Questions tagged [groups]
The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.
464
questions
0
votes
1
answer
91
views
Grant local group local admininstrator perms
I am not "allowed" to add users directly to the administrators or remote desktop user groups due to internal reasons (This is all local).
I have successfully created the new local group and added my ...
- 113
4
votes
3
answers
2k
views
List top users in the most AD groups
In a Windows domain environment, how could I count the top N users with more group membership than others?
I'd like to know both the indirect and direct groups. So, I'd like this count to include the ...
- 105
8
votes
1
answer
2k
views
Reset GID/UID auto-increment numbers
I created a virtual mail user for postfix virtual mailboxes with a gid/uid of 5555, but now every new user I create starts at > 5555, is it possible to reset the autonumbering so normal users will be ...
- 1,738
0
votes
2
answers
1k
views
Permission denied for cd command
I have created a group for developers, to give them access to: /var/lib/dev, a folder which already have some folders and files inside.
The commands I've introduced are:
$ sudo useradd -d /var/dev -...
- 499
2
votes
1
answer
890
views
What is the "parent" global group?
I've been reading about Group Scope for Groups within Microsoft's Active Directory from https://technet.microsoft.com/en-au/library/cc755692(v=ws.10).aspx. However, I find the following in relation to ...
- 123
2
votes
1
answer
241
views
Active directory "negative" group membership - group of groups minus some users
I feel like this must be a faq but I've not been able to figure out the right terminology to find the answer.
I've got a large active directory group-of-groups that contains 101% of the users I ...
- 3,281
1
vote
1
answer
24
views
Shared group directory with individual user files
I have a mounted NFS partition in which a specific group, say nfsgroup, has rwx for the directory (call it nfsdir). If my user brian is a member of nfsgroup and creates a file in nfsdir, then I chgrp ...
- 111
3
votes
2
answers
4k
views
Exporting All Groups and Group Members from Active Directory
I am relatively new to powershell and am trying to get a list of all groups in the domain with their respective members. Here's what I'm working with now:
Import-Module ActiveDirectory
$OutPutFile = ...
- 31
2
votes
2
answers
8k
views
Can't add built-in Remote Desktop Users group on DC to Remote Desktop Users on 2012 server
I have new 2012 servers and so far its only set to allow administrator to remote in.
In Computer Management/Remote Desktop Users, the only member is administrator.
When I try to add the built-in ...
- 21
0
votes
1
answer
241
views
Show user which Group is required for Apache Basic Auth page
Is it possible to show which 'group' is required for access to a web page protected with Apache Basic Auth? Ideally, the pop-up requesting username and password would pass the 'group' required as a ...
- 129
0
votes
0
answers
1k
views
Freeradius authentication: LDAP group and SSID matching
I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
- 11
0
votes
1
answer
981
views
Must the name of an ldap group be unique?
As we are setting up an openldap with multiple locations.
Must the names of the groups be unique? For example the vpn , adm, sudo group will be in NL but also in BE.
What is best practice? Could the ...
- 71
0
votes
0
answers
47
views
Nested Active Directory Groups causes user unable to authenticate against application
User is placed in a global group called site.gg1
site.gg1 is a member of a global group called region.gg1
region1 has been added to the server local group, which is mapped to the application role. ...
- 105
1
vote
2
answers
2k
views
OpenLDAP Server nested Group search string
i got a small problem here regarding OpenLDAP. The problem is to search for the member of nested groups.
Lets say i have this construct:
dn=domain,dn=local
ou=people
cn=marvyn (inetOrgPerson)
ou=...
- 66
0
votes
1
answer
1k
views
"groups USERNAME" and "getent group" results different outputs
I found that there is a user named speech-dispatcher that belongs to group audio (based on groups speech-dispatcher output). But it is not listed under getent group command! What is the problem?
$ ...
- 109
0
votes
1
answer
133
views
Make usergroups able to authorize User Account Control Prompt
I was wondering how you could make a group in Active Directory that is allowed to elevate/authorize programs with their credentials without setting them as the built in administrator?
Windows server ...
3
votes
1
answer
11k
views
Can you include an AD distribution group in a security group?
I have a security group SG-SomeResource providing access to a network resource. I also have a distribution group DG-MyOrg that describes an organizational unit.
Can I include DG-MyOrg as a member of ...
- 193
-3
votes
1
answer
231
views
CentOS root+nologin [closed]
Can I somehow get access to root account after changing /etc/passwd file?
Similar problems:
Lost root access possibility /sbin/nologin
How do I regain access to root after accidental chsh command ...
- 1
3
votes
1
answer
2k
views
Write permission to a specific file without changing ownership
As I understand it, to give a write permission to a user I can either change the owner of the file to that user and give it "user write permission" (which I don't want to do), or keep the same owner ...
- 133
1
vote
1
answer
515
views
How to achieve privilege separation between multiple services (e.g. uwsgi) proxied by nginx?
One website I maintain is composed of multiple local applications, all proxied by the same nginx instance. Each application is running under its own user and exposing a unix socket writable by the web ...
- 9,783
0
votes
1
answer
2k
views
I see my clients in AD but not in WSUS
I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers.
My group policy management got a domain myWSUS....
- 147
0
votes
2
answers
3k
views
Permissions, owner, group inheritance? [duplicate]
I don't understand restrictions in terms of directories nesting. For example, /var/www/folder/index.html directories. What permissions, owner, group should every directory and file have? Is there such ...
- 177
2
votes
2
answers
747
views
Authorization using LDAP OU or Groups
In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct.
In my organisation they are using Structure 1 design for PC login and ...
- 123
0
votes
1
answer
426
views
Nested groups in active directory and permissions?
I created the image so you could understand what I'm asking:
These are simple groups created in Active directory. Which permission will be apply on ALI. Full Control or Read Only
1
vote
1
answer
1k
views
Filter getent passwd output with SSSD
I am using ldap_access_filter in sssd.conf in order to limit access to users that are in a specific ldap group. However, when I do a "getent passwd" I still get a full list of the ldap users.
How can ...
- 447
0
votes
1
answer
660
views
Local logon script - check group membership and action
I need some help for a side project I'm working on.
I hardly deal with any scripting so I thought you guys could help me out.
The script should follow this algorithm:
check if user is a member of -AD ...
- 23
1
vote
0
answers
7k
views
List AD groups beginning with X on Linux
In the organization wide Active Directory we have user groups that all begin with a prefix blaha-, how do I list all groups with that prefix on a Linux machine?
getent group only seems to list local ...
- 639
16
votes
2
answers
38k
views
How to let non-admins manage selected domain groups' membership?
I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
- 162
-1
votes
2
answers
2k
views
Centos 6.5 /var/www/html/ User permissions
I have a dedicated server but only root can access my hosting directory. All other users get permission denied when I try access the directory with another user.
I have created a new user, added the ...
- 31
-1
votes
1
answer
120
views
group permissions in windows server 2008 r2 [closed]
Can read and write permissions be assigned to groups so that users in those groups will inherit the same properties. If yes, how to assign read permission to specific group.
- 11
1
vote
2
answers
610
views
How to find potential AD-groupname and OU-structure dependencies of eco-systems?
Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
- 2,478
2
votes
1
answer
516
views
Restricted Groups not working with UAC
I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers.
The restricted group is My_domain\Workstation Admins
Has ...
- 188
1
vote
1
answer
125
views
What is the advantage of moving Groups in Organization Units in AD environment beside organizing?
I know the advantage of using OUs (organizing and GPOs).with OUs you can organize your users and computers, assign group policy to them, and deligate control over a set of users and computers. But ...
- 275
1
vote
1
answer
2k
views
Port not opening even after adding security group rules on Amazon EC2 instance
I have an Amazon EC2 Linux instance. I recently installed SmartFoxServer in my instance. For that I needed to open 9933 port. So I just created inbound rules on Amazon EC2 Manager console website.
My ...
0
votes
1
answer
52
views
AD Organization feedback requested
I'm taking over an AD domain (not large) administration but it looks like it needs some organization. For example, under the top domain "something.com" there is a folder named "User" with many ...
- 3
2
votes
1
answer
1k
views
How to list EC2 security group *rules* from within instance?
I have SSH root access to an EC2 instance but no access to the AWS Console / AWS KEY & SECRET.
My incoming traffic to this host on all TCP ports except 22 TCP seems to be blocked - I cannot ...
- 1,341
1
vote
0
answers
4k
views
pfSense Ldap Group Authentication
I have been battling with this for 3 days now and it's driving me a little crazy.
I can authenticate via user using Ldap using the following search filter:
sAMAccountName=%s
I cannot seem to get ...
- 11
2
votes
1
answer
2k
views
Apply group policy to specific users (in an OU) on specific computers (not in an OU)
This has been bugging me for a while. Here's the setup:
We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
- 61
0
votes
1
answer
1k
views
LDAP uniqueMember attribute not recognised in linux
I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass.
When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
- 447
-1
votes
1
answer
65
views
Security group in ec2 linux instance need to be edited every time
I have created linux instance and installed wordpress on it. Every time I open my page after making change in code via commandline login , it shows this message -
The connection has timed out
...
- 111
0
votes
3
answers
6k
views
CHMOD to make directory writable by group not working
I'm trying to make the node_modules directory writable by www-group, but chmod isn't working. vagrant (user) is part of the www-data group as seen with the groups command.
Why can't I permit www-...
- 11
0
votes
1
answer
2k
views
Dump users and group membership to file
I'm trying to get an oracle 6.2 system (same as redhat 6.2) to find all the users on the system, then take the username of each user discovered and query group membership of each user individually, ...
- 245
0
votes
1
answer
848
views
Linux permissions for multiple groups
I have a directory (With sub directories and files) that I would like to setup so that:
-Users of an 'editors' group can rw- any file and rwx any dirs.
-Users of www-data can r-- files and r-x dirs.
...
- 261
2
votes
1
answer
2k
views
Addressing built-in groups and local policies in Windows independently of localized names
Recently I saw an application failing to do certain check/manipulation with built-in groups/local policies on localized version of Windows Server 2012 R2 (French, German). In localized versions of ...
- 1,315
2
votes
1
answer
2k
views
Difficulty Connecting To AWS EC2-VPC From Public Wifi
I've got an EC2 instance running on an AWS VPC (free tier), on top of which I'm running a website.
I'm also using an RDS MySQL DB Instance for my database needs, and have set up security groups to ...
- 183
2
votes
1
answer
115
views
Should usergroups be enabled?
All our users are managed with a central LDAP. When my predecessor in managing the infrastructure created the ldap he decided against creating usergroups (meaning groups of the same name and GID as ...
- 315
0
votes
1
answer
8k
views
Fix unknown sid security groups
I have the following situation: my security groups of the active directory I'm belonging to are not shown anymore in a "friendly name", but I have just the SID.
When I run whoami /groups I see a list ...
- 103
1
vote
1
answer
2k
views
FreeBSD/FreeNAS: How to change group for multiple users?
I need to change group membership for a bunch of users.
How do I
list all users?
change multiple users to nogroup primary group?
add secondary/auxiliary groups to multiple users?
Basically I need ...
- 969
3
votes
1
answer
3k
views
Port 53 in Amazon Security Group
Everything works as expected. This question is for learning purposes only.
Using Amazon Security Groups in a VPC. Outbound rules are:
0.0.0.0/0 Port 80
0.0.0.0/0 Port 443
Iptables allows OUTPUT ...
- 1,585
-1
votes
1
answer
196
views
how do I add an account into the built-in courier administrator group? [closed]
In the documentation it says that there is a built in administrators group, but how do i add an account to that administrator group
http://www.courier-mta.org/authlib/README_authlib.html
The access ...
- 1