I have created my own server with php, mysql and pma. I want to creat users and disable ssh so they can only user their username and password to get access to /home/<username> with a ftp program.
View 1 RepliesIf I want to add Windows & Mac users as Samba users, must I first add them all as Ubuntu users? If so, since none of the other users will actually be working on the Ubuntu Server, how do I disable the other non-admin users on the Ubuntu Server login screen. I am using Webmin to administer some server settings, and command line for others.
View 3 Replies View RelatedIs it possible to completely disable the password change for users accounts in linux?? (I don't mind account lock)
View 2 Replies View Relatedright now all of our users are able to log in to other user using su as root.Because root privilege is necessary for our work. we r using LDAP authentication(centralized)..
What we want to do to disable su usage to log in as other user?
How to disable the LDAP Users automatically with the specified time duration. For this any configuration file required or else a script need to be written.
View 1 Replies View Relatedi am using fedora 7. i want that, users other than root should not be able to shutdown the system, i had already changed the mode of /sbin/shutdown to -rwxr-w--(750)
View 1 Replies View Relatedi am using fedora 7. i want that, users other than root should not be able to shutdown the system, i had already changed the mode of /sbin/shutdown to -rwxr-w--(750)
View 5 Replies View RelatedWe have 4 servers having rhel 5.2. We have several users logged in on one of them. We have nis server/client running on them and have common home area mounted on all of them. Now we want to disable/block the accounts of the users who have not accessed our servers in last 2 months from today. What logic should we apply to do so? We were checking stat of .bashrc of each user but is not correct logic. We are going to write shell script for the same. We don't want to do anything in users home area or their files.
View 2 Replies View RelatedI wonder if other people have this problem. sometimes I need to duplicate most or all of a server from one machine to another. part where I most tend to have issues is with recreating the users. Sometimes the UIDs don't match up because of differences between the two systems, which gives funky results, like files owned by the wrong user.
Or, sometimes, I just need to create the same 10 users on x number of machines, and it's tedious to do this 10x times. Plus, then, if you need to change a password or delete a user, you have to do it x times.Any recommendations on how to centralize users/auth?
I have a ubuntu server 8.10 running on my dedicated server. How do I allocate IPs for users ? I have 3 IPs and 3 users running, I want each user to use a Single unique IP for all inbound and outbound traffic Also disallow a user from using the IP other then the one allocated to him. I tried to work out a solution using Iptables, but it does not work I suppose
View 6 Replies View RelatedMy problem is quite simple, when I set up squirrelmail I only had one user on the server, and now that I have created new users, I can not log in to their accounts via squirrelmail I am using Maildir System is 10.04 server, running postfix and dovecot. I origionaly set up 'remote' as a user, I can send and recive mail on that account and log into squirrelmail
any new accounts can send email to remote(via outlook/thunderbird), to be seen in Squirrelmail, but get an invalid username/password when I try to log into squirrelmail in short, new accounts can not log into squirrelmail
I have a server running 8.04LTS with haproxy. This is a loadbalancer that handle port 80 connections.
However, I am seeing a lot of conntrack problems.
The default value is 65536 already. I have googled around and some says 65536 is the max value to go but some says to double the value to 131052 and so on. I did try increasing the value but the error still come.
Some says this is due to synflood and so on. I don't think it's synflood as we do connections more than 65536 with this haproxy.
Some also said to disable nf_conntrack. I have searched but there are no guide on how to disable nf_conntrack in ubuntu 8.04. Anyone can help to shed some light into this problem?
Should I increase the value to some crazy high one like 252000 (does it work?) or disable nf_conntrack?
If I disable nf_conntrack, will firewall software like CSF still work?
i want to disable the su command on a server so that users cant run the su command i removed the comment from the 3 and 5 line in /etc/pam.d/su file but it doesnt seem to work the file is shown below
#%PAM-1.0
auth sufficient pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
[code]....
I need to setup a simple server to make available Quickbooks accounting data to just a few stations. Can this be done with Ubuntu desktop version? Would it be recommended due to the small number of users? Or should I use a server platform?I have never used Linux before but have used command line interfaces and am looking forward to it. I installed Ubuntu Server 9.10 32 bit and have even gone as far as logging in. Amazing I know. I installed it on a separate disk so I can switch between Windows and Linux startup disks at boot via cmos.as a first step into linux would like to be able to browse the web from Ubuntu Server 9.10 if the Server edition is in fact the route I should be taking.I would also like a good source to learn not only command line commands but also all the stuff that I see after the commands, you know, all the stuff with - signs all over the place.
View 9 Replies View RelatedI'm using vsftpd on my server. When I connect (using file-zilla) from other computers on the same network I can't download any files. I can upload, create directories, and delete stuff, but I can't download. I've disabled anonymous access and enabled local user log-in. My /etc/vsftpd.conf
Code:
# Example config file /etc/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
[Code]...
I have two ubuntu 10.04 64-bit servers running samba (3.4.7) and openLDAP (2.4.21). The LDAP directory is successfully replicating between the two servers. These servers also serve as LDAP servers for sudo, pam, nss, and other services for a dozen servers without issues. The BDC samba is configured to use itself for LDAP. I connected to the BDC using the samba ldap credentials and verified I could a) see the Computer object b) read NTPassword and LMPassword. The workstations can authenticate to the domain successfully against the PDC. If a workstation boots and connects to the BDC, they login fails with:
Code:
[2010/07/18 11:46:23, 0] rpc_server/srv_netlog_nt.c:336(get_md4pw)
get_md4pw: Workstation MACHINENAME$: no account in domain
[2010/07/18 11:46:23, 0] rpc_server/srv_netlog_nt.c:584(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate3: failed to get machine password for account MACHINENAME$: NT_STATUS_ACCESS_DENIED
Successful authentication against the PDC shows:
Code:
[2010/07/18 11:59:20, 1] smbd/service.c:1063(make_connection_snum)
MACHINENAME (192.168.2.145) connect to service netlogon initially as user username (uid=30000, gid=512) (pid 1727)
[2010/07/18 11:59:20, 1] smbd/service.c:1063(make_connection_snum)
MACHINENAME (192.168.2.145) connect to service data initially as user nobody (uid=65534, gid=65534) (pid 1727) .....
I have apache installed on my server. Is there a way to view how many users are on my site?
View 3 Replies View Relatedinstalled Ubuntu Server Edition and I've found that my first user has a bash history and I can turn on a coloured prompt by editing my .bashrc etc but new users don't have that!I did : useradd -d /home/newb -m newbpasswd newband the correct looking .bashrc file appears to be in /home/newb but it is being ignore by bash when logged in as newb. Instead I am presented with just a dollar prompt instead of "newb@server"how can I sort out my users with proper prompts?
View 1 Replies View RelatedI am moving a webserver from a Gutsy to Lucid server. The webserver works fine, but I am having a problem with the users. I moved the home directories, along with passwd, group, shadow, and gshadow. The users can login fine, and their home directories are fine. The problem is when they try to logout, they get
$logout
-sh: logout: not found
GUI for several thousand simultaneous users. I know this post may at first seem a little out of place here when you begin to read it but please bear with me and I think you will understand why I am seeking feedback here. The company I work for (whose name I am withholding for now) is currently running a little over 5,000 Linux servers. Each of these servers has a minimum of 500 users, some as many as 3,000 users on them during a business day.
These servers are serious pieces of hardware. They have hot swappable raid arrays, redundant well most everything is redundant on them, frankly. Our conversion to Linux took place about 8 years ago. We have a proprietary database and development environment that was originally built in the 1970s. All but the most recent applications run in this proprietary environment, whereas our newer applications are using PostgreSQL and executables that are delivered using Apache web server and run inside each users Windows Explorer session on their local PC.
Really, our situation is rather typical of any organization that has legacy software that still gets the job done - with the possible exception of the **massive** number of total users we keep up-and-running every day. more, our next Linux servers are expected to support somewhere between 6,000-8,000 users [exact figure yet to be determined]. You may ask this is all very interesting but why are you posting this here?.
I am researching alternate ways of presenting attractive and functional GUI to users of Linux servers. I find the Ubuntu GUI to be attractive and very functional. the user input these forums get. Finally I am looking for points of view outside my own organization so I don't fall into the 'but we don't do it that way here' mental trap and miss a really great concept.
I have an idea about how to solve this growing challenge, and I want to present it here for your review and comments. For those who might think I have never worked on systems of this size; I can't imagine my opinion would be valuable remember this: The Ark was built by a passionate volunteer; The Titanic was built by paid professionals.....
How do I migrate my user list to a new server installation? I thought that just copying /etc/passwd and /etc/shadow would be enough. I recently tried upgrading a lightweight bazaar server to 11.04, and the upgrade crashed. I had to perform a new installation of Ubuntu to recover operation of the system. I installed on a different hard drive. I had a dozen other people with user logins, so that they can get or modify bazaar repositories.
The new installation is running, and I can read all of the files on my old system's / drive. I tried copying the /etc/passwd and /etc/shadow files onto my new /etc -- but that did not seem to work. (When I looked using the System->Administration->Users-and-Groups GUI tool, there were no users visible, so I restored the old files.) What I intended to do was to clone the /etc and /home trees over to the new system. What am I missing?
Not sure if this is the right place fo this but....I'm just learning to write bash scripts. I'm experimenting on a ubuntu server 11.04 virtual machine.As part of the script I want to automate user creation.Is there a way to check if a user already exists in a script. so i can do something like
Code:
if userexists; then
do this
else
do this instead
fi
I installed KDE for very limited uses. However, everytime I start up, it brings me to the KDE login screen. I want to revert it back to console login. How do I go about doing that? And if possible, prevent future GUI packages from autostarting. so this seemed to work:
Code: sudo mv -f /etc/init/kdm.conf /etc/init/kdm.conf-disabled That basically renames it so it doesn't start. And if you do need to use the GUI, just run startx
On one of my server plymouth is consuming a lot of memory.I want to disable it.I tried uninstalling but then it gave me a message like this
Code:
apt-get remove plymouth
Reading package lists... Done
[code]....
How to disable 'sudo' for all or a particular user and allow only 'su'?
View 6 Replies View RelatedI'm looking for a command that will give me a list of users (unique, dont name my user account 60 times) that are running processes on a system.
View 5 Replies View RelatedI have a server setup with all my web development stuff in /var/www and in several sub-folders within that. (each project having it's own folder)It works great with one FTP account. But recently I've been getting help on a projects from a buddy of mine that freelances, and have made him an FTP user account as well. All is fine, except for when he tries to edit a file and gets a permissions error.
Here's the issue, I don't want us to have the same FTP login, but all the files are currently owned by my user name. So, when he logs in to edit a file, he can't because I'm the owner, and the files are set to 744. Will I cause any harm by adding both users to the same group (www-data) and chmod'ing the files to 775 so that we can both access and modify the files?
I'm currently running a small server using 9.10 and I wondered if using groups was a possible route in order to keep users away from the bulk of the file system and keep them in locked their home directories.
What I planned to do is use a group named 'allowsystemfiles' to be added to admin accounts, then to set parts of the file system to that group, along with the permissions 0760 to keep non-admin users out.
Is is a good idea or will this hose my system?
Quick question - I would like to know how to prevent users from accessing directories above the directory used for ftp. I'm running proftpd and I'm able to connect outside of my LAN, however all user accounts can click "Up to higher level directoy" and access everything, all the way up to the root directory. How can I make this unaccessable/not visible to users connecting to my server, allowing access only to the directories and subdirectories I have specified?
View 2 Replies View RelatedI have server 9.04 and joined thru winbind to Windows Domain and subversion installed.Windows AD users can use their own credentials to join and everything is working fine.However the group svn which is used to access the repos in /etc/groups has some users.However I would like to add the domain users group to the svn group but the domain users contains Space. And /etc/groups does not happend to read the space any ideas on how to add "domain users" to the svn group in /etc/groups
View 1 Replies View Related