Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

-1
votes
0answers
36 views

/etc/group overriden after reboot

For my server Centos7 in google cloud I've tried to modify user and add him to docker group with usermod -aG docker dev. Everything works until a reboot occurs. After reboot user is no longer in ...
3
votes
3answers
66 views

Stop Domain Users from Installing Software

This is my last shot to figure this out. If I can even figure it out. Is there any way to stop a user from installing programs on their computer? We'll be running Server 2016. I've tried denying ...
12
votes
3answers
14k views

Adding an existing user to a group with puppet

Is it possible to add an existing user to a group with puppet 2.7.18? We have two modules, each one defines one class : module "user" creates all users, including user foo and user bar. module "...
0
votes
2answers
101 views

vsftpd local users error “Incorrect login”

I want to integrate an Android app with a FTP server, in this case vsftpd (My computer is running LinuxMint 18, kernel 4.4.8). Anonymous users work, my user works (darijan), but I made another user (...
-1
votes
0answers
11 views

Central User-Management [closed]

Would FreeIPA or any kind of RADIUS allow me to manage the permissions of users in a domain (AD) to do specific tasks like allowing a user to login only from X PC in the domain or to let X PC to ssh ...
0
votes
1answer
85 views

Is there some way a user with an asterisk as password in /etc/shadow but a correct login shell in /etc/passwd would be able to login via SSH?

Let's assume the following. We have a server which is accessible via SSH. There is an user in /etc/passwd who has a valid login shell (so for example /bin/bash, instead of an invalid one like /bin/...
0
votes
1answer
27 views

How to change home directory for existing virtual ProFTPD user?

I have my AuthUserFile located at /etc/proftpd/proftpd.passwd. DefaultRoot is ~. This file currently lists a single user (username, password hash, home directory). How do I change a home directory for ...
0
votes
0answers
32 views

PostgreSQL - Force user to change password

Is there a way to force users of PostgreSQL to change their password at the first connection? Password validity only takes a timestamp argument and I haven't found an option to prompt the user for a ...
4
votes
2answers
4k views

Why might the Jenkins user not have permission to access the Docker unix socket?

I've added the jenkins user to the docker group thinking that it would allow Jenkins jobs to run Docker commands. If I switch to the jenkins user, I can verify it works (manually): ubuntu@hostname:~$ ...
0
votes
1answer
63 views

Cannot sftp using a password [closed]

I have setup my server to allow sftp using a password however I'm getting Authentication failed. even though I'm using the correct password. Here is my sshd_config # Package generated configuration ...
5
votes
2answers
15k views

How to transfer user accounts to a new Linux machine?

I currently have a Linux box hosting our internal Subversion repository. Access to this repository is via svn+ssh with authenticating happening against user accounts on the machine. I have recently ...
0
votes
1answer
53 views

Anyway to limit IP Access for Certain Users?

I am currently tasked with allowing Vendors onto our process network. The issue is I need to make it so each vendor is only able to connect to PLCs on their own machines "each PLC has its own IP". Is ...
0
votes
0answers
12 views

ubuntu script - switching users in script and deleting previous user

On an AWS EC2 Ubuntu Instance I want to run a setup script that creates a new system admin (let's call it deploy) delete the default ubuntu user and continue the setup as the new deploy user. ...
3
votes
3answers
4k views

Remove user from root group

Somehow I managed to add user Tom to root group in Ubuntu, in order to avoid using sudo everytime (bad decision). Now I want to remove it and I can't. I've tried using usermod -G {groups} Tom My ...
0
votes
1answer
36 views

Allow non-admin access to AD Users and Computers via RDP

I'm trying to lock down our AD domain and remove unneeded users from our Domain Admins group. I'm a Linux guy so some of this is new or different. We are an all Mac shop so the only way for us to ...
9
votes
1answer
5k views

How can I have puppet only set password when creating a user?

I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user. I was thinking of doing a notify to an Exec resource that sets ...
2
votes
1answer
26 views

Basic Auth User Management

I have 2 questions regarding Apache Basic Auth that i currently am utilising. I have a website that after a certain action, the website will produce a Basic Auth username and password for the user to ...
1
vote
1answer
66 views

LDAP - how to use attribute from objectclass:account and objectclass:inetOrgPerson?

I have an openLDAP which I use for authenticating users to various servers, where each user can have access to a varying number of hosts. I am solving that requirement by using the "host" attribute, ...
1
vote
0answers
101 views

Windows Active Directory and Linux integration: new AD Group does not show up in Linux

In my organization, the support team has created a new AD group for me but it does not show up on any of the nodes in our cluster(using RHEL). I went through this article to understand Windows and ...
2
votes
0answers
58 views

how to see space claimed / used per user in owncloud?

I am trying to clean up a disk on a specific server. On that server there is only owncloud installed. Since I was not the guy who setup owncloud, and there is now way to reach the actual ...
3
votes
2answers
175 views

Easy way to get all user accounts

I am in the process of migrating to a new server and I am having a number of issues due to user accounts not being present (for example nginx seems to be running under nginx user on the new system www-...
0
votes
0answers
39 views

One user missing in Dashboard of the Windows Server 2012 R2 Essentials

We have migrated from SBS 2008 to the Windows Server 2012 R2 Essentials. All users and computers have successfully migrated and their list is visible in ADUC. However, one user is missing in the ...
1
vote
1answer
62 views

Tool to manage samba accounts in LDAP

TLDR: Can I sensible manage samba accounts in openldap with Apache Directory Studio (or other general purpose ldap editors)? I'm currently trying to move away from GOsa as our LDAP management tool. (...
5
votes
2answers
108 views

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, ...
0
votes
2answers
44 views

User management with cronjob [closed]

In my organization, we want to implement a user management standard after an utter chaos. Where we(organization) and the client was able to access root user and they made changes which took down the ...
1
vote
2answers
5k views

Creating FTP user to access a specific directory with SFTP in Linux Ubuntu Server 14.04 LTS

I'm creating an FTP user on Linux Ubuntu Server 14.04 LTS, but when I try to log in via FileZilla with SFTP I get the following error: Received unexpected end-of-file from SFTP server If I try to ...
3
votes
4answers
27k views

FTP Error 530, User cannot log in, home directory inaccessible

I've been tasked with setting up an FTP directory for a client of ours. I'm working from a Windows 2008 Server with IIS 7 installed. To create the FTP user directory I've followed this eHow tutorial. ...
2
votes
4answers
4k views

Managing Active Directory Group Membership with a Non-Administrator Account In Server 2008

I am running Server 2008 R2 in an Active Directory Domain Environment. I have created a group in Active Directory and I have delegated management authority to that group to a user. I want this user ...
0
votes
1answer
53 views

refreshonly not working with Puppet exec resource

I am using the following user resource to create a unix user and then set an initial password for the user. I then performed an exec with chage command to force the user to change his password after ...
11
votes
2answers
3k views

Cannot create new user account Windows Server 2012

I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one. On PROBLEMSERVER01 when I try to log ...
26
votes
6answers
2k views

How do I convince my company to invest in IT - domains, security, etc.?

I work for a small-medium size retailer which has half a dozen high street stores and a website. The IT situation is currently in a very basic state. As being "Head of IT" is only a small part of my ...
3
votes
2answers
230 views

What is the minimum architecture required for per-user history logging and password protection on a small network?

I'd like to set up and administer a small network which would supply a captive portal where users type in a unique password and/or username to connect to the internet and to each others' computers, ...
1
vote
2answers
2k views

Crate a new, read-only user in postgres

I would like to create a new user in an existing postgresql database on an Ubuntu machine. I want to grant this user a read-only access to all the tables. How do I do it? Do I need to create a new ...
0
votes
0answers
22 views

Running the same program with two different users on the same system takes vastly different times

I am on Ubuntu 15.04, I ran a program under the user who was added during the time of installation(call him D) and the program took 2.5 seconds to complete. I add another user T to the system. When I ...
36
votes
6answers
76k views

GRANT SELECT to all tables in postgresql

Is there a one-liner that grants the SELECT permissions to a new user postgresql? Something that would implement the following pseudo-code: GRANT SELECT ON TABLE * TO my_new_user;
35
votes
5answers
4k views

Is logging in as a shared user a bad habit?

I've worked in organizations where instead of creating a new Ubuntu user per person that wants to log into a machine, the sysadmins simply add the ssh key of each user to .ssh/authorized_keys, and ...
0
votes
1answer
42 views

Correct way to setup linux company share folder with usable permissions

I've just started working for a small company that has a globally shared folder run from an Ubuntu file server (Raid 5, etc) shared by Samba. The workstations (Centos) are all fstab setup to mount ...
19
votes
2answers
99k views

What's the best way to see logged in users on Windows Server 2012?

Right now I use a powershell script to see the currently logged in users. But I don't see if there session is idle, active or inactive. I can see when the session was started but that's it. Is there a ...
2
votes
1answer
3k views

vsftp give user only access to a certain folder

I use CentOS 5.5 and I installed vsftp. I created a user "myUser" and every time I use Filezilla and log with this user I get directed to the users home-folder, but still have access to pretty much ...
0
votes
1answer
31 views

After using userdel -r to remove a user, user still appears on login screen (CentOS 7)

I used userdel -r [username] on CentOS 7 to delete a user, but the user is still appearing on the GUI login screen. Also, useradd now refuses to add the same username again, reporting that the user ...
2
votes
1answer
166 views

instanceType attribute in Active Directory

I need to change the instanceType attribute of a service account. If I try to change it from Active Directory Users and Computers console it's greyed out and if I try to change it via powershell with ...
0
votes
1answer
91 views

How to get the time and date at which a user account is locked/unlocked in unix?

I need to get the exact time and date at which a user account was locked or unlocked in Linux. passwd -S command can give the status of an account i.e., if its locked or unlocked.
7
votes
1answer
190 views

Reset GID/UID auto-increment numbers

I created a virtual mail user for postfix virtual mailboxes with a gid/uid of 5555, but now every new user I create starts at > 5555, is it possible to reset the autonumbering so normal users will be ...
3
votes
3answers
26k views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use -...
2
votes
2answers
3k views

Whould changing the administrator username effect the other setting on my windows server 2008 R2?

I would like to change the default administrator username on my Windows Server 2008 R2 but not sure whether it would effect my environment badly or not. I am also connecting to my server with this ...
6
votes
3answers
4k views

How do you tell if a user is “allowed to log in” on Linux?

The question is simple, I want to list all the user accounts which can log in to my system, but I'm not sure if that all the users in /etc/passwd are "could login" users? Details: I can see users ...
0
votes
0answers
46 views

How to limit user permissions

I have 2 servers, one web server and one SQL Server. All Windows. Both servers have the same account created with the same password and IIS and SQL Server are configured to use those accounts. I also ...
-2
votes
1answer
32 views

AD Reset Multiple Passwords Simultaneously from LDAP Query [closed]

I have used a custom query in Active Directory to identify all users that have never logged in to the the domain. I need to reset all of their passwords and as there are several hundred I would prefer ...
13
votes
4answers
12k views

How can I force other users to log out?

Is there a simple way for me to force another user off of a linux box, while I am logged in as root? I understand that I could determine what type of session they have open, and kill the pid - but I'...
2
votes
0answers
60 views

Can I pre-hash a Windows password and pass the hash when creating the account?

I am building some Windows VMs with Vagrant, and the Vagrant provisioner will create some users. I'd like to be able to commit the passwords for those users to source control, but obviously I don't ...