Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
0
votes
0answers
11 views
Solutions for centralized user management, sessions recording and jump server login on Linux debian [on hold]
I am managing about 30 Linux (Ubuntu) servers and we have a team of 20 IT staff members. Different members have access to different servers.
Currently, we have one single user on each server and I'm ...
1
vote
1answer
31 views
Is there a role for overall management for Google Cloud Platform?
I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know).
I checked the documentation of GCP and from ...
google-cloud-platform
0
votes
0answers
16 views
Updating Active directory from Microsoft cloud to server
I'm working with cleaning up in our Active driectory after we have moved over to use Microsoft cloud in our company. My job is to go through all the groups in our ou's on the Active directory server ...
0
votes
1answer
33 views
Setting a Windows Non-Interactive User Account
Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user.
I would like to set specific Windows domain service accounts as "non-interactive" so ...
-3
votes
1answer
27 views
Semi-selfservice user registration [closed]
I don't want to have wide-open registration on my server so I don't have to deal with spam accounts, but at the same time I don't want to have to manually add accounts for each person I invite to my ...
0
votes
0answers
79 views
How do IIS AppPool Users get created and where are they stored?
When viewing the group "IIS_IUSRS", there are users such as:
IIS APPPOOL\DefaultAppPool
IIS APPPOOL\MySite1
IIS APPPOOL\MySite2
When looking for the user in the users view, there are now users with ...
0
votes
0answers
20 views
Which user profile data is locally(!) available to apps by default after login to MS Windows Active Directory?
The scenario is multiple client PCs running Windows and credentials are managed using Active Directory, which does contain e.g. mail addresses of users as well. There is a client app which needs some ...
0
votes
2answers
54 views
How to deny access for specific user to parent directory in Linux?
Goal:
I would like to create directory rights so that specific manager user is able to access everything on /data and its child folders, but employees is able to access only Employee folder. This is ...
0
votes
0answers
50 views
remote access - restrict accessible user accounts depending on client
I find endless resources on the web explaining well how to restrict access to a computer depending who is trying to log-in. That doesn't allow to control what account will be used to log-in onto the ...
2
votes
1answer
84 views
Vsftpd/pam_userdb.so - auto-create virtual user home directories
Setup:
Amazon Linux EC2
vsftpd
PAM authentication with pam_userdb.so
Usernames/passwords written to Berkeley user db from an external source (lsyncd).
There are many 1000s of virtual users, to date ...
0
votes
0answers
48 views
LDAP user has no name
A user on our Opensuse 12.1 server was trying to mount an NFS directory and came to me saying that he had no username. His user configuration is identical to every other user on the system, so I ...
0
votes
0answers
108 views
Error Message Fetchmail/Postfix when trying to receive emails
I installed fetchmail and postfix on my server and I am running into trouble and have the feeling I tried everything. I just can't figure out what the issue is. So I hope for your help.
I setup my ...
1
vote
1answer
28 views
For a windows network account, why is USERPROFILE not mapped to the users network share?
On a number of Linux based distributions it is possible to mount a users home drive over the network or change the location of the users home drive by modding the user account. Accessing the users ...
0
votes
0answers
8 views
Manage clients in parallel and take care of updates and so on
I want to manage several Windows10 client PCs (10 pc) without the need to configure each separated. I stumbled over Managing several PCs where the question was already answered.
Nevertheless, since it'...
0
votes
2answers
59 views
User shown in ps does not exist
This is strange:
» ps -ef | grep gitlab
gitlab-+ 19663 4237 0 06:45 ? 00:00:00 postgres: gitlab gitlabhq_production [local] idle
But the gitlab-+ user does not exist:
» cat /etc/passwd | ...
0
votes
1answer
78 views
Ansible - User creation when server class criteria is met
I'm a new ansible user, switching from a collection of shell scripts to ansible playbooks. My current user management system allows for adding a user to a system only if that user has been granted ...
0
votes
2answers
339 views
How to su non-interactively?
I want to do something like this to non-interactively switch user:
su otheruser -p <password>
But this obviously doens't work... what will?
0
votes
0answers
290 views
(Get-ADUser -Properties proxyAddresses) not returning populated list, but lazy-loading
I am attempting to performance-tune a somewhat involved PowerShell script for some Active Directory management tasks.
For example, I'm using $adUsers = GetADUser -Properties proxyAddresses (sometimes ...
0
votes
1answer
200 views
sshd matching user config not working
On server i have only ssh auth, but for one user I need to add a specific folder and password based auth. So I created a user
sudo adduser myuser
then in /etc/ssh/sshd_config file I added:
Match ...
0
votes
0answers
46 views
Deploy exe from AD with elevated Privileges
I am trying to deploy the Sophos SSL VPN client to a group of AD users. The SSL client AND the user specific configuration file both require elevated privileges to install.
There is no official MSI ...
1
vote
1answer
177 views
Migrate user's AppData folder in Windows 10?
Let me preface this by saying I am not a Windows admin. I'm a Linux admin. But I wear many hats...
I have these laptops I'm migrating to be on our AD domain.
Details
Windows 10
Windows Server 2016
...
1
vote
2answers
29 views
Linux CentOS-7 give a certain user acces to only a certain file path
I would like to give a created user a new home directory and have him only be able to access that certain home directory, however, the directory the user is supposed to access has already been created ...
0
votes
0answers
182 views
Windows 10 Exterprise smart card user name hint population
Hey all I am wondering if there are any group policies that would allow me to automatically fill in the UserName Hint when a user signs on to the PC using a smart card reader?
The Username Hint would ...
0
votes
2answers
155 views
GCP user groups?
In GCP, are we able to group users like how we do in Active Directory? I was thinking, instead of assigning roles to individual users, I can assign to groups which is more manageable. Thanks.
1
vote
1answer
298 views
Calling wmic with local user from linux box to windows (NT_STATUS_ACCESS_DENIED)
This question has been asked in various forms but none of the solutions worked for me.
I am trying to run icinga from a linux box and one the plugins uses WMI queries. It's failing, so I decided to ...
0
votes
1answer
24 views
Does a copied user get the same folder permissions on a share?
This should hopefully be an easy question:
Let's say User#1 has explicit Modify permissions to a specific shared folder.
We make a copy of User#1 and call it User#2.
Will User#2 also have explicit ...
0
votes
1answer
32 views
Simple network resource share inhibited by catch 22 password issue
This is a very basic network I'm dealing with in which one machine in an office is running Windows Server 2016 and currently acting as nothing more than a data server with plans to leverage it for ...
0
votes
0answers
165 views
Bring up ssh-server docker container that accesses folder via “www-data” user for sftp access
I think this might be a porblem quite a view people have:
I am running a webserver in a docker container which hosts a wordpress site. The server accesses the files via user www-data ... the files ...
3
votes
2answers
80 views
What are my options in terms of controlling document management
In REF to Shared network drive with Office and delete permissions disabled leads to not being able to save
We have several businesses that are now pushing over 30+ employees and many of these ...
4
votes
2answers
2k views
systemd, per-user cpu and/or memory limits
There is similar question: Cgroups, limit memory per user, but the solution doesn't work in "modern" systems, where cgroups hierarchy is
managed by systemd.
Straightforward solution — templating ...
0
votes
0answers
878 views
Moving an AD user account from one domain to another within same forest
Requirement: In our organisation, several employees have frequent transfers to different zones, which are different domains within a
single forest. Need to transfer users from one domain to another
...
0
votes
1answer
70 views
Create a User With a Empty Suffix in Windows AD
I have a server(windows server 2012) that had Windows AD(Active Directory) installed and is used as part of an application that I maintain. Most of the time my application programmatically manages ...
0
votes
0answers
207 views
Ubuntu setup sftp user account and restrict read/write access to only one specific folder
I would like to create sftp user account on Ubuntu server which has read/write access only to one specific folder. I would like this user to have rights to transfer files up and from my server via ...
0
votes
4answers
1k views
How to create extra root user? [closed]
I have tried making a root2 user which should have the same permissions as root by doing
useradd -g root root2
passwd root2
usermod -G root root2
usermod -aG wheel root2
but root2 can still not cat /...
1
vote
1answer
128 views
Separated reverse proxy per user on apache2.4
From mod_proxy guide I configured reverse proxy with user authentication.
# Set reverse proxy
ProxyPass "/" "http://localhost:10080/"
ProxyPassReverse "/" "http://localhost:10080/"
ProxyRequests On
...
1
vote
1answer
71 views
How to create untrusted user with ssh access
How can I create a user with ssh access but with only read access to their home directory and nothing else?
I created a user and added it to a group but they still can ls /home/*.
I'd like to give ...
0
votes
0answers
23 views
Mysterious vanishing user account
I am going nuts here with something I have never seen before. I have a Win 2012R2 server (running under Hyper-V, but I doubt that matters). This server is a member of a domain (with AD & GPOs). I ...
2
votes
0answers
410 views
Centralized Server User Management [closed]
I'm looking for the possible existing solutions to centralized user management. Most of the documentation found online refers to LDAP (Active Directory in particular) but I would like to know if there ...
0
votes
2answers
28 views
How do you handle home dirs for system/application users?
I have an airflow server where the airflow user has its home dir set to /opt/airflow. App related files and configs are stored here. Now, I have a couple of servers that the airflow user has to SSH ...
2
votes
2answers
489 views
How can I move a user account to another domain in the forest, whilst preserving permissions?
I've got user John Doe in the Server 2003 parent domain 'foo', which has a child domain 'bar'. Both domains are at a functional level of Server 2000.
I'd like to move the user to the 'bar' domain, ...
1
vote
2answers
83 views
Questions about user authentication strategies
I am currently re-doing the IT infrastructure at my company. It's currently all over the place, so I'm trying to re-organise everything from the ground up. First thing I thought I would tackle is ...
1
vote
1answer
212 views
Change password of webdav user in Linux Ubuntu
I have a webdav setup in Ubuntu.
I tried to change one user password by doing:
sudo htpasswd users.password username
followed by:
sudo service apache2 restart
Now that user cannot login with the ...
1
vote
2answers
285 views
New user added but having error in AIX 7.1
I newly add a user name perfmgr in AIX 7.1 using smitty, however when I try to change the password it output and error as below:
# passwd perfmgr
Changing password for "perfmgr"
3004-616 User "...
0
votes
1answer
104 views
Linux: group disappeared from user's group list - Ubuntu 16.04
I'm on Ubuntu 16.04 server edition. I had my user added to dokku group 2 days ago just to do periodical postgres backup without needing provide password in cron.
I've added user to dokku group by ...
-1
votes
2answers
5k views
Centos 7 - adding a user to sudoers group - still is not in the sudoers file - why?
[user@localhost ~]$ su -
Password:
Last login: ...
[root@localhost ~]# usermod -aG wheel user
[root@localhost ~]# exit
logout
[user@localhost ~]$ sudo echo 123
[sudo] password for user:
user is not ...
1
vote
2answers
68 views
Unable to run a process as another user created by “useradd” with no password
I've created a user for running a certain process only on behalf of that user:
sudo useradd -r -s /bin/false -d /var/lib/my_app123 my_user123
Now in order to run that process from behalf of "...
0
votes
1answer
78 views
AWS IAM Groups: Designing for Least Privilege - Deny Or Allow
I am trying to create the appropriate AWS IAM Groups to implement Least Privilege. Is it best to create groups explicitly denying specific actions and allowing everything else, or creating groups ...
0
votes
1answer
39 views
Web interface to manage users created with FOSUserBundle
Is there an existing web interface, which could ease the management of users created with FOSUserBundle in a Symfony (2 or 3) project? Typically it would be presented as a bundle extension of ...
0
votes
1answer
157 views
Removing install user with Packer
When a VM is first created, it gets an install user that is used to run the provisioning. I want to remove this user at the last step because it's not necessarily secure and it's unnecessary. However, ...
0
votes
0answers
250 views
CentOS vsftpd permission errors
I've read a tons of solutions on the web on this and none of them worked for me.
I have CentOS 6 with vsftp installed with this /etc/vsftpd/vsftpd.conf:
anonymous_enable=YES
local_enable=YES
...
