Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
662
questions
1
vote
2
answers
651
views
LAPS "Not Authorized to Administer"
Problem Description:
When I open up dsa.msc, navigate to my LAPS controlled OU, right click on a target system, goto Properties>LAPS>Expire Now and click "Apply" it displays the ...
166
votes
10
answers
440k
views
GRANT SELECT to all tables in postgresql
Is there a one-liner that grants the SELECT permissions to a new user postgresql?
Something that would implement the following pseudo-code:
GRANT SELECT ON TABLE * TO my_new_user;
16
votes
10
answers
97k
views
FTP Error 530, User cannot log in, home directory inaccessible
I've been tasked with setting up an FTP directory for a client of ours. I'm working from a Windows 2008 Server with IIS 7 installed.
To create the FTP user directory I've followed this eHow tutorial.
...
- 362
0
votes
1
answer
83
views
Creating ppolicy Overlay in OpenLDAP has no effect
I read +++ forums and docs.
My OpenLDAP instance is configured in a Bitnami Container as follows:
dn: cn=module,cn=config
cn: module
objectClass: olcModuleList
olcModuleLoad: ppolicy.so
olcModulePath: ...
- 36.8k
0
votes
1
answer
76
views
Is there a solution to manage users in some systems or at least in linux?
I work somewhere with a lot of Linux and VPS servers. When someone joins the company, other staff members need to add his SSH key to each server; conversely, if someone leaves, all of his SSH keys ...
- 5,932
2
votes
2
answers
4k
views
How do you manage two users with the same name in AD?
I have two users on the network.
One is John Smith. The other John Smith Jr.
How do you as a sys admin set these two users up so they do not conflict in AD(active directory) and or FileMaker?
- 36.8k
-1
votes
2
answers
310
views
Global authorized_keys associated with a user?
Is it possible to have a global authorized_keys file that associates each user to their own public key?
For example, I would like to create multiple user accounts by their Github user name and public ...
- 1
28
votes
1
answer
31k
views
Force "net user" command to set password longer than 14 characters
I'm issuing some "net user" commands to setup a local user on my desktop for some testing purposes and require setting a password longer than 14 characters. In doing so Windows barks back a propmt to ...
0
votes
0
answers
35
views
Building server for research team
this is kind of a big task for me, I have an engineering background with computer science knowledge but I'm no expert in servers and networking.
I want to build a GPU-enabled computing platform that ...
- 1
0
votes
1
answer
120
views
Limit Managed Service Account to only run certain service
I've started learning about Managed Service Accounts in Windows. As I understand it, such accounts make password management easier and the accounts can be limited to be used on certain machines.
You ...
- 36.8k
2
votes
1
answer
9k
views
Limit number of concurrent user logins in Windows Server 2008 Active Directory
Is there the possibility to limit Active Directory users' max concurrent login sessions?
I've read many articles and discussions about the solution, but none of them seem to be working.
Many had ...
- 1
0
votes
0
answers
254
views
KVM access via ipmitool
Is there a way to provide to a new user "KVM access" using ipmitool or sol? There is a checkbox in User Management settings and I can check it manually, but I have a few hundreds of servers (...
0
votes
2
answers
100
views
Replicate local user policies between PC's
I used the Local Policy Editor Management Console that applies local policies to a specific user on a Windows 10 PC.
After saving the new policies, I want to replicate it to other PCs.
When I opened ...
- 123
0
votes
0
answers
72
views
How to trace process that has already terminated? And even trace back its parent process?
I am able to jail specific commands execution by a proxy script to a user whose sudo privilege is only this script sodo check here for how to. Also the sodo script logs whatever critical commands they ...
- 560
2
votes
1
answer
2k
views
AD best practice: delete or just disable?
As an IT company that delivers IT systems, servers and everything for our customers. I'm trying to find the best practice when it comes to Active Directory and users leaving the company.
We have ...
- 12.6k
2
votes
1
answer
944
views
Edit user's email field in Samba domain
Looking for a way to update all of my users' email address value in a Samba domain. I have limited knowledge of samba-tool and pdbedit, but they do not seem to allow command-line editing of a single ...
- 11
0
votes
0
answers
106
views
WebDAV server that respects user accounts
I’m investigating implementing a WebDAV server and all the public advice points to Apache2.
There are 2 issues with this, first it uses it’s own password file rather than the users system password and ...
0
votes
2
answers
589
views
Azure AD Change UPN
I have an account ([email protected]) in an Azure Active Directory (non-Hybrid). I want to change the UPN name "admin." to "firstname.lastname".
The field is editable in ...
0
votes
0
answers
24
views
Why does the `sa` command (from the acct package) always show "0" for avio?
For example, I get:
0 host:~# sa -m
6908 4946803.89re 1211.65cp 0avio 2558k
clamav 2 363298.58re 990.07cp ...
0
votes
0
answers
255
views
Roaming Profile Alternatives
I'm a volunteer system admin at a small UK Charity. We currently use Roaming Profiles + Folder Redirection for Desktop, Documents, Downloads & Pictures. We only have around 8x Windows 10 PCs and ...
- 1
0
votes
0
answers
38
views
Firebase console user access control
Im looking for a way to have user management (creation, management, roles assigments, etc.) for Firebase console users (not app code level control). So far I've been testing solutions to this ...
1
vote
1
answer
239
views
ZFS: can per-user encrypted filesystems be deduplicated on block-level?
Let's assume I build a storage system where each user gets his/her own encrypted filesystem on top of a ZFS pool. Would deduplication on pool-level still work when each fs is encrypted?
What ...
- 113
1
vote
3
answers
2k
views
Automatically block Gitlab users, removed from LDAP
I've migrated this question from StackOverflow.
I'm administering a Gitlab-Omnibus (Community Edition) instance in our company as an additional duty.
Gitlab uses company's Active Directory server ...
- 1,108
1
vote
1
answer
3k
views
Is there some way a user with an asterisk as password in /etc/shadow but a correct login shell in /etc/passwd would be able to login via SSH?
Let's assume the following. We have a server which is accessible via SSH. There is an user in /etc/passwd who has a valid login shell (so for example /bin/bash, instead of an invalid one like /bin/...
- 133
1
vote
1
answer
3k
views
Adding my SSH key to new user with only SSH access through key
I'm quite new to this, and I've looked through questions but haven't found one that quite matches my problem, or rather I didn't sufficiently understand them to be able to solve this issue.
I have a ...
- 25k
0
votes
1
answer
579
views
Multiple users, one public_html directory
New to creating users with linux. Trying to
add users in a secure manner, limiting damage a user can do
give all members of the webadmins group access to the public_html folder as projects are often ...
- 103
0
votes
1
answer
437
views
Can I seperate SCP and SSH login, using different ports and different users?
I want to separate SCP to be on a different TCP port than the regular port 22.
Using this port, a user should only be able to run SCP commands but not to do a regular SSH login. That user would not ...
- 678
0
votes
1
answer
404
views
Does ldapmodify propagate changes of dn/uid to associated groups of the user?
I have to modify a user's UID and DN in an OpenLDAP server because of marriage. Now, I follow this example from Oracle's website: https://docs.oracle.com/cd/E22289_01/html/821-1273/adding-modifying-...
- 1,849
0
votes
1
answer
128
views
OpenLDAP to 389-DS: Can I have "named password policies"?
I'm trying to understand how "password policy" works in 389-DS, compared to OpenLDAP 2.4:
In OpenLDAP 2.4 I could define multiple "named" password policy entries, and assign those ...
- 391
1
vote
1
answer
895
views
FreeIPA import hashed passwords or sync with another ldap
We want to setup FreeIPA to work with our legacy user management system, we can output an ldif file and alter it into a FreeIPA compatible format and import it. Everything works nicely except for the ...
- 1,130
1
vote
1
answer
1k
views
How to add nginx configurator group?
I want o create a user group that has permissions to create/edit/view nginx configs without sudo permissions, but I heve no idea how.
Creating a normal user group and setting owner:group to same-owner:...
- 116
0
votes
0
answers
116
views
How to change the owner of a file to that user when a user modifies a file
I am using Ubuntu 20.04 version.
I want to satisfy two conditions in an environment with multiple users.
Users will all upload files via ftp.
Multiple users should be active in one home directory.
And ...
- 1
1
vote
0
answers
30
views
OneDrive, can you migrate shared locations from one computer to another?
We are migrating users to new computer, and they have around 10 different SharePoint sites. Is there a way to copy the settings to a new computer, without manually doing so.
I've looked at Computer\...
- 11
2
votes
1
answer
10k
views
Moving an AD user account from one domain to another within same forest
Requirement: In our organisation, several employees have frequent transfers to different zones, which are different domains within a
single forest. Need to transfer users from one domain to another
...
- 1
0
votes
2
answers
5k
views
Restrict users from local accounts on Intune devices?
Devices are enrolled either via Autopilot or Azure AD Join in Intune, but the issue of people using local accounts remains. Do you know, is there a way to force Azure/Hybrid AD accounts and collect ...
- 1
1
vote
2
answers
2k
views
Add permissions for a usergroup to all domainprofiles (roaming profiles) on server 2008 R2
This is our current situation: We have an active directory with Server 2008 R2 and roaming profiles which is currently in use (old server), and we have a new Server 2008 R2. We already set up a new AD ...
CommunityBot
- 1
0
votes
1
answer
246
views
cant' delete user with userid 502, 503 and on CentOS 6
I have a CentOS VM that shows the list of users like this:
drwx------. 2 504 504 4096 Dec 10 2000 username
So if I try to run the userdeel command I got a message saying that the user does not ...
- 800
0
votes
1
answer
3k
views
How to use list to create users with this Ansible role
I am trying to learn Ansible and I've been dabbling with some roles that I've found on Github, specifically this one that automates user creation together with sudo rules and SSH key deployment:
...
CommunityBot
- 1
17
votes
3
answers
39k
views
How do you tell if a user is "allowed to log in" on Linux?
The question is simple, I want to list all the user accounts which can log in to my system, but I'm not sure if that all the users in /etc/passwd are "could login" users?
Details:
I can see users ...
- 105
0
votes
1
answer
451
views
How to change the super user after installation in Ubuntu?
I have taken over the system administration on an ubuntu system from someone else. I had an normal user account on this system before, that I am still using. The previous admin made me sudoer, so in ...
- 80.3k
0
votes
1
answer
1k
views
Ansible: how to run subsequent task for only newly created users?
The user creation policy in our organization is to force changing password on first login and use SSH keys for remote connections; the password is only used to run sudo or login locally.
To force ...
- 5,638
0
votes
2
answers
496
views
Switching to a "role" account, using `sudo` and `ssh` agent forwarding later on – possible?
I want to create "role" accounts for several admin tasks that don't usually require root permissions. For example, consider a www-admin user maintaining files in /var/www.
It seems to me that this is ...
- 371
10
votes
5
answers
3k
views
Replace gitolite3 user with git
I am installing gitolite3 on a server, with ssh and http pulling/pushing/alltherest. During the process, a user and group gitolite3 is created.
When I run:
$ ssh gitolite3@server info
I get the ...
- 182
129
votes
3
answers
147k
views
How can I rename a Unix user?
I have a user named hedgehog and I want him to be named squirrel, but I don't want to change his numeric user ID.
How can I accomplish this?
- 143
5
votes
5
answers
28k
views
Centos 7 - adding a user to sudoers group - still is not in the sudoers file - why?
[user@localhost ~]$ su -
Password:
Last login: ...
[root@localhost ~]# usermod -aG wheel user
[root@localhost ~]# exit
logout
[user@localhost ~]$ sudo echo 123
[sudo] password for user:
user is not ...
0
votes
1
answer
62
views
How to add users and computers back to server 2012
I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
- 25k
0
votes
1
answer
4k
views
Postgres Role required to grant CONNECT on a specific database
I am trying to GRANT CONNECT on a DATABASE to a user as a schema owner in that database.
The schema owner is not a superuser.
Do I need to be the owner of a database to execute
GRANT CONNECT ON ...
- 946
4
votes
1
answer
9k
views
pg_hba.conf - psql local login without password
I have these settings in my pg_hba.conf for a PostgreSQL-12.6 installation
# "local" is for Unix domain socket connections only
local all all ...
- 1,511
0
votes
1
answer
2k
views
idmap range on Ubuntu 20.04 (sssd) does not match CentOS 7 winbind idmaps (kinda)
My Active Directory maps in Ubuntu systems are very long compared to my CentOS IDs The last 4 digits match but Ubunutu seems to be adding a lot more to the beginning.
In CentOS winbind/samba I used a ...
- 301
0
votes
1
answer
403
views
Is HashiCorp Vault the correct tool to store users sensitive information
Is Vault the correct tool to store sensitive information about users, eg. theirs pay rate or personal id?
"Normal" employee/user must only have access to his own data but the users with ...
- 1,068