Questions tagged [user-management]

Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

660 questions
0
votes
1 answer

Is HashiCorp Vault the correct tool to store users sensitive information

Is Vault the correct tool to store sensitive information about users, eg. theirs pay rate or personal id? "Normal" employee/user must only have access to his own data but the users with accountancy role must have access to everyone data. Users are…
Bonana
  • 1
0
votes
0 answers

Allow restricted user to change their own password

Recently I have followed the articles below, however, the passwd file that I copied to a dir in the users `‘home`` dir. However, when the new credentials are parsed into passwd, it ends up with the error of: Authentication token manipulation…
Emma
  • 1
  • 1
0
votes
0 answers

Best practices for setting up Linux "service" user

I've set up a server running Ubuntu to host a backend based on Node and MongoDB with Nginx as reverse proxy. When I first logged into the machine I was root, and without thinking too much that's the account I used for setting everything up.…
0
votes
3 answers

AWS EC2 Linux - how to grant contractor SSH access

We have an AWS EC2 instance running Linux (Amazon Linux release 2 (Karoo)) and Wordpress. Currently everyone at our company SSH's to this server with a wordpress.pem file (the below line is just saved in a batch file we connect with): ssh -i…
00fruX
  • 123
  • 1
  • 9
0
votes
1 answer

Bash - Run 'chage' Command Against Each User Account

I have to audit the users accounts on our linux servers in each environment so I want to script checking whether each account is expired or not. I have a for loop that's pulling user accounts listed in /etc/passwd and stores them in an…
jrd1989
  • 698
  • 15
  • 48
0
votes
2 answers

How can I "archive" accounts in Active Directory Users and Computers (ADUC)?

I don't mean disabled... and I'm hoping for something other than "exported". Here's my problem: My org never deletes accounts (just disables them)--not my call. I've hidden the disabled accounts from browsing with a custom filter…
EricC
  • 101
  • 1
  • 6
0
votes
1 answer

What is the best way to setup/install a new Windows PC and including it in the Active Directory?

Since I have to setup every new PC by hand I was wondering how I could optimize that. Especially because I use the new Users password to login so the Device is added to the AD after Windows installation. Now I have to change it again and give it to…
0
votes
1 answer

How do I delete/remove a SUSE 10.3 user?

I'm using Putty to connect to my Webserver. I'd like to know the command to delete a user I've set up a few days ago. Is there also a way to display all the users and their rights?
waszkiewicz
  • 1,002
  • 3
  • 17
  • 36
0
votes
1 answer

Use `chsh` on GCP VM in order to change from bash to zshell, default password is unknown

I'm trying to change the default shell on a GCP VM but am running into difficulties trying to use chsh. It seems that I have access to root as I am able to run sudo apt upgrade. I have also installed zshell: user_name@instance_name:~$ which…
baxx
  • 101
  • 2
0
votes
1 answer

Upon creation of new user non-existent groups added

I am little puzzled with below outcome. I am logged in as root and created 2 new user. tecmint and tecmint2. New user became part of group that I cant find in /etc/group. How can I find out why this is happening and fix it. User added using below…
Dwija
  • 21
  • 4
0
votes
1 answer

Rename an account from XP command prompt

How can I rename a local user account from the XP command prompt? Is there a NET.EXE personality that I've missed? (I also didn't see anything under Useful Commandline Commands on Windows.) Thanks.
0
votes
3 answers

How do I move user folders for many users to a new server?

I need to move two users folders on two separate drives on a main DC to another shared folder on a NAS. These user folders are the users main home drives. What is the best way to do this without doing it one at a time.
Rob
  • 607
  • 3
  • 8
  • 16
0
votes
1 answer

Using Fail2Ban as non root

What is the best way to add IP to Fail2Bans blocklist for normal user, (non root) but without giving full acces to fail2ban-client for that normal user. To run for example this command for normal user: fail2ban-client set apache-badbots addignoreip…
0
votes
2 answers

Best Practices: Unix User Management with LDAP + Kerberos?

I'm running a small LAN for 5 users with some basic services, e.g., NFSv4 mounts and SOGo groupware. Because it seemed to be a good and easy to implement idea, authentication is a combination of Kerberos (with LDAP backend) and authoritative user…
Technaton
  • 121
  • 5
0
votes
1 answer

Do I need to specify the user:group in sudoers to impersonate other users

I was trying to limit the command a specific user can execute in the sudoers file, say I have something like this: dummy myserver=(ALL:ALL) /usr/sbin/reboot,/usr/sbin/shutdown My dummy user is only allowed to reboot or shut down the system. I…