozens of load-balance mirrors of the box, ...
2
votes
4answers
588 views

What are my options for centralizing Unix user management

We have 15 Debian servers and growing. What's a simple, lightweight method for centralizing user management? Use cases would be adding a user across all servers, tweaking a users access on a specific ...
-1
votes
1answer
786 views

How to create dummy user?

I want to create user with least privileges. Without home, without rights, without shell. How to do that? When I call useradd it creates user with home
4
votes
3answers
1k views

Sync user accounts over multiple linux servers

What is the best way to sync multiple user accounts and home directories over multiple servers, they will all be the same OS. The servers are in different locations around the world, so if one goes ...
1
vote
1answer
107 views

ZFS: can per-user encrypted filesystems be deduplicated on block-level?

Let's assume I build a storage system where each user gets his/her own encrypted filesystem on top of a ZFS pool. Would deduplication on pool-level still work when each fs is encrypted? What ...
3
votes
2answers
691 views

How do I give users reboot rights on fedora?

On a fedora server, an web application which is in development stages, get stoked for unknown reasons for the moment. The only solution is to restart the linux machine, but only the root has acces to ...
2
votes
1answer
854 views

How to change user for more rights on a SFTP client?

It is always suggested on first step to disable the remote root login for the SSH protocol. I have a low-right user able to connect via SSH and once connected, I simply su in order to gain more ...
3
votes
2answers
2k views

choosing Red Hat Directory Server vs FreeIPA vs Other

I'm setting up a new, small network. About 10 servers at 3 sites with just 3 users total. All are running RHEL 6.1. I was hoping to have centralized user management, especially having a single ...
11
votes
2answers
10k views

How do I log every command executed by a user?

I want to monitor all user's activity in my server. Even when the user executes a shell command from some editor like vim I want to see them in the log file. I have checked the tool acct but it is ...
6
votes
1answer
391 views

How do I re-enable an sudo lecture, once it's been seen

I have sudo set to show the usual lecture on its first use by a user. Without thinking, I accidentally triggered its display for a new user as I was setting them up, and now it's been shown, they ...
2
votes
2answers
306 views

Using active directory as a master staff database and allowing specific users edit capability

We have a challenge in our enterprise, where we have at least a few different storage locations for employee information. We are trying to get this all consolidated as much as possible so there is ...
3
votes
4answers
1k views

Recommendations on managing dot files for users using Puppet

Goal is to have a collection of dot files (.bashrc, .vimrc, etc.) in a central location. Once it's there, Puppet should push out the files to all managed servers. I initially was thinking of giving ...
5
votes
2answers
228 views

Any repercussions from not using default primary groups for Linux users?

We were thinking of not using the default primary group for our RHEL users. What I mean by default: User: melbin Primary group: melbin We will instead do something like: User: melbin Primary ...
1
vote
1answer
251 views

Delete specific PHP sessions

I'm using PHP sessions as the focus for a user system on a website. As an admin of the site I would like to delete specific sessions to force users to logout. Or at least delete all the sessions so ...
0
votes
1answer
85 views

How can I set up a single user that can edit multiple sites' files with correct default permissions?

How can I achieve this setup: There is a primary user that I use to ssh into the server and edit all files for multiple sites. The various sites are stored in the /srv/www directory, so ...
3
votes
2answers
714 views

Creating a windows account only for share access

I'm running Windows Server 2008 R2 in a workgroup, not a domain, and I want to create a local account that is only used for allowing other computers in the same workgroup to access file shares on that ...
0
votes
2answers
556 views

Use Puppet to deploy files to all user's home directory

I want to deploy a simple text file (a git commit message template) to each user's home directory using Puppet. I came across this post which seems very close, but the part I'm not clear on is how do ...
4
votes
2answers
53 views

What are the minimum permissions to grant an Exchange 2007 admin to perform specific mailbox management tasks?

I would like to allow someone else to administer user accounts and mailboxes (add users, reset passwords, disable accounts) on an Exchange 2007 server. Obviously, they should not be able to disable ...
0
votes
1answer
792 views

Create a Bulk user creation script on Windows Server 2008

The script below (create_user_list.bat) loops and creates 30 users. It works well on Windows Server2003 but is breaking on Server 2008. The error that is received is 'System error 5 has occured. ...
1
vote
3answers
60 views

Best user group for developer domain users

What is the best user group for Visual Studio 2010 developers? Now we have added them as Member of Domain Users but under certain situations they need admin account. We would like to give them more ...
1
vote
1answer
159 views

I'm not able to add passwordless entry to a new user on EC2

I'm trying to add a deploy user to a EC2 instance to work with capistrano. I've been able to add passwordless entry for user ubuntu, but it's not working with "deploy". I'm setting up this user as ...
-2
votes
1answer
74 views

Windows users and groups management software

I need software to manage a large number of groups for a FTP server. Ideally this software should also allow managing the associated NTFS rights for the folders on FTP (if they still match the ...
5
votes
3answers
1k views

Linux User and Permission Management within an AD Environment

Issue: Centralized user management and user permission mangement of user access needs for resources (access to services, home directories, joining to local user groups, file system permissions, etc.) ...
3
votes
1answer
3k views

Disable temporary user profile on workstations in a Windows 2008 env

I have a Windows 2008 domain with +/- 27 workstations. The users have all roaming profiles, but this doesn't work sometimes. What results in that the user is logging in with a temp user profile ...
0
votes
1answer
220 views

Windows Server 2008 extremely limited user

I have a couple AWS windows 2008 instances that are about to go into production but I need them to be load tested first. We found an overseas group to do the load testing but they want to be able to ...
1
vote
2answers
907 views

PowerShell and Active Directory User Management

Issue: Take a list of usernames from a CSV file and recursively remove them from all of the user groups that they are a member of. I would like to limit what groups they are removed from based upon ...
1
vote
3answers
466 views

Where to store application that I develop?

I'm developing a server application for ubuntu server, clients will connect to in through socket connection. It's in beta stage and under heavy development. At the moment lots of people are using it ...
25
votes
8answers
1k views

Email hoarder intervention and education - (Exchange environment)

Throughout my career, I've encountered quite a few users who were email hoarders... I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix ...
4
votes
2answers
199 views

Is a user automatically part of a group of the same name?

Consider this situation. A user called _example is created without assigning him to any group. A new group is manually added to /etc/group called _example without any users. Is the _example user ...
2
votes
2answers
2k views

Whould changing the administrator username effect the other setting on my windows server 2008 R2?

I would like to change the default administrator username on my Windows Server 2008 R2 but not sure whether it would effect my environment badly or not. I am also connecting to my server with this ...
0
votes
4answers
155 views

New administration user's $PATH seriously differs from the root's

I'm administering a rented CentOS 5.6 Dedicated Machine as root like initially setup but I'm aware it's extremely bad practise, so I created an User named administrator, placed into groups ...
6
votes
7answers
5k views

Roaming Profiles: Simultaneous Logins of Same User

I am administering a Windows Server 2008 R2 environment that is using roaming profiles and folder redirection. The client machines are running Windows 7. Due to the nature of the business, users ...
-2
votes
1answer
45 views

Creating users in cpanel

We have recently purchased VPS server hosting and manage it through a WHM cpanel interface. There are many users who need to access this and all of them currently use it through the root login. ...
1
vote
2answers
42 views

Managing a small group of workstations that are not connected to any servers

I have a network of 5 workstations, 1 laser printer and 1 photocopier. Each of them connected to a WiFi router to get out to the internet or use the printers and copier. They belong to a small charity ...
4
votes
2answers
4k views

Can I create a hidden admin account via the terminal on OSX?

I have around 300 baby macs to look after, and they have lots of different admin accounts, which is a nightmare to work with. ARD has slowly been configured with the accounts of the machine owners, ...
4
votes
2answers
613 views

How to restrict members of a certain group to one login per user?

I have an ssh server. Some of my users login several times simultaneously; some of those who are doing that should not be, and I suspect account sharing. The ones who shouldn't are all members of a ...
1
vote
1answer
35 views

What is the difference between Features in Server level and site level in IIS7.5

I am having trouble connecting with IIS_manager created users to my default FTP site. I followed the guide at http://learn.iis.net/page.aspx/321/configure-ftp-with-iis-7-manager-authentication/ (as ...
3
votes
2answers
3k views

Trouble creating FTP in Server 2008

I have been trying to create an FTP server on my new Server 2008. I have been following both (very detailed and highly published here guides) For setting up using IIS Manager ...
2
votes
1answer
1k views

Creating user groups and assigning users in Windows Server 2008

I'm setting up an FTP server on a Windows Server 2008 r2 system. Rather than deal with setting filesystem permissions for users manually, I would like to simply grant a single group read/write access ...
1
vote
0answers
199 views

Is there a way to force a Password policy to local OSX users?

i have to manage a couple of MAC's with local accounts. Now i know pwpolicy to set local passwordpolicys, but i can't find a way to force a password history. I tried to use the "usingHistory=5" ...
-1
votes
1answer
276 views

How to change local user home folder on Windows 2000 and above

I was using a local account on a Windows 7 desktop that is not connected to any Active Directory. After a while it was required to rename the local account. Renaming the account was simple using ...
1
vote
3answers
2k views

Managing Active Directory Group Membership with a Non-Administrator Account In Server 2008

I am running Server 2008 R2 in an Active Directory Domain Environment. I have created a group in Active Directory and I have delegated management authority to that group to a user. I want this user ...
0
votes
2answers
297 views

linux useradd limited

How do I make a user account using useradd and give the user access to only the dir where he can just read write files. The user when login goes to this base dir I provide and cannot access anything ...
1
vote
1answer
639 views

How do you manage two users with the same name in AD?

I have two users on the network. One is John Smith. The other John Smith Jr. How do you as a sys admin set these two users up so they do not conflict in AD(active directory) and or FileMaker?
0
votes
1answer
43 views

Add users to a server folder

I use Windows Server 2003 R2. I am logged in as user Administrator. I want to give myself permission to add a user for a certain folder. I granted myself all possible permissions for the parent folder ...
0
votes
2answers
104 views

Possible options for knowing user's identity without using a user account

I am managing a network in a condominium. Right now, I am looking for a method for logging the users' activities without using a user login system. We have this login system not long ago, but people ...
3
votes
2answers
399 views

Linux Server user copy

Is there a way to copy user list (with data and passwords) from one server to another. We have two servers and one of those is new. I need to create same users (that exist in /home/) and set same ...