Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

52
votes
6answers
99k views

How do I create user accounts from the Terminal in Mac OS X 10.5?

I would like to be able to create new users in Mac OS X 10.5 remotely after ssh'ing into the machine. How do I do this?
32
votes
5answers
6k views

How do admins maintain user accounts across hundreds of linux servers?

Dealing with hundreds of RHEL servers, how can we maintain local root accounts and network user accounts? Is there an active directory type solution that manages these from a central location?
30
votes
11answers
80k views

create home directories after create users

I created some users with: $ useradd john and I forgot to specify the parameter -m to create the home directory and to have the skeleton files copied to each user. now I want to do that, and I ...
27
votes
8answers
2k views

Email hoarder intervention and education - (Exchange environment)

Throughout my career, I've encountered quite a few users who were email hoarders... I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix ...
27
votes
6answers
48k views

GRANT SELECT to all tables in postgresql

Is there a one-liner that grants the SELECT permissions to a new user postgresql? Something that would implement the following pseudo-code: GRANT SELECT ON TABLE * TO my_new_user;
18
votes
9answers
19k views

Is it feasible to have home folder hosted with NFS?

I'm planning to deploy some kiosk computers and would like to leave them with a small pendrive as boot disk, keeping the rest at an easy to back up server, ala LTSP. Right now I'm pondering two ...
18
votes
6answers
14k views

Default groups assigned to the first user in Ubuntu Server 8.04?

I just made a silly mistake on my Ubuntu Server box: I added myself to a group using usermod -G, after which I discovered the -a option... The result is that I am now out of the admin group, and ...
16
votes
3answers
22k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
15
votes
11answers
116k views

Best way to find the computer a user last logged on from?

I am hoping that somewhere in Active Directory the "last logged on from [computer]" is written/stored, or there is a log I can parse out? The purpose of wanting to know the last PC logged on from is ...
13
votes
4answers
9k views

How can I force other users to log out?

Is there a simple way for me to force another user off of a linux box, while I am logged in as root? I understand that I could determine what type of session they have open, and kill the pid - but ...
13
votes
4answers
19k views

How do I log every command executed by a user?

I want to monitor all user's activity in my server. Even when the user executes a shell command from some editor like vim I want to see them in the log file. I have checked the tool acct but it is ...
12
votes
4answers
2k views

how many user accounts can a unix-like OS host?

Let's say I want to have a server with as many user accounts as possible. How many is the max? I want millions of user accounts. Is that crazy? I'd host dozens of load-balance mirrors of the box, ...
12
votes
5answers
20k views

Difference between profile and home path

What's the difference between a user's home path and their profile path in Windows Server 2003?
11
votes
4answers
1k views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
10
votes
1answer
480 views

Cannot create new user account Windows Server 2012

I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one. On PROBLEMSERVER01 when I try to log ...
9
votes
2answers
2k views

unix user alias

is there a way to set up user aliases in unix such that if you have a user, my_user, they can log in with an alternate username, i.e. my_user_alternate and still be logged in as my_user?
9
votes
1answer
1k views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would it to have centralized control of user accounts (at least, I think I'd ...
9
votes
1answer
11k views

How to generate a /etc/shadow compatible password for Ubuntu 10.04?

How are passwords generated that are used by Ubuntu 10.04? I know that they use SHA 512 as hashing algorithm, but I figure that there is some sort of salting done. I need to generate such a password ...
9
votes
2answers
2k views

Active Directory - Bulk Company Update

I was wondering if there is a way to update the 'Company' field for a large group of users within Active Directory? I would like to match all users with a company ending in a certain string. It would ...
8
votes
4answers
5k views

How to do central home directories and user accounts on Ubuntu?

I need to set up a network of twenty Ubuntu machines and a server. As it is now, the users have local accounts on the machines, but I want to have centralized user authentication, with all user info ...
7
votes
5answers
4k views

Add daemon account on OS X

I'm trying to manually install a daemon (Oracle Grid Engine) on my machine, and I would like it to run under an isolated account. What is the preferred way, using Directory Services, to add a "system" ...
7
votes
7answers
8k views

Roaming Profiles: Simultaneous Logins of Same User

I am administering a Windows Server 2008 R2 environment that is using roaming profiles and folder redirection. The client machines are running Windows 7. Due to the nature of the business, users ...
7
votes
1answer
4k views

How can I have puppet only set password when creating a user?

I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user. I was thinking of doing a notify to an Exec resource that sets ...
7
votes
3answers
4k views

Combined NFS, Samba server w users from Active Directory

I want to build a server that exports user home directories over SMB/CIFS and NFS. This server would be joined to a Win2k3 AD domain controller that holds our user database. As I understand it, ...
6
votes
4answers
214 views

Debian and users

After a fresh GNU/Linux Debian install I can see that a lot of users are created: daemon bin sys games man lp mail news uucp proxy list irc gnats Debian-exim statd identd This os is running on a ...
6
votes
3answers
7k views

How can I rename an unix user?

I have a user named hedgehog and I want him to be named squirrel, but I don't want to change his numeric user ID. How can I accomplish this?
6
votes
1answer
848 views

Why is the root user named root by default?

This might seem like a silly question but I could see this as being confusing. For example: "Go to root directory" Could be interpreted as: Go to / Go to ~root (usually /root/) I would think ...
6
votes
8answers
4k views

Best practices or experience with company wide Username policies and resolving duplicates

I am a programmer with an application that needs to be integrated into the new company wide Active Directory login scheme. This means changing all the usernames in our system to use the new scheme. ...
6
votes
11answers
154 views

Security, user access, login and reporting. How do you mentally adjust for the negative aspects of security management?

Employees get laid off, do stupid things (like peek at a porn site), talk about personally offensive/suggestive subjects on IM & email. As IT Manager, I am tasked to lock user accounts, change ...
6
votes
2answers
24k views

What's the best way to see logged in users on Windows Server 2012?

Right now I use a powershell script to see the currently logged in users. But I don't see if there session is idle, active or inactive. I can see when the session was started but that's it. Is there a ...
6
votes
4answers
6k views

Create SSH user with limited privileges to only use Git repository

I have a git repository hosted on my SunOS server, that I remotely use through ssh git clone ssh://myUser@mydomain.com/path/to/git Now I need to add more users to be able to access that repository, ...
6
votes
1answer
242 views

“Get-AdComputer -filter” doesnt return anything when looking for Vista Clients

Why does Get-Computers -OperatingSystem "Windows VistaT Business" not return anything? It works perfectly for all the other OS types. Function Get-Computers { Param($OperatingSystem) ...
6
votes
1answer
500 views

Providing normal users(non-root) with initialization and shutdown auto-run capabilities

I'm hosting an experimental/testing Linux box, running Debian Wheezy 7.4.0 distribution. Different users log into the machine over ssh to their accounts and are allowed to run the development tools ...
6
votes
1answer
582 views

How do I re-enable an sudo lecture, once it's been seen

I have sudo set to show the usual lecture on its first use by a user. Without thinking, I accidentally triggered its display for a new user as I was setting them up, and now it's been shown, they ...
6
votes
2answers
2k views

How does user/group security work on Linux?

For example, how does mount decide if the current user has permissions to mount a filesystem? From what I know, it checks the fstab file and the group the user belongs to (I think plugdev, at least on ...
6
votes
1answer
151 views

Freebsd jail for an small company - checklist - what shouldn't forget

Looking for an checklist for an "small company freebsd/jail server". Having pretty common starting point: FreeBSD jail (remote/headless) for the company: public web, email, ftp server, and private ...
6
votes
1answer
455 views

User for MSSQL 2008 Service Accounts

I want to create a Domain User that runs the SQL Service Accounts. The reason for this is that I have setup mirroring and MS recommends having the same user (a domain user account) running the ...
5
votes
3answers
9k views

Adding an existing user to a group with puppet

Is it possible to add an existing user to a group with puppet 2.7.18? We have two modules, each one defines one class : module "user" creates all users, including user foo and user bar. module ...
5
votes
4answers
6k views

How to add a user without knowing the encrypted form of the password?

I use the following command to create a user in a linux machine: useradd -d /home/dummy -g idiots -m -p 12345689 dummy The user is created and the home directory as well. The problem is that I ...
5
votes
3answers
4k views

Roaming user profiles in Linux

My company is evaluating a plan to migrate from Windows to Linux. Can you suggest something in Linux analogous to roaming user profiles and domain users in an Active Directory environment?
5
votes
2answers
13k views

How to transfer user accounts to a new Linux machine?

I currently have a Linux box hosting our internal Subversion repository. Access to this repository is via svn+ssh with authenticating happening against user accounts on the machine. I have recently ...
5
votes
3answers
2k views

Linux User and Permission Management within an AD Environment

Issue: Centralized user management and user permission mangement of user access needs for resources (access to services, home directories, joining to local user groups, file system permissions, etc.) ...
5
votes
2answers
234 views

Any repercussions from not using default primary groups for Linux users?

We were thinking of not using the default primary group for our RHEL users. What I mean by default: User: melbin Primary group: melbin We will instead do something like: User: melbin Primary ...
5
votes
4answers
432 views

Active Directory New User Workflow

I work in a small organization that uses a single file & print server with an Active Directory domain for user management. The office admin who inducts new people is non-technical and generally ...
5
votes
2answers
520 views

Issues With Printer GPO

I have a Windows Server 2008 R2 print server. The client machines are Windows 7 Professional. I am having issues with user accounts not getting the printer added when they login. Things that I have ...
5
votes
4answers
1k views

Linux User Synchronization [closed]

What would you recommend as a way to manage users in a small Linux network, so that users only need to be created on one machine with them synchronized automatically on the others. Some are laptops ...
5
votes
2answers
810 views

How to change user's UID&GID and what comes out of that

I have MySQL data files on a thumb drive that are used on two hosts where mysql user's UIDs differ. As a result, MySQL fails to start when it's files have 0700 perms and an unknown UID as an owner. ...
5
votes
2answers
275 views

How do I set up SSH to allow 5 people log in to 100 Linux boxes with the same credentials?

Suppose I have 5 users and 100 Linux machines with remote shell enabled. How do I set the environments up to allow these few users to log in to any of the machines with the same credentials?
5
votes
2answers
3k views

OpenSSH SFTP with Chroot, how to change password

I have setup up ssh with chrooted directory where users only can use sftp and access a directory and all is child folders. The only problem I have is that I need to let the users change their ...
5
votes
5answers
699 views

LDAP for privilege control?

I've been wondering for a while if LDAP can be used to control user privileges. For example, if I have UNIX and web logins, is there an easy way to grant a user access to just or just UNIX (or even ...