Questions tagged [authorization]

Questions about either authorization policy (who should be given access to what) or mechanisms (how to enforce the policy, how to grant or deny access).

Filter by
Sorted by
Tagged with
1
vote
0answers
112 views

linux mint very slow boot and authorization

I installed linux Mint. But it's booting too slow (20-30 seconds). Even during authorization it takes 3-5 seconds. Windows, for example, loaded for 5 seconds max. (I have an SSD and mint was also ...
0
votes
1answer
53 views

How to prevent my additions to authorized keys from being overwritten by puppet?

At my company all employees are given a private key, which get's renewed each year, that they should use to connect to VMs. The SA here have a puppet script which will look up my public key and save ...
0
votes
0answers
11 views

Put users into system group by LDAP group membership

Currently users can authenticate via SSSD using their LDAP user account. But there is no way of specifying special group memberships. Now I have a LDAP group like this: The user objects itself does ...
-1
votes
1answer
40 views

how to enable root ssh public key login with no root account and sshpass and sudo?

I have created an azure vm server which is ubuntu 1804 and I need to enable root ssh public key login with it. Azure do not want me to enable root ssh public key login when the server is created, so I ...
16
votes
3answers
15k views

Is it possible to have 2 ports open on SSH with 2 different authentication schemes?

I'm currently trying to set up an SSH server so that access to it from outside the network is ONLY allowed using an SSH Key and does not allow access to root or by any other username/password ...
0
votes
0answers
13 views

Different files are being viewed using different ways to login (ecryptfs) [duplicate]

The issue: When logging in using a local access(typing password near server) and then using SSH, correct files exist in home directory of a user. When logging in using SSH and then locally both see ...
3
votes
2answers
70 views

If I change a user's username and password on a server, should I still be able to remotely SSH in as this user without any other changes? [closed]

My work has set up an Ubuntu server for my team to host a project on. They set up a sudo user for me with my name as the username, and a default password. I was able to SSH into the server using these ...
3
votes
1answer
143 views

sudo escalation password fails - /etc/shadow hash ok, group ok, /etc/sudoers ok

After system update/upgrade, I cannot escalate with sudo using correct password: user $ sudo -s [sudo] password for user: ******************** Sorry, try again. [sudo] password for user: *************...
1
vote
0answers
608 views

whoami returns user, but usermod complains it doesn't exist

I have Linux (Ubuntu) on a VM provided by corporate IT in my organization, and I have a user "myuser". whoami is able to return the username: myuser@host:/home/myuser$ whoami myuser id returns info ...
0
votes
1answer
44 views

How to deny access from just one host in a domain

In apache 2.4.6, I would like to deny access to an entire domain, except for one (or maybe more) specific hosts (and the rest of the world). sort of like: Require not host xxx.com ## nobody from ...
3
votes
2answers
117 views

Why do I have to use “sudo” when I am in the super user group?

[martin@A08-R32-I196-2-FZ1RLP2 anaconda3]$ groups martin martin : martin wheel I am under my own home directory: [martin@A08-R32-I196-2-FZ1RLP2 anaconda3]$ pwd /home/martin/anaconda3 But when I ...
0
votes
2answers
48 views

How do I activate time based admin login to a Linux system using windows active directory?

I have set up a solution where the login to our linux systems is regulated by microsoft active Directory and group memberships. Now i want the access time based so that the ad user will be kicked out ...
2
votes
2answers
275 views

block scripted sudo

I don't like typing the password for sudo so I disabled it with %sudo ALL=(ALL) NOPASSWD: ALL Now I have a bad side effect that any shell script I run can silently execute sudo on my behalf. The ...
1
vote
1answer
7k views

Trying to run “service nginx restart” from a non root user

I'm pretty new to the deployment world but this is what's going on. I have a new Ubuntu (Ubuntu 16.04.4 LTS) droplet from DigitalOcean. I installed and configured nginx and everything is working ...
1
vote
1answer
3k views

Restrict access to subdirectory in Apache

I've a very easy question. However I have been digging all the manuals for an answer for a full day already. What I want is to configure Apache to give anyone read access to /var/www but restrict /...
0
votes
1answer
61 views

samba share mount owner is colord

My hair is falling out already on the account of samba share issues. I have an ext4 samba share on a raspberry pi, with a mask 0777 specified. Only myuser on raspberry can authenticate via samba. ...
2
votes
2answers
81 views

Multiple ssh access types from a given user1/client to the same user2/server

I want to access from one user/client combination (say, user1@cl) to a user/server combination (say, user2@srv) via ssh, with two different types of Access: Access type #1 would be restricted to ...
3
votes
0answers
2k views

Show a web page, once connected to an open wifi hotspot

I'm trying to create a wifi hotspot without encryption on my Raspberry Pi 3, by using Hostapd. How can I show a window with my own web page every time someone connects to it? I think the closest ...
0
votes
1answer
6k views

Where are NFS v4 logs under systemd?

My error is: mount.nfs4: access denied by server while mounting fileserver:/export/path/one My question is: where would the detailed log information be on the server (under systemd)? More ...
0
votes
1answer
1k views

Add public key to remote server authorized keys without saving file there

I'm trying to write a script to place my public key into the authorized_keys of a remote host, but I'm not sure how to do it without copying the file to the remote host or overwriting the ...
3
votes
0answers
723 views

Apache group authorization with mod_lookup_identity

I need to have some users authenticated against an Active Directory database, and I'd like to use mod_authnz_pam over mod_authnz_ldap for that. The users will have access to certains folders, ...
1
vote
2answers
11k views

SCP command keeps asking password

I've been struggling for days with this now and can't find what I'm doing wrong. I've got a website on a VPS server. Every night I make a backup of the database. It gets stored on my VPS server. I ...
7
votes
2answers
3k views

Explanation of file - org.freedesktop.login1.policy

I am using Ubuntu 16.04. There is a file located at /usr/share/polkit-1/actions/org.freedesktop.login1.policy which seems to control the permissions regarding shutdown/suspend/hibernate options. ...
1
vote
1answer
90 views

Root password is asked for anything after dist-upgrade [closed]

I'm using Debian Stretch and today I did apt-get upgrade && apt-get dist-upgrade. After that, nearly every action is started to ask root password, including external monitor plug/unplug, USB ...
3
votes
3answers
5k views

How can I keep rsync from using encryption and compression for the file transfers after the connection is authorized?

I understand that a secure connection (i.e. ssh) is needed to authorize a connection to the remote server. But after that is authorized can the data be transmitted without encryption and compression ...
5
votes
1answer
2k views

Debian stretch asks for root password in order to mount usb disks after upgrade

After apt-get upgrade && apt-get dist-upgrade, Debian Stretch started to ask for root password for external usb disks. Creating a /etc/polkit-1/localauthority/50-local.d/55-usb-mount.pkla ...
2
votes
1answer
3k views

What is the default password on ubuntu for users created with useradd?

In order to install a service on Ubuntu 14.04 like "openemm" I have created a user name and group: sudo sudo useradd openemm -m -G openemm -d /home/openemm Now I want to login with that username su ...
1
vote
2answers
3k views

'+' and 's' in permission strings

If the ls -l command gives me a permission string like rwsr-s--x What does the 's' mean? The only sources I found mention that it can be present sometimes but do not elaborate. What does a '+' ...
1
vote
1answer
1k views

Set a password on Damn Small Linux

I'm running Damn Small Linux. When you open the command prompt, you are automatically logged in as the default user called dsl and granted root privileges (with sudo). How can I set a password for the ...
14
votes
1answer
8k views

D-Bus authentication and authorization

I'm trying to set up remote access to D-Bus, and I don't understand how authentication and authorization are (not) working. I have a D-Bus server listening on an abstract socket. $ echo $...
9
votes
3answers
49k views

What is difference between pbrun and sudo command?

What is difference between pbrun and sudo command? I have seen people executing pbrun sudo su - what this means? I know su -, it will try to switch to root user. What speciality pbrun gives to sudo ...
1
vote
2answers
5k views

curl authentication works but I cannot reach other pages

I'm trying to use cURL to automate some processes that we usually do using a website. I was able to login to the website using curl and the following command: curl -k -v -i --user "[user]:[password]"...
1
vote
1answer
911 views

Server Authorization directory incorrect ownership during linux mint installation

When installing linux mint 17.1 from a bootable usb onto a hard drive I get the following message: 'Server Authorization directory (daemon/servAuthDir) is set to /var/lib/mdm but is not owned by ...
0
votes
1answer
739 views

Authconfig doesn't find all ldap groups

My (soon to be) admin account is in two groups: # ldapsearch \ > -v \ > -H ldaps://localhost:636 \ > -D "${l_dirmgr}" \ > -w $(cat ${f_dirmgr_passphrase}) \ > -b "ou=groups,${l_basedn}...
7
votes
1answer
3k views

Apache Authorization for the Allowed Users?

I have read the answer to this question: https://stackoverflow.com/questions/4102763/apache-basic-authentication-except-for-those-allowed It helped me understand how to not authenticate some users (...
1
vote
2answers
2k views

Shell Script - how to scp into remote server and download files and protect password

I have a remote server that I need to download Apache logs from. I can manually scp into the server and get the files, but I'd like to put this in crontab. The only way to automate it is to include ...
2
votes
1answer
917 views

Creating a linux user with limited privileges for ssh tunnelling

I am following this post to create ssh tunnel to mysql. The details description of my application scenario is given in my other SOQ. I exactly followed these steps to create a user: useradd -s /bin/...
4
votes
0answers
2k views

Is there an alternative to OpenLDAP / Kerberos? [closed]

Are there ways to do centralized secure network-based authentication & authorization and user management that aren't OpenLDAP and Kerberos? Frankly, Kerberos is a nightmare to configure, leaving ...
2
votes
1answer
1k views

Why is bluetooth-agent getting stuck on authorizing?

I am trying to manually connect between my laptop and phone. I have bluez-utils version 4.98-2ubuntu7 installed. When I run the agent on the terminal, I get: asheesh@U32U:~$ sudo bluetooth-agent 4835 ...
9
votes
2answers
447 views

How to automatically enter sudo's grace period upon CLI login? [duplicate]

What I would like to do is be able to login and sudo commands immediately without entering a password again. It is very redundant to type my password twice in a row when I need to login and run a ...
1
vote
1answer
216 views

SELinux policy to authorize some users to start / stop certain services

How can I give certain users authorization to start and stop certain services? I am asking specifically about Fedora 19 systems with SELinux installed. The utility to call for services administration ...
2
votes
3answers
3k views

How to password-protect a script on Linux?

How do you set a password to execute a command or script in Linux? I need to avoid a script (in which user and password details are included) from being used/executed from unauthorized users. So is ...
-1
votes
3answers
1k views

Is there a way to 'authorize' a command typed in by a user?

is there a way we can authorize a command typed by a user before it takes effect? For example, when a user types cp file1 file2, the command will not be executed and a root / root-equivalent user ...
10
votes
3answers
45k views

User denied ssh access while in AllowUsers list

I've inherited the administration of a linux box in my workplace; it was set up by a colleague who is now gone. Recently, I added a new user to the system, and tried to give her ssh access as well; ...
5
votes
1answer
7k views

Allowing ssh, but only to execute a specific script [duplicate]

Possible Duplicate: Creating a UNIX account which only executes one command There is a shell script which has to be executed through an existing user account XXX. Now I have various other users ...
11
votes
2answers
7k views

Why can an unprivileged user execute the `sync` command?

Currently on Ubuntu Linux, but I noticed this on other OSs too. Apparently any user can execute the sync command – but why is this? I can only see the disadvantage: system slow down due to unnecessary ...
3
votes
1answer
854 views

How to associate only one public key with a restricted shell like scponly?

I'd like to use a passwordless key to perform e.g. unison synchronization while being able to SSH into the server only with a password-protected key. The usual way of using scponly is changig the ...
3
votes
1answer
7k views

How to ensure that anonymous FTP has been disabled on a Solaris 10 system?

What line in which configuration files in the /etc/ftpd directory do I have to check to ensure that anonymous FTP has been disabled? From my understanding now, to ensure that anonymous FTP is ...
1
vote
0answers
81 views

Run a script (for an app GUI) when logged from NX but limit shell commands on terminal

I have a user which will be accessing an app GUI via NX NoMachine. I want to allow this user to execute the command to bring up the app GUI (done automatically by NX) BUT prevent him from executing ...
5
votes
1answer
674 views

Pulseaudio/X permission other user/SSH

My user user1 is running a graphical X session with pulse configured per-user. I need to run a graphical program that uses audio with user2. If I do su user2; program program doesn't start and I get ...