Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
662
questions
-1
votes
1
answer
6k
views
Cannot sftp using a password [closed]
I have setup my server to allow sftp using a password however I'm getting Authentication failed. even though I'm using the correct password. Here is my sshd_config
# Package generated configuration ...
0
votes
1
answer
83
views
Anyway to limit IP Access for Certain Users?
I am currently tasked with allowing Vendors onto our process network. The issue is I need to make it so each vendor is only able to connect to PLCs on their own machines "each PLC has its own IP". Is ...
0
votes
1
answer
3k
views
Allow non-admin access to AD Users and Computers via RDP
I'm trying to lock down our AD domain and remove unneeded users from our Domain Admins group. I'm a Linux guy so some of this is new or different.
We are an all Mac shop so the only way for us to ...
2
votes
1
answer
311
views
Basic Auth User Management
I have 2 questions regarding Apache Basic Auth that i currently am utilising. I have a website that after a certain action, the website will produce a Basic Auth username and password for the user to ...
1
vote
0
answers
174
views
Windows Active Directory and Linux integration: new AD Group does not show up in Linux
In my organization, the support team has created a new AD group for me but it does not show up on any of the nodes in our cluster(using RHEL).
I went through this article to understand Windows and ...
3
votes
1
answer
5k
views
how to see space claimed / used per user in owncloud?
I am trying to clean up a disk on a specific server. On that server there is only owncloud installed.
Since I was not the guy who setup owncloud, and there is now way to reach the actual ...
3
votes
2
answers
603
views
Easy way to get all user accounts
I am in the process of migrating to a new server and I am having a number of issues due to user accounts not being present (for example nginx seems to be running under nginx user on the new system www-...
1
vote
1
answer
1k
views
Tool to manage samba accounts in LDAP
TLDR: Can I sensible manage samba accounts in openldap with Apache Directory Studio (or other general purpose ldap editors)?
I'm currently trying to move away from GOsa as our LDAP management tool. (...
0
votes
2
answers
73
views
User management with cronjob [closed]
In my organization, we want to implement a user management standard after an utter chaos. Where we(organization) and the client was able to access root user and they made changes which took down the ...
0
votes
2
answers
2k
views
refreshonly not working with Puppet exec resource
I am using the following user resource to create a unix user and then set an initial password for the user. I then performed an exec with chage command to force the user to change his password after ...
1
vote
1
answer
2k
views
LDAP - how to use attribute from objectclass:account and objectclass:inetOrgPerson?
I have an openLDAP which I use for authenticating users to various servers, where each user can have access to a varying number of hosts. I am solving that requirement by using the "host" attribute, ...
5
votes
2
answers
681
views
Minimal set of rights to run a process on a Microsoft Windows Server
I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so.
The minimal set of rights is required, ...
35
votes
5
answers
4k
views
Is logging in as a shared user a bad habit?
I've worked in organizations where instead of creating a new Ubuntu user per person that wants to log into a machine, the sysadmins simply add the ssh key of each user to .ssh/authorized_keys, and ...
0
votes
1
answer
78
views
Correct way to setup linux company share folder with usable permissions
I've just started working for a small company that has a globally shared folder run from an Ubuntu file server (Raid 5, etc) shared by Samba.
The workstations (Centos) are all fstab setup to mount ...
0
votes
1
answer
2k
views
After using userdel -r to remove a user, user still appears on login screen (CentOS 7)
I used userdel -r [username] on CentOS 7 to delete a user, but the user is still appearing on the GUI login screen. Also, useradd now refuses to add the same username again, reporting that the user ...
2
votes
1
answer
4k
views
instanceType attribute in Active Directory
I need to change the instanceType attribute of a service account. If I try to change it from Active Directory Users and Computers console it's greyed out and if I try to change it via powershell with ...
0
votes
1
answer
1k
views
How to get the time and date at which a user account is locked/unlocked in unix?
I need to get the exact time and date at which a user account was locked or unlocked in Linux.
passwd -S command can give the status of an account i.e., if its locked or unlocked.
8
votes
1
answer
2k
views
Reset GID/UID auto-increment numbers
I created a virtual mail user for postfix virtual mailboxes with a gid/uid of 5555, but now every new user I create starts at > 5555, is it possible to reset the autonumbering so normal users will be ...
-2
votes
1
answer
592
views
AD Reset Multiple Passwords Simultaneously from LDAP Query [closed]
I have used a custom query in Active Directory to identify all users that have never logged in to the the domain. I need to reset all of their passwords and as there are several hundred I would prefer ...
4
votes
0
answers
1k
views
Can I pre-hash a Windows password and pass the hash when creating the account?
I am building some Windows VMs with Vagrant, and the Vagrant provisioner will create some users. I'd like to be able to commit the passwords for those users to source control, but obviously I don't ...
5
votes
0
answers
121
views
Why is it common in the startup world for ssh keys to be used for authetication instead of kerberos? [closed]
My first few jobs as a linux admin had be working under some very senior admins. In all of these cases kerberos was setup for users to request a security token and gain access to company servers for ...
1
vote
4
answers
305
views
Manage multiple linux users [closed]
I have a homelab there is growing larger and larger and I am learning more and more every day. I was wondering if it is possible to manage all of my users from one server? So i don't have to create a ...
0
votes
2
answers
181
views
PAM - LDAP authentication interaction
So far from what I understand it gets given a username/password pair, it then searches the LDAP for the username and tries to log into the LDAP using the distinguished name and the password pair, if ...
26
votes
6
answers
3k
views
How do I convince my company to invest in IT - domains, security, etc.?
I work for a small-medium size retailer which has half a dozen high street stores and a website.
The IT situation is currently in a very basic state. As being "Head of IT" is only a small part of my ...
-2
votes
1
answer
77
views
How to define a complex user usage rules in Mikrotik? [closed]
I want to define a 50 MB limit for each user in Mikrotik and after it is used, have a speed limit of 8 kbps speed for unlimited time. Furthermore, I would like this policy to be applied on a daily ...
2
votes
1
answer
4k
views
Adding/updating skeleton files after user creation
Background
RedHat 7 (and 6) servers with multiple application servers (shared binaries).
We set up separate user accounts when adding applications servers with $HOME = appserver_root. The ...
1
vote
0
answers
573
views
Directory permissions for user account linux
I am setting up a shared folder between several users on a Amazon AMI (details at the bottom). I am trying to get the folder shared with one user in particular which isnt working.
My idea was to ...
12
votes
4
answers
10k
views
How does google compute engine create users and how to disable them?
I've got a CoreOS cluster running on GCE and one issue that I've noticed with all GCE instances is that as long as you're auth'd with the project on Google Cloud platform, you can login in as pretty ...
0
votes
2
answers
4k
views
Lost all local admin rights on domain joined computer
I'm in an unusual predicament in that there is no account I can use to add local admin rights to a computer with the exception of the Administrator account - which is disabled.
On a new domain I'm ...
1
vote
0
answers
847
views
DCOM Security Settings not exported with secedit
I've got a problem with exporting the DCOM-settings.
I call
secedit /export /cfg C:\UserAccess\config.txt
This should export the COM and DCOM settings.
But I don't get all of the settings.
For ...
1
vote
1
answer
80
views
AD SelfService for creating users [closed]
I've set up a small computer lab with approx. 30 computers with Win8. They are connected to an Active Directory (Windows Server 2012R2) and have roaming profiles. However, creating users causes ...
-2
votes
1
answer
55
views
Best way to apply "one-shot quick fixes" to computers and users? [closed]
We often suffer from situations where we need to apply a quick fix for a bunch of users/computers.
A quick fix can be a copy job, deleting a users browser cache or adding registry keys to HKCU to a ...
0
votes
0
answers
52
views
Windows RD - Temporary Accounts in Terminal Services servers
We are facing this weird problem. Since a restart of the server recently, most of the user accounts are getting created with Temporary profiles.
We followed a few blogs and followed steps as below:
-...
0
votes
3
answers
76
views
Hiding the active Administrator account in Windows 8
I am trying to use the integrated "Administrator" account in Windows 8. The problem is that I do not want this account to appear on the Welcome Screen for login. I tried to hide the account by using ...
1
vote
2
answers
767
views
Removed AD User, Need to Associate Existing Profile to New Account
Some details
Server 2012 R2 (AD Server)
Windows 7 (Users Computer)
Accidentally removed an AD User, stupid mistake. Unfortunately it seems the user was permanently deleted (didn't make use of the ...
2
votes
1
answer
1k
views
How to combine two foreach loops?
I've looked at how to combine multiple commands with psexec but none of the methods seems to work. Maybe it's because I'm running the script in PowerShell and not cmd.exe?
I need to create user ...
0
votes
1
answer
3k
views
What permission is needed to use a service account to remote run powershell on a server?
I have a internal webapplication With a list of all the servers in our network. I want to be able to run a few PowerShell commands on the servers to gather usefull information. Invoke-WMIMethod and ...
1
vote
2
answers
609
views
Add a user from root with ssh key
Perhaps a strange question, but I'm not a shell script expert.
I'm provisioning an Ubuntu server starting out as root. I'd like to non-interactively setup a new user account, remove root login and ...
-1
votes
2
answers
555
views
How do I remove my user from the "roots" group? [closed]
I accidentally added my user myuser to the group root using the command sudo usermod -a -G root myuser. Now I want to remove myuser from roots, but I am unable to do so. I tried the following:
...
0
votes
1
answer
878
views
Bulk update Exchange Manager/Direct Reports data
I'm looking for an easy way to quickly update (and keep up to date) the Manager - Direct Reports data in Exchange Online. Right now, the only way I have is to go into EAC and manually update one user ...
1
vote
2
answers
15k
views
Creating FTP user to access a specific directory with SFTP in Linux Ubuntu Server 14.04 LTS
I'm creating an FTP user on Linux Ubuntu Server 14.04 LTS, but when I try to log in via FileZilla with SFTP I get the following error:
Received unexpected end-of-file from SFTP server
If I try to ...
-1
votes
1
answer
2k
views
How would I add an SSH user as a member of www-data jailed to /var/www/html/?
I have been trying to setup ftp access on my Ubuntu 14.04 Apache2 server and so far I only have a root user. The problem I am running into is that the uploaded files are owned by this user whereas I ...
-1
votes
1
answer
3k
views
"Entire Directory" option missing from Locations in "Select Users, Computers, SrvAct, or Groups" dialog
I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
1
vote
1
answer
3k
views
How to enable Dovecot virtual users to change their password using passwd-file?
I am running Dovecot with several virtual users in passwd-file: http://wiki2.dovecot.org/AuthDatabase/PasswdFile . The file is /etc/dovecot/userdb . How can I enable the users to change their password?...
3
votes
0
answers
133
views
Synchronizing web application users with corporate directory/database [closed]
We're building a web app positioned towards corporations; and have a need to maintain an up to date repository of user data for all corporate users of our web application. We're well aware of how to ...
1
vote
0
answers
116
views
Change Server 2012 R2 domain name in network section
In the network section of a Windows Server 2012 R2 displays the name of the domain as domain 2. For example: "mydomain.net 2". Ive seen similar problems with wireless profiles and that can be resolved ...
1
vote
2
answers
2k
views
can we create user's home directory with space in name? like /test 123
i need to map some path like /data/test 123 as home directory for user testuser, but it is not accepting space in home directory path ?
it is not allowing me to change path using usermod -m -d /new ...
9
votes
1
answer
12k
views
Is using the AD home directory attribute to map the home drive really no longer a best practice?
I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
1
vote
1
answer
5k
views
How can I determine the last user who logged on to each PC on our domain?
We have a network of primarily Windows 7 (and Windows 8.1) PCs, and we'd like to be able to report on who is the most recent person to have logged on to the various hosts.
We've got SCCM in place; ...
12
votes
1
answer
37k
views
How to apply PostgreSQL "GRANT ALL ON ALL TABLES" to new tables?
As discussed in the question at GRANT SELECT to all tables in postgresql, as of PG 9.0 you can mass-grant privileges on all existing tables to user u, using a command like:
GRANT ALL ON ALL TABLES IN ...