Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

18
votes
4answers
33k views

How do I log every command executed by a user?

I want to monitor all user's activity in my server. Even when the user executes a shell command from some editor like vim I want to see them in the log file. I have checked the tool acct but it is ...
4
votes
1answer
3k views

How do I set permissions structure for multiple users editing multiple sites in /var/www on Ubuntu 9.10?

I'm setting up an Ubuntu server that will have 3 or 4 VirtualHosts that I want users to be able to work in (add new files, edit old files, etc.). I currently plan on storing the sites in /var/www but ...
2
votes
4answers
7k views

Copy NT user accounts between servers

I've created about 50 user accounts on a Windows 2003 Server, and I'd like to copy those accounts to a new server, is this possible? I'm not using Active Directory. Patrick Edit 1 : Thanks for the ...
28
votes
8answers
2k views

Email hoarder intervention and education - (Exchange environment)

Throughout my career, I've encountered quite a few users who were email hoarders... I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix solution....
18
votes
3answers
49k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
16
votes
10answers
144k views

Best way to find the computer a user last logged on from?

I am hoping that somewhere in Active Directory the "last logged on from [computer]" is written/stored, or there is a log I can parse out? The purpose of wanting to know the last PC logged on from is ...
7
votes
3answers
5k views

Combined NFS, Samba server w users from Active Directory

I want to build a server that exports user home directories over SMB/CIFS and NFS. This server would be joined to a Win2k3 AD domain controller that holds our user database. As I understand it, ...
11
votes
13answers
46k views

What Are Some Good Open Source Alternatives to Active Directory?

I'm looking for a good open-source alternative to active directory that can handle: Authorization/Authentication Group Policy Replication and Trust Monitoring In addition, are there any ...
13
votes
4answers
12k views

How can I force other users to log out?

Is there a simple way for me to force another user off of a linux box, while I am logged in as root? I understand that I could determine what type of session they have open, and kill the pid - but I'...
2
votes
1answer
380 views

How do I regain access to root after accidental chsh command that went bad?

I did a silly silly thing. While attempting to change the shell for user 'x' I was in a rush and did not type the users name at the end of the command, so I ended up running this: chsh /sbin/nologin ...
0
votes
1answer
635 views

Setting up individually accessible public_html for each user of a linux machine

I have a dedicated server on which I have a site http://www.example.com I need to create a user and: allow him ssh and ftp access into it allow him to access a page such as: http://user.example....
67
votes
6answers
125k views

How do I create user accounts from the Terminal in Mac OS X 10.5?

I would like to be able to create new users in Mac OS X 10.5 remotely after ssh'ing into the machine. How do I do this?
20
votes
9answers
25k views

Is it feasible to have home folder hosted with NFS?

I'm planning to deploy some kiosk computers and would like to leave them with a small pendrive as boot disk, keeping the rest at an easy to back up server, ala LTSP. Right now I'm pondering two ...
36
votes
6answers
74k views

GRANT SELECT to all tables in postgresql

Is there a one-liner that grants the SELECT permissions to a new user postgresql? Something that would implement the following pseudo-code: GRANT SELECT ON TABLE * TO my_new_user;
10
votes
1answer
12k views

How to generate a /etc/shadow compatible password for Ubuntu 10.04?

How are passwords generated that are used by Ubuntu 10.04? I know that they use SHA 512 as hashing algorithm, but I figure that there is some sort of salting done. I need to generate such a password ...
7
votes
4answers
9k views

How to add a user without knowing the encrypted form of the password?

I use the following command to create a user in a linux machine: useradd -d /home/dummy -g idiots -m -p 12345689 dummy The user is created and the home directory as well. The problem is that I ...
6
votes
5answers
330 views

How do you optimize new user setup?

What's your top trick for getting a new employee set up quickly? Do you use images, scripts, something else?
3
votes
7answers
13k views

Simple one-way synchronisation of user password list between servers

Using a RedHat-derivative distro (CentOS), I'd like to keep the list of regular users (UID over 500), and group (and shadow files) pushed to a backup server. The sync is only one-way, from the main ...
1
vote
4answers
3k views

Windows Local Account and Group Maintenance

How does one remotely maintain Local Accounts and Groups in a Windows environment?
11
votes
4answers
2k views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
4
votes
3answers
4k views

How would you manage keys with TrueCrypt in a business enviroment?

What would be some of the best options for implementing TrueCrypt on all external devices so if any are lost or stolen that the data is not readable to another person but could be managed in a way ...
2
votes
2answers
242 views

How to reduce our AD account creation and maintenance requests and work load

Where I work, almost 40% of our support requests are for account management tasks : Create new account and assign in groups Unlock an account Reset a password Change an account's groups following a ...
9
votes
1answer
5k views

How can I have puppet only set password when creating a user?

I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user. I was thinking of doing a notify to an Exec resource that sets ...
6
votes
4answers
9k views

Create SSH user with limited privileges to only use Git repository

I have a git repository hosted on my SunOS server, that I remotely use through ssh git clone ssh://myUser@mydomain.com/path/to/git Now I need to add more users to be able to access that repository, ...
5
votes
2answers
15k views

How to transfer user accounts to a new Linux machine?

I currently have a Linux box hosting our internal Subversion repository. Access to this repository is via svn+ssh with authenticating happening against user accounts on the machine. I have recently ...
4
votes
2answers
5k views

Can I create a hidden admin account via the terminal on OSX?

I have around 300 baby macs to look after, and they have lots of different admin accounts, which is a nightmare to work with. ARD has slowly been configured with the accounts of the machine owners, ...
3
votes
2answers
141 views

How can I correlate a wall jack to a user/machine on the domain?

After reading Valve's new employee handbook, I was really interested in setting up a company map like they described on page 6: "The fact that everyone is always moving around within the company ...
2
votes
1answer
357 views

How can I make gitosis distinguish between two users with the same username

I have a gitosis system that seems to be working correctly except for a common problem we run into where I can't distingush permissions between two users who have the same username, but different ...
6
votes
8answers
5k views

Best practices or experience with company wide Username policies and resolving duplicates

I am a programmer with an application that needs to be integrated into the new company wide Active Directory login scheme. This means changing all the usernames in our system to use the new scheme. ...
6
votes
1answer
801 views

Providing normal users(non-root) with initialization and shutdown auto-run capabilities

I'm hosting an experimental/testing Linux box, running Debian Wheezy 7.4.0 distribution. Different users log into the machine over ssh to their accounts and are allowed to run the development tools ...
4
votes
1answer
5k views

How do I add a domain user to a group on a non-domain server?

If we are running a server that is not attached to the domain, how would I go about adding a domain user to a local group on that server?
3
votes
3answers
963 views

How to handle centralized user authentication without LDAP?

I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
2
votes
1answer
4k views

Adding inetOrgPerson to account/posixAccount LDAP entries

I have a LDAP database we have been using for managing user accounts on our hosts, these entries have account and posixAccount as objectClass. Now we'd like to extend this to also use it as an adress ...
1
vote
1answer
1k views

SQL Server 2005 Accidentally removed a user from public role, can't add user back into role

I'm trying to crearte a DB user account that only has access to a specific database, and can't read or change other databases, and can't alter credentials for any other accounts. I accidentally ...
1
vote
1answer
3k views

Limit bandwidth using tc, iptables, and htb

I'm running a Debian server and was wondering if there are good resources out there, to which you can point me, where I can read about traffic limitations. I have couple users sharing one server. ...
0
votes
1answer
10k views

SSH Fails, /bin/bash: No such file or directory

I have a user who is jailed. sshd_config: Subsystem sftp internal-sftp Match user matt ChrootDirectory %h X11Forwarding no AllowTcpForwarding no passwd: matt:x:1001:5006:Matt Ryan,...
6
votes
4answers
25k views

Windows Server 2008/R2: Change the maximum UserName length?

Is there any way to change the standard 20 character UserName maximum length restriction for local accounts? (Server 2008 R2 to be specific)
5
votes
2answers
241 views

Any repercussions from not using default primary groups for Linux users?

We were thinking of not using the default primary group for our RHEL users. What I mean by default: User: melbin Primary group: melbin We will instead do something like: User: melbin Primary group:...
4
votes
4answers
1k views

What are my options for centralizing Unix user management

We have 15 Debian servers and growing. What's a simple, lightweight method for centralizing user management? Use cases would be adding a user across all servers, tweaking a users access on a specific ...
4
votes
1answer
450 views

Is NFS + NIS a modern good practice for Linux networks to achieve common logins and home directories?

I'm setting up a smallish network of Centos servers (less than 10) and I'd like to have common logins on all of them as well as network mapped home directories. I used to work with Solaris quite a ...
3
votes
1answer
4k views

How to automatically reconcile /etc/group and /etc/gshadow

Running grpck to check the groups, I see these errors: 'twinky' is a member of the 'foo' group in /etc/group but not in /etc/gshadow 'dipsy' is a member of the 'foo' group in /etc/group but not in /...
3
votes
2answers
5k views

Trouble creating FTP in Server 2008

I have been trying to create an FTP server on my new Server 2008. I have been following both (very detailed and highly published here guides) For setting up using IIS Manager http://learn.iis.net/...
3
votes
4answers
26k views

FTP Error 530, User cannot log in, home directory inaccessible

I've been tasked with setting up an FTP directory for a client of ours. I'm working from a Windows 2008 Server with IIS 7 installed. To create the FTP user directory I've followed this eHow tutorial. ...
2
votes
1answer
15k views

How to get an text list of login names for a user group of a windows server

I must copy all login names of a specific user group of a windows server to a 3rd party system. To make it easy I need an text list of the login names. I don't like to copy the login names from the ...
2
votes
2answers
2k views

What files are created/modified when adding a user (useradd) in linux?

I know that /etc/group and /etc/passwd are modified, and /home/user/* is created, but are there others? Thanks.
2
votes
2answers
5k views

Puppet - how can i copy a file to several user folders?

Well i was using the info on this: Puppet - Any way to copy predefined custom configuration files for software on clients from the puppet master (host)? But i need some more elaborated, because i ...
2
votes
1answer
957 views

Manage Desktop Profiles Gnome or XFCE

I just set up a virtual machine for our software developers an now try to create the user accounts facing the following question: Is there any possibility to distribute predefined desktop profiles ...
2
votes
1answer
3k views

Creating user groups and assigning users in Windows Server 2008

I'm setting up an FTP server on a Windows Server 2008 r2 system. Rather than deal with setting filesystem permissions for users manually, I would like to simply grant a single group read/write access ...
2
votes
2answers
799 views

Purging AD Principal from cache

A user in the Active Directory has had a change of his SAM account name, but a web application running IIS still recognizes him under his old SAM Account name. I presume this is because the AD ...
1
vote
2answers
605 views

Sun Grid Engine: Automatically Terminating Idle Interactive Jobs

We're considering using Sun Grid Engine on a small compute cluster. Right now, the current set up is pretty crude and just involves having people ssh to an open machine to run their jobs. We'd like ...