Questions about either authorization policy (who should be given access to what) or mechanisms (how to enforce the policy, how to grant or deny access).

learn more… | top users | synonyms

49
votes
5answers
82k views

Disable a user's login without disabling the account

Let's say I create a user named "bogus" using the adduser command. How can I make sure this user will NOT be a viable login option, without disabling the account. In short, I want the account to be ...
12
votes
2answers
26k views

How to edit authorized_keys?

What is the best method for editing the /root/.ssh/authorized_keys file? I mean if I need to append a new key to my authorized_keys file, than what are the best methods to do that?
10
votes
1answer
2k views

D-Bus authentication and authorization

I'm trying to set up remote access to D-Bus, and I don't understand how authentication and authorization are (not) working. I have a D-Bus server listening on an abstract socket. $ echo $...
9
votes
2answers
279 views

How to automatically enter sudo's grace period upon CLI login? [duplicate]

What I would like to do is be able to login and sudo commands immediately without entering a password again. It is very redundant to type my password twice in a row when I need to login and run a ...
6
votes
2answers
25k views

Mount device with r/w access to specific user

How can I mount some device with read-write access to specific user?
6
votes
1answer
1k views

Apache Authorization for the Allowed Users?

I have read the answer to this question: http://stackoverflow.com/questions/4102763/apache-basic-authentication-except-for-those-allowed It helped me understand how to not authenticate some users (...
5
votes
0answers
418 views

Pulseaudio/X permission other user/SSH

My user user1 is running a graphical X session with pulse configured per-user. I need to run a graphical program that uses audio with user2. If I do su user2; program program doesn't start and I ...
4
votes
2answers
11k views

What is difference between pbrun and sudo command?

What is difference between pbrun and sudo command? I have seen people executing pbrun sudo su - what this means? I know su -, it will try to switch to root user. What speciality pbrun gives to sudo ...
4
votes
6answers
572 views

Any program like `sudo` to gain root by having two users enter a password?

I run a server which is used by a group of individuals for e-mail, mailing lists, personal web homes etc. I thought about ways to provide root access for other members to allow them handling problems ...
4
votes
2answers
70 views

Explanation of file - org.freedesktop.login1.policy

I am using Ubuntu 16.04. There is a file located at /usr/share/polkit-1/actions/org.freedesktop.login1.policy which seems to control the permissions regarding shutdown/suspend/hibernate options. ...
4
votes
1answer
305 views

Debian stretch asks for root password in order to mount usb disks after upgrade

After apt-get upgrade && apt-get dist-upgrade, Debian Stretch started to ask for root password for external usb disks. Creating a /etc/polkit-1/localauthority/50-local.d/55-usb-mount.pkla ...
3
votes
1answer
561 views

How to associate only one public key with a restricted shell like scponly?

I'd like to use a passwordless key to perform e.g. unison synchronization while being able to SSH into the server only with a password-protected key. The usual way of using scponly is changig the ...
3
votes
3answers
22k views

User denied ssh access while in AllowUsers list

I've inherited the administration of a linux box in my workplace; it was set up by a colleague who is now gone. Recently, I added a new user to the system, and tried to give her ssh access as well; ...
3
votes
2answers
2k views

Allowing ssh, but only to execute a specific script [duplicate]

Possible Duplicate: Creating a UNIX account which only executes one command There is a shell script which has to be executed through an existing user account XXX. Now I have various other ...
3
votes
1answer
4k views

How to ensure that anonymous FTP has been disabled on a Solaris 10 system?

What line in which configuration files in the /etc/ftpd directory do I have to check to ensure that anonymous FTP has been disabled? From my understanding now, to ensure that anonymous FTP is ...
3
votes
0answers
865 views

Is there an alternative to OpenLDAP / Kerberos? [closed]

Are there ways to do centralized secure network-based authentication & authorization and user management that aren't OpenLDAP and Kerberos? Frankly, Kerberos is a nightmare to configure, leaving ...
2
votes
3answers
165 views

How can I keep rsync from using encryption and compression for the file transfers after the connection is authorized?

I understand that a secure connection (i.e. ssh) is needed to authorize a connection to the remote server. But after that is authorized can the data be transmitted without encryption and compression ...
2
votes
2answers
1k views

How to password-protect a script on Linux?

How do you set a password to execute a command or script in Linux? I need to avoid a script (in which user and password details are included) from being used/executed from unauthorized users. So is ...
2
votes
1answer
628 views

Creating a linux user with limited privileges for ssh tunnelling

I am following this post to create ssh tunnel to mysql. The details description of my application scenario is given in my other SOQ. I exactly followed these steps to create a user: useradd -s /bin/...
2
votes
1answer
799 views

Why is bluetooth-agent getting stuck on authorizing?

I am trying to manually connect between my laptop and phone. I have bluez-utils version 4.98-2ubuntu7 installed. When I run the agent on the terminal, I get: asheesh@U32U:~$ sudo bluetooth-agent 4835 ...
1
vote
2answers
1k views

Shell Script - how to scp into remote server and download files and protect password

I have a remote server that I need to download Apache logs from. I can manually scp into the server and get the files, but I'd like to put this in crontab. The only way to automate it is to include ...
1
vote
1answer
120 views

What is the default password on ubuntu for users created with useradd?

In order to install a service on Ubuntu 14.04 like "openemm" I have created a user name and group: sudo sudo useradd openemm -m -G openemm -d /home/openemm Now I want to login with that username ...
1
vote
1answer
174 views

SELinux policy to authorize some users to start / stop certain services

How can I give certain users authorization to start and stop certain services? I am asking specifically about Fedora 19 systems with SELinux installed. The utility to call for services administration ...
1
vote
1answer
26 views

Root password is asked for anything after dist-upgrade [closed]

I'm using Debian Stretch and today I did apt-get upgrade && apt-get dist-upgrade. After that, nearly every action is started to ask root password, including external monitor plug/unplug, USB ...
1
vote
1answer
469 views

Set a password on Damn Small Linux

I'm running Damn Small Linux. When you open the command prompt, you are automatically logged in as the default user called dsl and granted root privileges (with sudo). How can I set a password for the ...
1
vote
2answers
544 views

curl authentication works but I cannot reach other pages

I'm trying to use cURL to automate some processes that we usually do using a website. I was able to login to the website using curl and the following command: curl -k -v -i --user "[user]:[password]"...
1
vote
1answer
241 views

Server Authorization directory incorrect ownership during linux mint installation

When installing linux mint 17.1 from a bootable usb onto a hard drive I get the following message: 'Server Authorization directory (daemon/servAuthDir) is set to /var/lib/mdm but is not owned by ...
1
vote
0answers
70 views

Run a script (for an app GUI) when logged from NX but limit shell commands on terminal

I have a user which will be accessing an app GUI via NX NoMachine. I want to allow this user to execute the command to bring up the app GUI (done automatically by NX) BUT prevent him from executing ...
1
vote
1answer
110 views

kdm cannot authorize my user?

I've upgraded my virtual machine from Opensuse 12.2 M3 to 12.2 Beta 1 and it hangs at the startup after the mysqld. However I can manually access a terminal and start kdm as root but kdm doesn't ...
0
votes
2answers
37 views

SCP command keeps asking password

I've been struggling for days with this now and can't find what I'm doing wrong. I've got a website on a VPS server. Every night I make a backup of the database. It gets stored on my VPS server. I ...
0
votes
2answers
103 views

'+' and 's' in permission strings

If the ls -l command gives me a permission string like rwsr-s--x What does the 's' mean? The only sources I found mention that it can be present sometimes but do not elaborate. What does a '+' ...
0
votes
1answer
374 views

Authconfig doesn't find all ldap groups

My (soon to be) admin account is in two groups: # ldapsearch \ > -v \ > -H ldaps://localhost:636 \ > -D "${l_dirmgr}" \ > -w $(cat ${f_dirmgr_passphrase}) \ > -b "ou=groups,${l_basedn}...
-1
votes
3answers
543 views

Is there a way to 'authorize' a command typed in by a user?

is there a way we can authorize a command typed by a user before it takes effect? For example, when a user types cp file1 file2, the command will not be executed and a root / root-equivalent user ...