Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
662
questions
0
votes
1
answer
83
views
Creating ppolicy Overlay in OpenLDAP has no effect
I read +++ forums and docs.
My OpenLDAP instance is configured in a Bitnami Container as follows:
dn: cn=module,cn=config
cn: module
objectClass: olcModuleList
olcModuleLoad: ppolicy.so
olcModulePath: ...
- 21
0
votes
1
answer
76
views
Is there a solution to manage users in some systems or at least in linux?
I work somewhere with a lot of Linux and VPS servers. When someone joins the company, other staff members need to add his SSH key to each server; conversely, if someone leaves, all of his SSH keys ...
0
votes
0
answers
35
views
Building server for research team
this is kind of a big task for me, I have an engineering background with computer science knowledge but I'm no expert in servers and networking.
I want to build a GPU-enabled computing platform that ...
- 1
0
votes
1
answer
120
views
Limit Managed Service Account to only run certain service
I've started learning about Managed Service Accounts in Windows. As I understand it, such accounts make password management easier and the accounts can be limited to be used on certain machines.
You ...
0
votes
0
answers
254
views
KVM access via ipmitool
Is there a way to provide to a new user "KVM access" using ipmitool or sol? There is a checkbox in User Management settings and I can check it manually, but I have a few hundreds of servers (...
0
votes
2
answers
100
views
Replicate local user policies between PC's
I used the Local Policy Editor Management Console that applies local policies to a specific user on a Windows 10 PC.
After saving the new policies, I want to replicate it to other PCs.
When I opened ...
- 123
1
vote
2
answers
651
views
LAPS "Not Authorized to Administer"
Problem Description:
When I open up dsa.msc, navigate to my LAPS controlled OU, right click on a target system, goto Properties>LAPS>Expire Now and click "Apply" it displays the ...
- 373
0
votes
0
answers
72
views
How to trace process that has already terminated? And even trace back its parent process?
I am able to jail specific commands execution by a proxy script to a user whose sudo privilege is only this script sodo check here for how to. Also the sodo script logs whatever critical commands they ...
- 560
0
votes
0
answers
106
views
WebDAV server that respects user accounts
I’m investigating implementing a WebDAV server and all the public advice points to Apache2.
There are 2 issues with this, first it uses it’s own password file rather than the users system password and ...
0
votes
0
answers
24
views
Why does the `sa` command (from the acct package) always show "0" for avio?
For example, I get:
0 host:~# sa -m
6908 4946803.89re 1211.65cp 0avio 2558k
clamav 2 363298.58re 990.07cp ...
0
votes
0
answers
255
views
Roaming Profile Alternatives
I'm a volunteer system admin at a small UK Charity. We currently use Roaming Profiles + Folder Redirection for Desktop, Documents, Downloads & Pictures. We only have around 8x Windows 10 PCs and ...
- 1
0
votes
0
answers
38
views
Firebase console user access control
Im looking for a way to have user management (creation, management, roles assigments, etc.) for Firebase console users (not app code level control). So far I've been testing solutions to this ...
1
vote
1
answer
3k
views
Adding my SSH key to new user with only SSH access through key
I'm quite new to this, and I've looked through questions but haven't found one that quite matches my problem, or rather I didn't sufficiently understand them to be able to solve this issue.
I have a ...
- 113
0
votes
1
answer
404
views
Does ldapmodify propagate changes of dn/uid to associated groups of the user?
I have to modify a user's UID and DN in an OpenLDAP server because of marriage. Now, I follow this example from Oracle's website: https://docs.oracle.com/cd/E22289_01/html/821-1273/adding-modifying-...
0
votes
1
answer
128
views
OpenLDAP to 389-DS: Can I have "named password policies"?
I'm trying to understand how "password policy" works in 389-DS, compared to OpenLDAP 2.4:
In OpenLDAP 2.4 I could define multiple "named" password policy entries, and assign those ...
- 391
1
vote
1
answer
895
views
FreeIPA import hashed passwords or sync with another ldap
We want to setup FreeIPA to work with our legacy user management system, we can output an ldif file and alter it into a FreeIPA compatible format and import it. Everything works nicely except for the ...
1
vote
1
answer
1k
views
How to add nginx configurator group?
I want o create a user group that has permissions to create/edit/view nginx configs without sudo permissions, but I heve no idea how.
Creating a normal user group and setting owner:group to same-owner:...
0
votes
0
answers
116
views
How to change the owner of a file to that user when a user modifies a file
I am using Ubuntu 20.04 version.
I want to satisfy two conditions in an environment with multiple users.
Users will all upload files via ftp.
Multiple users should be active in one home directory.
And ...
- 1
1
vote
0
answers
30
views
OneDrive, can you migrate shared locations from one computer to another?
We are migrating users to new computer, and they have around 10 different SharePoint sites. Is there a way to copy the settings to a new computer, without manually doing so.
I've looked at Computer\...
- 11
0
votes
1
answer
437
views
Can I seperate SCP and SSH login, using different ports and different users?
I want to separate SCP to be on a different TCP port than the regular port 22.
Using this port, a user should only be able to run SCP commands but not to do a regular SSH login. That user would not ...
- 1
0
votes
2
answers
589
views
Azure AD Change UPN
I have an account ([email protected]) in an Azure Active Directory (non-Hybrid). I want to change the UPN name "admin." to "firstname.lastname".
The field is editable in ...
- 513
0
votes
1
answer
246
views
cant' delete user with userid 502, 503 and on CentOS 6
I have a CentOS VM that shows the list of users like this:
drwx------. 2 504 504 4096 Dec 10 2000 username
So if I try to run the userdeel command I got a message saying that the user does not ...
0
votes
1
answer
451
views
How to change the super user after installation in Ubuntu?
I have taken over the system administration on an ubuntu system from someone else. I had an normal user account on this system before, that I am still using. The previous admin made me sudoer, so in ...
- 15
0
votes
1
answer
1k
views
Ansible: how to run subsequent task for only newly created users?
The user creation policy in our organization is to force changing password on first login and use SSH keys for remote connections; the password is only used to run sudo or login locally.
To force ...
- 12.6k
0
votes
2
answers
5k
views
Restrict users from local accounts on Intune devices?
Devices are enrolled either via Autopilot or Azure AD Join in Intune, but the issue of people using local accounts remains. Do you know, is there a way to force Azure/Hybrid AD accounts and collect ...
0
votes
1
answer
62
views
How to add users and computers back to server 2012
I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
- 1
4
votes
1
answer
9k
views
pg_hba.conf - psql local login without password
I have these settings in my pg_hba.conf for a PostgreSQL-12.6 installation
# "local" is for Unix domain socket connections only
local all all ...
- 287
0
votes
1
answer
4k
views
Postgres Role required to grant CONNECT on a specific database
I am trying to GRANT CONNECT on a DATABASE to a user as a schema owner in that database.
The schema owner is not a superuser.
Do I need to be the owner of a database to execute
GRANT CONNECT ON ...
- 103
0
votes
1
answer
2k
views
idmap range on Ubuntu 20.04 (sssd) does not match CentOS 7 winbind idmaps (kinda)
My Active Directory maps in Ubuntu systems are very long compared to my CentOS IDs The last 4 digits match but Ubunutu seems to be adding a lot more to the beginning.
In CentOS winbind/samba I used a ...
- 15
0
votes
1
answer
213
views
Updating AD attributes programmatically
My apologies, as I am an engineer not a sys admin, but am working with someone who is managing AD.
Current situation: We have an AD attribute that contains a longish parse-able string that contains ...
- 101
0
votes
1
answer
2k
views
How to check ldap password storage policy
How do I check how passwords are stored in a local running OpenLDAP server? I would prefer some sort of query that will state the used configuration. Alternatively, accessing the stored passwords to ...
- 417
0
votes
1
answer
403
views
Is HashiCorp Vault the correct tool to store users sensitive information
Is Vault the correct tool to store sensitive information about users, eg. theirs pay rate or personal id?
"Normal" employee/user must only have access to his own data but the users with ...
- 1
0
votes
0
answers
44
views
Allow restricted user to change their own password
Recently I have followed the articles below, however, the passwd file that I copied to a dir in the users `‘home`` dir.
However, when the new credentials are parsed into passwd, it ends up with the ...
- 1
0
votes
0
answers
468
views
Best practices for setting up Linux "service" user
I've set up a server running Ubuntu to host a backend based on Node and MongoDB with Nginx as reverse proxy. When I first logged into the machine I was root, and without thinking too much that's the ...
1
vote
2
answers
271
views
Can't change linux user password with php script [closed]
I have the following php script for password change:
<?php
error_reporting(E_ALL);
ini_set('display_errors', TRUE);
ini_set('display_startup_errors', TRUE);
ini_set('display_error', true);
$cmd = '...
- 255
3
votes
1
answer
3k
views
The memcache was not invalidated by NSS responder
I was deleting a user.
# userdel u1
The memcache was not invalidated by nss responder.
But finally the user was deleted.
What does "The memcache was not invalidated by nss responder" means?
...
- 33
-1
votes
1
answer
170
views
I need to create a group a group of pseudo admins in AD to manage users at a remote location, but I'm not sure how this should be done
My company is migrating/consolidating domains with several remote business we have purchased, and one of our remotes sites has a pre-existing IT department that we want to keep in place. We would like ...
- 1
0
votes
3
answers
1k
views
AWS EC2 Linux - how to grant contractor SSH access
We have an AWS EC2 instance running Linux (Amazon Linux release 2 (Karoo)) and Wordpress. Currently everyone at our company SSH's to this server with a wordpress.pem file (the below line is just saved ...
- 123
0
votes
1
answer
2k
views
Bash - Run 'chage' Command Against Each User Account
I have to audit the users accounts on our linux servers in each environment so I want to script checking whether each account is expired or not. I have a for loop that's pulling user accounts listed ...
- 688
0
votes
2
answers
1k
views
How can I "archive" accounts in Active Directory Users and Computers (ADUC)?
I don't mean disabled... and I'm hoping for something other than "exported". Here's my problem: My org never deletes accounts (just disables them)--not my call. I've hidden the disabled ...
- 101
-1
votes
1
answer
233
views
How to delete a local user in windows 10 and user data
How to delete a local user along with the users home directory or data in Windows 10, equivalent to linux command 'sudo userdel -r john'?
- 101
0
votes
1
answer
43
views
What is the best way to setup/install a new Windows PC and including it in the Active Directory? [closed]
Since I have to setup every new PC by hand I was wondering how I could optimize that.
Especially because I use the new Users password to login so the Device is added to the AD after Windows ...
- 13
1
vote
1
answer
303
views
How can I link Domain users with Local users for Terminal Server connections
I have a strange setup. I have a terminal server with local users to that Terminal Server. The Terminal server is on the domain The program that is being accessed, can't get Domain users, so we are ...
2
votes
1
answer
944
views
Edit user's email field in Samba domain
Looking for a way to update all of my users' email address value in a Samba domain. I have limited knowledge of samba-tool and pdbedit, but they do not seem to allow command-line editing of a single ...
- 1,145
1
vote
0
answers
379
views
Unix group-based access control with SVN over Apache
I have an SVN repository hosted over HTTPS wiht Apache 2. In an attempt to unify access control lists for SVN as well as other services on the server, and prevent having to deal with multiple copies ...
- 111
1
vote
1
answer
387
views
How to tell what user or process created or disabled an AD user or group?
From Windows Active Directory Users and Groups. I can see when a user or group was modified. From System Internals I can also see when it was created. Is there a way to tell what User created the ...
- 640
1
vote
1
answer
1k
views
Use `chsh` on GCP VM in order to change from bash to zshell, default password is unknown
I'm trying to change the default shell on a GCP VM but am running into difficulties trying to use chsh.
It seems that I have access to root as I am able to run sudo apt upgrade.
I have also installed ...
google-cloud-platform
0
votes
1
answer
510
views
Upon creation of new user non-existent groups added
I am little puzzled with below outcome. I am logged in as root and created 2 new user. tecmint and tecmint2. New user became part of group that I cant find in /etc/group. How can I find out why this ...
- 11
0
votes
1
answer
2k
views
Using Fail2Ban as non root
What is the best way to add IP to Fail2Bans blocklist for normal user, (non root) but without giving full acces to fail2ban-client for that normal user.
To run for example this command for normal ...
0
votes
2
answers
1k
views
Best Practices: Unix User Management with LDAP + Kerberos?
I'm running a small LAN for 5 users with some basic services, e.g., NFSv4 mounts and SOGo groupware. Because it seemed to be a good and easy to implement idea, authentication is a combination of ...
- 141