Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [access-control-list]

An access-list is a list of rules, usually held on network devices such as switches, routers or firewalls, that matches network traffic. The specific term 'access-list' is used in the context of Cisco devices, although the concept of an 'access list' is more generic.

Filter by
Sorted by
Tagged with
1 vote
0 answers
4 views

Can SSSD authenticate via LDAP with anonymous binding either forbidden in ACLs and with 'olcRequires: authc' enforced?

I manage a LAN with a list of users accessing their NFS-shared homes while being auhtenticated via NIS/YP (CentOS/Fedora-based clients and servers). I'm in the painful process of migrating out of NIS/...
user avatar
0 votes
0 answers
11 views

Disable ACLs on folder or process or user

I have a downloader-application that downloads data and saves it as files and folders. Another application then processes this data. The files and folders get created with ACLs applying to them. $ ls -...
user avatar
  • 473
0 votes
0 answers
6 views

Squid IP range to specific ACL list [duplicate]

I'm using Squid and I want to know how to make that a specific IP range can have acces to a acl list. So that 10.1.x.x can have access to list.acl and 10.2.x.x to list2.acl
user avatar
0 votes
1 answer
27 views

I have load balancer configured on Haproxy. Can load balancer redirect traffic from port 1 backend to port 2 backend if port 1 is busy this moment

In ha-proxy I separated my traffic to two frontend ports and created two backends. Port-1 traffic is directed both backend and port 2 traffic is directed two backend-2. I want to create a smart load ...
user avatar
1 vote
1 answer
45 views

How to allow user to run only specific binaries

I'm adding user logviewer with /sbin/nologin/ and to my system. My custom service is running eg. sudo -u logviewer less --follow-name /var/log/messages. But still there are ways to run other command ...
user avatar
  • 121
0 votes
1 answer
43 views

Routing different subnets on a switch

My setup: I have a layer 2 managed 7-port Ethernet switch (KSZ9897). The switch features dot1Q (VLAN) and dot1X (ACL). ACL is advertised to be able to filter on layer 3 (IP) and 4 (TCP/UDP). Is it ...
user avatar
  • 21
0 votes
1 answer
32 views

Filtering traffic between ports on an ethernet switch

I would like to know if there is a standard way of limiting traffic between ports on a managed Ethernet switch? I have a 7-port Ethernet switch (microchip - KSZ9897), which is a layer 2 switch, but ...
user avatar
  • 21
0 votes
1 answer
60 views

certbot creates a challenge owned by root:root and permissions 640 and apache can't access it - custom ACLs applied on parent directory

On my server I have special permissions that I set on my public_html folder. First the sticky bit chmod g+s /home/domain.com/public_html Also default group permissions. setfacl -m 'default:group::rwX'...
user avatar
0 votes
0 answers
14 views

How to add ANY ANY Cisco ACL Rule?

I want to test if my core switch is blocking traffic using ACLs as we are having an issue with devices downstream of our Cisco L3 switch. When trying to access our firewall, etc using a non standard ...
user avatar
0 votes
0 answers
25 views

nfs4_setfacl issue when using symlinks: Failed setxattr operation: Invalid argument An error occurred during recursive file tree walk

I am working in 2 environments: 1 is a VM running RHEL 7 (PRETTY_NAME="Red Hat Enterprise Linux Server 7.9") for quriosity The other is a kubernetes pod running an ubuntu (PRETTY_NAME="...
user avatar
1 vote
1 answer
173 views

Mosquitto ACL default all users read to a topic

I am trying to create a default access for all users unless specified in the ACL file. I have allow_anonymous set to false. However, if a user is in the password file, I want that user to be able to ...
user avatar
0 votes
0 answers
58 views

VMWare changing to ACL permissions when I try to run a VM on Truenas smb share

I recently updated (unfortunately) both VMWare Workstation Pro and TrueNAS. After the update I got onto a problem that when run a VM from a locale computer that its files are located on an SMB share ...
user avatar
0 votes
1 answer
65 views

ACL settings works when using ssh but not with scp command

I have setup an Arch Linux machine with a user 'archie' with a primary group 'users' as: useradd -m -g users archie Whenever archie creates a file in his ~/shared directory I want the group users to ...
user avatar
  • 101
0 votes
0 answers
32 views

How to limit who can upload to my webdav server

I have a linux server (ubuntu 20.04) with apache2 and webdav setup so I can PUT my live output from a media encoder (MPEG DASH and HLS). This same server also hosts the media then for users (small ...
user avatar
1 vote
1 answer
277 views

how to disable/remove nfs4 acl, and back to original linux access control?

I have add nfs4 acl for a directory in nfs client, but can not use "chown/chgrp" after add nfs4 acl, now I want to give up nfs4 acl, and back to original linux simple access control, how to ?...
user avatar
  • 121
0 votes
0 answers
16 views

How to set the vty line of R1 and R3 to be access by local local pc only?

Configuring acl(telnet) on vty line
user avatar
0 votes
0 answers
217 views

Access denied to folder even though Domain Admins have Full Control

I'm setting up a testing environment for permissions and I'm trying to understand what's going on here. I have a Windows Server 2016 where my admin account used for testing is both a member of the ...
user avatar
0 votes
0 answers
11 views

How can I find the minimal set of ACL changes required to grant a user access to a file?

I work on a CentOS 7 server where I frequently have to manually grant specific users access to specific files or directories. We do this using file ACLs, but I often run into an issue where I have set ...
user avatar
1 vote
1 answer
31 views

VLAN Inner Talking

I kinda forgot about CISCO in general, it had been quite a while since I last touched packet tracer. Now I'm on the PRE-deployment phase of a network at work. Long story short. -I made 2 VLAN on CISCO ...
user avatar
0 votes
0 answers
399 views

Dovecot shared mailbox - access all folders at the root - doveadm

On a dovecot IMAP setup,we need to share the root of the other user's mailbox; i.e. Inbox bu also Sent, Trash, etc. Here we could only share 'INBOX' as doveadm does not accept / nor * when giving the ...
user avatar
0 votes
1 answer
65 views

What is best practice for managing login / sudo accounts on multiple systems, with multiple users, on a ship?

I want to preface this by saying I'm not a sysadmin by trade, I've fallen into the jack-of-all-IT-trades in a team of instrumentation engineers. My organisation has traditionally used the same ...
user avatar
1 vote
1 answer
104 views

Active Directory: pinpoint cause for access denied when modifying objects

I need a general way to determine the cause of access denied errors when modifying/moving/etc. objects in AD. I know that I can view "effective permissions" but not sure which permission ...
user avatar
0 votes
0 answers
24 views

How to take control of a directory without destroying the permissions within?

I'm trying to copy the contents of a directory off a server I am decommissioning, and I am running into permissions errors. Whoever set it up created a particular directory tree with some heavily ...
user avatar
  • 1,854
0 votes
0 answers
43 views

SSH works for ec2 Ubuntu 20 Instance. No other Outgoing/Incoming traffic is working

I have an ec2 instance, a postgres database rds instance that share the same vpc. I recently bumped up the capacity of my ec2 instance to xlarge ec2. I setup the server like you normally would with ...
user avatar
0 votes
0 answers
23 views

Access control list for LDAP OU (Organisational Unit) in OpenLDAP

I am new to LDAP (currently using OpenLDAP 2.4) and I am struggling to define a ACL entry using slapd that will manage the various Access Levels for entries that are child entries of an OU. The ...
user avatar
0 votes
2 answers
282 views

bulk removing direct access to a folder via PowerShell ACL

On a number of the servers where I work the share folder permissions have become cluttered with direct permissions for some of our techs due to them needing to take ownership. I have figured out how ...
user avatar
0 votes
0 answers
28 views

Change ACL of shared folder without setting archive bit

I would like to restrict certain network shares in my network so that only specific groups can access the shares. However, some of these shares are archived to an external system. Whenever the ...
user avatar
0 votes
0 answers
18 views

Azure Data Lake Storage ACL - how we interpret an entry with no permissions granted?

Both Azure Data Lake Storage Generation 1 and Generation 2 have limit on number of ACL entries per folder/object (28/32). Because of that one may want to clear up ACL a bit. What I can't get from ...
user avatar
  • 1,275
-2 votes
1 answer
72 views

You don't currently have permission to access this folder. Windows 10 User Authentication Error Dialog Box [closed]

I recently was given Admin rights on my machine at work. Unfortunately, when I am going through the directory structure I kept getting this message box: If I hit continue, I need to change the ...
user avatar
0 votes
0 answers
60 views

Limiting L2TP VPN and Telnet Traffic by IP Cisco Router

I am trying to limit telnet and VPN access by IP address on Cisco 1111 Router. I have the following ACL applied to the outside interface g0/0/0 permit tcp host my.sta.tic.ip host cis.co.st.ip eq ...
user avatar
0 votes
0 answers
9 views

ACL on NTFS: restoring specific file instead of the full content of ACL file

I have a directory on my NTFS drive with thousands of files within, and I would like to save its ACL data using icacls: icacls MyDir /save ACLFile.acl /t /c /q May I restore the ACL data for just one ...
user avatar
0 votes
0 answers
47 views

Why does setfacl turn on the group execute permission on files even when specifying X?

I'm seeing strange behaviour with setfacl setting the eXecute bit on the group permission for files in some situations, confirmed on CentOS 7. As user root with unmask 0002: mkdir foo touch foo/bar ...
user avatar
0 votes
0 answers
67 views

Firewall "any any" rules - Should I remove all these rules?

I inherited a server from another dev that left. And the hosting is telling me to remove all these firewall rules, because these can cause security problems. Not sure if I'm understanding this ...
user avatar
  • 143
0 votes
1 answer
134 views

copying many folders with not inherited permissions

So we have this folder with hundreds of user folders (not sure what they are used for but there is mostly Desktop, Documents and Favorites). We need to back them up to another disk, but the problem is ...
user avatar
  • 97
1 vote
1 answer
815 views

How to set ACL recursively using setfacl for files/dir added after executing setfacl

my directory hierarchy looks like this /tmp/ dir/ subdir/ file so i try command (found on a similar issue linux/setfacl - Set all current/future files/directories in parent ...
user avatar
0 votes
1 answer
92 views

Is there an equivalent to rsync --archive --files-from= on Windows?

I would like to copy selected paths from source to destination directory including all metadata and ACLs. Is it possible using Windows CLI? robocopy src dst /E /COPY:DATSO /SECFIX /TIMFIX /sl /TS /FP ...
user avatar
1 vote
0 answers
72 views

OpenLDAP, writing ACL for specific use

I work with CentOS7 and I am configuring OpenLDAP base. I have root administrator (ldapadmin) who can make changes in the entire base (in all branches). I create branches for departments, that have to ...
user avatar
  • 11
2 votes
1 answer
134 views

Restrict Viewer Access to Cloud Storage Objects via ACL

I'm hosting a static site in a Cloud Storage Bucket with fine-grained permissions set. I'm attempting to set by-object ACL permissions so users can only access specific resources if they have a ...
user avatar
1 vote
0 answers
56 views

Add NTFS Permission only to folders/files with inheritance disable

Our file servers have been around for years, and as such, the permissions have gotten a bit crazy. To start the clean-up effort, I would to make sure our "File Server Admins" group has Full ...
user avatar
-1 votes
1 answer
351 views

Give permissions of LDAP group files to specific user

Here is the situation: I want user usr to have the same permissions of a group grp, anywhere in the system. grp is not a local group, it comes from a LDAP server, of which I have no control over. I ...
user avatar
  • 3
1 vote
1 answer
77 views

Exim: Accept suffix aliases as FROM address in ACL

I am using exim for outgoing mails. For SMTP authenticated users, I have already added several ACLs and want to add another one allowing suffix aliases. Suffix aliases are email addresses such as &...
user avatar
0 votes
0 answers
30 views

Cisco VPN client - How to block Odd numbered addresses with ACL (Extended ACL)?

So I am trying to configure a VPN client on cisco packet tracer but I am having some issues with configuring the ACL. In my task I am trying to create a VPN tunnel between R4 and R2. I am trying to ...
user avatar
  • 1
0 votes
1 answer
660 views

Force all files & subdirs that BY ANY MEANS come to be in/under a directory to inherit all permissions and group

I know this question may appear to be a duplicate, because many people have asked related questions about permission inheritance. However, none of the answers I've found address the full scope of what ...
user avatar
  • 101
0 votes
1 answer
125 views

Azure private endpoints and ACL

I have this setup: a storage account a webapp a VNET with two subnets a private link The private link is in subnet A, and the webapp is delegated to subnet B. I have a the private link assigned to ...
user avatar
  • 105
0 votes
1 answer
41 views

Restrict subnet access based on LDAP group

I've got 3 VLANs: Server, IT and Staff. The Staff VLAN has restricted access to the Server VLAN, while the IT VLAN has access to everything. When someone connects to the VPN I'd like to give them ...
user avatar
1 vote
0 answers
81 views

Why does Nginx's new files' permissions supersede my default ACL

I have issues setting up proper permission on cache directory on a site that run on Debian 10 with Nginx and php-fpm. I have an user 'myuser' which home is /var/www/mydomain.tld The strucure of the ...
user avatar
  • 111
0 votes
1 answer
256 views

ACL not working with NAT

I'm studying on Cisco packet tracking, I just found one strange thing. I attached the network map and configuration below. 1> I created NAT for 10.2.0.0/16 and 10.3.0.0/16 to access the server0. 2&...
user avatar
  • 1
1 vote
0 answers
99 views

How to save ACLs of a directory tree and then restore it on another server, as SID mapping is not guaranteed?

ICACLS can save ACL of a tree with the command below, where a_dir_root is the root of this tree: icacls a_dir_root\ /save AclFile /T /C /Q Of course, groups are identified as SIDs. I want to restore ...
user avatar
  • 113
0 votes
1 answer
272 views

How to setup primary DNS as OCI DNS and secondary DNS as EasyDNS?

I want to setup primary DNS as OCI DNS for a domain example.com. Want to setup it's secondary DNS in easyDNS. I found a documentation here to setup secondary DNS with easyDNS: https://kb.easydns.com/...
user avatar
  • 125
0 votes
1 answer
1k views

setfacl on directory seems not working for default permissions on sub directories

As root, after creating a directory /Logs/case1, and setting the ACL to have default group "mygroup" permission as "rwx", any subdirectory created doesn't inherit those permissions ...
user avatar
  • 135

1
2 3 4 5
16