The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
3answers
238 views

How do I allow users to have access to only a specific subset of folders on my Ubuntu server?

I need freelancers to be able to download and upload files to some of my websites on my Ubuntu server, but not all. How do I set it up so that each freelancer is a user who has access to only the ...
1
vote
1answer
2k views

domain user disabling screensaver

I have the following situation: Due to security reasons the screensaver is activated after 10 minutes, and immediately locks the screen. There are GPOs preventing the user from changing the ...
1
vote
1answer
64 views

Removing Apache per user directories

I am trying to access my localhost but I am getting a "Not Found" error. What I am trying to do is get to my Sites directory (/User/[username]/Sites). Right now I have the following commented: # ...
3
votes
3answers
6k views

How does mysql determine the hostname of its clients?

I'm trying to create a MySQL user which will only be allowed to connect to the MySQL database from a specific hostname. grant all on db_name.* to 'user_name'@'appserver-lan.mydomain.com' ...
0
votes
2answers
220 views

What permissions should I give these files? [closed]

I have some files that nobody needs read access to and apache needs read and write access to. Should I do chown nobody.apache file chmod 460 file or chown apache.nobody file chmod 640 file or ...
0
votes
1answer
49 views

Dovecot - different authentification mechanisms for different users

How can I make several groups of users and tune dovecot in a such way, that one group can use plain text auth (for example), second - APOP, third - MD5-CRYPT, etc? Thanks in advance.
0
votes
1answer
309 views

Adding existing user to existing group and providing permissions

can someone shed some light on this issue I've set up and installed vsftpd. Created a user ftp-user and created a home directory, so they can log in, and just have access to drop their files here. ...
0
votes
2answers
364 views

Most secure settings for user dedicated for SSH Tunnel

Due to security reasons, I have created a user on my remote VPS only to use it for SSH tunneling. My local PC goes in hands of many others which scares me because I need to leave that SSH session ...
2
votes
0answers
319 views

WebDAV user permissions on a per file basis

My team and I are building a webDAV server using Apache 2.2. We have run into an issue with user permissions. We have it currently set up so that user permissions work for folders on the server but ...
1
vote
2answers
745 views

Lock down or limit user access on Windows Server 2000/2003?

I am looking for a way to severely restrict user account access on Windows servers. Is there a way to programmatically do this? I have found a few options like forcing a user to start in a program ...
1
vote
0answers
727 views

Why is my access being denied when I am an adminstrator on my Windows Server 2003 Installation?

I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to ...
2
votes
1answer
294 views

Limit user resources on dedicated server

Is there a WHM plugin mode or something like that which would limit the amount of resources a user on a dedicated server can use (CPU and RAM) or ideally something which gives certain users priority ...
2
votes
1answer
536 views

How is non admin domain user able to change Administrator for local computer?

On a Windows Server 2003 / XP LAN, non admin domain users are able to manage the users and groups of the local computer including changing the Administrator password and make themselves ...
0
votes
1answer
77 views

Prevent PHP from including files from other sites directories

Currently I am running nginx 1.0.11 and PHP-FPM. Each site has it's own user/group and has their home directory in /srv/www/.... I have the PHP-FPM pools set to run as the sites' user and group on ...
0
votes
1answer
348 views

How to give permission to an account to reboot server?

I use centOS 5.7 and I need an account I have on the server to be able to reboot the server. How do I do this? Should I maybe be worried about security issues with this? The reason I need it...I ...
1
vote
1answer
232 views

How to chown when a user name contains a dash?

A user and group contains a dash: abc-def. When I try to use chown I get an error: chown abc-def.abc-def * -R chown: invalid user: `abc-def.abc-def' the user is valid and it should work... how can ...
0
votes
1answer
99 views

Permissions of httpd apache2 and running certain php commands

I ran some recursive linux command that changed the permissions to all my website files.. all files are now like -rwxrwxrwx and all dictionaries are. drwxrwxrwx I don't know if that has anything to ...
3
votes
2answers
566 views

Setting up a limited user account on Windows Server

I'd like to create a user account on a Windows Server which can read whatever bits of C:\ it needs to be able to execute programs, but have no read access to D:\ except for D:\Special. It seems that ...
5
votes
2answers
4k views

Win2008: SC SDSET - how to grant a specific local user rights to stop and start a specific local service?

Where is a useful reference for the sdset command? I can read and read, and I have yet to find a straightforward list of steps to say: Service: App User: Joe Grant Joe start/stop/restart to App ...
0
votes
1answer
32 views

Service generated content interaction with PHP

I have a daemonized service that generates content at /usr/share/service/content I need this content to be accessible from PHP. The service runs under a user named _service which belongs to the same ...
2
votes
1answer
67 views

How can I have all my SFTP users created files be in a certain group?

The problem is, they're all creating files for the website and I always have to change the group to www-data so they have permission to it. I can run a cron job, but that seems like a ghetto fix. The ...
0
votes
1answer
294 views

Debian + Nginx + Unicorn Rails 3 project permissions

Is there a security risk in running a web server like Unicorn as root? The Nginx master process runs as root, the Nginx worker runs as the limited www-data user, but I can't set another user like ...
2
votes
2answers
4k views

Executing a command as a nologin user

I've recently set up my server so that my suPHP 'virtual' users can't be logged into by using this article My issue now is that before when I ran a rake command for my Ruby on Rails application ...
0
votes
1answer
126 views

Group Policy Design and Delegation

Background: We have an Active Directory environment that is in production and we continue to move more machines and servers into it. We do not have direct access to the user objects to move them ...
0
votes
1answer
63 views

How do I grant the privilege to add users to a specific Active Directory group?

I want give a user privileges to add users to a specific Active Directory group in my domain. How can I do this?
0
votes
2answers
3k views

Root user on Ubuntu 11.10 AMI?

I am new to linux, so this may be a very simple question. I have created a modified ami using the ubuntu 11.10 as a starting point. All of the tutorials I have found say that to save an instance you ...
2
votes
1answer
187 views

running command with sudo gives different result

I'm connected with root via ssh on a debian squeeze server. If I execute the command: /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -a '/usr/local/freeswitch/bin/freeswitch' I get the result: ...
1
vote
3answers
14k views

Apache2 - How to setup the directory permissions of website folder?

I'm using a CentOS for serving PHP webpages. I have various websites inside "/svr/www"... My problem is that I created folders like: /svr/www/website1.com /svr/www/website2.com And this folders ...
1
vote
0answers
906 views

VMware ESXi 4.1: how to create a new user with root permissions

In ESXi 4.1, I have SSH access enabled and a user jdoe, who is able to connect to the system via ssh. ~ $ less /etc/passwd | grep jdoe jdoe:x:3:0:John Doe:/home/jdoe:/bin/ash The user jdoe has all ...
1
vote
2answers
320 views

Multiple access level modes for accounts on linux servers

When currently working on a linux server (I sysadmin 2) I have the 3 following use-cases: End-user use (e.g. personal or normal project groups) User problem solving and low-risk changes (e.g. Apache ...
3
votes
1answer
144 views

What's the best way to allow read/write/modify rights and block delete rights on Win SBS 2003?

I'm looking for a way to prevent accidental deletion of folders and files on a Windows SBS 2003 box. The scenario is a DATA folder that all users currently have all rights except for "Full Control", ...
6
votes
1answer
780 views

Make a program un-uninstallable by Local Admin

I have a system monitoring tool/service, that runs on individual desktops in the network. On the network each user is Local Admin. I would like to make it so that only Domain Admin can uninstall this ...
-2
votes
2answers
906 views

Grant user mkdir() [closed]

I have a php script where I use the function mkdir() but I get Warning: mkdir() [function.mkdir]: Permission denied How can I grant a user permission to this function? Apache/CentOS Update ...
1
vote
2answers
4k views

Allow access to particular folder inside HOME directory to other users

I have a "downloads" folder inside "tempuser" home folder ("/home/tempuser/downloads") which I want to allow "rwx" permission for a different user say "testuser". The testuser should not have any ...
1
vote
1answer
597 views

Execute CGI script as specific user with Apache

I want to run a specific (perl) CGI script on my webserver. This works reasonable, but it would work immensely better if the CGI script would be running as the currently authenticated user. Is there ...
5
votes
3answers
2k views

Linux User and Permission Management within an AD Environment

Issue: Centralized user management and user permission mangement of user access needs for resources (access to services, home directories, joining to local user groups, file system permissions, etc.) ...
4
votes
1answer
10k views

How do I give a user access to /var/www/html?

I'm new to Linux admin'ing. I created a user named webadmin and I want to give it permission to read/write in the /var/www/html directory. How do I go about doing this?
2
votes
2answers
2k views

creating security groups from scratch - best practices

I need to create security groups in AD. I can identify the groups that I need, let's say they are: Management,Finance,Sales & Engineering. And I can identify the resources that each group requires ...
0
votes
1answer
529 views

Granting privileges to mysql user not working

I am logged in to mysql as root. I can add a user like this: CREATE USER test01@localhost IDENTIFIED BY 'test01'; When I attempt to grant privileges to the test01 user, nothing seems to happen: ...
0
votes
1answer
1k views

How to set adequate permissions to a scheduled task for a service controller query?

I'm a programmer, but the problem encountered has stepped beyond the code and into the system administrator realm, at least that is what I think at this time. I will only use one bit of code to show ...
1
vote
3answers
102 views

How do I tell whether an executable has run or not?

I have an executable I am calling from a third party program. I am calling it using an administrator account with "run as a service" privileges, and the third party program logs report that the ...
0
votes
2answers
562 views

How do I set my web server to run as a specific user other than 'nobody'?

This is for an unremarkable LAMP server running Ubuntu. The reason I want to do this is because I want a php script to be able to run a linux command via the exec() function and the command I want to ...
1
vote
1answer
7k views

Remote WMI Connection Issue on Windows Server 2008 R2

I just did a clean install of Windows Server 2008 R2 (x64). I have an application that talks to the server using Remote DCOM communication and queries some WMI objects. All is good while I use the ...
1
vote
1answer
669 views

Microsoft SQL 2008 R2 login failed for user 'sa' using aspnet_regsql

I've been working on this for the better part of the morning, and looked at various answers and such, but haven't found anything. I am trying to run aspnet_regsql from the command line (as part of a ...
1
vote
0answers
330 views

How do i create a bat file to create user directory with proper rights and a script to reset it if something goes wrong

I need to create user and directories for the user and share it. The rights are set on NTFS structure only. The user must do all except change rights and take ownership this is not allowed and this ...
0
votes
4answers
262 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
1
vote
4answers
791 views

how to create a user with access to one home folder for read and write?

I need a user with specific homefolder. This user should read and write in his folder. And he cant read any other folder in the server.
0
votes
2answers
374 views

Domain user added locally as administrator, having permission issues

Windows 7, new computer. User's domain account is added to the Administrator group, but when running certain apps (for example, editing the hosts file using Notepad or running command prompt...) is ...
0
votes
2answers
9k views

How do you give execute permissions to Apache2 user and NOT to everyone else?

I have Ubuntu Server running and I am setting up a separate directory as a cgi-bin. I have the directory ready and I changed the file for the site. However, to get it to work, I need to change the ...
1
vote
5answers
100 views

ssh and username

I dont understand the security in this statement: SSH does no user-name matching only public key to private key matching. This is in reference to a previous post of mine where I can be user "svn" but ...