Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
662
questions
478
votes
5
answers
1.2m
views
What's the default superuser username/password for postgres after a new install?
I have just installed postgres 8.4 on Ubuntu 9.10 and it has never asked me to create a superuser. Is there a default superuser and its password? If not, how do I create a new one?
- 6,291
163
votes
10
answers
418k
views
GRANT SELECT to all tables in postgresql
Is there a one-liner that grants the SELECT permissions to a new user postgresql?
Something that would implement the following pseudo-code:
GRANT SELECT ON TABLE * TO my_new_user;
- 13.4k
127
votes
3
answers
142k
views
How can I rename a Unix user?
I have a user named hedgehog and I want him to be named squirrel, but I don't want to change his numeric user ID.
How can I accomplish this?
- 3,437
93
votes
6
answers
193k
views
How do I create user accounts from the Terminal in Mac OS X 10.5?
I would like to be able to create new users in Mac OS X 10.5 remotely after ssh'ing into the machine. How do I do this?
- 1,221
87
votes
12
answers
236k
views
create home directories after create users
I created some users with:
$ useradd john
and I forgot to specify the parameter -m to create the home directory and to have the skeleton files copied to each user. now I want to do that, and I don'...
- 1,484
64
votes
7
answers
346k
views
What's the best way to see logged in users in Windows Server 2012?
Right now I use a powershell script to see the currently logged in users. But I don't see if their session is idle, active or inactive. I can see when the session was started, that's it.
Is there an ...
- 1,451
54
votes
6
answers
356k
views
How do I access the list of currently logged on users through Terminal Services Manager in Windows Server 2012?
In Windows 2003 and 2008 we had Terminal Services Manager (see screenshot below). However in Windows server 2012 it's gone.
Does anyone know how to access the list of currently remotely logged on ...
- 3,038
42
votes
5
answers
111k
views
How do I log every command executed by a user?
I want to monitor all user's activity in my server.
Even when the user executes a shell command from some editor like vim I want to
see them in the log file.
I have checked the tool acct but it is ...
- 2,164
41
votes
6
answers
34k
views
How do admins maintain user accounts across hundreds of linux servers?
Dealing with hundreds of RHEL servers, how can we maintain local root accounts and network user accounts? Is there an active directory type solution that manages these from a central location?
36
votes
10
answers
73k
views
Is it feasible to have home folder hosted with NFS?
I'm planning to deploy some kiosk computers and would like to leave them with a small pendrive as boot disk, keeping the rest at an easy to back up server, ala LTSP.
Right now I'm pondering two ...
- 718
35
votes
5
answers
4k
views
Is logging in as a shared user a bad habit?
I've worked in organizations where instead of creating a new Ubuntu user per person that wants to log into a machine, the sysadmins simply add the ssh key of each user to .ssh/authorized_keys, and ...
user267001
29
votes
8
answers
2k
views
Email hoarder intervention and education - (Exchange environment)
Throughout my career, I've encountered quite a few users who were email hoarders...
I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix solution....
- 198k
29
votes
3
answers
42k
views
Creating a windows account only for share access
I'm running Windows Server 2008 R2 in a workgroup, not a domain, and I want to create a local account that is only used for allowing other computers in the same workgroup to access file shares on that ...
- 525
29
votes
4
answers
136k
views
Force authenticated user immediate logoff (emergency case)
In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
- 711
28
votes
1
answer
30k
views
Force "net user" command to set password longer than 14 characters
I'm issuing some "net user" commands to setup a local user on my desktop for some testing purposes and require setting a password longer than 14 characters. In doing so Windows barks back a propmt to ...
- 789
27
votes
12
answers
339k
views
Best way to find the computer a user last logged on from?
I am hoping that somewhere in Active Directory the "last logged on from [computer]" is written/stored, or there is a log I can parse out?
The purpose of wanting to know the last PC logged on from is ...
- 1,648
26
votes
6
answers
3k
views
How do I convince my company to invest in IT - domains, security, etc.?
I work for a small-medium size retailer which has half a dozen high street stores and a website.
The IT situation is currently in a very basic state. As being "Head of IT" is only a small part of my ...
- 361
23
votes
5
answers
42k
views
Difference between profile and home path
What's the difference between a user's home path and their profile path in Windows Server 2003?
user10369
20
votes
6
answers
21k
views
Default groups assigned to the first user in Ubuntu Server 8.04?
I just made a silly mistake on my Ubuntu Server box: I added myself to a group using usermod -G, after which I discovered the -a option...
The result is that I am now out of the admin group, and ...
- 1,831
19
votes
3
answers
48k
views
How to change users full name on Debian
I'm working on a Debian server as an inexperienced admin. I need to change the full name of a user (not the login name) provided during adduser USERNAME. How can I do this? I didn't find such an ...
- 293
18
votes
3
answers
35k
views
Adding an existing user to a group with puppet
Is it possible to add an existing user to a group with puppet 2.7.18?
We have two modules, each one defines one class :
module "user" creates all users, including user foo and user bar.
module "...
user130370
18
votes
1
answer
13k
views
How to automatically reconcile /etc/group and /etc/gshadow
Running grpck to check the groups, I see these errors:
'twinky' is a member of the 'foo' group in /etc/group but not in /etc/gshadow
'dipsy' is a member of the 'foo' group in /etc/group but not in /...
- 552
17
votes
4
answers
9k
views
Managing access to multiple linux system
A searched for answers but have found nothing on here...
Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
- 304
17
votes
3
answers
38k
views
How do you tell if a user is "allowed to log in" on Linux?
The question is simple, I want to list all the user accounts which can log in to my system, but I'm not sure if that all the users in /etc/passwd are "could login" users?
Details:
I can see users ...
- 289
17
votes
8
answers
76k
views
Unable to get the SSH access for a new user
I created a new user on ubuntu 10
username: codeuser
There is an existing user called "admin". Now, my problem is that I cannot directly connect to the server using the codeuser credentials. But, I ...
- 587
16
votes
4
answers
25k
views
Create SSH user with limited privileges to only use Git repository
I have a git repository hosted on my SunOS server, that I remotely use through ssh
git clone ssh://[email protected]/path/to/git
Now I need to add more users to be able to access that repository, ...
- 343
16
votes
4
answers
6k
views
how many user accounts can a unix-like OS host? [duplicate]
Let's say I want to have a server with as many user accounts as possible. How many is the max?
I want millions of user accounts. Is that crazy? I'd host dozens of load-balance mirrors of the box, ...
Chris Hinkle
16
votes
9
answers
94k
views
FTP Error 530, User cannot log in, home directory inaccessible
I've been tasked with setting up an FTP directory for a client of ours. I'm working from a Windows 2008 Server with IIS 7 installed.
To create the FTP user directory I've followed this eHow tutorial.
...
- 325
15
votes
2
answers
10k
views
Simple, centralized user management on a small LAN - NIS or LDAP?
I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would like it to have centralized control of user accounts (at least, I ...
- 1,682
14
votes
4
answers
19k
views
How can I force other users to log out?
Is there a simple way for me to force another user off of a linux box, while I am logged in as root? I understand that I could determine what type of session they have open, and kill the pid - but I'...
- 23k
14
votes
5
answers
13k
views
systemd, per-user cpu and/or memory limits
There is similar question: Cgroups, limit memory per user, but the solution doesn't work in "modern" systems, where cgroups hierarchy is
managed by systemd.
Straightforward solution — templating ...
- 311
12
votes
1
answer
35k
views
How to apply PostgreSQL "GRANT ALL ON ALL TABLES" to new tables?
As discussed in the question at GRANT SELECT to all tables in postgresql, as of PG 9.0 you can mass-grant privileges on all existing tables to user u, using a command like:
GRANT ALL ON ALL TABLES IN ...
- 123
12
votes
3
answers
13k
views
How to do central home directories and user accounts on Ubuntu?
I need to set up a network of twenty Ubuntu machines and a server. As it is now, the users have local accounts on the machines, but I want to have centralized user authentication, with all user info ...
11
votes
2
answers
23k
views
Crate a new, read-only user in postgres
I would like to create a new user in an existing postgresql database on an Ubuntu machine. I want to grant this user a read-only access to all the tables.
How do I do it? Do I need to create a new ...
- 13.4k
11
votes
2
answers
5k
views
unix user alias
is there a way to set up user aliases in unix such that if you have a user, my_user, they can log in with an alternate username, i.e. my_user_alternate and still be logged in as my_user?
- 751
11
votes
13
answers
54k
views
What Are Some Good Open Source Alternatives to Active Directory?
I'm looking for a good open-source alternative to active directory that can handle:
Authorization/Authentication
Group Policy
Replication and Trust Monitoring
In addition, are there any consolidated ...
- 231
11
votes
4
answers
10k
views
How does google compute engine create users and how to disable them?
I've got a CoreOS cluster running on GCE and one issue that I've noticed with all GCE instances is that as long as you're auth'd with the project on Google Cloud platform, you can login in as pretty ...
google-cloud-platform
11
votes
2
answers
8k
views
Cannot create new user account Windows Server 2012
I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one.
On PROBLEMSERVER01 when I try to log in ...
- 642
10
votes
5
answers
9k
views
Add daemon account on OS X
I'm trying to manually install a daemon (Oracle Grid Engine) on my machine, and I would like it to run under an isolated account. What is the preferred way, using Directory Services, to add a "system" ...
- 235
10
votes
2
answers
58k
views
Get login name using email address with Powershell
I need a powershell script, to get login names using the e-mail address. i am having a note with e-mail address of some users. I want to get login IDs and account information of the users in the ...
- 327
10
votes
1
answer
13k
views
How to generate a /etc/shadow compatible password for Ubuntu 10.04?
How are passwords generated that are used by Ubuntu 10.04? I know that they use SHA 512 as hashing algorithm, but I figure that there is some sort of salting done. I need to generate such a password ...
- 527
10
votes
3
answers
13k
views
Roaming user profiles in Linux
My company is evaluating a plan to migrate from Windows to Linux.
Can you suggest something in Linux analogous to roaming user profiles and domain users in an Active Directory environment?
- 237
10
votes
5
answers
3k
views
Replace gitolite3 user with git
I am installing gitolite3 on a server, with ssh and http pulling/pushing/alltherest. During the process, a user and group gitolite3 is created.
When I run:
$ ssh gitolite3@server info
I get the ...
- 413
9
votes
1
answer
2k
views
Why is the root user named root by default?
This might seem like a silly question but I could see this as being confusing. For example:
"Go to root directory"
Could be interpreted as:
Go to /
Go to ~root (usually /root/)
I would think ...
- 10.9k
9
votes
4
answers
28k
views
How to create extra root user? [closed]
I have tried making a root2 user which should have the same permissions as root by doing
useradd -g root root2
passwd root2
usermod -G root root2
usermod -aG wheel root2
but root2 can still not cat /...
- 2,540
9
votes
2
answers
16k
views
Why might the Jenkins user not have permission to access the Docker unix socket?
I've added the jenkins user to the docker group thinking that it would allow Jenkins jobs to run Docker commands. If I switch to the jenkins user, I can verify it works (manually):
ubuntu@hostname:~$ ...
- 211
9
votes
2
answers
3k
views
Active Directory - Bulk Company Update
I was wondering if there is a way to update the 'Company' field for a large group of users within Active Directory? I would like to match all users with a company ending in a certain string.
It would ...
- 431
9
votes
1
answer
8k
views
How can I have puppet only set password when creating a user?
I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user.
I was thinking of doing a notify to an Exec resource that sets ...
- 10.9k
9
votes
1
answer
4k
views
How do I re-enable an sudo lecture, once it's been seen
I have sudo set to show the usual lecture on its first use by a user. Without thinking, I accidentally triggered its display for a new user as I was setting them up, and now it's been shown, they won'...
- 193
9
votes
1
answer
12k
views
Is using the AD home directory attribute to map the home drive really no longer a best practice?
I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
- 121