2022 Developer Survey is open! Take survey.

Questions tagged [user-management]

Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

Filter by
Sorted by
Tagged with
0 votes
1 answer
40 views

How to add users and computers back to server 2012

I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
user avatar
  • 1
0 votes
0 answers
33 views

Logging user creation and deletion with auditd

What is the best way to log/detect user creation on linux machines by using auditd? I was thinking about logging calls to /usr/bin/ and /usr/sbin/ and filtering out useradd, adduser, deluser and ...
user avatar
  • 103
1 vote
1 answer
430 views

pg_hba.conf - psql local login without password

I have these settings in my pg_hba.conf for a PostgreSQL-12.6 installation # "local" is for Unix domain socket connections only local all all ...
user avatar
  • 217
0 votes
1 answer
123 views

Postgres Role required to grant CONNECT on a specific database

I am trying to GRANT CONNECT on a DATABASE to a user as a schema owner in that database. The schema owner is not a superuser. Do I need to be the owner of a database to execute GRANT CONNECT ON ...
user avatar
  • 103
0 votes
1 answer
392 views

idmap range on Ubuntu 20.04 (sssd) does not match CentOS 7 winbind idmaps (kinda)

My Active Directory maps in Ubuntu systems are very long compared to my CentOS IDs The last 4 digits match but Ubunutu seems to be adding a lot more to the beginning. In CentOS winbind/samba I used a ...
user avatar
0 votes
1 answer
46 views

Updating AD attributes programmatically

My apologies, as I am an engineer not a sys admin, but am working with someone who is managing AD. Current situation: We have an AD attribute that contains a longish parse-able string that contains ...
user avatar
  • 101
0 votes
0 answers
15 views

Files permission missing after upgrade

I'm having the next issue. I have a shared directory "/home/shared/users" with more users (let's say like an example user1 user2 ) Here in /home/shared/users an script generate files (let'...
user avatar
0 votes
1 answer
243 views

How to check ldap password storage policy

How do I check how passwords are stored in a local running OpenLDAP server? I would prefer some sort of query that will state the used configuration. Alternatively, accessing the stored passwords to ...
user avatar
  • 317
0 votes
1 answer
43 views

Is HashiCorp Vault the correct tool to store users sensitive information

Is Vault the correct tool to store sensitive information about users, eg. theirs pay rate or personal id? "Normal" employee/user must only have access to his own data but the users with ...
user avatar
  • 1
0 votes
0 answers
273 views

TACACS+ Ubuntu client vm authentication

I have a TACACS+ server and an Ubuntu 20.04 vm client. I downloaded the package libpam-tacplus and did steps 7 and 8 from this answer. If the user exists on the vm I can successfully use the TACACS+ ...
user avatar
0 votes
0 answers
24 views

Allow restricted user to change their own password

Recently I have followed the articles below, however, the passwd file that I copied to a dir in the users `‘home`` dir. However, when the new credentials are parsed into passwd, it ends up with the ...
user avatar
  • 1
0 votes
0 answers
123 views

Best practices for setting up Linux "service" user

I've set up a server running Ubuntu to host a backend based on Node and MongoDB with Nginx as reverse proxy. When I first logged into the machine I was root, and without thinking too much that's the ...
user avatar
1 vote
2 answers
97 views

Can't change linux user password with php script [closed]

I have the following php script for password change: <?php error_reporting(E_ALL); ini_set('display_errors', TRUE); ini_set('display_startup_errors', TRUE); ini_set('display_error', true); $cmd = '...
user avatar
  • 245
3 votes
1 answer
940 views

The memcache was not invalidated by NSS responder

I was deleting a user. # userdel u1 The memcache was not invalidated by nss responder. But finally the user was deleted. What does "The memcache was not invalidated by nss responder" means? ...
user avatar
-1 votes
1 answer
37 views

I need to create a group a group of pseudo admins in AD to manage users at a remote location, but I'm not sure how this should be done

My company is migrating/consolidating domains with several remote business we have purchased, and one of our remotes sites has a pre-existing IT department that we want to keep in place. We would like ...
user avatar
  • 1
0 votes
0 answers
46 views

How to delete user profile if user doesn't exist in AD?

Disk space is running out. Windows 10 desktops have many user profiles taking disk space. Most of the user profiles belongs to users which are deleted from active directory. How can you delete these ...
user avatar
0 votes
3 answers
941 views

AWS EC2 Linux - how to grant contractor SSH access

We have an AWS EC2 instance running Linux (Amazon Linux release 2 (Karoo)) and Wordpress. Currently everyone at our company SSH's to this server with a wordpress.pem file (the below line is just saved ...
user avatar
  • 123
0 votes
1 answer
333 views

Bash - Run 'chage' Command Against Each User Account

I have to audit the users accounts on our linux servers in each environment so I want to script checking whether each account is expired or not. I have a for loop that's pulling user accounts listed ...
user avatar
  • 578
0 votes
2 answers
377 views

How can I "archive" accounts in Active Directory Users and Computers (ADUC)?

I don't mean disabled... and I'm hoping for something other than "exported". Here's my problem: My org never deletes accounts (just disables them)--not my call. I've hidden the disabled ...
user avatar
  • 91
-1 votes
1 answer
31 views

How to delete a local user in windows 10 and user data

How to delete a local user along with the users home directory or data in Windows 10, equivalent to linux command 'sudo userdel -r john'?
user avatar
0 votes
1 answer
37 views

What is the best way to setup/install a new Windows PC and including it in the Active Directory? [closed]

Since I have to setup every new PC by hand I was wondering how I could optimize that. Especially because I use the new Users password to login so the Device is added to the AD after Windows ...
user avatar
  • 13
1 vote
1 answer
36 views

How can I link Domain users with Local users for Terminal Server connections

I have a strange setup. I have a terminal server with local users to that Terminal Server. The Terminal server is on the domain The program that is being accessed, can't get Domain users, so we are ...
user avatar
1 vote
0 answers
280 views

Edit user's email field in Samba domain

Looking for a way to update all of my users' email address value in a Samba domain. I have limited knowledge of samba-tool and pdbedit, but they do not seem to allow command-line editing of a single ...
user avatar
  • 997
1 vote
0 answers
167 views

Unix group-based access control with SVN over Apache

I have an SVN repository hosted over HTTPS wiht Apache 2. In an attempt to unify access control lists for SVN as well as other services on the server, and prevent having to deal with multiple copies ...
user avatar
  • 111
1 vote
1 answer
42 views

How to tell what user or process created or disabled an AD user or group?

From Windows Active Directory Users and Groups. I can see when a user or group was modified. From System Internals I can also see when it was created. Is there a way to tell what User created the ...
user avatar
0 votes
1 answer
393 views

Use `chsh` on GCP VM in order to change from bash to zshell, default password is unknown

I'm trying to change the default shell on a GCP VM but am running into difficulties trying to use chsh. It seems that I have access to root as I am able to run sudo apt upgrade. I have also installed ...
user avatar
  • 101
0 votes
1 answer
89 views

Upon creation of new user non-existent groups added

I am little puzzled with below outcome. I am logged in as root and created 2 new user. tecmint and tecmint2. New user became part of group that I cant find in /etc/group. How can I find out why this ...
user avatar
  • 11
0 votes
1 answer
752 views

Using Fail2Ban as non root

What is the best way to add IP to Fail2Bans blocklist for normal user, (non root) but without giving full acces to fail2ban-client for that normal user. To run for example this command for normal ...
user avatar
0 votes
2 answers
380 views

Best Practices: Unix User Management with LDAP + Kerberos?

I'm running a small LAN for 5 users with some basic services, e.g., NFSv4 mounts and SOGo groupware. Because it seemed to be a good and easy to implement idea, authentication is a combination of ...
user avatar
  • 101
1 vote
2 answers
59 views

Is there any possible way to give an all the services (windows and 3rd party) access to the non admin users?

I am planning to give all the services start /stop access to the users(non-admin) I don't want to give the administrator group access to them. I have a couple of windows servers running with a couple ...
user avatar
1 vote
1 answer
489 views

Can I delete initial ubuntu user on Ubuntu server?

Ubuntu installer create by default an initial user called ubuntu (that it's also a sudoers), as explained here. On my server I have created another sudoer (with a less common name) and I would like ...
user avatar
  • 11
1 vote
1 answer
507 views

AD best practise delete or just disable?

As an IT company that delivers IT systems, servers and everything for our customers. I'm trying to find the best practice when it comes to Active Directory and users leaving the company. We have ...
user avatar
0 votes
1 answer
155 views

Do I need to specify the user:group in sudoers to impersonate other users

I was trying to limit the command a specific user can execute in the sudoers file, say I have something like this: dummy myserver=(ALL:ALL) /usr/sbin/reboot,/usr/sbin/shutdown My dummy user is only ...
user avatar
0 votes
1 answer
93 views

Allow sudo over SSH while forbidding TTY login

I want to lock users from local login (keyboard and monitor), but still allow remote logging with SSH. Easily achievable with passwd -l and ssh-copy-id. But what about sudo? I want to keep password ...
user avatar
0 votes
1 answer
2k views

How to use list to create users with this Ansible role

I am trying to learn Ansible and I've been dabbling with some roles that I've found on Github, specifically this one that automates user creation together with sudo rules and SSH key deployment: ...
user avatar
0 votes
1 answer
47 views

What folder should be the home of the web root owner?

I'm setting up a SLES 12 system for running web applications on it. There is already a /srv/www folder and it's going to be owned by a special user (let's say: web user). Is there a good practice / ...
user avatar
  • 682
0 votes
1 answer
204 views

Which user should be the owner of the web root in SLES 12?

I'm setting up a SLES 12 system for running web applications on it. There is already a /srv/www folder and it's owned by root. So I'm going to reassign it to another user. Is there a good practice / ...
user avatar
  • 682
0 votes
1 answer
22 views

Windows IAM without granting admin access

I have an IAM team that needs to be able to create local administrator accounts but the customer doesn't want to grant that team Administrator access to the this team. Is there any way to create ...
user avatar
1 vote
1 answer
827 views

Best practices for docker users on a shared machine

We would like to use docker on the servers of our university. From reading https://docs.docker.com/install/linux/linux-postinstall/#manage-docker-as-a-non-root-user I understand that it is ...
user avatar
0 votes
2 answers
75 views

Getting dates associated to acct sa output stats

I'm trying to get stats on global CPU usage of a server on a per-user basis so I installed GNU Accounting (acct) (on Ubuntu server 16.04). When asking for stats with sa -m, it takes data from the ...
user avatar
  • 515
0 votes
1 answer
329 views

Is it possible to disable new bluetooth connections for non-admin accounts(Windows 10)?

I can disable bluetooth entirely, but I want the previously attached bluetooth keyboard & mouse to continue working, but the guest/non-admin users unable to pair new devices. I looked at stopping ...
user avatar
-1 votes
1 answer
183 views

Global authorized_keys associated with a user?

Is it possible to have a global authorized_keys file that associates each user to their own public key? For example, I would like to create multiple user accounts by their Github user name and public ...
user avatar
0 votes
2 answers
60 views

Manage WIndows clients in the Azure cloud

I'm looking for a solution for the following scenario: We are planing to install several Windows 10 systems (about 30 to 50 PCs). We want to create user centrally, and also want to push group ...
user avatar
  • 25
2 votes
1 answer
1k views

Ansible user module fails when group parameter matches name parameter (e.g. creating user & group name)

Trying to create an Ansible playbook to create a user (user module) on RH/Cent system (e.g. useradd). The playbook fails anytime I include the group parameter despite setting the group value to ...
user avatar
  • 71
-1 votes
1 answer
820 views

List of active users and their access rights to O.S. in Windows Server 2003 [closed]

How I can get a list of active users and their profiles (access rights) to O.S. in Windows Server 2003 ?
user avatar
  • 189
0 votes
1 answer
53 views

Should Active Directory, Web Apps and MS-SQL all have the same users?

I am looking for a clean way to do audit trails in MS SQL Server, for compliance reasons, preferably completely on the database side without involving the web application. When talking about audit ...
user avatar
0 votes
2 answers
120 views

Having Postgres databases to be physically stored in a subfolder of the Ubuntu user's home directory

I am currently setting up an Ubuntu 18.04 server, where many different users are given SSH access - including access to the server's Postgres SQL and the ability to create their own Postgres databases....
user avatar
  • 111
2 votes
1 answer
41 views

Managing multiple rabbitmq clusters

I have a bunch of Rabbit clusters which I'd like to synchronize users, permissions, and some configuration across. Is there a decent existing solution to this, or do people mostly just write their own ...
user avatar
  • 133
2 votes
1 answer
1k views

Remove local user password through Powershell

I'm trying to remove a users password through Powershell. I know I can create a user without password like this: New-LocalUser -Name "myuser" -NoPassword But how do I remove a users password once ...
user avatar
  • 145
4 votes
1 answer
1k views

How can I grant Dial-In / Network Access Permission to local account via command line?

I am trying to configure a VPN server completely using Powershell. I have completed everything except the last step: Granting a local user account Dial-In / Network Access Permissions so that this ...
user avatar

1
2 3 4 5
13