Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
Questions tagged [user-management]
660 questions
0
votes
1 answer
Is HashiCorp Vault the correct tool to store users sensitive information
Is Vault the correct tool to store sensitive information about users, eg. theirs pay rate or personal id?
"Normal" employee/user must only have access to his own data but the users with accountancy role must have access to everyone data. Users are…

Bonana
- 1
0
votes
0 answers
Allow restricted user to change their own password
Recently I have followed the articles below, however, the passwd file that I copied to a dir in the users `‘home`` dir.
However, when the new credentials are parsed into passwd, it ends up with the error of:
Authentication token manipulation…

Emma
- 1
- 1
0
votes
0 answers
Best practices for setting up Linux "service" user
I've set up a server running Ubuntu to host a backend based on Node and MongoDB with Nginx as reverse proxy. When I first logged into the machine I was root, and without thinking too much that's the account I used for setting everything up.…

Martin Gunnarsson
- 43
- 1
- 6
0
votes
3 answers
AWS EC2 Linux - how to grant contractor SSH access
We have an AWS EC2 instance running Linux (Amazon Linux release 2 (Karoo)) and Wordpress. Currently everyone at our company SSH's to this server with a wordpress.pem file (the below line is just saved in a batch file we connect with):
ssh -i…

00fruX
- 123
- 1
- 9
0
votes
1 answer
Bash - Run 'chage' Command Against Each User Account
I have to audit the users accounts on our linux servers in each environment so I want to script checking whether each account is expired or not. I have a for loop that's pulling user accounts listed in /etc/passwd and stores them in an…

jrd1989
- 698
- 15
- 48
0
votes
2 answers
How can I "archive" accounts in Active Directory Users and Computers (ADUC)?
I don't mean disabled... and I'm hoping for something other than "exported". Here's my problem: My org never deletes accounts (just disables them)--not my call. I've hidden the disabled accounts from browsing with a custom filter…

EricC
- 101
- 1
- 6
0
votes
1 answer
What is the best way to setup/install a new Windows PC and including it in the Active Directory?
Since I have to setup every new PC by hand I was wondering how I could optimize that.
Especially because I use the new Users password to login so the Device is added to the AD after Windows installation. Now I have to change it again and give it to…

Leopepe
- 13
- 3
0
votes
1 answer
How do I delete/remove a SUSE 10.3 user?
I'm using Putty to connect to my Webserver. I'd like to know the command to delete a user I've set up a few days ago. Is there also a way to display all the users and their rights?

waszkiewicz
- 1,002
- 3
- 17
- 36
0
votes
1 answer
Use `chsh` on GCP VM in order to change from bash to zshell, default password is unknown
I'm trying to change the default shell on a GCP VM but am running into difficulties trying to use chsh.
It seems that I have access to root as I am able to run sudo apt upgrade.
I have also installed zshell:
user_name@instance_name:~$ which…

baxx
- 101
- 2
0
votes
1 answer
Upon creation of new user non-existent groups added
I am little puzzled with below outcome. I am logged in as root and created 2 new user. tecmint and tecmint2. New user became part of group that I cant find in /etc/group. How can I find out why this is happening and fix it. User added using below…

Dwija
- 21
- 4
0
votes
1 answer
Rename an account from XP command prompt
How can I rename a local user account from the XP command prompt?
Is there a NET.EXE personality that I've missed? (I also didn't see anything under Useful Commandline Commands on Windows.) Thanks.

pilcrow
- 459
- 5
- 19
0
votes
3 answers
How do I move user folders for many users to a new server?
I need to move two users folders on two separate drives on a main DC to another shared folder on a NAS. These user folders are the users main home drives.
What is the best way to do this without doing it one at a time.

Rob
- 607
- 3
- 8
- 16
0
votes
1 answer
Using Fail2Ban as non root
What is the best way to add IP to Fail2Bans blocklist for normal user, (non root) but without giving full acces to fail2ban-client for that normal user.
To run for example this command for normal user:
fail2ban-client set apache-badbots addignoreip…

Thomas Krcal
- 1
- 1
0
votes
2 answers
Best Practices: Unix User Management with LDAP + Kerberos?
I'm running a small LAN for 5 users with some basic services, e.g., NFSv4 mounts and SOGo groupware. Because it seemed to be a good and easy to implement idea, authentication is a combination of Kerberos (with LDAP backend) and authoritative user…

Technaton
- 121
- 5
0
votes
1 answer
Do I need to specify the user:group in sudoers to impersonate other users
I was trying to limit the command a specific user can execute in the sudoers file, say I have something like this:
dummy myserver=(ALL:ALL) /usr/sbin/reboot,/usr/sbin/shutdown
My dummy user is only allowed to reboot or shut down the system. I…

nooneknows2mao
- 3
- 2