Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

1
vote
1answer
54 views

LDAP - how to use attribute from objectclass:account and objectclass:inetOrgPerson?

I have an openLDAP which I use for authenticating users to various servers, where each user can have access to a varying number of hosts. I am solving that requirement by using the "host" attribute, ...
1
vote
1answer
38 views

Permissions issue in Munin

I have a Fedora machine on which I have successfully installed and configured Munin. The issue that I now face is of permissions. So basically, I have a directory where I have pointed all my html ...
1
vote
1answer
68 views

Lock user account and still be able to log in through ssh public key?

is it possible to have a user account in Linux that can only login through its SSH public key? I thought to simply do sudo passwd -l myuser and lock the account (so I don't need to generate some ...
1
vote
1answer
99 views

Which way is more secure: apache:admin or folder group owner:apache?

I have been learning in recent days how to set up var/www/ permissions. I understand the common solution is set a group owner of all new folders to apache via sticky bit. How about giving the Apache ...
1
vote
1answer
798 views

Delete specific PHP sessions

I'm using PHP sessions as the focus for a user system on a website. As an admin of the site I would like to delete specific sessions to force users to logout. Or at least delete all the sessions so ...
1
vote
1answer
950 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
0
votes
1answer
40 views

Correct way to setup linux company share folder with usable permissions

I've just started working for a small company that has a globally shared folder run from an Ubuntu file server (Raid 5, etc) shared by Samba. The workstations (Centos) are all fstab setup to mount ...
0
votes
1answer
27 views

After using userdel -r to remove a user, user still appears on login screen (CentOS 7)

I used userdel -r [username] on CentOS 7 to delete a user, but the user is still appearing on the GUI login screen. Also, useradd now refuses to add the same username again, reporting that the user ...
0
votes
1answer
86 views

How to get the time and date at which a user account is locked/unlocked in unix?

I need to get the exact time and date at which a user account was locked or unlocked in Linux. passwd -S command can give the status of an account i.e., if its locked or unlocked.
0
votes
1answer
314 views

“Entire Directory” option missing from Locations in “Select Users, Computers, SrvAct, or Groups” dialog

I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
0
votes
1answer
38 views

Determine the setup of an existing SFTP user

CentOs 6 Linux Server I have an SFTP user (userok) that is jailed to a particular sub domain. All working perfectly fine and that is all that user has access to (full permissions). I have just ...
0
votes
1answer
111 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group "...
0
votes
1answer
40 views

Is there a decent way to manage accounts across disparate web services?

I'm in the position of needing to manage the accounts of multiple people across many different types of services, including onboarding and offboarding users. Being that we're using multiple different ...
0
votes
1answer
258 views

PXE server - ubuntu setting username/password later - is it possible?

so I am writing a program in mainly C/C++, though I think this question fits under server fault as it is related to the Linux distro Ubuntu. So what I am looking for is a way (possibly hackerish-way) ...
0
votes
1answer
54 views

Should I use system user account as opposed to normal user account for deploying the code in App server?

I have a Tornado app-server running behind an Nginx web-server. The app server contains python scripts for tasks like processing client requests, database call, running business logic, etc. Of ...
0
votes
1answer
61 views

User policy with git and apache

I want to setup git repository on my server so it is accessible from my webserver (read and write with redmine). I want to be able to create repository with my user (toto) in SSH. Currently I set up ...
0
votes
1answer
187 views

Restrict MySQL Access of Users to a Specific Domain

I'd like to create a new user in mysql which will be able to connect only from my servers. I've seen a way to do it through IP ranges or domain names (e.g. CREATE USER 'repl'@'%.mydomain.com' ...
0
votes
1answer
654 views

Adding existing user to existing group and providing permissions

can someone shed some light on this issue I've set up and installed vsftpd. Created a user ftp-user and created a home directory, so they can log in, and just have access to drop their files here. >...
0
votes
1answer
48 views

Add users to a server folder

I use Windows Server 2003 R2. I am logged in as user Administrator. I want to give myself permission to add a user for a certain folder. I granted myself all possible permissions for the parent folder ...
0
votes
1answer
306 views

Shared configuration for Eclipse on Debian server

I've manually installed the latest Eclipse on our debian server and wanted to configure it so all users share the same configuration. It turned out less obvious than I thought: I don't seem to be able ...
3
votes
0answers
583 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
2
votes
0answers
48 views

how to see space claimed / used per user in owncloud?

I am trying to clean up a disk on a specific server. On that server there is only owncloud installed. Since I was not the guy who setup owncloud, and there is now way to reach the actual ...
2
votes
0answers
56 views

Can I pre-hash a Windows password and pass the hash when creating the account?

I am building some Windows VMs with Vagrant, and the Vagrant provisioner will create some users. I'd like to be able to commit the passwords for those users to source control, but obviously I don't ...
2
votes
0answers
59 views

Barracuda SSL VPN Managing Users

Not really sure if this is the right site to be posting on, but I have a question about my Barracuda SSL VPN. I know there is a built-in user database on the VPN. Is there some way (in my asp.net ...
2
votes
0answers
1k views

Deleted users in Openfire are not reflected in clients

we do use Openfire as our jabber/xmpp-server. The users are added, an put into groups, which works fine, as the clients get a list of all users and appropiate users. But when deleting a user, this ...
1
vote
0answers
99 views

Windows Active Directory and Linux integration: new AD Group does not show up in Linux

In my organization, the support team has created a new AD group for me but it does not show up on any of the nodes in our cluster(using RHEL). I went through this article to understand Windows and ...
1
vote
0answers
106 views

Directory permissions for user account linux

I am setting up a shared folder between several users on a Amazon AMI (details at the bottom). I am trying to get the folder shared with one user in particular which isnt working. My idea was to ...
1
vote
0answers
96 views

DCOM Security Settings not exported with secedit

I've got a problem with exporting the DCOM-settings. I call secedit /export /cfg C:\UserAccess\config.txt This should export the COM and DCOM settings. But I don't get all of the settings. For ...
1
vote
0answers
88 views

Change Server 2012 R2 domain name in network section

In the network section of a Windows Server 2012 R2 displays the name of the domain as domain 2. For example: "mydomain.net 2". Ive seen similar problems with wireless profiles and that can be resolved ...
1
vote
0answers
327 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
1
vote
0answers
73 views

Can end user using Forefront Identity Manager to leave security group?

In our company, users logon their desktop with AD and access Sharepoint using Windows authentication. Our users frequency changing teams. After they changed team, their access to old Sharepoint team ...
1
vote
0answers
117 views

Set git config for a group instead of user or systemwide

We have configured git config --system init.templatedir /path/ on our system to automatically create required githooks for each new repository created via git init. However, there is another group of ...
1
vote
0answers
70 views

Limit size using Quota per file for a user

I am working on a linux machine . i have a user name dave. i want to implement quota on /home/dave . that dave could not create more than 2 MB file in this main directory. user can create any sub ...
1
vote
0answers
294 views

user management for host monitoring with ninja

I need some help with ninja for host monitoring(http://www.op5.org/community/plugin-inventory/op5-projects/ninja). Sorry for this long description but I hope this will help you to help me better. We ...
1
vote
0answers
436 views

Is there a way to force a Password policy to local OSX users?

i have to manage a couple of MAC's with local accounts. Now i know pwpolicy to set local passwordpolicys, but i can't find a way to force a password history. I tried to use the "usingHistory=5" ...
1
vote
0answers
4k views

How can I resolve this one application coming up with an “You don't have permission to use the application” error?

I've got a Mac OS X 10.6 Snow Leopard Server Open Directory Master with a user who's getting Mobility & Application managed preferences from a group (the only group they're a member of). The ...
1
vote
0answers
723 views

least privilege account for WinRM remote calls on Windows 2008 Server

ServerFault Windows experts: please consider the following use case: I have 2 Windows 2008 Server SP2 boxes let’s call them – SOURCE, CLIENT. On SOURCE: I create a new user called 'normal'. Just a ...
0
votes
0answers
11 views

ubuntu script - switching users in script and deleting previous user

On an AWS EC2 Ubuntu Instance I want to run a setup script that creates a new system admin (let's call it deploy) delete the default ubuntu user and continue the setup as the new deploy user. ...
0
votes
0answers
27 views

One user missing in Dashboard of the Windows Server 2012 R2 Essentials

We have migrated from SBS 2008 to the Windows Server 2012 R2 Essentials. All users and computers have successfully migrated and their list is visible in ADUC. However, one user is missing in the ...
0
votes
0answers
19 views

Running the same program with two different users on the same system takes vastly different times

I am on Ubuntu 15.04, I ran a program under the user who was added during the time of installation(call him D) and the program took 2.5 seconds to complete. I add another user T to the system. When I ...
0
votes
0answers
45 views

How to limit user permissions

I have 2 servers, one web server and one SQL Server. All Windows. Both servers have the same account created with the same password and IIS and SQL Server are configured to use those accounts. I also ...
0
votes
0answers
14 views

Appropriate user permissions for reading private dkim file contents from web app

As it stands, when sending email using clients like Thunderbird, my messages get signed with DKIM. However when generating emails from a web application, they do not get signed. As it stands I've ...
0
votes
0answers
158 views

How to change shell to /sbin/nologin in NIS with ypchsh?

I have a group of machines where logins are managed through NIS. I want to disable logins for certain accounts by setting the login shell to /sbin/nologin. I think ypchsh is the correct mechanism to ...
0
votes
0answers
42 views

AD DS audit event log when using RSAT

Got a query about AD DS audit event log when using Remote Server Administration Tools (AD User and Computer tool) On DC, already turn on Audit log for AD DS change (enable, disable, create, delete ...
0
votes
0answers
36 views

Windows RD - Temporary Accounts in Terminal Services servers

We are facing this weird problem. Since a restart of the server recently, most of the user accounts are getting created with Temporary profiles. We followed a few blogs and followed steps as below: -...
0
votes
0answers
71 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
0
votes
0answers
31 views

Create account for service

I am configuring a new server. The server is running Hudson that is going to copy some files from this server to another. The other server is a virtual machine. Both running Windows Server 2012. ...
0
votes
0answers
34 views

NFS-mounting utmp

I've got a Slackware Linux cluster I'm planning on using for general-purpose shell accounts. Accounts are managed such that there are no UID or username conflicts among nodes. Given this, would NFS-...
0
votes
0answers
189 views

How to automatically log in into 2 accounts on Windows 7 on startup

I have a task scheduler job that fires Selenium unit testing server and runs some tests. It takes some resources because it opens a lots of websites. Moreover the Selenium with Firefox Driver has a ...
-1
votes
0answers
18 views

/etc/group overriden after reboot

For my server Centos7 in google cloud I've tried to modify user and add him to docker group with usermod -aG docker dev. Everything works until a reboot occurs. After reboot user is no longer in ...