Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
619
questions
0
votes
0answers
9 views
how to restrict access to a shared folder on a domain on specific non-member PCs?
I have an active-directory domain called SomeDom with a number of PCs on it; I have restricted write access to USB drive for some users by GPO.
When a PC (like TempPC1) is connected to the LAN, I don'...
0
votes
1answer
44 views
Using Fail2Ban as non root
What is the best way to add IP to Fail2Bans blocklist for normal user, (non root) but without giving full acces to fail2ban-client for that normal user.
To run for example this command for normal ...
0
votes
2answers
89 views
Best Practices: Unix User Management with LDAP + Kerberos?
I'm running a small LAN for 5 users with some basic services, e.g., NFSv4 mounts and SOGo groupware. Because it seemed to be a good and easy to implement idea, authentication is a combination of ...
1
vote
2answers
15 views
Is there any possible way to give an all the services (windows and 3rd party) access to the non admin users?
I am planning to give all the services start /stop access to the users(non-admin) I don't want to give the administrator group access to them.
I have a couple of windows servers running with a couple ...
0
votes
0answers
29 views
Assigning users password protected folders via webapps
I have a website, a Digital Ocean Cloud Server, 2 web-apps and user base of about 4000 (Constant). The web-apps are VSCode like online IDEs with built in terminals, I want to have each user have their ...
0
votes
1answer
32 views
Can I delete initial ubuntu user on Ubuntu server?
Ubuntu installer create by default an initial user called ubuntu (that it's also a sudoers), as explained here.
On my server I have created another sudoer (with a less common name) and I would like ...
1
vote
1answer
92 views
AD best practise delete or just disable?
As an IT company that delivers IT systems, servers and everything for our customers. I'm trying to find the best practice when it comes to Active Directory and users leaving the company.
We have ...
0
votes
1answer
68 views
Do I need to specify the user:group in sudoers to impersonate other users
I was trying to limit the command a specific user can execute in the sudoers file, say I have something like this:
dummy myserver=(ALL:ALL) /usr/sbin/reboot,/usr/sbin/shutdown
My dummy user is only ...
0
votes
1answer
41 views
Allow sudo over SSH while forbidding TTY login
I want to lock users from local login (keyboard and monitor), but still allow remote logging with SSH.
Easily achievable with passwd -l and ssh-copy-id.
But what about sudo? I want to keep password ...
0
votes
1answer
64 views
How to use list to create users with this Ansible role
I am trying to learn Ansible and I've been dabbling with some roles that I've found on Github, specifically this one that automates user creation together with sudo rules and SSH key deployment:
...
0
votes
1answer
23 views
What folder should be the home of the web root owner?
I'm setting up a SLES 12 system for running web applications on it. There is already a /srv/www folder and it's going to be owned by a special user (let's say: web user).
Is there a good practice / ...
0
votes
1answer
34 views
Which user should be the owner of the web root in SLES 12?
I'm setting up a SLES 12 system for running web applications on it. There is already a /srv/www folder and it's owned by root. So I'm going to reassign it to another user.
Is there a good practice / ...
0
votes
0answers
29 views
Create instance users with AWS SSM
Does AWS Systems Manager allows creating/changing users on managed instances? For example, if some of the instance users forgot password for RDP or if I want to change user permissions without logging ...
0
votes
0answers
30 views
Can I delete the 'core' user in CoreOS Container Linux?
Pretty simple question: can I delete the core user on CoreOS Container Linux? I've tried deleting core using userdel, which removed it from the /etc/passwd file - however, I can still log in as core ...
0
votes
1answer
17 views
Windows IAM without granting admin access
I have an IAM team that needs to be able to create local administrator accounts but the customer doesn't want to grant that team Administrator access to the this team. Is there any way to create ...
1
vote
1answer
73 views
Best practices for docker users on a shared machine
We would like to use docker on the servers of our university. From reading
https://docs.docker.com/install/linux/linux-postinstall/#manage-docker-as-a-non-root-user
I understand that it is ...
0
votes
2answers
66 views
Getting dates associated to acct sa output stats
I'm trying to get stats on global CPU usage of a server on a per-user basis so I installed GNU Accounting (acct) (on Ubuntu server 16.04).
When asking for stats with sa -m, it takes data from the ...
0
votes
1answer
67 views
Is it possible to disable new bluetooth connections for non-admin accounts(Windows 10)?
I can disable bluetooth entirely, but I want the previously attached bluetooth keyboard & mouse to continue working, but the guest/non-admin users unable to pair new devices. I looked at stopping ...
-1
votes
1answer
79 views
Global authorized_keys associated with a user?
Is it possible to have a global authorized_keys file that associates each user to their own public key?
For example, I would like to create multiple user accounts by their Github user name and public ...
0
votes
2answers
54 views
Manage WIndows clients in the Azure cloud
I'm looking for a solution for the following scenario:
We are planing to install several Windows 10 systems (about 30 to 50 PCs).
We want to create user centrally, and also want to push group ...
2
votes
1answer
315 views
Ansible user module fails when group parameter matches name parameter (e.g. creating user & group name)
Trying to create an Ansible playbook to create a user (user module) on RH/Cent system (e.g. useradd).
The playbook fails anytime I include the group parameter despite setting the group value to ...
-1
votes
1answer
76 views
List of active users and their access rights to O.S. in Windows Server 2003 [closed]
How I can get a list of active users and their profiles (access rights) to O.S. in Windows Server 2003 ?
0
votes
1answer
45 views
Should Active Directory, Web Apps and MS-SQL all have the same users?
I am looking for a clean way to do audit trails in MS SQL Server, for compliance reasons, preferably completely on the database side without involving the web application.
When talking about audit ...
0
votes
0answers
34 views
Creating separate SFTP accounts in LAMP Digital Ocean
I just created a pre-configured LAMB stack on Digital Ocean, I want to have different users for each directory inside var/www/html.
So when user Tom uses SFTP , he will have access to var/www/html/...
0
votes
2answers
60 views
Having Postgres databases to be physically stored in a subfolder of the Ubuntu user's home directory
I am currently setting up an Ubuntu 18.04 server, where many different users are given SSH access - including access to the server's Postgres SQL and the ability to create their own Postgres databases....
2
votes
1answer
33 views
Managing multiple rabbitmq clusters
I have a bunch of Rabbit clusters which I'd like to synchronize users, permissions, and some configuration across. Is there a decent existing solution to this, or do people mostly just write their own ...
2
votes
1answer
140 views
Remove local user password through Powershell
I'm trying to remove a users password through Powershell.
I know I can create a user without password like this:
New-LocalUser -Name "myuser" -NoPassword
But how do I remove a users password once ...
3
votes
1answer
484 views
How can I grant Dial-In / Network Access Permission to local account via command line?
I am trying to configure a VPN server completely using Powershell. I have completed everything except the last step: Granting a local user account Dial-In / Network Access Permissions so that this ...
1
vote
1answer
178 views
Puppet user creation with condition
How to create user with same UID(only if it doesn't exists) without affecting the servers having the same user with random UIDs.
To give more insight:
1. Maintain a user, "user1" all across the fleet ...
1
vote
1answer
703 views
Windows server 2016 Administrator account has no permissions
I was changing settings around so that users can only use specific applications; however, I didn't realize that it was going to affect admin rights in the same way.
The error I'm receiving is this:
...
0
votes
2answers
71 views
Unable to remove user from group
Sometime ago for who knows which testing purposes I added www-data to a group of developers called devs. I want to remove it now but it don't let me with the following message:
$ sudo deluser www-...
3
votes
1answer
84 views
GCE deleted users folders reappear after reboot
on newly created gce instances I find a really messy /home/ folder, containing one home directory for every GCP user with sufficient permissions (so far not too insane), but also for any user that ...
google-cloud-platform
3
votes
1answer
42 views
How to hide specific drives on a server?
I would like to know what's the recommended solution for the following problem.
We do not want users to see (or at least not to modify) the drives D and E of a server they have remote access to.
...
0
votes
1answer
35 views
redirecting output using sudo [duplicate]
I want to run a command as another user using sudo, and redirecting the output of that command as that user.
Example, if I run:
touch some-file
under user simon, some-file will be owned by user ...
0
votes
1answer
81 views
Switching to a “role” account, using `sudo` and `ssh` agent forwarding later on – possible?
I want to create "role" accounts for several admin tasks that don't usually require root permissions. For example, consider a www-admin user maintaining files in /var/www.
It seems to me that this is ...
2
votes
0answers
27 views
Restricting user access to a subset of binaries
I checked rbash and chroot jail, which doesn't have permission to read /var/log.
Scenario:
ssh user should only able to cd to a directory and do less for files.
eg:
ssh user@server.com
cd /var/...
1
vote
2answers
1k views
Automatically block Gitlab users, removed from LDAP
I've migrated this question from StackOverflow.
I'm administering a Gitlab-Omnibus (Community Edition) instance in our company as an additional duty.
Gitlab uses company's Active Directory server ...
0
votes
0answers
46 views
Use default `ubuntu` user to deploy an app or make separate users?
I have a Ruby on Rails app and use Capistrano to deploy it to the server.
The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
1answer
73 views
Azure Portal BizSpark Subscription - Is there any Max limit and cost for adding Users?
I am having Azure BizSpark Subscription in Azure Portal, and I want to add Guest Users and grant them roles/resources separately. I searched documentations but not able to find whether adding Guest ...
-1
votes
1answer
30 views
Newly created user on EC2 is disappearing
I use CloudFormation to spin up a stack with one EC2 instance. Once the instance is running, I want to be able to use "Run command" feature to execute some scripts, but not as root user. That's why, ...
0
votes
2answers
3k views
How can I list all of the groups given user belongs to in the samba4 domain?
I have a samba4-based domain. How can I list all of the groups to which given user belongs?
I know I can go the reverse way - iterate via all the groups [ samba-tool group list ] and see their ...
1
vote
1answer
50 views
Is there a role for overall management for Google Cloud Platform?
I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know).
I checked the documentation of GCP and from ...
1
vote
2answers
4k views
Setting a Windows Non-Interactive User Account
Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user.
I would like to set specific Windows domain service accounts as "non-interactive" so ...
-3
votes
1answer
45 views
Semi-selfservice user registration [closed]
I don't want to have wide-open registration on my server so I don't have to deal with spam accounts, but at the same time I don't want to have to manually add accounts for each person I invite to my ...
2
votes
0answers
3k views
How do IIS AppPool Users get created and where are they stored?
When viewing the group "IIS_IUSRS", there are users such as:
IIS APPPOOL\DefaultAppPool
IIS APPPOOL\MySite1
IIS APPPOOL\MySite2
When looking for the user in the users view, there are now users with ...
0
votes
2answers
99 views
How to deny access for specific user to parent directory in Linux?
Goal:
I would like to create directory rights so that specific manager user is able to access everything on /data and its child folders, but employees is able to access only Employee folder. This is ...
1
vote
0answers
62 views
remote access - restrict accessible user accounts depending on client
I find endless resources on the web explaining well how to restrict access to a computer depending who is trying to log-in. That doesn't allow to control what account will be used to log-in onto the ...
2
votes
1answer
383 views
Vsftpd/pam_userdb.so - auto-create virtual user home directories
Setup:
Amazon Linux EC2
vsftpd
PAM authentication with pam_userdb.so
Usernames/passwords written to Berkeley user db from an external source (lsyncd).
There are many 1000s of virtual users, to date ...
0
votes
0answers
526 views
LDAP user has no name
A user on our Opensuse 12.1 server was trying to mount an NFS directory and came to me saying that he had no username. His user configuration is identical to every other user on the system, so I ...
1
vote
1answer
144 views
For a windows network account, why is USERPROFILE not mapped to the users network share?
On a number of Linux based distributions it is possible to mount a users home drive over the network or change the location of the users home drive by modding the user account. Accessing the users ...
