Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
0
votes
0answers
12 views
Need Explanation for the strange user last login data and password expired date while max password age is set correctly
In our organization we have number of local (non-domain) windows servers. The password policy from (net accounts) have max password age set to 30. However, when I execute the net user abcd command I ...
0
votes
0answers
17 views
Best practice for central authentication on reverse proxy
We run a NGINX reverse proxy to forward requests to our internal applications and so we only have one place to maintain our HTTPS certificate. From a security point of view, I assume it would be good ...
3
votes
1answer
37 views
How to hide specific drives on a server?
I would like to know what's the recommended solution for the following problem.
We do not want users to see (or at least not to modify) the drives D and E of a server they have remote access to.
...
0
votes
1answer
28 views
redirecting output using sudo [duplicate]
I want to run a command as another user using sudo, and redirecting the output of that command as that user.
Example, if I run:
touch some-file
under user simon, some-file will be owned by user ...
0
votes
1answer
29 views
Switching to a “role” account, using `sudo` and `ssh` agent forwarding later on – possible?
I want to create "role" accounts for several admin tasks that don't usually require root permissions. For example, consider a www-admin user maintaining files in /var/www.
It seems to me that this is ...
2
votes
0answers
21 views
Restricting user access to a subset of binaries
I checked rbash and chroot jail, which doesn't have permission to read /var/log.
Scenario:
ssh user should only able to cd to a directory and do less for files.
eg:
ssh user@server.com
cd /var/...
0
votes
1answer
169 views
Automatically block Gitlab users, removed from LDAP
I've migrated this question from StackOverflow.
I'm administering a Gitlab-Omnibus (Community Edition) instance in our company as an additional duty.
Gitlab uses company's Active Directory server ...
0
votes
0answers
34 views
Use default `ubuntu` user to deploy an app or make separate users?
I have a Ruby on Rails app and use Capistrano to deploy it to the server.
The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
1answer
41 views
Azure Portal BizSpark Subscription - Is there any Max limit and cost for adding Users?
I am having Azure BizSpark Subscription in Azure Portal, and I want to add Guest Users and grant them roles/resources separately. I searched documentations but not able to find whether adding Guest ...
-1
votes
1answer
21 views
Newly created user on EC2 is disappearing
I use CloudFormation to spin up a stack with one EC2 instance. Once the instance is running, I want to be able to use "Run command" feature to execute some scripts, but not as root user. That's why, ...
0
votes
2answers
504 views
How can I list all of the groups given user belongs to in the samba4 domain?
I have a samba4-based domain. How can I list all of the groups to which given user belongs?
I know I can go the reverse way - iterate via all the groups [ samba-tool group list ] and see their ...
1
vote
1answer
42 views
Is there a role for overall management for Google Cloud Platform?
I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know).
I checked the documentation of GCP and from ...
google-cloud-platform
0
votes
0answers
16 views
Updating Active directory from Microsoft cloud to server
I'm working with cleaning up in our Active driectory after we have moved over to use Microsoft cloud in our company. My job is to go through all the groups in our ou's on the Active directory server ...
1
vote
1answer
859 views
Setting a Windows Non-Interactive User Account
Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user.
I would like to set specific Windows domain service accounts as "non-interactive" so ...
-3
votes
1answer
41 views
Semi-selfservice user registration [closed]
I don't want to have wide-open registration on my server so I don't have to deal with spam accounts, but at the same time I don't want to have to manually add accounts for each person I invite to my ...
0
votes
0answers
690 views
How do IIS AppPool Users get created and where are they stored?
When viewing the group "IIS_IUSRS", there are users such as:
IIS APPPOOL\DefaultAppPool
IIS APPPOOL\MySite1
IIS APPPOOL\MySite2
When looking for the user in the users view, there are now users with ...
0
votes
0answers
21 views
Which user profile data is locally(!) available to apps by default after login to MS Windows Active Directory?
The scenario is multiple client PCs running Windows and credentials are managed using Active Directory, which does contain e.g. mail addresses of users as well. There is a client app which needs some ...
0
votes
2answers
61 views
How to deny access for specific user to parent directory in Linux?
Goal:
I would like to create directory rights so that specific manager user is able to access everything on /data and its child folders, but employees is able to access only Employee folder. This is ...
1
vote
0answers
56 views
remote access - restrict accessible user accounts depending on client
I find endless resources on the web explaining well how to restrict access to a computer depending who is trying to log-in. That doesn't allow to control what account will be used to log-in onto the ...
2
votes
1answer
186 views
Vsftpd/pam_userdb.so - auto-create virtual user home directories
Setup:
Amazon Linux EC2
vsftpd
PAM authentication with pam_userdb.so
Usernames/passwords written to Berkeley user db from an external source (lsyncd).
There are many 1000s of virtual users, to date ...
0
votes
0answers
117 views
LDAP user has no name
A user on our Opensuse 12.1 server was trying to mount an NFS directory and came to me saying that he had no username. His user configuration is identical to every other user on the system, so I ...
0
votes
0answers
127 views
Error Message Fetchmail/Postfix when trying to receive emails
I installed fetchmail and postfix on my server and I am running into trouble and have the feeling I tried everything. I just can't figure out what the issue is. So I hope for your help.
I setup my ...
1
vote
1answer
46 views
For a windows network account, why is USERPROFILE not mapped to the users network share?
On a number of Linux based distributions it is possible to mount a users home drive over the network or change the location of the users home drive by modding the user account. Accessing the users ...
0
votes
0answers
9 views
Manage clients in parallel and take care of updates and so on
I want to manage several Windows10 client PCs (10 pc) without the need to configure each separated. I stumbled over Managing several PCs where the question was already answered.
Nevertheless, since it'...
0
votes
2answers
67 views
User shown in ps does not exist
This is strange:
» ps -ef | grep gitlab
gitlab-+ 19663 4237 0 06:45 ? 00:00:00 postgres: gitlab gitlabhq_production [local] idle
But the gitlab-+ user does not exist:
» cat /etc/passwd | ...
0
votes
1answer
82 views
Ansible - User creation when server class criteria is met
I'm a new ansible user, switching from a collection of shell scripts to ansible playbooks. My current user management system allows for adding a user to a system only if that user has been granted ...
0
votes
2answers
2k views
How to su non-interactively?
I want to do something like this to non-interactively switch user:
su otheruser -p <password>
But this obviously doens't work... what will?
0
votes
0answers
600 views
(Get-ADUser -Properties proxyAddresses) not returning populated list, but lazy-loading
I am attempting to performance-tune a somewhat involved PowerShell script for some Active Directory management tasks.
For example, I'm using $adUsers = GetADUser -Properties proxyAddresses (sometimes ...
0
votes
1answer
607 views
sshd matching user config not working
On server i have only ssh auth, but for one user I need to add a specific folder and password based auth. So I created a user
sudo adduser myuser
then in /etc/ssh/sshd_config file I added:
Match ...
0
votes
0answers
58 views
Deploy exe from AD with elevated Privileges
I am trying to deploy the Sophos SSL VPN client to a group of AD users. The SSL client AND the user specific configuration file both require elevated privileges to install.
There is no official MSI ...
1
vote
1answer
422 views
Migrate user's AppData folder in Windows 10?
Let me preface this by saying I am not a Windows admin. I'm a Linux admin. But I wear many hats...
I have these laptops I'm migrating to be on our AD domain.
Details
Windows 10
Windows Server 2016
...
1
vote
2answers
32 views
Linux CentOS-7 give a certain user acces to only a certain file path
I would like to give a created user a new home directory and have him only be able to access that certain home directory, however, the directory the user is supposed to access has already been created ...
0
votes
2answers
593 views
GCP user groups?
In GCP, are we able to group users like how we do in Active Directory? I was thinking, instead of assigning roles to individual users, I can assign to groups which is more manageable. Thanks.
1
vote
1answer
415 views
Calling wmic with local user from linux box to windows (NT_STATUS_ACCESS_DENIED)
This question has been asked in various forms but none of the solutions worked for me.
I am trying to run icinga from a linux box and one the plugins uses WMI queries. It's failing, so I decided to ...
0
votes
1answer
27 views
Does a copied user get the same folder permissions on a share?
This should hopefully be an easy question:
Let's say User#1 has explicit Modify permissions to a specific shared folder.
We make a copy of User#1 and call it User#2.
Will User#2 also have explicit ...
0
votes
1answer
37 views
Simple network resource share inhibited by catch 22 password issue
This is a very basic network I'm dealing with in which one machine in an office is running Windows Server 2016 and currently acting as nothing more than a data server with plans to leverage it for ...
3
votes
2answers
82 views
What are my options in terms of controlling document management
In REF to Shared network drive with Office and delete permissions disabled leads to not being able to save
We have several businesses that are now pushing over 30+ employees and many of these ...
5
votes
2answers
3k views
systemd, per-user cpu and/or memory limits
There is similar question: Cgroups, limit memory per user, but the solution doesn't work in "modern" systems, where cgroups hierarchy is
managed by systemd.
Straightforward solution — templating ...
0
votes
0answers
2k views
Moving an AD user account from one domain to another within same forest
Requirement: In our organisation, several employees have frequent transfers to different zones, which are different domains within a
single forest. Need to transfer users from one domain to another
...
0
votes
1answer
111 views
Create a User With a Empty Suffix in Windows AD
I have a server(windows server 2012) that had Windows AD(Active Directory) installed and is used as part of an application that I maintain. Most of the time my application programmatically manages ...
1
vote
4answers
4k views
How to create extra root user? [closed]
I have tried making a root2 user which should have the same permissions as root by doing
useradd -g root root2
passwd root2
usermod -G root root2
usermod -aG wheel root2
but root2 can still not cat /...
1
vote
1answer
221 views
Separated reverse proxy per user on apache2.4
From mod_proxy guide I configured reverse proxy with user authentication.
# Set reverse proxy
ProxyPass "/" "http://localhost:10080/"
ProxyPassReverse "/" "http://localhost:10080/"
ProxyRequests On
...
1
vote
1answer
85 views
How to create untrusted user with ssh access
How can I create a user with ssh access but with only read access to their home directory and nothing else?
I created a user and added it to a group but they still can ls /home/*.
I'd like to give ...
0
votes
0answers
26 views
Mysterious vanishing user account
I am going nuts here with something I have never seen before. I have a Win 2012R2 server (running under Hyper-V, but I doubt that matters). This server is a member of a domain (with AD & GPOs). I ...
2
votes
0answers
620 views
Centralized Server User Management [closed]
I'm looking for the possible existing solutions to centralized user management. Most of the documentation found online refers to LDAP (Active Directory in particular) but I would like to know if there ...
0
votes
2answers
30 views
How do you handle home dirs for system/application users?
I have an airflow server where the airflow user has its home dir set to /opt/airflow. App related files and configs are stored here. Now, I have a couple of servers that the airflow user has to SSH ...
2
votes
2answers
772 views
How can I move a user account to another domain in the forest, whilst preserving permissions?
I've got user John Doe in the Server 2003 parent domain 'foo', which has a child domain 'bar'. Both domains are at a functional level of Server 2000.
I'd like to move the user to the 'bar' domain, ...
1
vote
2answers
89 views
Questions about user authentication strategies
I am currently re-doing the IT infrastructure at my company. It's currently all over the place, so I'm trying to re-organise everything from the ground up. First thing I thought I would tackle is ...
1
vote
1answer
353 views
Change password of webdav user in Linux Ubuntu
I have a webdav setup in Ubuntu.
I tried to change one user password by doing:
sudo htpasswd users.password username
followed by:
sudo service apache2 restart
Now that user cannot login with the ...
1
vote
2answers
618 views
New user added but having error in AIX 7.1
I newly add a user name perfmgr in AIX 7.1 using smitty, however when I try to change the password it output and error as below:
# passwd perfmgr
Changing password for "perfmgr"
3004-616 User "...
