Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
0
votes
1answer
73 views
Automatically block Gitlab users, removed from LDAP
I've migrated this question from StackOverflow.
I'm administering a Gitlab-Omnibus (Community Edition) instance in our company as an additional duty.
Gitlab uses company's Active Directory server ...
0
votes
0answers
33 views
Use default `ubuntu` user to deploy an app or make separate users?
I have a Ruby on Rails app and use Capistrano to deploy it to the server.
The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
1answer
33 views
Azure Portal BizSpark Subscription - Is there any Max limit and cost for adding Users?
I am having Azure BizSpark Subscription in Azure Portal, and I want to add Guest Users and grant them roles/resources separately. I searched documentations but not able to find whether adding Guest ...
-1
votes
1answer
19 views
Newly created user on EC2 is disappearing
I use CloudFormation to spin up a stack with one EC2 instance. Once the instance is running, I want to be able to use "Run command" feature to execute some scripts, but not as root user. That's why, ...
0
votes
1answer
211 views
How can I list all of the groups given user belongs to in the samba4 domain?
I have a samba4-based domain. How can I list all of the groups to which given user belongs?
I know I can go the reverse way - iterate via all the groups [ samba-tool group list ] and see their ...
1
vote
1answer
39 views
Is there a role for overall management for Google Cloud Platform?
I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know).
I checked the documentation of GCP and from ...
google-cloud-platform
0
votes
0answers
16 views
Updating Active directory from Microsoft cloud to server
I'm working with cleaning up in our Active driectory after we have moved over to use Microsoft cloud in our company. My job is to go through all the groups in our ou's on the Active directory server ...
1
vote
1answer
497 views
Setting a Windows Non-Interactive User Account
Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user.
I would like to set specific Windows domain service accounts as "non-interactive" so ...
-3
votes
1answer
36 views
Semi-selfservice user registration [closed]
I don't want to have wide-open registration on my server so I don't have to deal with spam accounts, but at the same time I don't want to have to manually add accounts for each person I invite to my ...
0
votes
0answers
393 views
How do IIS AppPool Users get created and where are they stored?
When viewing the group "IIS_IUSRS", there are users such as:
IIS APPPOOL\DefaultAppPool
IIS APPPOOL\MySite1
IIS APPPOOL\MySite2
When looking for the user in the users view, there are now users with ...
0
votes
0answers
21 views
Which user profile data is locally(!) available to apps by default after login to MS Windows Active Directory?
The scenario is multiple client PCs running Windows and credentials are managed using Active Directory, which does contain e.g. mail addresses of users as well. There is a client app which needs some ...
0
votes
2answers
59 views
How to deny access for specific user to parent directory in Linux?
Goal:
I would like to create directory rights so that specific manager user is able to access everything on /data and its child folders, but employees is able to access only Employee folder. This is ...
1
vote
0answers
55 views
remote access - restrict accessible user accounts depending on client
I find endless resources on the web explaining well how to restrict access to a computer depending who is trying to log-in. That doesn't allow to control what account will be used to log-in onto the ...
2
votes
1answer
154 views
Vsftpd/pam_userdb.so - auto-create virtual user home directories
Setup:
Amazon Linux EC2
vsftpd
PAM authentication with pam_userdb.so
Usernames/passwords written to Berkeley user db from an external source (lsyncd).
There are many 1000s of virtual users, to date ...
0
votes
0answers
92 views
LDAP user has no name
A user on our Opensuse 12.1 server was trying to mount an NFS directory and came to me saying that he had no username. His user configuration is identical to every other user on the system, so I ...
0
votes
0answers
115 views
Error Message Fetchmail/Postfix when trying to receive emails
I installed fetchmail and postfix on my server and I am running into trouble and have the feeling I tried everything. I just can't figure out what the issue is. So I hope for your help.
I setup my ...
1
vote
1answer
36 views
For a windows network account, why is USERPROFILE not mapped to the users network share?
On a number of Linux based distributions it is possible to mount a users home drive over the network or change the location of the users home drive by modding the user account. Accessing the users ...
0
votes
0answers
9 views
Manage clients in parallel and take care of updates and so on
I want to manage several Windows10 client PCs (10 pc) without the need to configure each separated. I stumbled over Managing several PCs where the question was already answered.
Nevertheless, since it'...
0
votes
2answers
64 views
User shown in ps does not exist
This is strange:
» ps -ef | grep gitlab
gitlab-+ 19663 4237 0 06:45 ? 00:00:00 postgres: gitlab gitlabhq_production [local] idle
But the gitlab-+ user does not exist:
» cat /etc/passwd | ...
0
votes
1answer
81 views
Ansible - User creation when server class criteria is met
I'm a new ansible user, switching from a collection of shell scripts to ansible playbooks. My current user management system allows for adding a user to a system only if that user has been granted ...
0
votes
2answers
968 views
How to su non-interactively?
I want to do something like this to non-interactively switch user:
su otheruser -p <password>
But this obviously doens't work... what will?
0
votes
0answers
541 views
(Get-ADUser -Properties proxyAddresses) not returning populated list, but lazy-loading
I am attempting to performance-tune a somewhat involved PowerShell script for some Active Directory management tasks.
For example, I'm using $adUsers = GetADUser -Properties proxyAddresses (sometimes ...
0
votes
1answer
475 views
sshd matching user config not working
On server i have only ssh auth, but for one user I need to add a specific folder and password based auth. So I created a user
sudo adduser myuser
then in /etc/ssh/sshd_config file I added:
Match ...
0
votes
0answers
53 views
Deploy exe from AD with elevated Privileges
I am trying to deploy the Sophos SSL VPN client to a group of AD users. The SSL client AND the user specific configuration file both require elevated privileges to install.
There is no official MSI ...
1
vote
1answer
341 views
Migrate user's AppData folder in Windows 10?
Let me preface this by saying I am not a Windows admin. I'm a Linux admin. But I wear many hats...
I have these laptops I'm migrating to be on our AD domain.
Details
Windows 10
Windows Server 2016
...
1
vote
2answers
29 views
Linux CentOS-7 give a certain user acces to only a certain file path
I would like to give a created user a new home directory and have him only be able to access that certain home directory, however, the directory the user is supposed to access has already been created ...
0
votes
2answers
390 views
GCP user groups?
In GCP, are we able to group users like how we do in Active Directory? I was thinking, instead of assigning roles to individual users, I can assign to groups which is more manageable. Thanks.
1
vote
1answer
389 views
Calling wmic with local user from linux box to windows (NT_STATUS_ACCESS_DENIED)
This question has been asked in various forms but none of the solutions worked for me.
I am trying to run icinga from a linux box and one the plugins uses WMI queries. It's failing, so I decided to ...
0
votes
1answer
25 views
Does a copied user get the same folder permissions on a share?
This should hopefully be an easy question:
Let's say User#1 has explicit Modify permissions to a specific shared folder.
We make a copy of User#1 and call it User#2.
Will User#2 also have explicit ...
0
votes
1answer
36 views
Simple network resource share inhibited by catch 22 password issue
This is a very basic network I'm dealing with in which one machine in an office is running Windows Server 2016 and currently acting as nothing more than a data server with plans to leverage it for ...
3
votes
2answers
81 views
What are my options in terms of controlling document management
In REF to Shared network drive with Office and delete permissions disabled leads to not being able to save
We have several businesses that are now pushing over 30+ employees and many of these ...
5
votes
2answers
2k views
systemd, per-user cpu and/or memory limits
There is similar question: Cgroups, limit memory per user, but the solution doesn't work in "modern" systems, where cgroups hierarchy is
managed by systemd.
Straightforward solution — templating ...
0
votes
0answers
1k views
Moving an AD user account from one domain to another within same forest
Requirement: In our organisation, several employees have frequent transfers to different zones, which are different domains within a
single forest. Need to transfer users from one domain to another
...
0
votes
1answer
92 views
Create a User With a Empty Suffix in Windows AD
I have a server(windows server 2012) that had Windows AD(Active Directory) installed and is used as part of an application that I maintain. Most of the time my application programmatically manages ...
0
votes
4answers
3k views
How to create extra root user? [closed]
I have tried making a root2 user which should have the same permissions as root by doing
useradd -g root root2
passwd root2
usermod -G root root2
usermod -aG wheel root2
but root2 can still not cat /...
1
vote
1answer
179 views
Separated reverse proxy per user on apache2.4
From mod_proxy guide I configured reverse proxy with user authentication.
# Set reverse proxy
ProxyPass "/" "http://localhost:10080/"
ProxyPassReverse "/" "http://localhost:10080/"
ProxyRequests On
...
1
vote
1answer
82 views
How to create untrusted user with ssh access
How can I create a user with ssh access but with only read access to their home directory and nothing else?
I created a user and added it to a group but they still can ls /home/*.
I'd like to give ...
0
votes
0answers
24 views
Mysterious vanishing user account
I am going nuts here with something I have never seen before. I have a Win 2012R2 server (running under Hyper-V, but I doubt that matters). This server is a member of a domain (with AD & GPOs). I ...
2
votes
0answers
542 views
Centralized Server User Management [closed]
I'm looking for the possible existing solutions to centralized user management. Most of the documentation found online refers to LDAP (Active Directory in particular) but I would like to know if there ...
0
votes
2answers
28 views
How do you handle home dirs for system/application users?
I have an airflow server where the airflow user has its home dir set to /opt/airflow. App related files and configs are stored here. Now, I have a couple of servers that the airflow user has to SSH ...
2
votes
2answers
674 views
How can I move a user account to another domain in the forest, whilst preserving permissions?
I've got user John Doe in the Server 2003 parent domain 'foo', which has a child domain 'bar'. Both domains are at a functional level of Server 2000.
I'd like to move the user to the 'bar' domain, ...
1
vote
2answers
86 views
Questions about user authentication strategies
I am currently re-doing the IT infrastructure at my company. It's currently all over the place, so I'm trying to re-organise everything from the ground up. First thing I thought I would tackle is ...
1
vote
1answer
305 views
Change password of webdav user in Linux Ubuntu
I have a webdav setup in Ubuntu.
I tried to change one user password by doing:
sudo htpasswd users.password username
followed by:
sudo service apache2 restart
Now that user cannot login with the ...
1
vote
2answers
501 views
New user added but having error in AIX 7.1
I newly add a user name perfmgr in AIX 7.1 using smitty, however when I try to change the password it output and error as below:
# passwd perfmgr
Changing password for "perfmgr"
3004-616 User "...
0
votes
1answer
124 views
Linux: group disappeared from user's group list - Ubuntu 16.04
I'm on Ubuntu 16.04 server edition. I had my user added to dokku group 2 days ago just to do periodical postgres backup without needing provide password in cron.
I've added user to dokku group by ...
0
votes
2answers
9k views
Centos 7 - adding a user to sudoers group - still is not in the sudoers file - why?
[user@localhost ~]$ su -
Password:
Last login: ...
[root@localhost ~]# usermod -aG wheel user
[root@localhost ~]# exit
logout
[user@localhost ~]$ sudo echo 123
[sudo] password for user:
user is not ...
1
vote
2answers
81 views
Unable to run a process as another user created by “useradd” with no password
I've created a user for running a certain process only on behalf of that user:
sudo useradd -r -s /bin/false -d /var/lib/my_app123 my_user123
Now in order to run that process from behalf of "...
0
votes
1answer
100 views
AWS IAM Groups: Designing for Least Privilege - Deny Or Allow
I am trying to create the appropriate AWS IAM Groups to implement Least Privilege. Is it best to create groups explicitly denying specific actions and allowing everything else, or creating groups ...
0
votes
1answer
50 views
Web interface to manage users created with FOSUserBundle
Is there an existing web interface, which could ease the management of users created with FOSUserBundle in a Symfony (2 or 3) project? Typically it would be presented as a bundle extension of ...
0
votes
1answer
229 views
Removing install user with Packer
When a VM is first created, it gets an install user that is used to run the provisioning. I want to remove this user at the last step because it's not necessarily secure and it's unnecessary. However, ...
