CentOS 5 Server :: Setting User Permissions In NFSD
May 19, 2009
I am currently trying to replace my Windows Server with a CentOS 5.3 box running nfsd for file serving. I have it all up and running however I cant see anyway of securing user access rights to the shares as all you need to access them is just clone the User ID of a user authorized to access the share of any Linux system which seems a bit insecure to me? I was wondering if there was any advice on securing access to server shares in CentOS.
View 2 Replies
ADVERTISEMENT
Jul 12, 2011
I have created a ftp user in centos 5,but it got all permissions to delete files in other location,view the entire directory and create any folder in every place. How to deny this permissions to the particular user.And please help me to give permissions only to a specified location given by the root.
View 4 Replies
View Related
May 24, 2010
I'm runing FC11 and have compiled the vanilla kernel 2.6.33.4 to support Dazuko. It has broken my NFSD server in the process, and I can't figure out why. I get these errors on boot. FATAL: Module nfsd not found. FATAL: Error running install command for nfsd
[code]....
View 2 Replies
View Related
Nov 1, 2010
Running a server using CentOS 5.5 (yum updated, x86_64), found that when using /usr/sbin/useradd to create system user, the quota for the user will default set to 5M soft and 10M hard (on /var/spool/mail partition). As remember the default setting for user quota should be both zero when create a new user.
man useradd and quota related command and no help, had any idea how to change/set the default quota when create user.
View 1 Replies
View Related
Mar 19, 2010
I wanna make a small web server for local use , I've installed apache, every thing works fine I'm the root
I wanna protect the folder that contain the htdocs files (www), i don't want any users that not in root group to access (not even read)
I changed the permission of the htdocs folder as next
Owner: www (apache user)
per: creat , delete
group: root
per: creat , delete
other: none
it only works on the main folder that i changed its permissions ! not all sub folders and files ! were my steps right ? and are their anyway to change all folders and files at once ?
View 4 Replies
View Related
May 25, 2010
i wonder, why nobody has written about it ...
How can i grant permission for files to specific user or specific group ??
Updated:
We have 3 groups: "g12" ("u1" and "u2), "g34" and "g56".
"g12" should only read the file.
"g34" should write and read it.
"g56" should have all permissions (rwx).
And others should not access the file at all.
View 3 Replies
View Related
Oct 29, 2010
I tried to place a mono icon in usr/icons/etc but I didn't have the permission to do so. I tried to change my user profile to Admin, thinking I could go back to custom, but that hasn't and it isn't allowing me to go back to my previous setting.
Within minutes of being an Admin user I noticed I couldn't even unmount something. I really need to figure out how to change my profile back to default.
After that has been dealt with, I would like some guidance on how to gain root access to put my icon where it needs to be.
View 1 Replies
View Related
Jan 30, 2010
I'm struggling to understand an aspect of mounting and mountpoints with /etc/fstab. There is a large number of sites and threads that make recommendations using things like uid, gid, umask, and other options. These methods, however, which I've used, are file-system specific, useful only for filesystems such as (V)FAT and NTFS that allow them.My current situation is that I am mounting partition /dev/sdb5 in, let's call it /media/myMount. My goals:Mount this partition automatically upon boot using /etc/fstab...The partition should be fully accessible only to a specific user or group.What I've done is create the mount point in /media:
If user michapma were to carry out the mount, I believe it would work; however, I want the mount to happen automatically during boot. So, how can I achieve my user (or group) permission goals for this and any other such partitions using fstab?The manpage for mount has been helpful, but after reading many tutorials and forum threads, the only way I know how to do it is to have the user do the mounting or rely on the file-system specific options.
View 2 Replies
View Related
Mar 21, 2010
I'm using ubuntu 9.10. I used the command:
root@aduait-laptop:~# sudo chown -R root:root /media/104B-FF96/Private to set the permissions of Private folder for root but it is giving error:
Code:
root@aduait-laptop:~# sudo chown -R root:root /media/104B-FF96/Private
chown: changing ownership of `/media/104B-FF96/Private/5.jpg': Operation not permitted
chown: changing ownership of `/media/104B-FF96/Private/6.jpg': Operation not permitted
chown: changing ownership of `/media/104B-FF96/Private/7.jpg': Operation not permitted
[Code].....
View 5 Replies
View Related
Feb 24, 2010
I am running VirtualBox on CentOS 5.4 & am not able to connect the usb ports to the guest operating systems. When I click on the device menu & usb, the devices I have plugged in show up, but are greyed out. I had this problem on Mandriva when I first started using VirtualBox & had to put my user account in the USB group. My account is in the vboxusers group but there is no USB group on CentOS & I can't figure out how to give myself permission to the USB ports.
View 6 Replies
View Related
May 20, 2010
I'm attempting to set up a Samba share on my lab's small server (Ubuntu Server Edition, 10.04). It looked easy enough, but the share that I set up didn't allow anyone to actually put anything on it: no uploading stuff, etc. (You can still upload files via the command line, so I implemented the unix extensions = no fix). The share is writeable and visible, and anyone can access it (according to the Samba GUI). According to the smb.conf:
[Share]
path = /home/something/Share
writeable = yes
;browseable = yes
guest ok = yes
The other Windows machines in the lab see the new server and its share automatically, although they can't make changes to it, like create a new folder in the share. Most of my lab uses Snow Leopard (OS X 10.6), and a few others use Windows. I can connect to the server using my MacBook either through the terminal or Finder -> Go -> Connect to server -> smb://blah.someplace.edu without problems.
I can do pretty much anything via the command line, but not through the Finder! If I want to create a new folder, it gives me an old-school error message (stupid blue face): "The operation can't be competed because you don't have the necessary permission." If I want to drag-and-drop a file from my desktop to the Share folder, I get a pop-up window (lock + blue face): "Type your password to allow Finder to make changes." If I do, then I get another pop-up: "One or more items can't be copied to "Share" because you don't have permission to read them. Do you want to copy the items you are allowed to read?"
View 3 Replies
View Related
Jan 25, 2010
I have two NFS mounted dirs that the users want specific permissions set upon creation of dirs/files, independent from any other machine on the network.
View 1 Replies
View Related
May 27, 2009
I have a minor issue with permissions. There are a couple of devices that I need r/w access to in /dev. Whenever I first boot up and log in as end user (not root) and I need to access the devices permission is denied. Logging in as root there's no problem accessing these devices. However as an end user every time I need the devices I have to first su to root to change R/W permissions (chmod 666).
Now, the good thing is that the permissions stick even as I logout and then log back in, but as soon as I reboot my computer (every night) I have to go and chmod manually. I'm trying to find a way to avoid having to su and chmod manually but I'm not having much luck. The devices I am trying to access are /dev/ttyS1 and /dev/windrvr6, when I first boot up and login as end user the permissions look as follows:
crw-rw---- 1 root uucp 4, 65 May 27 04:11 /dev/ttyS1
crw-r--r-- 1 root root 253, 0 May 27 09:12 /dev/windrvr6
View 3 Replies
View Related
May 4, 2010
I want to host a public FTP on my server, but i cannot get it so that people can read and write but not delete ANYTHING from it.
I have tried:
chown root /home/ftpdir
chmod 1777 /home/ftpdir
but people can still delete the files in it, i have no idea what to do next. that's the only thing i can find on Google about how to do it.
the users are logging in with the same Account, i cannot make a new account for each one.
View 1 Replies
View Related
Jan 1, 2010
I have two servers, both running CentOS, but one running Cpanel as the control panel and the other running Webmin.
I would like to sync the web folders using rsync. However, when I sync the files from the Cpanel host the permissions look as follows:
Code:
But that doesn't work on the Webmin server which needs the following:
Code:
It seems the Cpanel install has the group as 'nobody' whilst webmin has it the same as the file owner. I can fix this by running:
Code:
But as the file transfers will be frequent, I don't want the files to be inaccessible until chown is run.
So, what I really want to know is - how can I change things on the 'webmin' server so that files with ownership owner:nobody will run?
View 1 Replies
View Related
Dec 30, 2010
I have a Samba server running on a box where I login to admin as user:
FRED
The Samba users are
SUE
JOE - Read only for specified paths (media playback access only user)
SUE can read/write to any directory under the share: Media
So all that is working fine. As long as I do file operations remotely as SUE everything works remotely. How can I make it to where everything SUE does over Samba FRED automatically has permissions to edit when logged in locally (or SSH)? Also, remember, Joe needs to be able to read where specified.
View 3 Replies
View Related
Jun 22, 2010
I'm using an older redhat system (2.6.9-22.ELsmp) here which is running an older mysql (server version: 4.1.12). I don't think that's the source of the problems. I believe that have understood things rightly when I say that the mysql root user is unrelated to the linux root user ... in my case I believe the root user to be the unix user mysql. So when I connect to the server (local host from a local terminal) I use:
Code:
-bash-3.00$ mysql -u mysql -p
and enter a blank password
This gets me on, however I seem unable to do anything like create database or alter privilege. I wonder if its related to my finding no database called mysql?
-bash-3.00$ mysql -u mysql -p
Enter password:
Welcome to the MySQL monitor. Commands end with ; or g.
Your MySQL connection id is 11 to server version: 4.1.12
Type 'help;' or 'h' for help. Type 'c' to clear the buffer.
mysql> show databases;
+----------+
| Database |
+----------+
| test |
+----------+
1 row in set (0.00 sec)
Although I understand that show databases will not show things I have no priv to see. Does this mean my settings for the users are all screwed? How do I rectify this situation? Some other (perhaps) useful information.
Code:
[root ~]# cat /etc/my.cnf
[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
# Default to using old password format for compatibility with mysql 3.x
# clients (those using the mysqlclient10 compatibility package).
old_passwords=1
[mysql.server]
user=mysql
basedir=/var/lib
[mysqld_safe]
err-log=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
So my BASEDIR seems to be nothing like is suggested in the documentation at [URL].
View 2 Replies
View Related
Jun 21, 2010
I am using VSFTPD as my FTP daemon. I want it to be set up so that my user (cj) will have a default directory of / when I log on to the FTP server and I want the secondary account (guest) to have it's home directory as the default location without any access to the root of the drive.
I need my account to have the default as / because the FTP client that I use in Windows won't go up to the parent directory of the default. Therefore, I cannot access the rest of my drive.
When I set "local_root" to "/" , it brings both users to the / directory when they sign in, even though the guest account is set to open the home directory with the "chroot_list_enable". It seems like the local_root option overrides the chroot_list_enable option.
Is there any way to set the default directory for each local user separately?
Also, Let me know if this is impossible with this FTP daemon
View 2 Replies
View Related
Mar 18, 2010
I wanted to set up Computer Lab. loading Fedora 11 OS and one system acting as a Server to store Users(Student) Login Informations. When students do a programs, all programs (eg, C++ programs) files should be saved in the local fedora system but when login to the system, the login should be validate by a Server System.
View 5 Replies
View Related
Feb 15, 2011
I am trying to setup CentOS server 5 with tftp where the Cisco switch configs can be sent. I have the following:
[code]...
View 14 Replies
View Related
Dec 2, 2009
I'm using ssh2 a PHP extension to create a new folder on my server, however if I try and set the permissions of that
folder above the default of 0755 it creates the folder with that default setting.
It seems like there is some setting preventing me creating a folder with higher permissions e.g 0777.
View 4 Replies
View Related
Mar 29, 2009
I was using Red Hat 7.3 forever and decided it was time for a change. I went to Fedora 10 but it was really buggy. CentOS 5.2 is VERY stable.Here is my problem.The server is command line only -- I tend to hate GUI"S.I setup Samba no problem disabling the ports needed through the firewall and that was straightforward.CUPS is a nightmare for me since CentOS locks down the cupsd.conf and then the firewall does its thing. I allowed port 631 through the firewall but then got lost on the cupsd.conf. It's been too long and the old redhat one won't work with CentOS (not surprising since it's a VERY old system) straight-forward CUPS tutorial for a command line interface. I just need it to be:
a) do this
b) do that
View 4 Replies
View Related
Feb 22, 2011
I've setup a server for a small office (10 people) before with samba domain and file server with slackware. no problem there. now am tasked to setup a samba domain and file server for 300 users in 5 different locations. I am currently given a 1u rack server and I requested for 2x1tb drives that I plan to with RAID.
Some of the offices will be connected via VPN using sonicwall. Would it be ideal for remote users to login to the server in the HQ? Am not so familiar with how other companies setup their servers if they have multiple remote sites. Am also open to setting up servers in each site but because of the currently limited manpower, i'd rather have it close by so I can work on the server remotely if needed.
are there any things that I should consider or are there any good references on setting up a corporate server? the problem now is that the company uses google's email app as their email provider, I have gotten a host to do that already. But since they use email to share files, its not very efficient, hence the file server. But since there are a lot of mobile employees and employees in different sites, I would want them to be able to access those files being shared access the company or departments also.
Then I have to consider how to backup the files and other apps that the company will be using. SInce we will be primarily using linux, we would need to do virtualize some windows based apps that they are using now.
View 1 Replies
View Related
Dec 4, 2009
I was working on a shell script to change the permissions of large directories and subdirectories because of an exploit discovered in the programs that run in those said directories that allow a client to upload and download files to the server. Loan behold I accidentally added a space and had something along the lines of "chmod -R 770 ." run on / logged in as root.
Yes, it was an incredibly noob move on my part, but nothing ventured nothing gained. I am surprisingly calm about this. I tried sliding in my CentOS installation disk and "Upgrading" CentOS but that only made it worse, beforehand I made everything owned by root so I could at least log into GNOME. This does not work for obvious reasons, namely having to change the permissions back for every user and every group, which far beyond a possibility.
View 7 Replies
View Related
Mar 11, 2010
how can i view/monitor what a user is typing in other terminals in centos?
View 1 Replies
View Related
Oct 27, 2010
I'm trying to install php / mysql on a remote Centos server.I've completed the installation stages but when I try ' php -v ' it comes up with these errors:
Code:
PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php/modules/mcrypt.so' - libltdl.so.3: cannot open shared object file: No such file or directory in Unknown on line 0
[code].....
View 2 Replies
View Related
Jan 13, 2011
I'm trying to setup a couple POP accounts in CentOS. I started doing a tutorial that had me install dovecot, and now I have dovecot running but I can't connect at all.Does anyone know of a simple way to get email up and running? It seems like it should be easier than the 14 step tutorials I was finding on Google.Also, should I leave dovecot or try and remove it?
View 6 Replies
View Related
Jul 20, 2010
I am still in Linux Diapers. I setup a CENTOS SELINUX box on an internal network. So the only way I know to access it's served pages is by navigating to 10.1.1.40 from a computer within the network. The issue is that I need to create sub-domains for this server but have no Idea how to go about doing that.
Is there a way of creating an alias for the dev server so I can type something like "washington" into the web browser of a computer on the internal network instead of 10.1.1.40? Can I use a fake FQDN that on this server and get served its web pages or do I need to register a FQDN?
Background: I am creating a series of websites using Drupal and am trying to implement the multisites functionality (all the sites are run from a single code base). To do this they suggest setting up each site on a sub-domain during development. We have not yet purchase the FQDN's for the sites so I have no FQDN to setup.
View 1 Replies
View Related
May 8, 2010
I have successfully setup Apache,MySql,ftp, and a few other various packages.My question today is setting up an email server.I have past experience with sendmail,and procmail. However only on already installed,configured and working servers.I am trying to setup an email server from scratch.I have Centos 5.4 installed.
procmail.x86_64 3.22-17.1.el5.centos installed
sendmail.x86_64 8.13.8-2.el5 installed
Are those two packages the only ones I need to get a working email server setup? Also I have been trying to configure a procmailrc file for my server under /etc/, but I can't seem to find consistent documentation on how to set up a procmailrc file.I believe my iptables is set to block port 110 and 25 from outside connections. how to open those ports too.
View 4 Replies
View Related
May 8, 2010
Running CentOS release 5.4
We currently run a web server that allows FTP connections. I want to:
1. Disable FTP on our web server and require sftp only.
2. See if we can create a table of sites that are allowed to connect to the web server using sftp. Or should I just do this at the firewall?
View 1 Replies
View Related
