Tag Info

Hot answers tagged

5

Double check to make sure root has access from hosts/IPs other than localhost. mysql> use mysql; mysql> SELECT host FROM user WHERE user = 'root'; If it returns just one row with "localhost", you need to grant permissions to the IP you are connecting from. mysql> GRANT SELECT, INSERT ON mydatabase.* TO 'root'@'10.0.0.1'; Replace mydatabase with ...


4

First order of business is getting in with full permissions. If you cannot, add this line to your my.cnf and restart mysql: skip-grant-tables I recommend doing a little recon to see what users you have: SELECT user,host,password FROM mysql.user WHERE user = 'root' ORDER BY host ASC; This will display your users list, something like: mysql> SELECT ...


4

Open the properties for the user account Object tab Untick "Protect from accidental deletion" option Security Tab Advanced button Make sure the "Inherit from parent" option is ticked Owner tab Other Users and Groups button Type in Domain Admins and click OK Click OK Click OK


4

Passwords in mysql are setup per IP. Usually they are only set for access via localhost only, especially for the root user. Verify that there is a root@% entry setup in your permissions table. If you really do need to allow remote root access, then please consider changing the username so that people can't easily guess your servers superuser account.


4

Take ownership as administrator of the root of the share. Check the box that applies the ownership change to all subcontainers as well. After you're owner, you can set the permissions to whatever you want. If you want a default set of permissions, just figure out whatever those are. Then tick the boxes that replaces all permissions on the child objects ...


4

Those three problems are all a result of the account running the SQL Service not being a domain account, and they will all be corrected by changing SQL to run under a domain account. Specifically: A - an SPN is a Kerberos security feature that requires a domain account, and doesn't work with local accounts B - In order to read from active directory, the ...


3

Yep, that is UAC. Explorer windows don't really accept admin tokens via UAC.


3

In regards to Windows permissions there are two sets of permissions: NTFS permissions and Share permissions. In regards to NTFS permissions: NTFS permissions are cumulative and use a least restrictive mechanism. A user who is a member of multiple groups will have the least restrictive permissions of the culmination of the NTFS permissions granted to each ...


3

It sounds like this user modified the ACL's on the user account so that it could not be modified. Try setting permissions inheritance on the object and see if that then lets you modify it.


3

The PSMTP at the end indicates that the error is coming from Postini's servers, not yours. You most likely were using the Postini service but didn't pay your renewal bill. If that's not the case, check the Postini email config and make sure your domain has been entered correctly.


2

From comments, it looks like the permissions on /home do not have the execute bit set: drw-r--r-- 26 root root 4.0K Jan 24 03:17 home You need the execute bit set in order to enter a directory. So, "chmod a+x /home". The trick is that your friend may have blown up the execute bit recursively on all subdirectories. If there aren't that many users, I may ...


2

Usually this is because Windows Vista/7 default DCOM does not allow connections from the outside. To enable follow these steps: Run "DCOMCNFG" Expand Component Services Computers My Computer > >. Open the properties of My Computer and select the COM Security Tab. In the Access Permissions section, click Edit Limits. Select ANONYMOUS LOGON and check the ...


2

Take a look at the Hyper-V Remote Management Configuration Utility. Written by John Howard from the MS Hyper-V team.


2

The issue has been solved now. I did fairly major changes: Tightening security by some permissions for files (this probably isn't the case, because they were OK before this also) Didn't have rndc configuration in place. Generated key and set up rndc. And then.... when i was making changes in named.conf and restarted, it seems that previous process wasn't ...


2

Here's the solution we hit on today. Run Internet Explorer on the non-build server (the 2003 R2 server). Tools > Options Security tab Highlight Local Intranet and click Sites. Click Advanced. Uncheck the "Require server verification (https:)" box. Add our server to the list of sites, in this format: file://ourservername.ourdomainname.org. Close and save ...


1

When we ran up to this issue, our resolution was to locate the folder and add the permissions needed for the virtual account needing this. Once we had added the account, simply by typing it in, we monitored the log files and found we no longer had the issue with respect to this folder/file.


1

I have fixed the problem now. The problem was that I didn't have the 'ERRORLOG' file name in the path in the SQL configuration manager for the SQL service: D:\SQL ERROR LOGS\ERRORLOG The error thrown in the event log says 'access is denied' which makes you think it's a permissions issue. It's my bad as I didn't realize that the original path I was ...


1

You can try to whitelist your IP: sudo vi /etc/hosts.allow Add (w/o quotes): "sshd: 1.2.3.4" Also, check the options in /etc/denyhosts.conf to see if there is anything you want to change. You can also uninstall denyhosts if it's causing more harm than good (apt-get remove denyhosts), OR tweak the denyhosts.conf thresholds to be more relaxed. EDIT: ...


1

You state that the admin has ownership of the parent directory - have you tried to explicitly take ownership of the folder in question?


1

Take owership of the subfolder. If the service breaks inheritance and sets a new owner, then you'll need to explicitly take ownership of the troublesome folder and check the box that applies it to all contained objects. Then, change the permissions like you would for anything else.


1

Your permit_mynetworks is not at the right position in smtpd_recipient_restrictions. It must be the first entry. Or else you need to SASL authenticate at Postfix when you try to deliver mail. But the first approach will definitely work.


1

Nginx does not currently support classic cgi. It does support fastcgi, though. Most solutions involve using a wrapper script of some kind to make a cgi script into a fcgi script.


1

You don't say, but I'm assuming you're using a domain admin account to perform these tasks. It sounds like a rouge user (with local admin rights) removed the domain admins group from the local Administrators group. There are a few registry hacks that can also achieve the same results you describe. Is the primary user of this workstation a "Power User"? Do ...


1

Wow I feel a little stupid. I noticed there were additional .net 4 app pools on the working servers but didn't Google it well enough the first time: http://msdn.microsoft.com/en-us/library/ie/k6h9cz8h.aspx C:\Windows\Microsoft.NET\Framework64\v4.0.30319>aspnet_regiis -i And that was it.. In my defense the error it was throwing out seems way off base to ...


1

You need to know where the access is denied. Please use Process Monitor from Sysinternals (now Microsoft) to figure out which registry keys and files can't be accessed and modfiy the permissions based on this knowlege. You can download it here: http://technet.microsoft.com/de-de/sysinternals/bb896645.aspx


1

The user you use to login is not the root-user for the machine, but a user created while installing OpenVPN. The default user to log in is 'Openvpn'. This is a fairly good tutorial on the subject: http://www.jack-brennan.com/?p=958


1

Ended up rebuilding the farm, after a clean install verything worked. One-way domain trusts need a lot of pre work is all i can say...


1

Does the password hash match for the new user/host combo? Tweak your select statement: select host, password from user where user='profuser'; Anyway, what're you attempting to achieve? You're adding the -h 192.168.1.99 flag; this isn't necessary when connecting locally (as you've discovered). If you're going to want to connect over the network, then ...


1

It looks like the temp IIS profile that is used (normal for IIS) can't be created. I bet you will have the same issue if you create a new user and try to use it. In other words, the root issue is not related to IIS. I don't know what symimv.cat is, but nothing turns up on a google search. Is that something custom that you or your corporate team have ...


1

Have your tried via IP address or FQDN as alternatives? You might verify that your DNS and/or WINS configurations match up to the other working systems.



Only top voted, non community-wiki answers of a minimum length are eligible