Questions tagged [groups]

The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

Filter by
Sorted by
Tagged with
1
vote
1answer
27 views

Adding domain user to local group when access to active directory no longer exists

We used to have a domain (foo) but the domain controller machine has been dead for a long time. I am logged into my Windows 10 workstation as foo\mike and would like to add foo\mike to a local group ...
0
votes
0answers
41 views

Samba 4 AD - AGDLP plus fileserver local groups?

I'd like to use the A-G-DL-P structure for the groups and permissions concept on a new Samba 4 AD and fileserver (AD DC separate from fileserver): Person / User accounts become members of "...
0
votes
0answers
39 views

AAD / SAML for AD groups - group limit in azure

Signing in via Azure AD throws this error. { "code" : "InvalidParameter", "message" : "SAML token contains 145 groups, limit is 100" } I assume I need to do a ...
0
votes
1answer
61 views

Active Directory Export/Import - Users, Group, OU's

I have a 2012 R2 domain controller and need to migrate all users, groups and OU's to a new domain controller. This new DC is in a completely different domain. I've exported the users, groups and OU's ...
3
votes
3answers
124 views

How to get the group member list from a Linux computer in the domain? Samba AD/DC

If I run the following command in the computer running as Samba AD/DC i have no issues. It works. sudo samba-tool group listmembers 'domain users' The problem is I would like to read the same (and ...
0
votes
1answer
47 views

Need of distribution groups in active directory

I know the basic purpose of security group and distribution group in active directory. The security group is used to access the network resource and distribution group is used to send distribution ...
1
vote
0answers
65 views

Unix group-based access control with SVN over Apache

I have an SVN repository hosted over HTTPS wiht Apache 2. In an attempt to unify access control lists for SVN as well as other services on the server, and prevent having to deal with multiple copies ...
0
votes
1answer
142 views

LDAP query to get members for all groups in a sub OU

I need to get all users that are members of a set of groups that are configured on a sub OU. The DN for this sub OU is "OU=OU2,OU=1,DC=labo,DC=test". The groups would be in "CN="&...
1
vote
0answers
25 views

Systemd-journal-upload service cant read ssl key file

I am trying to get one of my VM servers (server1) to connect the systemd-journal-upload service to connect to the systemd-journal-remote service on another VM (server2). I already have multiple other ...
0
votes
1answer
67 views

getent group database does not match /etc/group

I have a GID which is present in the getent database but not in /etc/group : $ getent group 61876 earlyoom:x:61876: $ cat /etc/group | grep earlyoom $ Is it normal or should I worry ? Shouldn't ...
0
votes
1answer
34 views

list the users name in specific OU+ the Groups

I need to write a Powershell Script to list the users name in specific OU+ the Groups in which the user belongs to (but I need to list specific Group and not to see all Groups). Ex : OU : A Users ...
0
votes
0answers
40 views

Quota exists for deleted groups

I'm on Ubuntu 20.04. I'm trying to set up group quota for a disk on the server. I added 5 users to group1 and 7 users to group2. Then I set group quotas for a disk on the server and checked the ...
0
votes
1answer
56 views

How can I restrict access to Linux server shared directories based on LDAP groups?

Say I have a shared directory "SHARED" on my Linux server, and sub-directories like "REPORTS", "PROJECTS" etc. "REPORTS" belongs to the group "MANAGERS". Every client in the LAN (LDAP logged-in) ...
0
votes
0answers
81 views

Can roles be enabled on users of a group in keycloak?

Can we have users added under a certain group and then give few roles to each of these groups in keycloak? For example, if we have a group called 'admin', all users under this group will have read/...
1
vote
0answers
52 views

Autofs and udev rules to restrict usb permissions to groups

I need some help trying to figure out how to restrict the reading and writing access of usb devices. There are two groups on my system: usbreaders: only should have rights to access and read the usb ...
0
votes
1answer
47 views

After adding user to a group, can't tell if I'm in it or not?

I added a group called developers sudo groupadd developers then added myself to that group $ sudo usermod -a -G developers nick.weavers Then I issued the command groups to check I'd been added, ...
7
votes
1answer
65 views

In what ways can access token update be triggered for administrator accounts on workstations?

This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
0
votes
1answer
65 views

Outlook team calendar in overlay mode

Scenario: We are 4 employees in a team and are using outlook for emails and calendar. We as a team want to be able to have one single calendar view that displays: - the events where our whole team is ...
0
votes
1answer
42 views

hyper-v availability group

We are setting up SQL AG's (availability groups) on Hyper-V. We want to use SQL Server for HA and DR. IE:- We want SQL Server to perform failovers between SQL replicas, we don't want SQL and Hyper-V ...
1
vote
0answers
95 views

Cannot execute pip, even with correct permissions

I am looking to run pip that is located in a conda environment here: /opt/conda/envs/myenv/bin After activating the conda environment and running pip: $ conda activate myenv $ pip --help I ...
5
votes
2answers
74 views

Linux complex file sharing between users [closed]

Let's start with the elephant in the room: I have no formal training and I've been given a couple of small servers to manage for various, off-topic reasons. This to say that my knowledge is patchy. ...
2
votes
1answer
655 views

Ansible user module fails when group parameter matches name parameter (e.g. creating user & group name)

Trying to create an Ansible playbook to create a user (user module) on RH/Cent system (e.g. useradd). The playbook fails anytime I include the group parameter despite setting the group value to ...
1
vote
0answers
38 views

PAM LDAP add user to mail group

I've mount a LDAP Server (Debian) using PAM to let my clients connecto via SSH. I'd like to add them to the mail group o let them use the mail somehow. I've tried to create a new CN with gidnumber=8 (...
0
votes
1answer
76 views

SSH Gateway for accessing remote ssh servers

I am currently have multiple users accessing multiple customer servers with ssh access (which all only allow access from our public office IP). This kind of gets annoying if a new employee enters the ...
1
vote
0answers
23 views

Is delegating a granular “Modify permission” on a group possible?

A certain user "x" has below permissions on a group "g"; -> Read/Write all the properties on group. -> Delete the group. Need to add "modify permissions" on the group "g" for user "x" ; but the only ...
2
votes
0answers
1k views

Local groups mapped to AD users via groups.conf working - but only with ssh login

I'm running a Samba Active Directory domain with Ubuntu 18.04 clients. I used the /etc/security/group.conf file to successfully create a mapping for domain users to the "dialout" group. I tested it ...
0
votes
2answers
181 views

Unable to remove user from group

Sometime ago for who knows which testing purposes I added www-data to a group of developers called devs. I want to remove it now but it don't let me with the following message: $ sudo deluser www-...
0
votes
0answers
139 views

Incorrect list of groups membership for one user

On one of my servers, my user has a strange problem of group membership. When using id or groups without arguments, the list of groups includes those from the root user, and groups common to my user ...
0
votes
0answers
664 views

CentOS 7 local repository working for clients but unable to do yum groupinstall(s)

Our internal repository (CentOS 7 mirror) is working with the exception of the groups. I've had a request to convert some of our cli only boxes to a gui and using yum grouplist on any other client ...
2
votes
1answer
2k views

Why is the “Domain users” group missing from this PowerShell AD query?

I ran the following PowerShell script to compare a list of groups.... $dasMem = Get-ADUser -Server "<some-srv>" -Identity "<some-usr>" -Properties MemberOf | Select MemberOf $blahx = $...
1
vote
4answers
4k views

Get list of users in a group in FreeBSD

How to get a list of usernames assigned to a group in FreeBSD 11.1? This Question asks for a list of users or a list of groups. This Question asks for users who happen to be members of multiple ...
2
votes
1answer
394 views

How Apache and ProFTPD should work together, users and groups ect

I have Apache server running on apache:apache and ProFTPD running on ftpuser:ftpgroup, all my websites are under /var/www/ which is owned by root:root. So the question is when I create a new website ...
-1
votes
1answer
6k views

sudo user is not allowed to execute systemctl

I'm trying to allow a user to use sudo to manage a custom systemctl service, this however seems to fail and I can't figure out why. [root@testvm sudoers.d]# ll total 16 -r--r-----. 1 root root 334 ...
1
vote
1answer
2k views

Windows users/groups - Anonymous Logon, Everyone, Guest - what is what?

During installing and scheduling connection via DB-links, I've come accross settings permissions for the libraries (DLLs) for the account/group Everyone and account/group ANONYMOUS LOGON. So far, I ...
1
vote
4answers
597 views

Do not show all docker containers to a particular user

I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, ...
0
votes
2answers
5k views

How can I list all of the groups given user belongs to in the samba4 domain?

I have a samba4-based domain. How can I list all of the groups to which given user belongs? I know I can go the reverse way - iterate via all the groups [ samba-tool group list ] and see their ...
0
votes
0answers
380 views

php-fpm cannot acess unix socket

I'm using different PHP-FPM pools with specific users each one. I just switched memcached to use a socket instead of tcp/udp ports (for many reasons including the recent attacks on the 11211 port). I’...
-1
votes
2answers
85 views

In AWS VPC subnet id changed

I deleted the default subnet in my VPC and tried to create new. After creating the new subnet it showed a different subnet id, as you would expect. When I try to create subnet group in RDS the ...
1
vote
2answers
2k views

How to allow standard, non-admin, Active Directory users access to Docker without making them sudoers?

I have a compute server with users that authenticate over AD. I want these users to be able to use Docker without making them sudoers. The official advice is to add users to the docker group, as "[w]...
0
votes
0answers
103 views

Is changing roots primary group dangerous?

Currently in CentOS 7 the root user's primary group is root. What harm would there be in changing roots primary group to group. usermod -a -g group root The purpose just to clarify in case there is ...
2
votes
1answer
21k views

How to list active directory groups in linux for a given user, one per line, knowing that some group name contain a space character

When using "groups" or "id -Gn", I end up with the typical space-delimited list of all groups for the current user. These commands run on the assumption that group names cannot contain a space ...
1
vote
1answer
3k views

reorder group order in Linux

I have a lot of groups (20) associated with my Linux account. I've learned that to use the groups near the end of the list I need to use the 'newgrp' command so that my particular group shows up at ...
0
votes
0answers
54 views

groupadd on Ubuntu 16.04 with PBIS Open stuck with 100% CPU

I have Ubuntu 16.04 servers and workstations which are members of an Active Directory domain, using PowerBroker PBIS Open versions 8.5.0.153 and 8.6.0.427. When I try to add a local group using ...
2
votes
1answer
1k views

CentOS 7 Default Groups that are safe to remove

Problem I would like to know the purpose of each group and what type of issues would occur if the group is deleted. CentOS 7 comes the following default groups (courtesy of @HBruijn) # rpm -qf /etc/...
0
votes
1answer
55 views

User gets new group membership only after reboot (not after re-login)

I tried to add myself to the group kvm by executing the following command: addgroup matthias kvm I completely closed my session and logged in using gdm3 again. But still I don't seem to be part of ...
0
votes
1answer
84 views

Hostname based traffic routing to ips and ports

Need to figure out a safe setup that allows me to control traffic based on hostnames. For example at the moment I am dealing with a small list of people on a small machine. Every one of this persons ...
2
votes
0answers
733 views

How can I start puma under a specified user/group?

I'm using Rails 5 and the Puma 3 gam on CentOS. Is it possible (and how?) to specify the user and group under which puma runs when it is started? I need to start it with the appropriate user/group ...
0
votes
1answer
1k views

Cannot add guest to O365 Group from Outlook 2016

According to the documentation here group owners should be able to add guest users to O365 groups. In my case, I see an error stating We couldn't find the person you were looking for However, I ...
2
votes
1answer
85 views

`Default Users` default group missing in user search result

I am trying to retrieve groups for a given MS Active Directory user using Java LDAP. When searching, I use the memberOf filter. The Default Users default group doesn't appear in the search results. ...
0
votes
2answers
160 views

Permissions, ownership, and grouping changed for no good reason in webapps

I have an Ubuntu 16.04 Nginx server environment with several (WordPress) webapps under /var/www/html. My Nginx user is www-data. Each time I add A webapp, I execute: chown www-data:www-data /var/...

1
2 3 4 5
10