I'm trying currently to connect an Ubuntu-Box (10.04) to our NIS-Server.A few (open-)SUSE-Boxes are working since years with that NIS-Server.The (NIS-)Users can now login to the Ubuntu-Machine, but it seems that the Groups of the NIS-Server aren't imported correctly. I have a NFS-Share which I export from the NIS-Server to all the clients..What can be wrong with the configuration of the ubuntu-machine?
View 4 RepliesI have a centos 5.4 64-bit machine. I installed the directory server following those steps.
I then added some users using the Centos Management Consolecentos-idm-console -a http://localhost:3890 &
I switched from Windows 7 to Linux and when I'm trying to import my database i get error 1044. It used to work when I was using Windows 7. I was able to export the database from my localhost. However, when I try to import it to the other server I get this:#1044 - Access denied for user ' '@'%' to database'.I have been trying for hours to upload my site from the localhost to another server without any luck..I'm using phpmyadmin to import it.
View 2 Replies View RelatedI'm update Python , but founde problem root@server [~]# yum update There was a problem importing one of the Python modules required to run yum. The error leading to this problem was: No module named yum
Please install a package which provides this module, or verify that the module is installed correctly.It's possible that the above module doesn't match the current version of Python, which is: 2.6.7 (r267:88850, Jun 7 2011, 12:25:26) [GCC 4.1.2 20080704 (Red Hat 4.1.2-50)] If you cannot solve this problem yourself, please go to the yum faq at: [URL]...
how I could import local user profiles in windoz (Desktop,prefs, settings, etc) to a brand new samba server (already configured with tdbsam backend)
View 2 Replies View RelatedI am doing a LVM replicate to another server.
Example: server1.foo.com has / , /boot , swap and few LVM partitions. All are in /dev/sda disk of size 80GB. /dev/sda5 is a LVM partition which has only one vg00 and it has 2 LV's (/var and /usr) and a SAN storage connected to this server which has around 500GB of single partition(a LV partition) called /data and its under vg00 .
Now I have build another server called "server2.foo.com" with same RedHat OS version - RHEL 4 and want to import the same LVM setup at destination. Down time or unmounting the filesystem is not a problem (but am trying to reduce the down time as much as possible). Is there any way that I can take a proper snapshot of whole LVM disk and restore with same setup at destination without losing the data and the lvm file system layout?
I have a FTP server (vsftpd), and would like to setup different file permissions for different groups:
-"ftpusers" group should only be able to browse and download.
-"ftpadmins" group should be able to browse, download, AND WRITE (RNFR, RNTO, MKDIR....).
Let's say my main directory is /var/ftp/docs/. It should be accessible by "ftpusers" group, but only writeable by "ftpadmins" group. Other groups or users may not access it. Which permissions and ownership should I give? My problem is that the dir can't be owned by two groups...
Is it possible to nest groups so that users can access directories owned by other groups?
View 1 Replies View Relatedhow to add users to groups with ldap? Further, could someone point me towards some good command-line management tools? Creating each dn manually is going to get old real fast...
View 14 Replies View RelatedI've been using LVMs on some of my Linux servers for years without fully "getting" them. Doing a lot of things by rote. As I setup a new RAID though, I realize I don't have to be so rigid. I inherited a mission critical server with five independent disks
Code:
/dev/sdb1 /usr1
/dev/sdc1 /usr2
/dev/sdd1 /usr3
/dev/sde1 /usr4
/dev/sdf1 /usr5
I've bought an external RAID5 box that I plan to migrate the data to and was planning on this layout.
Code:
Method 1
VGLogVol
/dev/sdb1/usr1 -> usr1disk1
/dev/sdc1/usr2 ->usr2disk1
/dev/sdd1/usr3 ->usr3disk1
/dev/sde1/usr4 ->usr4disk1
/dev/sdf1/usr5 ->usr5disk1
Mainly because the 1 to 1 correspondence is easy for me to understand, and what I'm used to. But I realize it doesn't have to be that way, and I could have one VG with all the LVMs as parts of it, i.e.
Code:
Method 2
VGLogVol
/dev/sdb1/usr1 -> arrayusr1
/dev/sdc1/usr2 ->arrayusr2
/dev/sdd1/usr3 ->arrayusr3
/dev/sde1/usr4 ->arrayusr4
/dev/sdf1/usr5 ->arrayusr5
Is there any advantage to one way over the other? Would using one VG with multiple LVs be kind of like "putting all my eggs in one basket"? Do more VGs and LVs introduce unwanted overhead into the LV Mgr that should be frowned upon? If both methods are equal, I go with the method1. Just more clear to me. But now that I understand the second, I could go that way, if there's a compelling reason.
I'm experimenting on a new 5.7TB raid we got for one of our servers before it goes into production. I'm carving the space up into Volume Groups and Logical Volumes. Below is some sample output:
[root@server newhome]# vgdisplay
--- Volume group ---
VG Name extraid_sdd1
System ID
Format lvm2
Metadata Areas 1
Metadata Sequence No 2
VG Access read/write
VG Status resizable
MAX LV 0
Cur LV 1
Open LV 1
Max PV 0
Cur PV 1
Act PV 1
VG Size 1.82 TB
PE Size 4.00 MB
Total PE 476804
Alloc PE / Size 476804 / 1.82 TB
Free PE / Size 0 / 0
VG UUID LJPJVE-fekS-crS8-uugk-l13z-0NG0-FWv3M3
--- Volume group --
VG Name extraid_sdb1
System ID
Format lvm2
Metadata Areas 2
Metadata Sequence No 4
VG Access read/write
VG Status resizable
MAX LV 0
Cur LV 1
Open LV 1
Max PV 0
Cur PV 2
Act PV 2
VG Size 3.64 TB
PE Size 4.00 MB
Total PE 953608
Alloc PE / Size 953608 / 3.64 TB
Free PE / Size 0 / 0
VG UUID kzlLN4-PyrX-LYUS-h1Tc-1S9F-jVV0-XU5tcK
Because I created this, I know that the second 3.64tb Volume Group, extraid_sdb1, is composed of two physical volumes, /dev/sdb1 and /dev/sdc1, each one 1.82TB in size. My question is, if I hadn't made this and had to work backward, how could I discover that info? I can see that the second VG is composed of 2 PVs by the "Cur PV" line. But if I didn't know that they are my /dev/sdb1 and /dev/sdc1, how could I break that out, as well as their sizes? If it matters, this system is running FC6.
I am currently using the following code in order to set a user's primary group in samba.Code: force group = +group.This almost does what I need but I was wondering if it is possible to list multiple groups. Something like this would be exactly what I need.
Code:#If user is in group1 set it as primary group, if in group2 set it as primary.force group = +group1, +group2. Does anyone know if this is possible or if I could use a script to force the primary group?
I'm having the following problem:I have a machine logging into Win2003, which is working to authenticate. But when any user logs in, it appears some ID's that do not exist.
Example:
root @ ubuntu: ~ # su - nomades
groups: can not find name for group ID 10003
[code]....
i have seven department in my office. i want to restricte web sites for all the departments but not same web sites for all the departments i.e. different sites for different departments.i have no idea about this issue.
View 1 Replies View RelatedI have configured a file server with samba and winbind in RHEL5.I am able to allot permission for the active directory groups to my Linux folder.No issues.But i want to set multiple groups of active directory to get ownership to a single directory. Say there are 3 groups a,b,c to have permissions to a folder of the Linux machine.
Code:
chown -R root:Active_directory_group_name path_to_linux directory
I have set
Code:
chmod 770 /myshare
meaning that user and group would have full rights to /myshare
Code:
chown root:a
works great I tried with the option of
Code:
chown -R --reference=/etc/shares_own.txt /myshare
In reference file(shares_own.txt) i gave the entry as
Code:
root:a,b,c
This is not working.
this is really a brainstorming thread seeking advise on how to setup some samba shares within a small office network. For the quick judgers:
-no I'm not an IT expect and I'm not even the IT at the office, I just fill in this gap too.
-I have looked into several samba 'by example' tutorials - none seems to fit my needs or answer some of my Qs.
So I seek advise from your experience: What do I know:
-the functionality of the setgid to have subfolders inherit the group owner of the parent folder
-the fact that I don't want samba in 'share' level in order to register the owners of files
-the functionality of acls that enables inheritance of rwx permissions to subfoldrs of a parent folder.
- the groupmod -o option but that doesn't help apparently.
So this is a 25ppl civil engineer consulting office. The physical groups of ppl working here are: engineers, drafters (those who generate the drawings , i'm not sure if thats the correct term), and secretaries. The job usually is done in the following way, once a project commences a project folder gets generated and everything is done in there. incoming mail arrives there (secretaries put it there), engineers do they calculations on speadsheets, write reports and do draft drawings and, finally, drafters take the draft drawings and finalize them. So pretty much everyone of these 3 groups needs write access to the main project folder.
How do I accomplish that? as which group should I create the project folders? It came to mind the notion of group of groups. Now that the actual owner of the file is not so important anymore (several engineers will need to have write access to the folder) and group becomes important, it would be nice to have the ability to add... groups (instead of users) to groups! so that the permissions to a group are inherited by its children groups... Does such functionality exist of can it be implemented somehow?
How do I go about giving access to everyone and at the same time, NOT giving up on the 'user' secutiry level of samba (and NOT just giving rwx permission to 'others'? Is it possible? or Should I instead forget about individuals and match the 'physical groups' to 'linux users' and 'groups of groups' to 'linux groups'? ( This means I should give on ownership of files by individuals )? Since its a small office some work is mixed - engineers might pickup incoming email, a secretary might do abit of drafting work etcetc.
i just installed centos 5.4 and trying to make my local repo have groups listing of packages like the mirrors do
so i can make an spin off of the OS to my needs for web servers only / so on but
i cant get my head around the groups making part of the creatrepo
does anyone have any tips or hints or know how to make group listing of the packages
i copyed the DVD to hard drive and the repo .XML files they came with it and tryed that way but no luck yet
im running out of things to try
Having set up many windows servers with complex permissions on shared folders, I now have to do the same in Linux (and I'm such a noob to Linux) I understand that each file/folder is assigned a user + group, and that the rights can be set for the user, the group and global (aka everybody else) My challenge is this, inside my shared folder there is a folder that should be RW to some users, READ ONLY to others, and not accessible at all to the rest of the users. (lets call the folder MyFolder ) All 3 groups have more than 1 user, so they have to be groups (right?) How would this model work in Linux ? If there is no other way, I guess I can nest the MyFolder in a folder that has permissions to allow all users that may access MyFolder, and block the rest, then on MyFolder, set owner group the RW users, and set global to READ ONLY.
Ps : The server I'm setting up runs Debian Lenny, files will be accessed from windows workstations using samba.
I'm trying to create a group called Domain Users, that will include several other groups that are populated with users inside of the LDAP database. In the LDAPdatabase, for a group entry, there are memberUid entries that can be filled. When I try to use another "Group" name, it just lists that name and not the people in that group. So if group "A" has Jim, John, Sue, and I include group "A" in the memberUid of the Domain Users group, I want that to reference the people in that group, not the group name. Testing access right, having the group name listed in "Domain Users" group, does not grant user access under the group rights on a directory. Should be simple, but I don't know the syntax to use for this reference.
View 2 Replies View RelatedHow to create multiple Logical Groups out of a single Physical Volume? Here is the Physical Volume I have created:
Code:
# pvdisplay
--- Physical volume ---
PV Name /dev/sda9
VG Name myVG1
PV Size 54.88 MB / not usable 2.88 MB
Allocatable yes
PE Size (KByte) 4096
Total PE 13
Free PE 11
Allocated PE 2
PV UUID bon4Ao-vmgC-aP1h-EC9X-w3tN-YXNu-0N2dAw
This is how I am creating a Logical Group out of the above Physical Volume:
Code:
# vgcreate myVG1 -s 4m /dev/sda9
Display:
Code:
# vgdisplay
--- Volume group ---
VG Name myVG1
System ID
Format lvm2
Metadata Areas 1
Metadata Sequence No 5
VG Access read/write
VG Status resizable
MAX LV 0
Cur LV 2
Open LV 1
Max PV 0
Cur PV 1
Act PV 1
VG Size 52.00 MB
PE Size 4.00 MB
Total PE 13
Alloc PE / Size 2 / 8.00 MB
Free PE / Size 11 / 44.00 MB
VG UUID O6ljYC-bflz-EUTd-nf34-8gYe-Fh39-Bh3cOg
But I am unable to create one more Logical Group out of this Physical Volume. Can we accomplish it? Or do we always extend our current Logical Group to utilize the available space of a Physical Volume?
I completed the installation of VMWare Server 2.0.2 onto a CentOS 5.4 64-bit distribution. There is a VMware virtual machine file on the server in question, and I want to activate it through the application console.
I did not see anything readily apparent that would facilitate the importing of the virtual machine file. Does anyone have a procedure that can accomplish this task?
I have setup a Centos5.5 VMWare guest with Samba and Winbind for Active Directory integration, using GUI tools. Authentication works flawlessly, with automatic home directory creation. What I want to achieve now is using local UNIX groups to controll access to shared folders, to avoid bothering AD administrators with groups management. This is my smb.conf global section:
workgroup = COGITANS
password server = domainserver.hq.cogitans.it
realm = HQ.COGITANS.IT
security = ads
[code]....
'finance' is a local UNIX group where I added user 'COGITANSalberto' (I also tried with 'alberto') as a secondary group (primary group is 'domain users' and it cannot be changed). I am sure the user is added, because it is listed in 'getent group'. If I specify user COGITANSalberto in valid users it works, i.e. only that use can access the share, the others get a NT_STATUS_ACCESS_DENIED error. But if I use +finance, access is denied to everybody, and this is the log:
[2010/09/11 14:12:37, 10] smbd/share_access.c:user_ok_token(211)
User COGITANSalberto not in 'valid users'
[2010/09/11 14:12:37, 2] smbd/service.c:make_connection_snum(617)
user 'COGITANSalberto' (from session setup) not permitted to access this share (finance)
[code]....
It seems like winbind cannot recognize finance as a local group. For the same reason, I guess, 'force group = finance' does not work either (files are created with 'domain users' group ownership). My /etc/nsswitch.conf:
passwd: files winbind
shadow: files winbind
group: files winbind
Grants and ownership on the '/repositories/shared/finance' folder are
root:domain users with permissions 775
I am running Debian (Lenny) as my file server on a Windows network. I have multiple users accessing shared excel worksheets. I am the owner of these files and have no problem but if I save a shared workbook the file properties on the Linux server change ''Groups - Read Only, Others - Read Only''. I can reset them logged in as root but they change back every time I save the file from the XP machine (XP Home SP3). All other non-shared worksheets are fine.
View 1 Replies View RelatedI already know of a work around to fix this problem, but I guess my question is why is this not working as expected? I am using a Windows Server 2008 R2 Active Directory for authentication.
I have run auth-client-config for the ldap profile and pam-auth-update. When running getent passwd, I get a list of both the local users and the users in the active directory (with populated information in the Unix schema extension). When running getent group I get a list of both the local groups and the groups in the active directory (with populated information in the Unix schema extension).
Interestingly enough, though, when I run su DOMAINUSER, after the prompt for the password I get an authentication error. In /var/log/auth.log I can see an entry with pam_ldap: missing "host" in file "/etc/ldap.conf". The SRV records in the DNS servers resolve correctly. I've checked this with nslookup and I have seen the records within my zone file. Obviously if the ldap.conf file is working with getent and the ldap server is resolving from the SRV records, it is working fine.
The interesting part is that the Windows Server 2008 R2 AD machine shows in the event viewer that there was a successful authentication, yet the Ubuntu box says no. When I add the host within the ldap.conf file, everything works...getent and the actual authentication, either initial login or su.
[Code]...
I am currently trying to set up a Samba domain server. In the Samba-HOWTO-Collection I found an
example file.(Point 3.3.3.1) In the explanations of the example below, the author says I need to map UNIX Groups to NT Groups. He writes a shell-script of how one could do it, but when I copy it and then execute it, I get the error:
Bad option: rid=512
Bad option: rid=513
Bad option: rid=514
The other groups do get mapped, just the Domain Admins, Domain Users and Domain Guests dont. This is the shell from the HOWTO:
#!/bin/bash
#### Shell-Skript f ̈r sp ̈tere Verwendung aufbewahren
net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmins rid=512
net groupmap modify ntgroup="Domain Users" unixgroup=users rid=513
net groupmap modify ntgroup="Domain Guests" unixgroup=nobody rid=514
[Code]...
So i am at the stage of about to install the basic system and am using a derivation of the package management provided by Matthias S. Benkmann. To this end I am using his useradd and groupadd scripts to update the files:
/etc/passwd
/etc/group
My issue is that when I run the commands(created as part of temporary system when installing coreutils):
Code:
/tools/bin/su linux
#then as user
/tools/bin/groups
(here linux is the name of the user) This only returns the user being in the group named after user but not the additional group of 'install' Also, prior to logging in as user, if I use this command as root:
Code:
/tools/bin/groups linux
linux install This then returns that the user is in the correct groups. Lines from relevant files look like:
Code:
#/etc/passwd
linux:x:10000:10000::/usr/src/build:/bin/bash
#/etc/group
[code].....
I have installed a linux server in my office to run 16 machines. Its main use will be a internal mail server but will be also running websites.
I have installed Ubuntu 9.10 server x64 and have got apache running.
I am looking for the simplest more robust solution for smtp, pop3 and imap. I have only ever used qmail before and found it a pain to configure and its getting old so I though I should probably try something new. I have not much experience with running pop3 or imap on linux so would love a suggestion on that.
have to create a webhost on an running fedora server which runs multiple webpages + a coldfusion serveri have to add an coldfusion virtual host to these.what i would do:*crate a new user & group*enter vhosts.conf and copy an existing host and modify it for the new one.*create an new folder and copy the main files (phpstarter and webroot) *chown the files for the right useri think an apache graceful would be needet
View 1 Replies View RelatedRight now i have a HP DL 180 Server with 130 Gb Hard Disk & 8 Gb ram after Raiding0+1. i want to configure Domain Controller Server for my office for 200 to 300 Users. what should the partition size must be mentioned in my 130 Gb Hard Disk, is that going to be Sufficient for ME ?
i am bit confused about /Usr /Var /Boot partitions, as i need to manage perfectly in 130 GB
if i go with 4 Gb swap and remaining for " / " is that will be fine ? should i need to specify partition sizes separately for / tmp /var / usr ..
I'm running a linux cloud server with the following config
1.2ghz Processor allocation
752MB Ram
The site loads slow and clicking a link almost freezes the page for a second. Also, the page loads could be much faster. We've been running mysqltuner and have pretty much optimized all slow queries. Is there anything we can do to fine tune the server for faster and more responsive?
Httpd.conf
Timeout 20
KeepAlive Off
MaxKeepAliveRequests 100
KeepAliveTimeout 5
<IfModule prefork.c>
code....