I am trying to set up a network where users can login to a central server which gives access to a partition depending on their role in the company e.g development or HR.my ideal world would be a computer sits on the desk. someone comes along logins they have all their files. they can then login with the same user information else where in the office.
View 3 RepliesIm trying to config my intranet to be accessible from inside the network (lan) without need of password and ask for a passwd for those who are viewing from Wan ....
Today my intranet can only be accessed from Lan, external access give me an Unauthorized message, I took look around, try #irc and still can get the appropriated help, I hope that someone here could help me on that...
A piece of my config:
Code:
I created some users on my Ubuntu 10.0.4 machine a long time ago (whilst experimenting). Some of these users can login to the system, and others were prevented from login in. I can't remeber which ones can login. I have the following questions:
How do I find out which users may login to the machine? How may I disable an existing user account from login in? How may I re-enable a previously (login) disabled user account so it an login again?
My question is probably very common, but I didn't find an answer.I have several computers, each with different user. Each user has a shared folder in samba. I want all users to access all these shares with a single login/password (not with the login/passw of each particular user)
View 1 Replies View RelatedSometimes Linux just make you want to throw the PC out of the window, and get a new one with WINDOWS on it...Having only just "got" the idea that there are a nunber of ways of issuing chmod, I now find that there is yet another when in the fstab file. It is an easygoogle to find out a workaround to make this drive RW, but doing that way one does not learn what is actually happening.how do I find out UID and GID? fmask and dmask, how do I find out what the current settings mean, and what they should be to allow RW access for various groups/users or for everyone?
View 7 Replies View Relatedi have a postfix mail server in my office and mailscanner. recently i changed the password of mailscanner's admin login 'mailwatch' and now i m unable to get login in postfixmail scanner. even i changed the password of mailwatch user from mysql database, bt it does not work. get login into mailscanner to chk the mails of all users.
View 5 Replies View RelatedThis is my quest: i need to install a box with a proxy server where useres can login, register what those users have been doing on-line and generate a dailly activaty report... I have been googleing for days and so far a tried out zeroshell (no reports) and untangle (no login)...
View 6 Replies View RelatedI'm trying to configure vsftpd to just allow my local users to login and be confined to their home directory (and its sub-directories).
Here is my vsftpd.conf:
listen=YES
anonymous_enable=NO
local_enable=YES
[Code].....
I've tried multiple configurations to no avail. I always end up with this same end result.
How to prevent a user sending a mail to a particular user in an intranet mail server?I tried with /etc/mail/access file but could not.
View 4 Replies View Relatedi have created a user like this :
useradd -d /home/testuser -s /bin/bash -c "Test User" testuser
passwd testuser
After this beeing done, i whant to login with this user via ssh using putty. Do i have to set-up something in centos 5.3 to allow user logins via ssh? With root user i can login without problems.
I have an Ubuntu 9.10 server and i need to use an ftp server. I installed vsftp but i can't make it to work. What doesn't work is that can't login to the ftp server with my user(s).I created a user ("AddressBookUser") that should access to some files located on "/var/www/fpt/rubriche/". I set this folder as his home.Here is the row for this user in /etc/passwd:
Quote:
AddressBookUser:x:1001:1002::/var/www/ftp/rubriche:/bin/false
This user is member of the group "rubriche_ro" (and no other groups).This is my /etc/vsftp.conf:
Quote:
listen=YES
#listen_ipv6=YES
#
anonymous_enable=YES
[code]...
vsftpd.chroot_list exists, but as you see above the chroot_list_file directive is disabled.When i try to connect to the FTP server the connections is established but after i insert "AddressBookUser" as user name and confirm i get a "530 permission denied" message. This occurs both from the network (LAN) computers and locally:
Quote:
webs@webs:/etc$ ftp localhost
Connected to localhost.
220 Welcome to WEBS FTP service!
[code]...
I can't figure out what is the problem but my thought was that it's a problem related to the user configuration rather than vsftp configuration, but it's only my supposition. If i try to login with the "main" user of my Ubuntu server, "webs" i can login correctly.
I have running windows 2008 active directory. need to login ad users to linux system, which is inside the windows domain
View 3 Replies View Relatedi have squid 2.6 server running on rhel5. by default teamviewer access is deny. i want to allow access of teamviewer but not getting.
View 4 Replies View RelatedMy computer was working this morning and both hard drives were working fine, then all of a sudden for about two hours I was stuck with this "problem", then after fumbling and moving and stablizing things, then Windows works? See below for details. I've finally reinstalled both hard drives, but the one with the Linux partition doesn't work: it says nothing is discovered on the disk. I can't login at the LUKS login after grub starts, therefore I can't get into Linux, but Windows works?! I used to be able to go directly into Grub when the computer starts, I forgot how to do that but it doesn't matter. If you need details I'd be glad to provide them. I just wondered why Linux doesn't work, but Windows does. I have Linux & Windows on two different separate hard drives
View 5 Replies View RelatedI'm trying adjust my proftpd server's settings, that anonymous users could download what they need smoothly.
A small problem made me so bemused:
In the configuration file of proftpd, I place the following setting section in the <anonymous> section,
Code:
After restarting the proftpd server and applying the configuration, I try downloading a file in IE browser. Sometimes, it prompts a saveas dialog, and everything was okay.
However, it occasionally prompts a login form instead of a SaveAs dialog. This makes our customers confused greatly.
So, how could I prevent browser from prompting login form when anonymous users try to download files from our ftp server?
Quote:
OS: CentOS 5.3
Server: ProFTPd 1.3.1
I`am just trying to connect Samba with ldap to make it simpler for the users to log in. We have already attached squid, so by that we thought it would be easy to do the same with samba. I think we did something wrong with the ldap config for the os with is btw:
Quote:
SUSE Linux Enterprise Server 11 (x86_64)
VERSION = 11
PATCHLEVEL = 1
We added
Quote:
ldap admin dn = cn=xxx,o=xxx
[Code]...
I am encountering this issue:
Samba login/passwd client : why the users id arent the same on every machines?
So the client side config looks like this:
Quote:
/etc/pam.d/ files :
Code:
returns:
Code:
I find FTP server software confusing in Linux. Using ServU for Windows for an example, all I need to do is to create users via the ServU interface and choose a folder I want that user to have access to and their permissions, and viola, they can connect to that directory, and that directory only.
But in the the land of Linux, it apparently can't be managed this easy. I have a web server with multiple domains, and therefore multiple users need access to their own web root. So with that in mind, what FTP server software should I use (there are plenty out there) and how would I go about to create a user per domain, so that they can log in using FTP to manage their site, and only have access to their own web root, and nothing else?
In researching current ldap issue (not being able to do anything but log in) it seems that there are no concepts of privileges, roles, etc. that could be assigned to a user in LDAP.
I've only seen fields that deal with name, organization, etc., not with application-specific access control.
I have to assign certain access privileges to users authenticated via LDAP server based on the privilege level mentoned in the LDAP server. How to attain this.
Having set up many windows servers with complex permissions on shared folders, I now have to do the same in Linux (and I'm such a noob to Linux) I understand that each file/folder is assigned a user + group, and that the rights can be set for the user, the group and global (aka everybody else) My challenge is this, inside my shared folder there is a folder that should be RW to some users, READ ONLY to others, and not accessible at all to the rest of the users. (lets call the folder MyFolder ) All 3 groups have more than 1 user, so they have to be groups (right?) How would this model work in Linux ? If there is no other way, I guess I can nest the MyFolder in a folder that has permissions to allow all users that may access MyFolder, and block the rest, then on MyFolder, set owner group the RW users, and set global to READ ONLY.
Ps : The server I'm setting up runs Debian Lenny, files will be accessed from windows workstations using samba.
I installed Samba on CentOS, create a principal share called "public" . I want to populate this share with subfolders, and to grant access rights to specific folders for specific users. The content of "public" will be visible for all Samba users, but they will have read/write access only to the specified subfolders based on my security policy. I need the best way for doing this kind of stuff...
View 1 Replies View RelatedBasically I'm working as part time administrator in a company, and still am at college. To keep the story short, the company I work with used to have a linux gateway, namely Untangle. We tried to upgrade to E-Box, which is supposed to have more options than Untangle, but it doesn't seem to work as it should. What I'm trying to ask here is this. I need a gateway system that handles QoS, Content filtering, Mail Filtering, DNS, Wan failover / load balancing, LOGS (important), Firewall and maybe the handling of separate users or groups. The ideal solution would be one that like the E-box, has a central control system, without the need to adjust code in CLI for configuration. I have some experience on CentOS and Fedora, so I am able to do some configuration, like installing Samba, DHCP and VNC.
View 2 Replies View RelatedWe have several SLES, CentOS, Fedora server and use logmail to filter the logs on our central syslog-Server. The problem is, that the filtering take more and more time and the configuration gets more and more confusing. What program to use to analyse our central logfile? Something mysql based?
View 1 Replies View RelatedI have a visichat site and 1and1 server.
i am having a problem of my firewall.
when i activate firewall from my server account users cant login to chat room. the error occured " Connection To Server Failed".
will anybody let me know how can i fix this problem so that i can active my firewall and also users can login.
I am trying to deploy Kerberos and LDAP so users will be able to login in to a server on the edge of the LAN, and afterwards be able to establish a SSH connection to all the computers in that LAN without the need to type any passwords, and without the need for me to manage SSH keys [beside the SSH keys on the login server] and local user accounts.
1. When i create the users in OpenLDAP i use a template that i created by reading documentation from the Internet. In the template one piece of information that is neede is the UID. Is there any clever way the keep track of the numbers so i do not assign the same UID to two users, besides using a pen and paper?
2. For the users to be able to establish SSH connections between the computers, the host is going to be added to the keytab like this: ktadd host/client.example.com Is is possible to replace client with something genric so i do not need to mange these keytab files between the hosts?
3. Users will be logging on the the server on the edge of LAN by using SSH keys. How can i configure the setup so the users will recieve a ticket automatically when the logon without executing kinit and without entering a password, just by having a valid SSH key?
4. krb5kdc is running on all the network interfaces in the server i want it to only run on eth1, how can this be done?
I am trying to build a ftp server with vsftpd. In general, I am not able to log in. I can only log in to the ftp server, if that same user is logged in to the server. I found out that this has to with my network setup. I am using OpenLDAP for centralized authentication and home directories are stored on an NFS server. The problem is that regular users are not allowed to log in to servers, therefore their home directories are not mounted. However I want to be able to give my users access to the ftp server without their home directories mounted. Is this possible with vsftpd and if so how do get this up and running. By the way, anonymous users are not allowed.
View 3 Replies View RelatedWe are hoping to build a central database server so that we can take all the singular instances of mysql off our web servers and have the data stored in one place (we also run a number of syslogging servers that use mysql, netflow servers that use mysql, and many other servers that have mysql tables that we would like to consolidate as well). Now I have run into the problem that requires all the customer web sites to change the configuration for their connection to the mysql server from a local connection to a remote connection, which is something we are trying to avoid. I am wondering if there is a software suite or a function of mysql itself that allows you to present the remote database information as local databases to a server, allowing customer configurations to remain intact, as if the mysql server never moved off the local machine? Or a different question, can you configure mysql server to take local requests and forward them to a central mysql server?
View 9 Replies View RelatedIn my network Nagios server running on Ubuntu server and working fine. I am able to monitor servers in local network through plugin and SNMP. Now I want to monitor some servers which are located remote location(network) and they haven't real IP(all are behind route/firewall). I can allocate real IP to nagios server if require. How can I monitor those servers?
View 7 Replies View RelatedI need to create a number of internal Linux users for admin purposes. I do not want these users to appear on the initial console login page just after Fedora boots up, as users who can attempt to log in, and I do not want to allow these users to log in directly. I merely want these users to be accessed via su, just like the root user.
View 2 Replies View RelatedIs there a way to configure Squid to get the filtering policy from a central policy on a web server.
like squid pointing to [url]