Security :: Having Multiple Users For One Session?
Oct 12, 2010is that possible to have multiple users for one linux session? and how can i do that ? it's possible to creat virtual users for a session ?
View 2 Repliesis that possible to have multiple users for one linux session? and how can i do that ? it's possible to creat virtual users for a session ?
View 2 RepliesI want restrict telnet session to users.
That means the client login one user at a time. not multiple login.
For example:
I want restrict this. How to restrict one user to use multiple login.
Ubuntu 10.10 Server is loaded. Openssh has been loaded.
I have multiple users which need access to server via ssh.
My impression from reading about ssh is that a key needs generated for each person. Thus, each key will have a passphrase that is unique to them.
In /etc/ssh/sshd_config, the default sshd_config suggest using:
%h/.ssh/authorized_keys
My assumption is %h is a variable that will allow the current user to use the public key stored in his home directory under the .ssh folder in a file called authorized_keys. Is their a command string that automatically populates the authorized_keys file?
I am surprised that even though there are a number of hidden (e.g. .****) files located in the home folder, there is not one automatically generated as .ssh. It appears I have to create that directory myself. I am especially surprised by this since it appears the instructions for generating a key seems to load the key in the home directory instead of proceeding to create a .ssh folder to store the keys in.
It is not clear, but it appears that the public key needs to be copied or appended to the authorized_keys file, but, using the scheme above, the public key needs to be copied or appended to each users authorized_keys file instead of appending all public keys to a single authorized_keys location.
It then appears that each persons authorized_keys file needs permissions set to 600.
It also appears that if I decide to use RSA instead of DSA, I would do the same thing above but would use authorized_keys2 file instead.
Why doesn't the home folder which gets automatically set up for each user automatically get a .ssh folder generated? i.e Why does it have to be created by hand? Does it need the same permission on the .ssh folder? ie 600?
My aim is to allow many to log on via ssh simultaneously and then allow many to simultaneously vnc into their respective gnome desktops.
I have a remote directory shared over NFS called tech with perms set as 0750 and owner set to root:tech. I have 2 groups: tech, and techAdmin. tech can read and execute within tech/. techAdmin can read, write, execute. I have 4 users: user1, user2, user3, user4. user1 and user2 is a member of techAdmin, user3 and user4 are members of tech. simple so far...but wait here's the problem. If user1 creates a file inside tech, user2 cant read or modify it because user1 owns it. Here's a few sites that reference this problem:
[code]....
We are trying to set up a classroom training environment where our SIG can hold classes for prospective converts from Microsoft/Mac. The ten machines will have /home/student01..10 and /home/linsig01..10 as users. We want /home/student01 to be able to explore and sudo so they can learn to administer their personal machines at home. We don't want them to be able to modify (sudo) /home/linsig01. I've seen the tutorial on Access Control Lists but I'd like other input so we get it right the first time.
View 3 Replies View RelatedWe have just installed VNC. It seems to work fine. If we connect to a remote system using VNC, on say DISPLAY 5, it works and we can run our applications. If another person wants to view this session, they can also connect to DISPLAY 5, and it is fine.
However, if you are just sitting at your own system, without using VNC, and someone connects to your system using VNC to DISPLAY 0, so you can show them what you are doing, they do not see your session, they see a plain startup session, not the session in which you are running your applications... How do you let VNC users see your normal non-VNC session? Have I configured something wrongly? We are new to VNC!
I would like to share same vnc session between two users, as both users need to look at the screen in order to make few observations.
View 3 Replies View RelatedI can start a second x sessions with "startx -- :2" switch to it, connect to it over vino vnc. but when I switch back to the first x session the second one "freezes" I cant control it with vnc. So question is how can I use two at once? I've googled everything I can think of with no luck. Can one x server handle 2 client sessions? Wondering so I can try run one user with auto login and lock them into xbmc but have another that I can login to over vnc and muck about with.
View 2 Replies View RelatedI have some typical issue while trying to connect to my root or other users from my terminal.
like su - asking for password and after that it displyed a message like $su -
Password: could not open session
I tried connect using ssh then I am getting the following $ssh root@localhost Last login: Sun Nov 1 14:13:45 2009 from localhost Connection to localhost closed.
Background: Before this happended, I was tryied modify sshd_config in /etc/ssh/ folder to allow passwords less than 2 words.
Ubuntu 10.10 x64.It's been a little over a week since I *rebuilt my system after a gdm or gnome issue and now I'm having an issue with the guest session not working and I'm unable to add a new user. It says "incorrect data" or something like that. This is more than annoying. Why is my system decaying so rapidly? I'm not adding anything to the system that isn't approved by Ubuntu. it's virtually a stock build, minus some changes to the look and feel category. Is this possibly a security issue? My routers up and running and I turned on UFW.
.1) Can't add new users
.2) Guest session will not start.
.3) Should I be concerned about my security?
Share users vnc connection w/ existing desktop session?
View 1 Replies View RelatedTo avoid having to input a password for the keyring each time I connect to the net via wireless, I enabled the 'Available to all users' option in Network Manager. Now, my question is this. Are the 'users' it refers to just those created on this machine? Would a drive-by be able to use my network without entering the password?
View 3 Replies View RelatedI have an environment with multiple projects that have a variety of government and commercial sponsors. We have been satisfied to this point with a netapp serving nfs/cifs and keeping a tight reign on nfs exports.Some of these projects have started asking us to provide access restricted sub-folders of the project space based on different groups that contain a user subset of the primary group.
We have a linux machine that serves as a version control front end to the netapp, mounting the project spaces via nfs. People are now mounting their project space via sshfs to this "front end" and sharing the root password of this sshfs client with everyone in their project, in turn creating a security hole to access the so called restricted sub-folders. I know all the obligatory responses referring to irresponsible user behavior but would like to see how others have addressed something like this where user behavior seems out of control.
I would like to make LXDE the default desktop for ALL USERS on my LTSP clients. There are about 60 users so far.On my server, LXDE is default for everyone.But on the clients, each user has to change to LXDE individually. How can I make LXDE default on all clients?I've been looking through the forums all day, but could not find an answer to this question, so hopefully we can get an answer and my title will help others.
View 2 Replies View RelatedI have one Linux PC installed with Suse 11.1. In this I have created three users to get access.
Users able access their login from Windows PC via some utilities.
1. Putty
2. Xming
Users able login using both. With Putty there is no GUI. But with Xmings XLaunch they are able to get similar session as Linux Host PC. At this point of time the host linux PC will become too slow in perfarmance.
How to retrict the users not to open similar session by enablin/disabling some setting in Linux PC?
I am trying to write a bash script to open 1 screen session with multiple windows... each one running a different service. Is this possible? I tried several things, and I can start up multiple sessions really easy.. but not 1 session with multiple windows...
I want this so I can attach to that session and quickly move between the different windows.
I had Ubuntu 9.10 running ok, but I've decided to try Lucid Lynx with Kubuntu and was quite impressed with the quality of KDE. Everything worked out of the box also.Until I tried to login with two other accounts this computer had...With one of the users I get both errors seen on the snapshot. One regarding the network manager (which I think it was given just because it was already started by another user), and the ibus error, which completely locks the user from accessing any other drive or usb disk.For the third user, even if creating it from scratch (not re-using his /home), I get an error:
Code:
kstartupconfig4 does not exist or fails. The error code is 3. Check your installation.
/home is in another partition that's been used since 7.10 I think. I did cancel all /. from
[code]...
Let's suppose that a machine has three users:
(1) david
(2) dan
(3) joel
The computer now restarts and during the log-in process, I choose to login into dan's account.
At this point, when I am logged in into dan's account, will Ubuntu run the crontab jobs that belong to david / joel?
how to create multiple users in linux
View 4 Replies View RelatedI want to setup a git repository, three of four users will contribute, so they need to download the code and shall be able to upload their changes to the server or update their branch with the latest modifications.So, i setup a linux machine, install git, setup the repository, then add the users in order to enable the acces throught ssh.Now my question is, What's next?, the git documentation is a little bit confusing,i.e. when i try from a dummy user account to clone the repository i got:
xxx@xxx-desktop:~/Documentos/git/test$ git clone -v ssh://xxx@192.168.1.104/pub.git
Initialized empty Git repository in /home/xxx/Documentos/git/test/pub/.git/
xxx@192.168.1.104's password:
[code]....
Ok, for various (mostly security) reasons I was experimenting in running certain apps as a different user id (on Karmic).
I can get X to forward to my main session without a problem but I cannot get the sound to work. Sound works fine in my main session, but when I run sound as another user I get plenty of errors like:
PHP Code:
ALSA lib pcm_dmix.c:1008:(snd_pcm_dmix_open) unable to open slave
I am not a big linux GUI person, so I have rarely dealt with sound systems under Linux. What is the simplest way to get this to work in a relatively secure way? (I do realize that my security is already a bit compromised by allowing the secondary user access to X, but that can't be helped)
I want to add users from the command line, I know I can use the adduser for individual users, but if you have 50 or more there must be another way. I'd rather not use the GUI.
View 2 Replies View RelatedI work in a company where the Ubuntu server is managed by different people around the world.
Day-to-day admin : me in France with an Azerty keyboard
Level 1 24/7 support : team in US with a Qwerty keyboard
Of course there's commands like sudo dpkg-reconfigure console-setup but this one affects the whole system. I've searched quite a lot on how to change the keyboard layout for one person only, but it always relates to the Gnome interface. So I'd like to know if you knew a way to locally change the keyboard layout, only the SSH connection of the user? Maybe in the startup scripts of the bash session, or even better, when the user types his user login (so it detects his language and automatically switches to the right keyboard).
I'm quite new to Linux and wanted ask how I can install applications to any Linux distribution such as Debian or Red Hat so that multiple users can access and run that application. Should I be root to install applications to directories like /var, /opt
View 4 Replies View Relatedi have 3 groups on a samba server with about 30 user per group.I would like to know how to delete all the user in a group before adding new users.
View 1 Replies View RelatedI am trying to configure samba for anyone of the scenarios in the subject. here's what my smb.conf looks like:
Code:
workgroup = RnD
[Samba Share]
comment = Samba share on Ubuntu!
path = /srv/sharedfolder
available = yes
[code]....
The error while trying to connect to the share is:
smbd/service.c:make_connection_snum(1082) Can't become connected user!
filter bandwidth for some users (about 150, from 100.100.100.1 trough 100.100.100.250) on LAN. All LAN users connect to the internet through RedHat linux server and all I could do so far is to ban some of them using iptables and commands
-A INPUT -s 100.100.100.107/32 -j DROP
-A FORWARD -s 100.100.100.107/32 -j DROP
-A INPUT -s 100.100.100.235/32 -j DROP
-A FORWARD -s 100.100.100.235/32 -j DROP
I would like to set a download/upload limit for some of them, is that possible?
Id like to create a script to unlock multiple users rather than entering the command manually for each user.Im quite new to Linux and have not done any scripting so far. its possible to achieve what I want, and possibly provide examples or point me in the right direction? We are using RHEL 5.
View 4 Replies View Relatedsetting up multiple (2-3) FTP users on Ubuntu Server 9.04 I currently only have ONE FTP user, but I need to have 2.
View 1 Replies View RelatedI have 2 users on my HPmini 210 netbook running Squeeze. I just found out that it does not connect to existing wireless networks when I login as the second user. Is it supposed to happen by default or am I supposed to do something to make that happen? Another problem is that when I tried to create "new connections" again for the second user, the keys won't work. The same keys are working for the first user. The network keys are WEP 64 bit HEX.
View 2 Replies View Related