Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

49
votes
6answers
88k views

How do I create user accounts from the Terminal in Mac OS X 10.5?

I would like to be able to create new users in Mac OS X 10.5 remotely after ssh'ing into the machine. How do I do this?
32
votes
5answers
5k views

How do admins maintain user accounts across hundreds of linux servers?

Dealing with hundreds of RHEL servers, how can we maintain local root accounts and network user accounts? Is there an active directory type solution that manages these from a central location?
25
votes
8answers
1k views

Email hoarder intervention and education - (Exchange environment)

Throughout my career, I've encountered quite a few users who were email hoarders... I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix ...
24
votes
9answers
69k views

create home directories after create users

I created some users with: $ useradd john and I forgot to specify the parameter -m to create the home directory and to have the skeleton files copied to each user. now I want to do that, and I ...
19
votes
6answers
35k views

GRANT SELECT to all tables in postgresql

Is there a one-liner that grants the SELECT permissions to a new user postgresql? Something that would implement the following pseudo-code: GRANT SELECT ON TABLE * TO my_new_user;
18
votes
6answers
13k views

Default groups assigned to the first user in Ubuntu Server 8.04?

I just made a silly mistake on my Ubuntu Server box: I added myself to a group using usermod -G, after which I discovered the -a option... The result is that I am now out of the admin group, and ...
16
votes
9answers
16k views

Is it feasible to have home folder hosted with NFS?

I'm planning to deploy some kiosk computers and would like to leave them with a small pendrive as boot disk, keeping the rest at an easy to back up server, ala LTSP. Right now I'm pondering two ...
15
votes
11answers
99k views

Best way to find the computer a user last logged on from?

I am hoping that somewhere in Active Directory the "last logged on from [computer]" is written/stored, or there is a log I can parse out? The purpose of wanting to know the last PC logged on from is ...
15
votes
3answers
10k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
12
votes
4answers
2k views

how many user accounts can a unix-like OS host?

Let's say I want to have a server with as many user accounts as possible. How many is the max? I want millions of user accounts. Is that crazy? I'd host dozens of load-balance mirrors of the box, ...
12
votes
4answers
8k views

How can I force other users to log out?

Is there a simple way for me to force another user off of a linux box, while I am logged in as root? I understand that I could determine what type of session they have open, and kill the pid - but ...
12
votes
4answers
13k views

How do I log every command executed by a user?

I want to monitor all user's activity in my server. Even when the user executes a shell command from some editor like vim I want to see them in the log file. I have checked the tool acct but it is ...
12
votes
5answers
16k views

Difference between profile and home path

What's the difference between a user's home path and their profile path in Windows Server 2003?
10
votes
1answer
151 views

Cannot create new user account Windows Server 2012

I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one. On PROBLEMSERVER01 when I try to log ...
9
votes
4answers
865 views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
9
votes
1answer
10k views

How to generate a /etc/shadow compatible password for Ubuntu 10.04?

How are passwords generated that are used by Ubuntu 10.04? I know that they use SHA 512 as hashing algorithm, but I figure that there is some sort of salting done. I need to generate such a password ...
9
votes
2answers
1k views

Active Directory - Bulk Company Update

I was wondering if there is a way to update the 'Company' field for a large group of users within Active Directory? I would like to match all users with a company ending in a certain string. It would ...
8
votes
2answers
2k views

unix user alias

is there a way to set up user aliases in unix such that if you have a user, my_user, they can log in with an alternate username, i.e. my_user_alternate and still be logged in as my_user?
8
votes
4answers
4k views

How to do central home directories and user accounts on Ubuntu?

I need to set up a network of twenty Ubuntu machines and a server. As it is now, the users have local accounts on the machines, but I want to have centralized user authentication, with all user info ...
7
votes
1answer
3k views

How can I have puppet only set password when creating a user?

I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user. I was thinking of doing a notify to an Exec resource that sets ...
6
votes
4answers
211 views

Debian and users

After a fresh GNU/Linux Debian install I can see that a lot of users are created: daemon bin sys games man lp mail news uucp proxy list irc gnats Debian-exim statd identd This os is running on a ...
6
votes
1answer
772 views

Why is the root user named root by default?

This might seem like a silly question but I could see this as being confusing. For example: "Go to root directory" Could be interpreted as: Go to / Go to ~root (usually /root/) I would think ...
6
votes
8answers
4k views

Best practices or experience with company wide Username policies and resolving duplicates

I am a programmer with an application that needs to be integrated into the new company wide Active Directory login scheme. This means changing all the usernames in our system to use the new scheme. ...
6
votes
11answers
154 views

Security, user access, login and reporting. How do you mentally adjust for the negative aspects of security management?

Employees get laid off, do stupid things (like peek at a porn site), talk about personally offensive/suggestive subjects on IM & email. As IT Manager, I am tasked to lock user accounts, change ...
6
votes
3answers
5k views

How can I rename an unix user?

I have a user named hedgehog and I want him to be named squirrel, but I don't want to change his numeric user ID. How can I accomplish this?
6
votes
4answers
5k views

Create SSH user with limited privileges to only use Git repository

I have a git repository hosted on my SunOS server, that I remotely use through ssh git clone ssh://myUser@mydomain.com/path/to/git Now I need to add more users to be able to access that repository, ...
6
votes
1answer
328 views

Providing normal users(non-root) with initialization and shutdown auto-run capabilities

I'm hosting an experimental/testing Linux box, running Debian Wheezy 7.4.0 distribution. Different users log into the machine over ssh to their accounts and are allowed to run the development tools ...
6
votes
7answers
6k views

Roaming Profiles: Simultaneous Logins of Same User

I am administering a Windows Server 2008 R2 environment that is using roaming profiles and folder redirection. The client machines are running Windows 7. Due to the nature of the business, users ...
6
votes
1answer
466 views

How do I re-enable an sudo lecture, once it's been seen

I have sudo set to show the usual lecture on its first use by a user. Without thinking, I accidentally triggered its display for a new user as I was setting them up, and now it's been shown, they ...
6
votes
3answers
4k views

Combined NFS, Samba server w users from Active Directory

I want to build a server that exports user home directories over SMB/CIFS and NFS. This server would be joined to a Win2k3 AD domain controller that holds our user database. As I understand it, ...
6
votes
2answers
2k views

How does user/group security work on Linux?

For example, how does mount decide if the current user has permissions to mount a filesystem? From what I know, it checks the fstab file and the group the user belongs to (I think plugdev, at least on ...
6
votes
1answer
142 views

Freebsd jail for an small company - checklist - what shouldn't forget

Looking for an checklist for an "small company freebsd/jail server". Having pretty common starting point: FreeBSD jail (remote/headless) for the company: public web, email, ftp server, and private ...
6
votes
1answer
453 views

User for MSSQL 2008 Service Accounts

I want to create a Domain User that runs the SQL Service Accounts. The reason for this is that I have setup mirroring and MS recommends having the same user (a domain user account) running the ...
5
votes
4answers
3k views

Add daemon account on OS X

I'm trying to manually install a daemon (Oracle Grid Engine) on my machine, and I would like it to run under an isolated account. What is the preferred way, using Directory Services, to add a "system" ...
5
votes
4answers
5k views

How to add a user without knowing the encrypted form of the password?

I use the following command to create a user in a linux machine: useradd -d /home/dummy -g idiots -m -p 12345689 dummy The user is created and the home directory as well. The problem is that I ...
5
votes
3answers
4k views

Roaming user profiles in Linux

My company is evaluating a plan to migrate from Windows to Linux. Can you suggest something in Linux analogous to roaming user profiles and domain users in an Active Directory environment?
5
votes
2answers
11k views

How to transfer user accounts to a new Linux machine?

I currently have a Linux box hosting our internal Subversion repository. Access to this repository is via svn+ssh with authenticating happening against user accounts on the machine. I have recently ...
5
votes
3answers
2k views

Linux User and Permission Management within an AD Environment

Issue: Centralized user management and user permission mangement of user access needs for resources (access to services, home directories, joining to local user groups, file system permissions, etc.) ...
5
votes
1answer
85 views

“Get-AdComputer -filter” doesnt return anything when looking for Vista Clients

Why does Get-Computers -OperatingSystem "Windows VistaT Business" not return anything? It works perfectly for all the other OS types. Function Get-Computers { Param($OperatingSystem) ...
5
votes
2answers
234 views

Any repercussions from not using default primary groups for Linux users?

We were thinking of not using the default primary group for our RHEL users. What I mean by default: User: melbin Primary group: melbin We will instead do something like: User: melbin Primary ...
5
votes
4answers
406 views

Active Directory New User Workflow

I work in a small organization that uses a single file & print server with an Active Directory domain for user management. The office admin who inducts new people is non-technical and generally ...
5
votes
1answer
2k views

How do I set permissions structure for multiple users editing multiple sites in /var/www on Ubuntu 9.10?

I'm setting up an Ubuntu server that will have 3 or 4 VirtualHosts that I want users to be able to work in (add new files, edit old files, etc.). I currently plan on storing the sites in /var/www but ...
5
votes
2answers
227 views

Issues With Printer GPO

I have a Windows Server 2008 R2 print server. The client machines are Windows 7 Professional. I am having issues with user accounts not getting the printer added when they login. Things that I have ...
5
votes
4answers
961 views

Linux User Synchronization [closed]

What would you recommend as a way to manage users in a small Linux network, so that users only need to be created on one machine with them synchronized automatically on the others. Some are laptops ...
5
votes
2answers
708 views

How to change user's UID&GID and what comes out of that

I have MySQL data files on a thumb drive that are used on two hosts where mysql user's UIDs differ. As a result, MySQL fails to start when it's files have 0700 perms and an unknown UID as an owner. ...
5
votes
2answers
270 views

How do I set up SSH to allow 5 people log in to 100 Linux boxes with the same credentials?

Suppose I have 5 users and 100 Linux machines with remote shell enabled. How do I set the environments up to allow these few users to log in to any of the machines with the same credentials?
5
votes
2answers
2k views

OpenSSH SFTP with Chroot, how to change password

I have setup up ssh with chrooted directory where users only can use sftp and access a directory and all is child folders. The only problem I have is that I need to let the users change their ...
5
votes
5answers
641 views

LDAP for privilege control?

I've been wondering for a while if LDAP can be used to control user privileges. For example, if I have UNIX and web logins, is there an easy way to grant a user access to just or just UNIX (or even ...
5
votes
1answer
56 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
4
votes
2answers
527 views

Where is the script that creates home folders in linux?

I want to added public_html and private_html folders for users of my web server (Fedora 8 or 10 or something). Where is the script that will create those folders for them when they log on? Is there ...