I found that if any usual user is logged into a NDS-tree, then _local_ root has full access to user's network shares, including the user's home directory located on remote Netware-server. Is it by design or
have I missed something? Nevertheless in windows local admin has no access to network resources mounted of any other user. If you runas shell (as admin) then admin in principle can't "see" network shares which were mounted (connected) by other users - they are accessible ("visible") per session.
Take a physical user FRED. FRED is a linux user ( known by linux on his laptop ) FRED is a Samba user ( Known by samba on the samba pdc server ) When he logs locally (with username/password) on its standalone laptop (with no network), he is known as FRED:user. He access his data in /home/FRED/. When he logs through samba (with username/password) on the domain MY_DOM, he is known as MY_DOMFRED:MY_DOMdomain user. He access his data in /home/MY_DOM/FRED/. ) Is it possible that the human FRED has only one repository and have full access to its repository regardless of how it was connected. If yes, how to do it
2) If not, Is it possible that the human FRED has full access to /home/FRED/.............. and /home/MY_DOM/FRED/.
Being new to Linux, i've just about got used to the Debian setup procedure now, but had a quick question on the default ownership of files and folders. On my default Debian installation, almost all the folders and files are owned by root:root. Is this the correct advised configuration or should the folders and files be owned by a user without root permissions - eg user:user?
When I start an upgrade or dist-upgrade from single-user mode, and walk away for a long time, I will have found that some packages insist on prompting for answers to questions midway through. That requires me to physically check the console periodically, and that becomes less practical for long upgrades.Is there a way for me to somehow remote into that console and answer any prompts that would popup? By "way" I mean not involving KVM switches or other hardware other than the LAN setup I have now (i.e., I am able to ssh into the machine being updated from another machine, but not when the machine is in single-user mode).
BTW, the reason I am using single-user mode is that, in the past, I have had problems with upgrading packages like GNOME when I am logged into the GNOME Desktop.
I upgraded a Guruplug Display machine running Lenny to Squeeze. It's running Linux on a MicroSD device, running an ARM-cpu.
# uname -a Linux gplugD 2.6.29 #1 Wed Feb 16 17:59:04 IST 2011 armv5tejl GNU/Linux yeri@gplugD ~ $ cat /etc/debian_version 6.0.1
However, after rebooting, every non root user was unable to access anything related to the net.This means, DHCP failed to auto start, ntp is giving errors, etc
# ntpq -p localhost: timed out, nothing received ***Request timed out
daemon.log:
Mar 27 06:07:44 localhost ntpd[1478]: ./../lib/isc/unix/ifiter_ioctl.c:348: unexpected error: Mar 27 06:07:44 localhost ntpd[1478]: making interface scan socket: Permission denied Mar 27 06:07:44 localhost ntpd[1478]: Too many errors. Shutting up.
As root:
gplugD ~ # ping 85.12.6.171 -c 1 PING 85.12.6.171 (85.12.6.171) 56(84) bytes of data. 64 bytes from 85.12.6.171: icmp_req=1 ttl=58 time=42.1 ms
I want to create a user on my opensuse 11.4 computer, for the sole purpuse of using it to access network shared data (eg samba, nfs, etc). This user must be in the "Users" group, but it must NOT be able to login directly on the computer, i dont want him to show up on the GDM users list at logon, he must not be able to login to a terminal, etc.
How can i add a user like that? must he belong to a specific group?
So I'm attempting to get my system to not require the root password while still requiring some form of authentication. My current issue is getting yast2 and its components to ask for the user's password and not the root's.
Is there a way to have these tools ask for user's password instead of root's?
I am pulling my hair out once again after trying for over 15 months off and on to get a tv tuner working under linux. I have just received my new tuner card which I thought was supposed to be easy to run, a HVR-950Q, no luck yet. But first I am trying to use something called mysql (new to me), for mythtv and [I] keep getting
# mysqladmin -u root password ma mysqladmin: connect to server at 'localhost' failed error: 'Access denied for user 'root'@'localhost' (using password: NO)
I put this file in cgi-bin folder of Apache server. Here is my problem : when I run this file with shell as root user it makes change to iptables, but when I use my browser to run this file, it doesn't make any change. I'm sure this is because Apache doesn't have permission to manipulate iptables. How can I start Apache as a user with root privileges ?
So, I wanted a master ftp user that could access all the folders for all the users. I did this by creating a second root user. I'm aware of all the security considerations, and if there's a better way to do this than creating a root user I'd really like to know it. That said, my issue is that my new root user is still unable in FTP to access folders owned by other users that aren't world readable. Note that this is ONLY when logging in via ftp. If I login through SSH I can access all folders without problem and without the need to sudo. So this is a true root user. Does anyone have an idea how I can fix the proftpd configuration to allow my root user access to ALL folders no matter the owner?
I manage to get my mobile broadband working (connected, I mean) in both root & user account. However, my web browser, IM etc only work in root account.In user, knetworkmanager does show that my Huawei E160G is working fine, connected but I still can't surf the net & chat. I've included the dialout & uucp group for user account but that still doesn't resolve the problem
I have already windows 2003 server with active directory, with 200 + user accounts and each user has allocated a specific disk quota. Now i want to install suse on client side so that it can do all same things as windows clients does(active directory login and disk quota). I have downloaded 11.2 suse linux and installed all samba required pakages and also joined the windows domain (2003 server). how can i access my user space located on win 2003 server from my linux client machine.
I'm using the IDE Netbeans (text editor) on my /home/michael Ubuntu account. I'm trying to open a file with Netbeans that's owned by root, I can't do this as I expected. So is there a way to run NetBeans as root, or is there a way to give netbeans permission to open/save files owned by root
Is it possible to give user only FTP access / browsing rights for certain directory within /srv/www/htdocs and prevent same user to browse all other directories, even user's /home directory on that server?
I have 2 users and I would like to copy all the files and folders in one home dir to another.... sounds simple, til i got started. Ive tried
Code:
sudo cp -nRv /home/user1/* /home/user2 but that didnt copy the .* folders. Im after the firefox and thunderbird folders mainly, but all of them is OK too.
im talking about the .adobe, .amsn ..........
How can I copy the .* folders from one user home folder to another and then give the correct permissions to the new user.
I'm wondering if there's a way so that several people can log onto my computer at the same time. When they connect it goes to the login screen and they choose their account and log in. Everybody has a different account and sees a different desktop. Is that possible?
Is It possible to change a process running in root-user to non-root-user by setting suid / uid / euid / gid etc... I so please instruct how, when and wat to set in order to change a process running in root-user to non-root user
I want to know how much damage a user can do on my system if he decides to delete everything (or write to in case of corruption).What command or script might i use to check this?
I want to add my daughter as a user and give her full permissions to all the same folders and files that I use. I have given her permission to folders and their sub folders however she doesn't have rwx on the individual files within the folders. What is the command line to set this up?
Also with the command;
Code: chown -R root:root files
what is the -R for and when do I need or not need it?
I've got a USB Epson Perfection1200 (usb-id: 04b8:0104) connected to my Fedora 13 x86_64 system. The scanner works fine for me, the console user. If someone logs in to the system via "ssh -X ..." and starts "xsane", xsane reports that no scanner is available.
Googling turns up countless recommendations, mostly identical, which pretty much say:
1. find usb device (lsusb) 2. find bus and dev IDs 3. chmod 666 /dev/bus/usb/BUSID/DEVID
this is a best a miserable hack. I would like to know how to adapt the permissions that hald uses when a usb device is connected. Does someone understand this and can explain it?
In the past, I've installed Internet services as daemons and as xinetd.d with no problems. Those approaches do not meet my needs. And, perhaps, nothing will.
- the service was converted from VB-6 to wxPython. It has a GUI which is accessed with either "remote desktop" or VNC. - the wxPython service works on Windows and can be accessed from other hosts on my LAN - the wxPython service works on CentOS and Fedora, but can only be accessed from within the server host. Even from other user-ids. But, I cannot get to it from other hosts. - ipchains AKA firewall ports are marked for INPUT. - The server host uses autologin to fire up a useid in group "user". I do not want it running as "root". the .bash_profile fires the service up. - the service is heavily mult-threaded, and supports devices connected to serial ports asynchronously with the ephemeral port threads (all this works).
There are some programming solutions that I would rather not develop. - a proxy service that runs under xinetd.d. - separate the GUI code from the Internet and serial port code. Allocate a "control" port for remote GUI control. a'la SAMBA & SWAT
Is there any hope, that I can run it as is, by doing some network configuration stuff.
I need 2 Linux users to share a folder. Within this folder, users should always be able to create files and sub-folders and write into any sub-folder (whether they own it or not). However, they should only be able to edit the files they actually own.
i want to install a software in my linux machine staying in another user that i have created .It is asking for root access for some command to be execute during installation process.when I am trying to execute "sudo -s" its showing " is not in the sudoers file. This incident will be reported.".what next will i do.I am in my ubuntu machine.
It's been a few years since I last installed Ubuntu. I searched the forums and can't seem to find the answer. I want to be able to do a "su root" and have root access. I know Ubuntu wants you to do the sudo command, and I know you can really mess things up being root. I know I got this to work before. What do I need to do?
I have a system running with few users and servers (apache/mysql/postfix). After extracting one tar archive in '/home' none of my users are being able to access their home directory. Even other system users (like www-data/mysql) are also not being able to access any directory. Only root can access the system. I have checked file permissions, many files/directories are set to 777 rest are 755.