Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
67
questions
42
votes
5
answers
112k
views
How do I log every command executed by a user?
I want to monitor all user's activity in my server.
Even when the user executes a shell command from some editor like vim I want to
see them in the log file.
I have checked the tool acct but it is ...
27
votes
12
answers
345k
views
Best way to find the computer a user last logged on from?
I am hoping that somewhere in Active Directory the "last logged on from [computer]" is written/stored, or there is a log I can parse out?
The purpose of wanting to know the last PC logged on from is ...
5
votes
1
answer
4k
views
How do I set permissions structure for multiple users editing multiple sites in /var/www on Ubuntu 9.10?
I'm setting up an Ubuntu server that will have 3 or 4 VirtualHosts that I want users to be able to work in (add new files, edit old files, etc.). I currently plan on storing the sites in /var/www but ...
54
votes
6
answers
359k
views
How do I access the list of currently logged on users through Terminal Services Manager in Windows Server 2012?
In Windows 2003 and 2008 we had Terminal Services Manager (see screenshot below). However in Windows server 2012 it's gone.
Does anyone know how to access the list of currently remotely logged on ...
2
votes
4
answers
11k
views
Copy NT user accounts between servers
I've created about 50 user accounts on a Windows 2003 Server, and I'd like to copy those accounts to a new server, is this possible? I'm not using Active Directory.
Patrick
Edit 1 : Thanks for the ...
29
votes
8
answers
2k
views
Email hoarder intervention and education - (Exchange environment)
Throughout my career, I've encountered quite a few users who were email hoarders...
I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix solution....
17
votes
4
answers
9k
views
Managing access to multiple linux system
A searched for answers but have found nothing on here...
Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
8
votes
3
answers
11k
views
Combined NFS, Samba server w users from Active Directory
I want to build a server that exports user home directories over SMB/CIFS and NFS. This server would be joined to a Win2k3 AD domain controller that holds our user database. As I understand it, ...
3
votes
1
answer
39k
views
SSH Fails, /bin/bash: No such file or directory
I have a user who is jailed.
sshd_config:
Subsystem sftp internal-sftp
Match user matt
ChrootDirectory %h
X11Forwarding no
AllowTcpForwarding no
passwd:
matt:x:1001:5006:Matt Ryan,,...
41
votes
6
answers
35k
views
How do admins maintain user accounts across hundreds of linux servers?
Dealing with hundreds of RHEL servers, how can we maintain local root accounts and network user accounts? Is there an active directory type solution that manages these from a central location?
37
votes
10
answers
75k
views
Is it feasible to have home folder hosted with NFS?
I'm planning to deploy some kiosk computers and would like to leave them with a small pendrive as boot disk, keeping the rest at an easy to back up server, ala LTSP.
Right now I'm pondering two ...
29
votes
4
answers
139k
views
Force authenticated user immediate logoff (emergency case)
In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
14
votes
4
answers
19k
views
How can I force other users to log out?
Is there a simple way for me to force another user off of a linux box, while I am logged in as root? I understand that I could determine what type of session they have open, and kill the pid - but I'...
11
votes
13
answers
54k
views
What Are Some Good Open Source Alternatives to Active Directory?
I'm looking for a good open-source alternative to active directory that can handle:
Authorization/Authentication
Group Policy
Replication and Trust Monitoring
In addition, are there any consolidated ...
2
votes
1
answer
982
views
How do I regain access to root after accidental chsh command that went bad?
I did a silly silly thing. While attempting to change the shell for user 'x' I was in a rush and did not type the users name at the end of the command, so I ended up running this:
chsh /sbin/nologin
...
0
votes
1
answer
1k
views
Setting up individually accessible public_html for each user of a linux machine
I have a dedicated server on which I have a site http://www.example.com
I need to create a user and:
allow him ssh and ftp access into it
allow him to access a page such as: http://user.example.com
...
481
votes
5
answers
1.2m
views
What's the default superuser username/password for postgres after a new install?
I have just installed postgres 8.4 on Ubuntu 9.10 and it has never asked me to create a superuser. Is there a default superuser and its password? If not, how do I create a new one?
166
votes
10
answers
441k
views
GRANT SELECT to all tables in postgresql
Is there a one-liner that grants the SELECT permissions to a new user postgresql?
Something that would implement the following pseudo-code:
GRANT SELECT ON TABLE * TO my_new_user;
94
votes
6
answers
195k
views
How do I create user accounts from the Terminal in Mac OS X 10.5?
I would like to be able to create new users in Mac OS X 10.5 remotely after ssh'ing into the machine. How do I do this?
18
votes
1
answer
14k
views
How to automatically reconcile /etc/group and /etc/gshadow
Running grpck to check the groups, I see these errors:
'twinky' is a member of the 'foo' group in /etc/group but not in /etc/gshadow
'dipsy' is a member of the 'foo' group in /etc/group but not in /...
16
votes
4
answers
26k
views
Create SSH user with limited privileges to only use Git repository
I have a git repository hosted on my SunOS server, that I remotely use through ssh
git clone ssh://[email protected]/path/to/git
Now I need to add more users to be able to access that repository, ...
16
votes
10
answers
97k
views
FTP Error 530, User cannot log in, home directory inaccessible
I've been tasked with setting up an FTP directory for a client of ours. I'm working from a Windows 2008 Server with IIS 7 installed.
To create the FTP user directory I've followed this eHow tutorial.
...
11
votes
2
answers
23k
views
Crate a new, read-only user in postgres
I would like to create a new user in an existing postgresql database on an Ubuntu machine. I want to grant this user a read-only access to all the tables.
How do I do it? Do I need to create a new ...
10
votes
4
answers
29k
views
How to create extra root user? [closed]
I have tried making a root2 user which should have the same permissions as root by doing
useradd -g root root2
passwd root2
usermod -G root root2
usermod -aG wheel root2
but root2 can still not cat /...
10
votes
1
answer
13k
views
How to generate a /etc/shadow compatible password for Ubuntu 10.04?
How are passwords generated that are used by Ubuntu 10.04? I know that they use SHA 512 as hashing algorithm, but I figure that there is some sort of salting done. I need to generate such a password ...
9
votes
1
answer
8k
views
How can I have puppet only set password when creating a user?
I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user.
I was thinking of doing a notify to an Exec resource that sets ...
8
votes
8
answers
7k
views
Best practices or experience with company wide Username policies and resolving duplicates
I am a programmer with an application that needs to be integrated into the new company wide Active Directory login scheme. This means changing all the usernames in our system to use the new scheme. ...
8
votes
4
answers
44k
views
Windows Server 2008/R2: Change the maximum UserName length?
Is there any way to change the standard 20 character UserName maximum length restriction for local accounts?
(Server 2008 R2 to be specific)
8
votes
4
answers
34k
views
How to add a user without knowing the encrypted form of the password?
I use the following command to create a user in a linux machine:
useradd -d /home/dummy -g idiots -m -p 12345689 dummy
The user is created and the home directory as well.
The problem is that I ...
7
votes
3
answers
22k
views
How to transfer user accounts to a new Linux machine?
I currently have a Linux box hosting our internal Subversion repository. Access to this repository is via svn+ssh with authenticating happening against user accounts on the machine. I have recently ...
7
votes
1
answer
2k
views
Providing normal users(non-root) with initialization and shutdown auto-run capabilities
I'm hosting an experimental/testing Linux box, running Debian Wheezy 7.4.0 distribution. Different users log into the machine over ssh to their accounts and are allowed to run the development tools ...
6
votes
1
answer
16k
views
How do I add a domain user to a group on a non-domain server?
If we are running a server that is not attached to the domain, how would I go about adding a domain user to a local group on that server?
6
votes
5
answers
390
views
How do you optimize new user setup?
What's your top trick for getting a new employee set up quickly? Do you use images, scripts, something else?
5
votes
5
answers
11k
views
useradd with 755 permissions
I d like to set the home directories permissions as 755 when i add the user via useradd.
How can i do this?
Thanks.
5
votes
3
answers
6k
views
Sync user accounts over multiple linux servers
What is the best way to sync multiple user accounts and home directories over multiple servers, they will all be the same OS. The servers are in different locations around the world, so if one goes ...
5
votes
1
answer
40k
views
How can I make a user and give read only access?
I need to give SSH read only access to a certain directory so they can look at my PHP code.
The directory is /var/www/html/websitenamehere/
How can I make a user and let them login via SSH to see ...
5
votes
2
answers
267
views
Any repercussions from not using default primary groups for Linux users?
We were thinking of not using the default primary group for our RHEL users. What I mean by default:
User: melbin
Primary group: melbin
We will instead do something like:
User: melbin
Primary group: ...
5
votes
1
answer
677
views
Is NFS + NIS a modern good practice for Linux networks to achieve common logins and home directories?
I'm setting up a smallish network of Centos servers (less than 10) and I'd like to have common logins on all of them as well as network mapped home directories.
I used to work with Solaris quite a ...
5
votes
1
answer
29k
views
Disable temporary user profile on workstations in a Windows 2008 env
I have a Windows 2008 domain with +/- 27 workstations. The users have all roaming profiles, but this doesn't work sometimes. What results in that the user is logging in with a temp user profile ...
5
votes
7
answers
29k
views
Simple one-way synchronisation of user password list between servers
Using a RedHat-derivative distro (CentOS), I'd like to keep the list of regular users (UID over 500), and group (and shadow files) pushed to a backup server.
The sync is only one-way, from the main ...
4
votes
3
answers
4k
views
How would you manage keys with TrueCrypt in a business enviroment?
What would be some of the best options for implementing TrueCrypt on all external devices so if any are lost or stolen that the data is not readable to another person but could be managed in a way ...
4
votes
2
answers
7k
views
Can I create a hidden admin account via the terminal on OSX?
I have around 300 baby macs to look after, and they have lots of different admin accounts, which is a nightmare to work with.
ARD has slowly been configured with the accounts of the machine owners, ...
4
votes
4
answers
3k
views
What are my options for centralizing Unix user management
We have 15 Debian servers and growing.
What's a simple, lightweight method for centralizing user management? Use cases would be adding a user across all servers, tweaking a users access on a specific ...
4
votes
4
answers
1k
views
List users in all specified unix groups
Is there an easy way to get a list of users who are in all specified groups?
For example, if I have the following users:
fred - rainbow, dell
jane - hp
zippy - rainbow, hp, dell
george - hp, dell
...
3
votes
1
answer
8k
views
Adding inetOrgPerson to account/posixAccount LDAP entries
I have a LDAP database we have been using for managing user accounts on our hosts, these entries have account and posixAccount as objectClass. Now we'd like to extend this to also use it as an adress ...
3
votes
1
answer
5k
views
Creating user groups and assigning users in Windows Server 2008
I'm setting up an FTP server on a Windows Server 2008 r2 system. Rather than deal with setting filesystem permissions for users manually, I would like to simply grant a single group read/write access ...
3
votes
2
answers
6k
views
Trouble creating FTP in Server 2008
I have been trying to create an FTP server on my new Server 2008.
I have been following both (very detailed and highly published here guides)
For setting up using IIS Manager
http://learn.iis.net/...
3
votes
3
answers
2k
views
How to handle centralized user authentication without LDAP?
I'm attempting to create a centralized database for my users for my server and web accesses, so that I can allow those users to log in through ssh if they have access, and through my web services to ...
3
votes
2
answers
9k
views
What files are created/modified when adding a user (useradd) in linux?
I know that /etc/group and /etc/passwd are modified, and /home/user/* is created, but are there others?
Thanks.
3
votes
2
answers
161
views
How can I correlate a wall jack to a user/machine on the domain?
After reading Valve's new employee handbook, I was really interested in setting up a company map like they described on page 6:
"The fact that everyone is always moving around within the company ...