Questions tagged [groups]
The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.
463
questions
0
votes
0
answers
14
views
Why do users in the administrators group not show they are in the group from a sssd joined host?
Noticed that when running id usertocheck or groups usertocheck the users in the administrators group did not show that group listed.
Checking on the windows dc with net user usertocheck shows ...
- 209
0
votes
0
answers
57
views
Automatically add LDAP users to a local group
I manage about 100 servers running Alma Linux 9.1, each with multiple users. Historically we've had a single account "admin" that everyone logs into when working on a server. I'm moving us ...
- 912
0
votes
1
answer
177
views
Setting up groups and roles correctly on Google Cloud Platform IAM
I have recently been reviewing our roles and IAM on our very small (but set up a long time ago) organization on GCP and realized that we don't have any Essential Contacts defined (https://console....
google-cloud-platform
0
votes
1
answer
164
views
LDAP auth for hosts : same user should have different posixgroup memberships while login to different machines(hosts)
Any idea on how to achieve following objective with openLDAP server with unix clients
Objective :
a) Each user should have separate access restrictions to different hosts(unix servers) through LDAP ...
- 1
0
votes
1
answer
76
views
Synchronise Office 365 Group Members
Question:
I have a list of internal users who are assigned to an office 365 group A. We now want to make other office 365 groups (B, C, ...) that will inherit/synchronize all users from group A and ...
0
votes
1
answer
176
views
Users and groups not found, but exist in their respective files
I just encountered a bizarre condition on a Debian system I was working on.
Out of nowhere, a program complained that its rungroup could not be found. After a bit of digging around, it seems like my ...
- 147
0
votes
0
answers
38
views
Google group only visible inside organization
I am owner of a Google group. I'm trying to use it to forward emails from AWS to group members so they can respond properly. However, messages sent to the group email address from outside the group ...
- 101
1
vote
1
answer
483
views
docker group gets dropped from 'groups' after some time, and with it, my user's membership
I have a fresh installation of Linux Mint 22 (Vanessa) and installed docker with
$ sudo apt install docker-compose
$ docker -v
Docker version 20.10.12, build 20.10.12-0ubuntu4
$ sudo systemctl start ...
- 333
0
votes
0
answers
137
views
Moving from Centrify to Samba, dealing with UID and GID
The network I run has used Centrify as its Linux/Mac to Active Directory intermediary since I started. The Macs are now gone leaving just the Linux servers. Now Centrify is on the chopping block and a ...
- 190
0
votes
0
answers
97
views
pam-auth-update update of /etc/pam.d/common-auth doesn't work
I'm trying to match a FreeIPA user to a local group via FreeIPA group membership. When testing the manual edit of common-auth it works. But I'm trying to generate the file with pam-auth-update so that ...
- 13
1
vote
0
answers
37
views
How to configure group based LDAP access to Mercurial
I currently have LDAP authentication configured for Mercurial using the following Apache configuration:
<Location /hg>
AuthBasicProvider ldap
AuthType basic
AuthName "...
- 143
-1
votes
1
answer
241
views
How do you create a dynamic device group in Intune with membership based on the existence of a file?
How do you create a dynamic device group in Intune with membership based on the existence of a file? Within the add new group feature, I don't see a way to specify a file name, nor a way to utilize a ...
- 109
0
votes
1
answer
141
views
Setting cgroup limits to all users in network
I have a FreeIPA user authentication set up. There are many users in the system already, along with many host systems (configured IPA clients). I want to set up cgroup restrictions on the tasks these ...
- 101
1
vote
0
answers
82
views
ejabberd: ldap_filter in LDAP Active Directory
TL;DR: How to setup ejabberd to only allow some Active Directory group members?
Hello,
After having successfully set up an ejabberd service plugged in to our AD, I'd like to narrow the allowed users ...
- 11
0
votes
1
answer
2k
views
How can I get a list of all disabled domain users with group membership, one user per line, but omit results for users that have no membership?
For example, when our users are terminated, we need to remove all groups. I want to check for groups still connected to user, but not show the users where the groups are removed.
I have the following, ...
1
vote
1
answer
399
views
NFS: control file/folder access using groups on the server
I feel a bit stupid to ask as it feels to me to be a very basic question, but anyway I haven't found a solution yet:
I have a Linux dataserver and several workstations that mount folders on this ...
- 15
1
vote
1
answer
302
views
Adding domain user to local group when access to active directory no longer exists
We used to have a domain (foo) but the domain controller machine has been dead for a long time.
I am logged into my Windows 10 workstation as foo\mike and would like to add foo\mike to a local group ...
- 151
0
votes
1
answer
999
views
Active Directory Export/Import - Users, Group, OU's
I have a 2012 R2 domain controller and need to migrate all users, groups and OU's to a new domain controller. This new DC is in a completely different domain. I've exported the users, groups and OU's ...
- 668
3
votes
3
answers
3k
views
How to get the group member list from a Linux computer in the domain? Samba AD/DC
If I run the following command in the computer running as Samba AD/DC i have no issues. It works.
sudo samba-tool group listmembers 'domain users'
The problem is I would like to read the same (and ...
- 150
0
votes
1
answer
191
views
Need of distribution groups in active directory
I know the basic purpose of security group and distribution group in active directory. The security group is used to access the network resource and distribution group is used to send distribution ...
1
vote
0
answers
257
views
Unix group-based access control with SVN over Apache
I have an SVN repository hosted over HTTPS wiht Apache 2. In an attempt to unify access control lists for SVN as well as other services on the server, and prevent having to deal with multiple copies ...
- 111
0
votes
1
answer
3k
views
LDAP query to get members for all groups in a sub OU
I need to get all users that are members of a set of groups that are configured on a sub OU.
The DN for this sub OU is "OU=OU2,OU=1,DC=labo,DC=test".
The groups would be in "CN="&...
1
vote
0
answers
322
views
Systemd-journal-upload service cant read ssl key file
I am trying to get one of my VM servers (server1) to connect the systemd-journal-upload service to connect to the systemd-journal-remote service on another VM (server2). I already have multiple other ...
- 13
0
votes
1
answer
699
views
getent group database does not match /etc/group
I have a GID which is present in the getent database but not in /etc/group :
$ getent group 61876
earlyoom:x:61876:
$ cat /etc/group | grep earlyoom
$
Is it normal or should I worry ? Shouldn't ...
- 125
0
votes
1
answer
611
views
list the users name in specific OU+ the Groups
I need to write a Powershell Script to list the users name in specific OU+ the Groups in which the user belongs to (but I need to list specific Group and not to see all Groups).
Ex : OU : A
Users ...
- 1
0
votes
1
answer
244
views
How can I restrict access to Linux server shared directories based on LDAP groups?
Say I have a shared directory "SHARED" on my Linux server, and sub-directories like "REPORTS", "PROJECTS" etc.
"REPORTS" belongs to the group "MANAGERS".
Every client in the LAN (LDAP logged-in) ...
2
votes
0
answers
156
views
Autofs and udev rules to restrict usb permissions to groups
I need some help trying to figure out how to restrict the reading and writing access of usb devices.
There are two groups on my system:
usbreaders: only should have rights to access and read the usb
...
- 35
0
votes
1
answer
60
views
After adding user to a group, can't tell if I'm in it or not?
I added a group called developers
sudo groupadd developers
then added myself to that group
$ sudo usermod -a -G developers nick.weavers
Then I issued the command groups to check I'd been added, ...
- 501
7
votes
1
answer
93
views
In what ways can access token update be triggered for administrator accounts on workstations?
This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
- 1,643
0
votes
1
answer
121
views
Outlook team calendar in overlay mode
Scenario:
We are 4 employees in a team and are using outlook for emails and calendar.
We as a team want to be able to have one single calendar view that displays:
- the events where our whole team is ...
- 1
0
votes
1
answer
59
views
hyper-v availability group
We are setting up SQL AG's (availability groups) on Hyper-V. We want to use SQL Server for HA and DR. IE:- We want SQL Server to perform failovers between SQL replicas, we don't want SQL and Hyper-V ...
- 101
1
vote
0
answers
251
views
Cannot execute pip, even with correct permissions
I am looking to run pip that is located in a conda environment here:
/opt/conda/envs/myenv/bin
After activating the conda environment and running pip:
$ conda activate myenv
$ pip --help
I ...
- 111
5
votes
2
answers
79
views
Linux complex file sharing between users [closed]
Let's start with the elephant in the room: I have no formal training and I've been given a couple of small servers to manage for various, off-topic reasons. This to say that my knowledge is patchy. ...
- 51
2
votes
1
answer
1k
views
Ansible user module fails when group parameter matches name parameter (e.g. creating user & group name)
Trying to create an Ansible playbook to create a user (user module) on RH/Cent system (e.g. useradd).
The playbook fails anytime I include the group parameter despite setting the group value to ...
- 71
1
vote
0
answers
76
views
PAM LDAP add user to mail group
I've mount a LDAP Server (Debian) using PAM to let my clients connecto via SSH. I'd like to add them to the mail group o let them use the mail somehow.
I've tried to create a new CN with gidnumber=8 (...
- 13
1
vote
2
answers
251
views
SSH Gateway for accessing remote ssh servers
I am currently have multiple users accessing multiple customer servers with ssh access (which all only allow access from our public office IP).
This kind of gets annoying if a new employee enters the ...
- 111
1
vote
0
answers
32
views
Is delegating a granular "Modify permission" on a group possible?
A certain user "x" has below permissions on a group "g";
-> Read/Write all the properties on group.
-> Delete the group.
Need to add "modify permissions" on the group "g" for user "x" ; but the only ...
- 827
2
votes
0
answers
3k
views
Local groups mapped to AD users via groups.conf working - but only with ssh login
I'm running a Samba Active Directory domain with Ubuntu 18.04 clients.
I used the /etc/security/group.conf file to successfully create a mapping for domain users to the "dialout" group. I tested it ...
- 525
0
votes
2
answers
868
views
Unable to remove user from group
Sometime ago for who knows which testing purposes I added www-data to a group of developers called devs. I want to remove it now but it don't let me with the following message:
$ sudo deluser www-...
- 499
0
votes
0
answers
280
views
Incorrect list of groups membership for one user
On one of my servers, my user has a strange problem of group membership. When using id or groups without arguments, the list of groups includes those from the root user, and groups common to my user ...
- 101
0
votes
0
answers
1k
views
CentOS 7 local repository working for clients but unable to do yum groupinstall(s)
Our internal repository (CentOS 7 mirror) is working with the exception of the groups. I've had a request to convert some of our cli only boxes to a gui and using yum grouplist on any other client ...
- 79
3
votes
1
answer
3k
views
Why is the "Domain users" group missing from this PowerShell AD query?
I ran the following PowerShell script to compare a list of groups....
$dasMem = Get-ADUser -Server "<some-srv>" -Identity "<some-usr>" -Properties MemberOf | Select MemberOf
$blahx = $...
- 4,869
3
votes
5
answers
8k
views
Get list of users in a group in FreeBSD
How to get a list of usernames assigned to a group in FreeBSD 11.1?
This Question asks for a list of users or a list of groups.
This Question asks for users who happen to be members of multiple ...
- 851
2
votes
1
answer
710
views
How Apache and ProFTPD should work together, users and groups ect
I have Apache server running on apache:apache and ProFTPD running on ftpuser:ftpgroup, all my websites are under /var/www/ which is owned by root:root.
So the question is when I create a new website ...
- 121
-1
votes
2
answers
10k
views
sudo user is not allowed to execute systemctl
I'm trying to allow a user to use sudo to manage a custom systemctl service, this however seems to fail and I can't figure out why.
[root@testvm sudoers.d]# ll
total 16
-r--r-----. 1 root root 334 ...
1
vote
1
answer
4k
views
Windows users/groups - Anonymous Logon, Everyone, Guest - what is what?
During installing and scheduling connection via DB-links, I've come accross settings permissions for the libraries (DLLs) for the account/group Everyone and account/group ANONYMOUS LOGON. So far, I ...
- 149
1
vote
4
answers
1k
views
Do not show all docker containers to a particular user
I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, ...
- 91
2
votes
2
answers
8k
views
How can I list all of the groups given user belongs to in the samba4 domain?
I have a samba4-based domain. How can I list all of the groups to which given user belongs?
I know I can go the reverse way - iterate via all the groups [ samba-tool group list ] and see their ...
- 29.9k
0
votes
0
answers
719
views
php-fpm cannot acess unix socket
I'm using different PHP-FPM pools with specific users each one. I just switched memcached to use a socket instead of tcp/udp ports (for many reasons including the recent attacks on the 11211 port).
I’...
- 359
-1
votes
2
answers
109
views
In AWS VPC subnet id changed
I deleted the default subnet in my VPC and tried to create new.
After creating the new subnet it showed a different subnet id, as you would expect.
When I try to create subnet group in RDS the ...