search for: ingroups

Hello, I have the following define: define adduser ($shell, $group, $fullname, $ingroups = "none", $home = "none") { user { "$name": ensure => present, comment => "$fullname", gid => "$group", groups => "$ingroups", membership => minimum, shell => "$shell",...

Thanks to Anthony Ciarochi at Centeris for this solution. I have a Centos (Red Hat-based) server that is now accessible to AD users AND local users via ssh. I can control which AD groups can login using the syntax below. Red Hat-based distros use "pam_stack" in pam.d which is quite different than Debian's "include" based pam.d, cat /etc/pam.d/sshd #

at http://wiki.openpbx.org/tiki-index.php?page=Easy+route+to+building+OpenPBX.org there is the following adduser command: adduser --no-create-home --ingroup openpbx --disabled-password --disabled-login openpbx This does NOT seem to be the right format for Centos. So far, using man, I have come up with; adduser -M -g openpbx What else do I need?

I have a RHEL 6.3 machine successfully bound to AD using winbind, and commands like wbinfo -u and wbinfo -g output the users and groups. I can also log in as any AD user. The problem is, I can log on as any AD user. require_membership_of is being ignored. I can put in a valid group with no spaces in the name, a group by SID, and either way, everyone can log in. I've put this option in both

Hi, I want that users can log on (SSH and console) a Debian box can do it through Active Directory. I still want that root user can log on (SSH and console) so I created a wheel group for that. I can log on successfully with all AD and root users. However, I'd like to limit the AD users to the technology domain group. I've googled a lot:

Dear All, Is it possible to make any authorization (eg. checking of group membership) in case of GSSAPI authentication? Our dovecot authenticates the users against PAM and GSSAPI. In the PAM file I'm able to check if a user is a member of a selected (e.g mailreader) group. If the user is member, he can login otherwise not (see below). If the user has a valid Kerberos ticket and he

I've a big problem with SIP forwarding back into 'ringing groups' creating what can only be described as call storms :-( I have a 'ringing groups' of SIP phones with an effective dialplan (much simplified) like so: ; Purchase ledger [ptsn_inbound] exten => _846061,1,Dial(Local/6061 at groups) .... [groups] exten =>

On 4/17/2013 4:28 PM, Michael Spencer wrote: > On Tue, Apr 16, 2013 at 10:25 AM, Shankar Easwaran > <shankare at codeaurora.org>wrote: > >> Hi Nick, Michael, >> >> I was trying to vision an advanced command line processing framework for >> lld, which would essentially do the following >> >> a) Creating nodes from command line options >> b)

Hi, all, I build clang-tidy by "ninja clang-tidy", but when I run below command, I get no checks. Where is the clang-diagnostic* checkers? Thanks in advance. > $ /Users/zyg/Documents/workspace/llvm-project/llvm/cmake-build-debug/bin/clang-tidy --checks="-*,clang-diagnostic-*" --list-checks No checks enabled.

Hi, Everybody, I have a couple of quick questions that I'm having a little of difficulty with. I'm guessing these will be pretty easy to answer. The first is; 1) Is it possible to deterministically set the domain name that will be used when the "winbind use default domain = Yes" option is configured in /etc/samba/smb.conf? I want to set a default domain, however I do not

Hi all, I'm using samba with winbind which has been integrated with Active Directory. In the smb.conf file, I have template shell = /bin/bash winbind use default domain = yes to allow ssh but I don't want all the domain users to be able to ssh. Is there a way to only allow for example) domain\ssh_group which is an active directory group to be able to ssh into the server? This is my

Hi List, I have some issues with user manager for domains (srvtools.exe from MS) and the scripts mentioned in the subject. The examples from the samba howto collection seem to cause serious issues here. I am on debian etch and tried to create my own scripts but till now to now avail. With the examples from the docs I could add groups, but could not add users to groups. There was the option -A

Dear All, We are having a very similar issue with dovecot 2.2.34 as ?kos. We want our users to authenticate via GSSAPI over Kerberos using their TGT. Our setup is two distinct locations with their own dovecot's with access to these being handled via LDAP auth mechanism with filters to check for their group memberships, i.e. users from location A are in group A and users from location B

I am not a member of the samba listserv, but I wanted to contribute the following code to the samba effort. The following is clipped from some experimental changes I have made to my own copy of the samba source. I have not included all of the changes because I don't have the time to. But someone should be able to properly do the integration without too much effort. Summary, these

I've been running the same configuration for a couple of years now, and since I've upgraded to Office 2007, MS Word and MS Excel files save to my samba shares as -r-------- even when they are opened as being chmod 777. Files I create/edit using other editors or windows explorer are put onto the share with the correct permissions. My conf looks like this: [global] workgroup = WG

I've setup a portable system (ubuntu 16.04) joined to my AD domain, that in their primary network works as expected. But in this 'COVID time', the portable start to roam around, and users say me that, suddenly after some days of use, get incredibly sloooowww... after that users reboot, and cannot get back in, login refused. I've setup a VPN, but clearly if users cannot login

Tried single quotes on Domain Admins in the pam.d file as well as a backslash on the space with no effect. I've found several references that just say "no spaces in group names." Is there really no way to do this? Also, most references I find to using these lines in pam.d say that "sufficient" should work, but I'm finding that users in the named group can then log in

Hi Guys, Advise, I have 200 users, they all have access to 20 shares in different combinations. They all have their own netlogon scripts... its a management nightmare, is there a way to create a universal netlogon script that I can include all the shares to mount and it will silently fail on the ones it cant? Perhaps there is a smarter way to implement this idea, lynching is welcome, so is

Hi, I have installed Puppet puppet-0.23.2-1.el4 & puppet-server-0.23.2-1.el4. Now trying to configure. I have a basic config which changes the sudo permission of the file. Currently I am using the puppet server as client. Now I wanted to add all my hosts some linux some unix. So was looking for a config syntax whioh can create groups. Like IT = [ host-1, host2, shost3 ]

Good Day, I am testing, in a lab environment, samba shares with ad authentication for access. My setup is as follows : * Windows 2008 RC2 * RHEL 5.9 * Windows 7 * Windows XP SP3 * Samba 3.0.33-3.39.el5_8 All machines, including the RHEL Server having been added to the Domain running on the Windows 2008 RC2 Server. As per the subject, when trying to connect, from XP or Win 7, to the shares I