Fedora :: Mapping Remote Users To Local Users In SSH?
Jun 7, 2010Is it possible to map a remote user to a local user in SSH? The object is to avoid using $ssh user@server and instead just do $ssh server instead.
View 4 RepliesIs it possible to map a remote user to a local user in SSH? The object is to avoid using $ssh user@server and instead just do $ssh server instead.
View 4 RepliesSamba up and running on my pc. pc runs FC12 with kde. A laptop has win vista. The pc can access the shares on the laptop but the laptop has authentication issues to access the pc. Note that windows doesnt enforce authentication forincoming network connections.Using the system-config-samba util i tried to map a windows user to the unix user "feduser". The laptop (named LAPPY) has a user (lapuser) which has on windows no password.What should I tell samba config what the windows username should be? lapuser or LAPPYlapuser doesnt work because when accessing the pc via the laptop, the authentication fails. The only auth that is successful is when choosing the same winusername as the unix username.
Secondary, id like to setup the laptop so that the user doesnt have to provide a name and password, or at least not more then once in the lifetime of the laptop. Note that you cant provide an empty password to system-config-samba. How is that possible?
Strange but not really on issue imho:the samba - KDE control module(kcmshall4) (and the smb.conf) shows 2 shares: the homedirs and the data dir the samba server configurator (system-config-samba) shows only the datadir.
I work as an system administrator for AIX and Linux servers. We have an FTP server running in Linux which has shared folders to Windows domain using Samba. The new requirement is to map users created to Linux machine to Windows users in such a way that, when a user logins into Windows machine with an ID say "X123" in domain "TEST", his access control to the samba shares should reflect based on the same user ID created in Linux machine.(FYI. Both the Windows and LINUX machines are in same network and domain). Please let me know the step by step procedure to configure Linux machine (smb.conf entries or any new file to be created for user mapping) to identify Windows user Login and provide access restrictions accordingly.
View 1 Replies View Relatedhow to map all domain users form group Domain Users to local group users (and maybe some more)? Im using Ubuntu 10.04 x32. Its connected to my domain using Samba and Winbind, I can login using my domain credentials, automatically map user folder form DFS server, but I think that domain users have too much priviledges in the system and want to restrict them as much as possible
View 2 Replies View RelatedI would like to experiment a "green" idea of virtual desktop where multiple users are served by a single powerful machine.
I have a server running 24/7. The monitor of this machine is turned off most of the time and the OS is on the login screen.
Other users, in the same local network, use less powerful machines, which could be a thin client or an old Pentium 3 machine. They access their accounts remotely and work with the GUI as if they were sitting in front of the server. Each user sees their own desktop (different themes, screen resolution, etc.). And of course it can happen that several users could log in at the same time.
The usage is modest: mostly web browsing and the usual default applications (office, wine, gimp, etc.). In particular no games or any demanding applications. The users want to use their desktop in graphical mode only.
Question: How do we call this way of using a server? Is it possible with Ubuntu? And how to implement it?
I am having problem to collecting email from remote POP3 (all the emails for a domain is stored here) and distribute it after collecting to several users defined to Linux server. I have install postfix in Linux server for email distribution.
View 3 Replies View RelatedProblem: I need to map directories to a user's home directory when they log in.
For example, I need to map /school/homework/ to user "steve" in his home directory when he logs in. I'm guessing I could use a logon script, but I can't figure out what command I should be putting in the script. I've been searching for hours through man pages and googled it a ton and can't find anything on it.
This one made me scratch my head for a very long time
I want to give access to the sound device to all local users.
Currently only the user currently using the X11 system and root are able to use the sound hardware.
So it appears it's a problem of permissions but I couldn't figure where ...
I have some typical issue while trying to connect to my root or other users from my terminal.
like su - asking for password and after that it displyed a message like $su -
Password: could not open session
I tried connect using ssh then I am getting the following $ssh root@localhost Last login: Sun Nov 1 14:13:45 2009 from localhost Connection to localhost closed.
Background: Before this happended, I was tryied modify sshd_config in /etc/ssh/ folder to allow passwords less than 2 words.
I found 2 previous posts, one from 2005 and one from 2006. The 2005 post was not very helpful and the 2006 threads are not exactly what I was expecting. So I wanted to ask the question to be sure. I have already stood up the new fedora 12 server. The old server is also fedora 12. I need to migrate local users and sendmail mailboxes. In the past couple of years the environment was small enough to create a copy of the users and then have the users mail themselves, but I want to start migrating users/mailboxes properly.
On a unix level I am a jr admin, but I have extensive senior level experience as a windows engineer and network engineer. I do feel comfortable with using the unix command line, but usually operate the unix systems thru webmin because I am not familular with more complex commands. Ideally a software solution to migrate users and/or mailboxes from one server to another is what I am looking for, but in leiu of a software solution I still need to migrate user accounts and their mailboxes. LDAP is not in place, but if the process becomes easier with LDAP I am willing to do what is needed to set up LDAP. (I have no previous experience setting up LDAP)
I do not want to change my mail server from sendmail to different software. At least right now. Both systems are up and running. They can connect to each other via public ipv4 address' only. The new server has already been installed and configured with all the software to match the old server. How do I migrate users and sendmail mailboxes from one fedora 12 server to another fedora 12 server?
I have a postfix mail server on ubuntu 10.04 lts behind a router. so all local users are fetching/sending mails through ms outlook using local IP. Sometimes when internet goes down and any mail send then it bounced back immediately saying domain not found. Can u please tell me how i configure to hold all mails in postfix server rather than bounce when internet fails and will pass through when restored the internet around 15-30 minutes?
View 2 Replies View RelatedHow can i see history of all sudo users and all root users in fedora 13 ? history command only shows one users history ?
View 5 Replies View RelatedI've set up an email server as per this howto: [url]
In a nutshell, it uses a combinatio of postfix, dovecot, amavis (ClamAV and SpamAssisan) and mysql.
However, with this setup, authenticated users are able to spoof outgoing message by simple changing the "from" tag.
Does anyone have any ideas on how I could implement some address mapping to users?
In this setup, postfix users are NOT system users, by are stored in the database.
I have an RHEL 5.3 system where NIS logins are working perfectly, but authentication doesn't seem to be working for non-root local users. I can't login either remotely or at the console with a local user, and I can't even su to them unless I'm doing so from root (i.e. when no password is required).
I've reset the password, I've deleted and recreated the user, and nothing. nsswitch.conf does have "files" listed as part of the config, which was really the main place I'd have assumed the issue could be. su gives "incorrect password", and ssh gives "userauth failure". /var/log/secure shows "su: pam_listfile(su:auth): Refused user <username> for service su", and same for the ssh attempts (with ssh in for su, of course). I've reviewed my pam.d files, and they seem to be the same as on a working machine, but I'm not 100% conversant with pam so I might be missing something.
I want to have a shared area for movies, music, etc. where files are available for all users. What is the best way to do this? I've tried a few different things, (ie. creating a folder and sharing it among a group, but for some reason it doesn't seem to work the way I want it to. I'm now thinking maybe have a partition like /share and set the permissions to all in fstab, but I'm not sure.
View 9 Replies View RelatedI am stuck in a weird situation and could definitely use some help from gurus in security area.
I have categorized my users into 3:
1. root user
2. other local users
3. LDAP users
I want to setup following 2 usecases:
a)
1. Allow keybased ssh and scp to root users
2. Allow ssh but disallow scp service to other local users
3. Disallow ssh and scp to LDAP users
b)
1. Allow keybased ssh and scp to root users
2. Disallow both ssh and scp to other local users
3. Disallow ssh but allow scp to LDAP users
For the 1. in both cases, I think PermitRootLogin in sshd_config could . For the 3. I am thinking of deploying rssh to control scp service access, since ssh will be restricted anyways.
Problem area is 2. primarily.
i) How to allow ssh but disallow scp to 'other local users'
ii) How to disallow both ssh and scp to 'other local users'
I am on ubuntu server and its joined to an W3k Domain thru winbind/samba. However everything works fine and Windows and Local users can login to the machine without any problem. However when I wanted to create a local user X and change his password I couldn'tIt created the local user X but I could not change the password. Here are the outputs:
Pam configs:
Common-account:
account sufficient pam_winbind.so
[code]...
"Merging" may not be quite the right word but that is the desired end result.
Scenario: many Solaris 10 servers, each with various local users. We want to set up LDAP for all for all of them. LDAP server is set up, procedure for getting other servers to use it for user authentication is documented and tested. The question is how to handle users that are in LDAP who also exist as a local user on a given machine.
It appears that the usernames on both sides follow a convention and therefore match but obviously the userids will not match. Local user joe has userid 1234, LDAP user joe has userid 56789.
The way I see it we'll have to:
1. move local user joe's home directory to the path that LDAP user joe will want
2. change local user joe's userid to that of LDAP user joe
3. change joe's files' owner to his new userid
4. remove local user joe
5. finally configure LDAP
Is this a rational procedure? Is there a more effective method? I'm not looking forward to this as there are many servers and each of them have a different set of local users, each with different userids which will have to be handled manually and individually therefore not even scriptable much.
How to created users in pureftpd and the users are stored in mysql database. I tried when i try to connect i got like this error authentication failed error
View 1 Replies View Relatedscript which can add a secondary group to all existing users except system users in linux.
View 5 Replies View RelatedIs it possible to have a folder on user A's GroupWise mailbox that user B can access with as much permisions as user A but user B cannot access the rest of user A's mail?
View 2 Replies View RelatedIs there a way to allow users from a remote account (say, those connecting to the X server from a remote location) to sudo? What kind of account do you need to add to /etc/sudoers to be able to allow this to happen?
View 1 Replies View RelatedI remember back when I used Windows, there was a shell command call "net view", which would allow me to see all the other users on my wireless net.
Is there any command or application that can do this? I dont mind if it is a terminal command either, but I would really like to know a way that I could see other users on my network.
I am on ubuntu server and its joined to an W3k Domain thru winbind/samba. However everything works fine and Windows and Local users can login to the machine without any problem. However when I wanted to create a local user X and change his password I couldn't. It created the local user X but I could not change the password.
View 1 Replies View RelatedThis seems like somewhat of a n00b question, but I'm kind of stumped and working on a half a dozen other things at the moment, so I thought I'd go ahead and ask it.
Is there a "correct" way to set up a shared folder between two local users using only EXT4 that will allow both users read & write access to everything in the folder?
Here's my scenario: My wife and I use the same computer. I want two separate user accounts (mine and hers), but I want ~/Music to point to the same location for both users so that I don't have to duplicate all of the files.
Too protect the innocent, I'll use Jack and Jill.
So say Jack downloads or rips an album:
"/home/jack/Music/Radiohead/Ok Computer"
I want Jill to be able to able to create a folder:
"/home/jill/Music/Radiohead/Hail To The Theif"
I know the basics of symlinks so I can get /home/jack/Music and /home/jill/Music to point to the same place. I also have Jack & Jill in the same group.
The problem I'm having with my test setup is when Jack creates "/home/jack/Radiohead", it is set up to where Jill can read, but not write. So she can play songs from Ok Computer, but if she wants to download Kid A, she has to go in and manually change the permissions on Radiohead first.
Also, while I might set up multiple directories this way, what I DON'T want is for Jack to be able to modify /home/jill/otherdir where otherdir is just a regular directory set up with default permissions.
Oh, and as an added bonus, it would be nice to set up another account (i.e. a "guest") with limited permissions that can read, but not write/modify.
I have the following problem and tried (almost) anything to fix it but without a full success.
We're running a server with CentOS 5.4. Every night a logwatch report is send. These mails are rejected by our mailserver because some invalid details. These mails are send to local user root which is redirected to another external mail address with /etc/aliases.
At first the mail was send from root@localhost.localdomain to root@localhost.localdomain. As you can imagine, our mailserver rejected this because the localhost.localdomain parts. So I changed the sendmail config with these options:
Code:
dnl EXPOSED_USER(`root')dnl
FEATURE(masquerade_envelope)
MASQUERADE_AS(`domainA.com')
MASQUERADE_DOMAIN(`localhost.localdomain')
MASQUERADE_DOMAIN(`slave02.domainA.com')
This solved my problem partially: Mail is now coming from root@domainA.com (which is OK), but is send to root@slave02.domainA.com (slave02 is the local hostname), which is not OK. I tried everything I could find to change that last part to, but nothing seems to work.
Is this possible to make groups members of a group (the same way aliases work for the mailing system). If not is there a painless way to make all my nis users members of more than one local groups? Maybe set this on the nis side and not per machine setup?
View 1 Replies View RelatedI installed sendmail in RHEL5.4 with TrendMicro Spam scan engine. The configuration like sendmail should forward all the mails to scan engine after scanning it will deliver it to the mail domains. same way all the mails coming from external servers are scanned and the delivered to local box. My problem is when i sent mail for local users its delivered locally. but when i sending mail for external like yahoo its going through scan engine. I added the smarthost in sendmail.mc file also.
View 1 Replies View RelatedI'm trying to configure vsftpd to just allow my local users to login and be confined to their home directory (and its sub-directories).
Here is my vsftpd.conf:
listen=YES
anonymous_enable=NO
local_enable=YES
[Code].....
I've tried multiple configurations to no avail. I always end up with this same end result.
If I want to add Windows & Mac users as Samba users, must I first add them all as Ubuntu users? If so, since none of the other users will actually be working on the Ubuntu Server, how do I disable the other non-admin users on the Ubuntu Server login screen. I am using Webmin to administer some server settings, and command line for others.
View 3 Replies View Related