Debian Configuration :: FTP Users Do Not Have Access Via SSH, Only User ID?
Oct 23, 2010
It looks like my web/ftp server has been hacked but I'm not sure how. I logged in tonight and found I had new mail. I read it and found some e-mails that had failed to send because I don't have mail setup (luckily). The e-mails were trying to send my user name and password to the e-mail address lostsoul2k@ymail.comI've no idea where to start, I use SSH, FTP now and then and it hosts a Wordpress site. The FTP users do not have access via SSH, only my user ID. However, the e-mails also contained another user ID that only has FTP access to the server.I've looked through the logs for rkhunter but it doesn't look like it found anything.
View 11 Replies
ADVERTISEMENT
Feb 1, 2011
I need to add another user besides the one set up during the installation procedure but I also need to limit all users to use only their own /home/user directory.
View 4 Replies
View Related
Oct 30, 2010
This is a perennial problem with Linux. I am just not comfortable moving a lot of casual files around as root. How can I have user access to a USB stick? I've done my Google searches and tried several methods, some of which work temporarily but not permanently. At the moment, I have this line in my /etc/fstab: /dev/sdd /media/usb_flash ntfs noauto,users,rw,umask=0 0 0
As with other methods, this worked last week but not now.
All I want to do is insert a USB stick, transfer some files and remove the stick. I want to do this as a user. This should be simple. What is the trick?
View 5 Replies
View Related
Jan 18, 2011
2 of us have been googling all morning trying to find out how we can restrict ftp logins to their own home directories only but nothing we've found so far has worked. We've tweaked sshd_config so that they default to their home directory but they are able to navigate up/across/down to everything. This is a "straight-out-of-the-box" debian 5.0.5 Netinst. Just a basic system with Apache/MySql/PHP/SSH and no desktop.
View 6 Replies
View Related
Mar 28, 2011
I upgraded a Guruplug Display machine running Lenny to Squeeze. It's running Linux on a MicroSD device, running an ARM-cpu.
# uname -a
Linux gplugD 2.6.29 #1 Wed Feb 16 17:59:04 IST 2011 armv5tejl GNU/Linux
yeri@gplugD ~ $ cat /etc/debian_version
6.0.1
However, after rebooting, every non root user was unable to access anything related to the net.This means, DHCP failed to auto start, ntp is giving errors, etc
# ntpq -p
localhost: timed out, nothing received
***Request timed out
daemon.log:
Mar 27 06:07:44 localhost ntpd[1478]: ./../lib/isc/unix/ifiter_ioctl.c:348: unexpected error:
Mar 27 06:07:44 localhost ntpd[1478]: making interface scan socket: Permission denied
Mar 27 06:07:44 localhost ntpd[1478]: Too many errors. Shutting up.
As root:
gplugD ~ # ping 85.12.6.171 -c 1
PING 85.12.6.171 (85.12.6.171) 56(84) bytes of data.
64 bytes from 85.12.6.171: icmp_req=1 ttl=58 time=42.1 ms
[code]....
View 1 Replies
View Related
Jun 18, 2010
I configured FTP server on Fedora 7.0 . I create different users with different password. I also create seprate directory for each FTP user. All are working . When I use filezilla for connecting that FTP site I can access all the directory on that server.
Now I want to configure that no any FTP user can access other FTP users directory or any other directory in server machine . What I do for this .
View 1 Replies
View Related
May 12, 2011
I'm planning to centralize users and passwords and also create controls for user access to some equipment, for example, Linux Servers, Switches, routers and firewalls. In case of failure of the link between the ACS and AD or equipment to the ACS, this device would use local username and password.
At the moment, my AD structure is a Microsoft, Cisco ACS servers and Linux Standalone. I wish that both linuxs servers and network equipment were authorized by Cisco ACS on the accounts that are in Microsoft AD.
The configuration of the Cisco ACS to use the AD is done and no problems, the network equipment is OK too, but am having difficulties configuring the server for this solution.
View 1 Replies
View Related
Jul 26, 2010
I am trying to configure linux printer Server.
Setup : Using Centos 5.3
Printer : hp 4350
At present we are using windows print server getting user name and authenticated from domain server. I need your suggestion to configure linux printer server and how to share the printer to users and how to limit the user in taking printouts.
View 1 Replies
View Related
Jun 26, 2009
Im trying to config my intranet to be accessible from inside the network (lan) without need of password and ask for a passwd for those who are viewing from Wan ....
Today my intranet can only be accessed from Lan, external access give me an Unauthorized message, I took look around, try #irc and still can get the appropriated help, I hope that someone here could help me on that...
A piece of my config:
Code:
View 4 Replies
View Related
Jul 31, 2011
I am using Squessze and Gnome. When I try to use the gui System>Administration>Network or Users and Groups I get the error The configuration could not be loaded. You are not allowed to access the system configuration.Everything was working before. I read around a bit. In some cases,it was caused by mismatching group and password files after using the gui. I do not know how to check if they are matching. Of course I do not know for sure that is the problem in my case.
View 14 Replies
View Related
Sep 27, 2015
I have Debian 8 installed, using:
* gdm3 as the default display manager (set up in "/etc/X11/default-display-manager");
* LXDE as the default desktop environment.
I did "dpkg-reconfigure locales" and I selected three languages: "en_US.UTF-8", "it_IT.UTF-8", "sv_SE.UTF-8" (the predefined one is "it_IT.UTF-8").Now I wish to create two more users each with a different language (both for X and console applications).I did a lot of googling without success; I tried modifying ~/.profile or ~/.dmrc (adding "export LANG=...") but they didn't work. I was able to change only the system-wide language, not the one of a single user.I got the conclusion that It's not possible to have multiple users each with a different language. Is it true?
I made another try.In another installation (Debian 8, with GNOME and LXDE) I created two users:antonio, ida.The former has only one hidden file in its home-dir: ".bashrc" with "LANG=it_IT.UTF-8" as the last line (no "export $LANG" added).The latter ("ida") has only two hidden files in its home-dir:
1. ".bashrc" clean, with no "LANG=it_IT.UTF-8" line
2. ".dmrc" containing two lines:
Language=sv_SE.utf8.I put "/usr/sbin/gdm3" in "/etc/X11/default-display-manager".After reboot both users are OK: each of them displays its own language: antonio has all menus and programs in italian ida has all menus and programs in swedish.
I was able to create 4 users with 4 languages (SE, IT, FR, ES). Then I deleted all directory and files (including "~/.bashrc" and "~/.dmrc") of one user, rebooted the PC, and NOTHING changed! So, where is stored the user's language?Not in his home; there is a list elsewere?
0. Use "lightdm" (not "gdm3") as the display manager (see "/etc/X11/default-display-manager")
To install it: su -c "apt-get install lightdm"
1. su -c "dpkg-reconfigure locales"
(select the desired locales: en_US.UTF-8, it_IT.UTF-8, sv_SE.UTF-8, etc; set "default locale for the system environment=None")
2. su -c "adduser emil" ("emil" is the name of a swedish user)
3. Logout
4. Select "Swedish" as default language (see at the top-right corner of the screen)
5. Write user name (emil) and password to login
6. After login, language is english (but file "~/.dmrc" is created with the correct language).
7. Reboot PC.
8. After reboot, login again as "emil": now language is Swedish
Now you can change the display manager to gdm3 if you prefer.To change applications language: su -c "apt-get install task-swedish task-swedish-desktop"
I found the file containing the user's language: it's the same containing the link to its icon:/var/lib/AccountsService/users/UserName.(needs "apt-get install accountsservice"). Editing that file is much simpler as I described earlier
View 6 Replies
View Related
Mar 8, 2010
Debian 5.02 on an AMD 64. I removed iceweasel and installed Firefox. On my account, I can access the net ok from FF, but when I login as another user, I cannot get out.
During the iceweasel removal, I suddenly got dumped out. Trying to recover I ended up restarting the box. I then again went to the root and 'aptitude remove iceweasel' and it came back ok. Then I installed FF per [url]. This worked fine on my 32 bit laptop btw. I even added a guest acct and FF worked, but not so on my 64 bit box. Any ideas on where to go?
And the reason for FF was that some media was not playing with iceweasel as it was perhaps too old? I didn't think 3.06 was that old myself, but when I installed FF, the sites that weren't playing fired right up.
View 4 Replies
View Related
Nov 27, 2015
I'm newbie on Debian, and I just installed Debian 8.2. (I used to run openSuse, and I see Debian is quite different.)
Where should I set environment variables (like PATH or JAVA_HOME) in order to affect all users?
I read some documentation about that, but It is not clear for me, the difference among "/etc/environment", "/etc/bash.bashrc" and "/etc/profile".
(In openSuse, I used to create a file "/etc/bash.bashrc.local" and set the environment variables there, in order these settings are not lost with updates.)
View 1 Replies
View Related
Feb 2, 2010
I have vsftpd installed on my Debian (squeeze). I wish to let a local user (ftp) access the FTP server, but not login as normal user through SSH. In vsftpd.conf, I have enabed local user and chroot. I have also changed the shell of the local user (ftp) to /bin/false. The problem is that, I cannot login the FTP server from another computer (I login as "ftp" on a Windows machine). But when I change the shell of the local user (ftp) to /bin/sh, I can login the FTP successfully.
Is this the problem of Windows, or I should use something else instead of /bin/false if I want to prevent "ftp" login service other than FTP?
View 8 Replies
View Related
Jul 24, 2010
i would like to prevent all users other than the user "parker" on my system from using the su or sudo commands. I have not attempted to modify the sudoers file so it just contains the standard root ALL = (ALL) ALL.
View 5 Replies
View Related
Jan 5, 2011
I have a USB stick, formatted as FAT32 and I assumed that everybody would be able to read from and write to it. However, I find that if more than one person is logged on to the machine (logged on locally, with "Switch User"), then only one of the users is allowed to write to the stick, and the other users are only allowed to read from it. Is that normal?
Here's the scenario: person A logs into the machine, is in the middle of something but gets called away and the screensaver kicks in. The screen is now locked. Person B comes to the machine to quickly copy a file onto a USB stick, doesn't know person A's password so does a "Switch User" and logs in as themselves. They plug in the stick, can read from it, but can't write to the stick at all. Permission denied.
By doing a "ls -l /media", person B can see that the stick is mounted but is owned by personA with permissions drwxr-xr-x . So only person A can write to the stick. I haven't done extensive testing but it seems to be the person who logged on first who gets to own the stick. It's certainly repeatable as described above. And it's really annoying, because unless person B knows the root password, he can't write to the stick. As a real last resort person B could reboot the computer but he doesn't know whether person A has any important stuff open or not.
View 13 Replies
View Related
Dec 20, 2010
I use this command line to add an FTP user:
useradd ftpuser1 -d /userdir
This works, but I don't want to give Shell access to the users.
I tried this:
useradd ftpuser1 -d /userdir -s /sbin/nologin
but then user can't login at all - not into FTP and not into Shell.
View 5 Replies
View Related
Apr 14, 2010
I keep receiving the error message in the title above whenry to enterebmin.abc.com/webmin. I'm on Ubuntu 9.10. Other errors I'll receive are "You do not have access to any Webmin modules". Wondering if anyone knew what settings our permissions on files I could change to avoid these error
View 1 Replies
View Related
Aug 13, 2010
I have an old server running CentOS 5. The encription method used was the default MD5 for the shadow file. I would like to migrate the server to Debian Squeeze which uses SHA512. I have already copied the passwd, group and shadow file with the user accounts information but the Debian machine doesn't let the users login. I have already looked in the pam files to make it accept the MD5 encryption without any luck. how can i migrate the users without resetting their passwords?
View 1 Replies
View Related
Aug 27, 2010
i've written a bash script to add new users to our system. the script works so I won't bother you all about that. when a new user is created with it, they can immediately login to our domain from any terminal, which is good. However, the newly created user is unable to login to debian at all, and so cannot access the server. when attempting to do so, they get a message like "the system administrator has disabled your account". This is a good thing really as normal users have no need for debian login, but I do need to add a few admin users who will need direct access to the server machine.
/usr/sbin/useradd -g smbusers -d /home/$username -s /bin/false -m $username
passwd $username
smbpasswd -a $username
This is the code I'm using to add the user. The rest of my script is just a wrapper and GUI. I figure the login shell may have something to do with it, so I tried changing the shell of a user to the default /bin/bash. This resulted in the user being able to login - sort of. Gnome doesn't load though, and there's a cascade of errors across the screen about things failing to save or load settings. mostly stuff like nautilus, X, and gnome. the desktop background is black and there's no interface. Logging in with a previously existing account works fine though. Clearly I have an issue somewhere.
View 1 Replies
View Related
Nov 2, 2010
I did a 'netinst' today and de-selected every available option when I got to the 'software selection' screen (even 'Standard System & 'Desktop Environment') however after a fresh install, I noticed what seemed to me like useless / unnecessary system user accounts:
- news
- games
- www-data (obviously no Apache is installed)
I was wondering if there was a way to avoid this from a minimal install?
View 14 Replies
View Related
Dec 4, 2010
I have 2 users on my HPmini 210 netbook running Squeeze. I just found out that it does not connect to existing wireless networks when I login as the second user. Is it supposed to happen by default or am I supposed to do something to make that happen? Another problem is that when I tried to create "new connections" again for the second user, the keys won't work. The same keys are working for the first user. The network keys are WEP 64 bit HEX.
View 2 Replies
View Related
May 1, 2011
jeff@optiplex:/media$ ls -l
total 124
lrwxrwxrwx 1 root root 6 Apr 7 14:46 cdrom -> cdrom0
drwxrwxr-x 2 root root 4096 Apr 7 14:46 cdrom0
[code]....
View 10 Replies
View Related
Jun 6, 2011
I need to set up quotas so each user has a limit of 20GB (soft could be 15GB) on their homes.Is there a way to set up a default quota for all the users, or do i have to do this for the 345982374058 users in my system manually?would group quotas help? (i dont understand much of these type of quota)
View 2 Replies
View Related
Mar 24, 2011
I did search the forum but didn't find an answer.
I have setup Postfix + Dovecot on my basic debian 5 server. If I send a message to a localuser@mydomain.com from mutt, it delivers just fine and is visible when viewed through squirrelmail, I can also send just fine.
My issue is that irrespective of what options I set in main.cf, I cannot for the life of me get Postfix to stop erroring with "Recipient address rejected: User unknown in virtual alias table". I'm stumped.
My main.cf is as follows code...
I do not want to setup virtual hosting with MySQL or similar, I literally want to receive mail in local users mailboxes for a single domain. Any ideas on what's missing?
View 1 Replies
View Related
Dec 22, 2014
How to limit access flash memory (read / write) for users on debian?
View 2 Replies
View Related
Feb 28, 2010
I'm trying to follow the exim documentation to allow suffixes on mailboxes for all users. For example, if user@domain is a mailbox, I want all mail directed to user-*@domain to be delivered user@domain. I've got the split-config-files option and have edited /etc/exim4/conf.d/router/600 to include local_part_suffix lines as follows:
[Code]....
View 1 Replies
View Related
Nov 26, 2015
I just installed Debian Jessie (3.16.0-4-amd64) on a desktop box I intend to use as a server in our home office. During installation I included the web server and SSH server options. I have a user account, 'mitchell' set up in addition to root. Everything is working great except that I am unable to log in via SSH from other machines, such as a Windows desktop also on the office LAN (using PuTTY). From the PuTTY terminal it looks like the user name is accepted because the password is requested, but after entering the password it says "Access denied".
Back on the Debian box in I see:
Code: Select allNov 26 14:12:02 DebianDevP6TSE sshd[2278]: Invalid user mitchell from 192.168.1.96
Nov 26 14:12:02 DebianDevP6TSE sshd[2278]: input_userauth_request: invalid user mitchell [preauth]
Nov 26 14:12:07 DebianDevP6TSE sshd[2278]: pam_unix(sshd:auth): check pass; user unknown
Nov 26 14:12:07 DebianDevP6TSE sshd[2278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=rmbiserv.attlocal.net
Nov 26 14:12:10 DebianDevP6TSE sshd[2278]: Failed password for invalid user mitchell from 192.168.1.96 port 60010 ssh2
So I am guessing I need to set up either the SSHD server, or maybe something in PAM, to authorized users for SSH access?
As a note, "mitchell" is the user name I use to log on to Debian, and I am entering the same user name and password when trying to log in via SSH.
If I try to log in via SSH as "root" I get the following in the log:
Code: Select allNov 26 14:17:01 DebianDevP6TSE CRON[2329]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 26 14:17:02 DebianDevP6TSE CRON[2329]: pam_unix(cron:session): session closed for user root
Nov 26 14:29:59 DebianDevP6TSE sshd[2383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=rmbiserv.attlocal.net user=root
Nov 26 14:30:01 DebianDevP6TSE sshd[2383]: Failed password for root from 192.168.1.96 port 60132 ssh2
View 6 Replies
View Related
Mar 2, 2010
we have moved and in the new apartment there's a connection with no external IP. Can I somehow access ssh from outside? There's absolutely no chance of granting a port from the ISP's side.
View 3 Replies
View Related
May 15, 2010
I want to refuse access for some users to usb pen and audio. In previous releases (debian, ubuntu , debian-based ..) , it is enough to remove the user from the group.
that is in /etc/group
audio:x:29:bela
plugdev:x:46:bela,geol
with theses lines : bela can heard sound, but not geol, for bela and geol the usb pen is automatically mounted. But not for nobody else. It is NOT the case in the new release, I mean, even if I remove a user from the plugdev group, the usb pen is automatically mounted for that user.
View 1 Replies
View Related
