Tag Info

New answers tagged

20

So for this you can harken back to your DOS days (if you had them) and utilize the 8.3 naming convention, which gets around the invalid NTFS security descriptors that aren't there. Steps to remove the invalid new destination folders: Open a command prompt with admin rights to the root folder where these new folders are listed. Use the command DIR /X to ...


0

As requested by someone, I'm posting this as an answer. Konqueror in KDE 3.5 and I just change permissions in the GUI, but I figured out that "Customerproof" setting has to be set to "no" in the ftp server config file for the permission to be set to 000 via FTP client.


1

I had the same problem and the solution was, to grant root group rights: chmod 440 /root/backup.key After that cron was able to read the file, and the backup script run flawlessly.


2

It isn't the user nginx is running as that is important, but it is the user php-fpm is running as. After all, it is PHP-FPM that executes the PHP scripts, and WordPress is running under privileges that the PHP-FPM running user has. So, check that your upload directory can be written by the user running PHP-FPM.


0

Based on all your posts above, you really need to re-phrase your question. It should say "how do I install ADUC on windows 7", or something similar. To answer your question, you need to install RSAT, then enable the feature under ADDS. Google "RSAT windows 7" then you will find it.


0

First: Start the ADUC, find your domain tree and browse to the topmost level that you with to apply user permissions At the users or Group dialog clock the "Add" button... You will be prompted to add a user or group At the Select User.... dialog type the name of the object or clock "Advanced".. like you wish.. Than: Delegate your task to User Objects and ...


-1

Add this on the server: ssh-keygen -t dsa -N "" -f /etc/ssh/ssh_host_dsa_key ssh-keygen -t rsa -N "" -f /etc/ssh/ssh_host_rsa_key ssh-keygen -t ecdsa -N "" -f /etc/ssh/ssh_host_ecdsa_key


0

Permissions are stored on the file or folder itself. The only way to get a report of what a user or group can access is to write a script that opens the Access Control List on each resource and checks for that name or group. It must also check for groups that the user or group is a member of. It's not a simple task and often third party tools are utilized ...


2

If SELinux is in Enforcing mode, it won't let you do that... Try changing this boolean to true: setsebool -P httpd_enable_homedirs on Please note, I don't recommend disabling SELinux! There are many tools out there which can help you use SELinux to secure your system. Please see the CentOS documentation here: http://wiki.centos.org/HowTos/SELinux ...


1

You cannot make sudo allow specific users READ-ONLY access to all files on your system. You could try to authorize these users to a specific command that would allow READ-ONLY access. However, remember that any escape into an editor or allowing redirection could using sudo root perms allow file compromise. I might suggest that you group the people who ...


1

To answer your initial question, you'll pretty much have to restart. I couldn't find any commands available under the reduced privilege level that would let you either revert to the old config or change the password without restarting. To fix the problem you were originally trying to solve, if you're not using aaa-newmodel, what you can do is set a user ...


1

You can use GNU find's ability to not follow a directory path into another filesystem: find /some/path -mount -exec chgrp groupname {} +


1

The answer is the use of bash extglob, and works here, as well as many other Linux functions that accept file designation in the /directory/* form. Changing the group of files greedily in a directory, while excluding a directory, is possible by first turning extglob on, and then including the directory name to exclude as such: shopt -s extglob chgrp ...


0

I wrote a script which runs as a computer policy with administrative rights on the local workstation. It checks the last logged on user's Description in AD which a Domain Admin can set from "Active directory Users and Computers", if it contains the workstation name, the script adds the user to local admin group, if the workstation name is not in the user's ...


1

The script is executed as the user, but as though the script were setuid with the suexec user. The apache user would still need to be able to reach the script, which means execute permissions on all the directories leading to it.


0

This happened to be because User Account Control (UAC) was enabled for the local Administrator account. To fix: Click Start, then type: gpedit.msc In the search results, click on "gpedit". Confirm the UAC prompt. Navigate to: Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options In the ...


1

Try logging out and logging back in - gpasswd may not take effect until you do so.


1

It looks like root was the primary group of myuser (since it was the first group listed with the groups command). So I changed the primary group using sudo usermod -g sudo myuser and then the root group was gone from myuser's groups.


1

You should be able to safely remove both permissions for the CRM app pool. However, please take the following into consideration. First you need to understand why Microsoft and CRM require those permissions. Since the very early days of Microsoft CRM (as far back as 1.2) the installation procedure for CRM was to copy template mdf/ldf to the administrative ...


0

found ls: cannot access system: Permission denied after sshfs on mint/ubuntu. sudo adduser <username> fuse remove from comment user_allow_other in file /etc/fuse.conf. Change permission of fuse.conf sudo chmod a+r /etc/fuse.conf reboot now and do sshfs <login>@<ip_of_machine>:<path_to_mount> <mountpoint> -o allow_other


0

First off, you're not losing your mind - this is actually the intended behavior for any directory-style resource when doing recursive directory creation. The first level of the remote directory is being set correctly - it's the recursive ones that are not. Docs reference: The remote_directory resource can be used to recursively create the path outside ...


1

After some further testing with the local security groups created with the installation of the IPAM role I was able to add the server to Server Manager with a less privileged user. Adding the required users/groups to the locally created 'IPAM Users' group allowed those members to add the IPAM server to Server Manager with only enough permissions to view the ...


2

I'm assuming, since you say the server is prompting for passwords and because the server is in a domain that the users in question are not part of the domain. If the users are part of the domain, look at the NTFS file permissions inside the share and make sure that everyone you want to have access does, in fact, have access. You have to set the ...


0

I logged in to another account, and found out that the whole 'admin' directory belonged to group 'nginx'. I simply added 'admin' to that group, and the world is nice again!


2

What you probably ought to do is to enable Access Based Enumeration on the share. Using ABE will allow users to see and work with only the folders that they have permissions to. I don't see why they would need to see any other users folders at all.


0

If the regular user already has open connections to other shares on this NAS, it's not possible. You cannot have a single login session connect to an SMB server with multiple credentials. You could solve this other ways. Serve the directory up via a different protocol from SMB, like HTTP or FTP or NFS. Put the share on a different server just for IT. ...


0

This worked simply by running the task using the administrator credentials. Find that in the Advanced options of your task. :)


0

I had the same issue a while back. In my case I got 126 without the execution bit set and 127 with the bit set. I later figured out it was related to some shared libraries missing on the system. Even if the binary is linked statically it seems to use some shared libraries from the system. I don't really remember which libraries were causing the problem, ...


1

For such situations you can add to each virtualhost an include to a shared resource: Include conf/shared-virtualhosts.conf Then in this file add: <Location /> order deny,allow deny from all allow from ${yourallowedipaddress} </Location> When you are done just comment the file and reload your apache.


-2

Setting the permission of / to 755 worked for me. So check first with root@ubuntu:/# cd / root@ubuntu:/# ls -ld Permissions should be "drwxr-xr-x" (755).


1

Firstly, let's be absolutely clear - what you are asking for is not a normal thing for your average desktop application. Applications should generally run in the user context allowing all resources to be secured on a per-user basis - the sort-of exception being apps which require enhanced privileges and request a UAC elevation. However, some enterprise ...


0

Use a .htaccess file: order deny,allow deny from all allow from < your ip here > httpd.apache.org/docs/2.2/mod/mod_authz_host.html Make sure the .htaccess feature is enabled



Top 50 recent answers are included