Tag Info

Hot answers tagged

3

According to the documentation you can have multiple AuthUserFile-directives if you have them in different VirtualHosts. It doesn't appear to me that what you're doing is supported. There are other ways to achieve what you are trying to: merge the two files (manually or automatically by cron for example) use another authentication method for proftpd see ...


2

Just grant the user necessary permissions on the "1 server". They won't be able to login anywhere else because they won't have permission. This isn't a VPN solution or LDAP solution, instead it is just how permission are granted on the one server. While this does make them a "Domain User", they'll still only have access to the resources granted which ...


1

You didn't write how did you "split logs" and I assume you did it in wrong way. Add to your smb.conf file to the [global] section bellow line: # log files split per-machine: log file = /var/log/samba/log.%m Now in /var/log/samba/ you should see: [root@server samba]# ls -l total 52 drwx------. 5 root root 43 Jan 28 05:40 cores -rw-r--r-- 1 ...


1

for rhel and derivatives since version 6 you use update-ca-trust (man 8 update-ca-trust for all the details). Lots of info in https://www.happyassassin.net/2015/01/14/trusting-additional-cas-in-fedora-rhel-centos-dont-append-to-etcpkitlscertsca-bundle-crt-or-etcpkitlscert-pem/ Basically you put your ca file in PEM format in /etc/pki/ca-trust/source/anchors/ ...


1

What you are looking for is essentially a "Captive Portal" server for your wireless networks. I would suggest you look at pfSense, it is an open source Firewall/Unified Threat Management system and has Captive Portal functionality built in. You can also do time restrictions based on VLAN, IP, MAC, Route, etc. Very powerful platform. Even lets you produce ...


1

I would suggest to deny interactive/RDP logon to the DCs with GPO: "Computer Settings/Security Settings/Local Policies/User Rights Assignments/Deny Logon Locally" I've seen such problems with custom/corporate software and some Linux boxes. In these cases "Logon Workstations" should include the DC(s) in the list of allowed workstations. I suppose it's ...


1

My suggestion for a workaround: Put the authorized_keys file somewhere outside of the user's home directory, using the AuthorizedKeysFile directive in sshd's config file. However, I'm a bit puzzled - the StrictModes directive should specifically do what you want. Does this not work as documented? StrictModes Specifies whether sshd should check ...


1

FYI: domainjoin-cli configure --enable pam will re-add these lines after an upgrade as well. PBIS Open 8.x and higher properly deliver a /usr/share/pam-configs/pbis configuration so that this shouldn't happen in the future. Additionally, PBIS logs more specific errors to the daemon facility of syslog, so you can view them in ubuntu in /var/log/syslog ...


1

Changing trustedhosts requires local admin priveliges (and is a one-time operation), but the subsequent connection(s) to the non-domain computer do not.



Only top voted, non community-wiki answers of a minimum length are eligible