Permission issue for folder with AD user
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
I have a folder on a linux machine to which a cisco(ISE) device sends the backup through SFTP. The files are coming to the folder successfully but unable to view the files from the device. CISCO TAC says that its a permission issue for the user on the folder. The user is a windows AD user.
I have given the user permission to the folder by the steps below:
Found the uid for the AD user.
[ananair@cap-nwmon-01 anand]$ id uid=438611341(ananair) gid=438600513(domain users) groups=438600513(domain users)
Changing ownership
chown 438611341 /var/ISE_BACKUP
Giving full recursive permission.
sudo chmod -R 777 ISE_BACKUP
Current status.
drwxrwxrwx 2 ananair root 4096 Feb 16 04:24 ISE_BACKUP
please let me know if there is anything wrong in this
linux permissions sftp active-directory cisco
edited Feb 16 at 9:54
Félicien
42819
asked Feb 16 at 8:54
Anand S Nair
11
add a comment |Â
up vote
0
down vote
favorite
I have a folder on a linux machine to which a cisco(ISE) device sends the backup through SFTP. The files are coming to the folder successfully but unable to view the files from the device. CISCO TAC says that its a permission issue for the user on the folder. The user is a windows AD user.
I have given the user permission to the folder by the steps below:
Found the uid for the AD user.
[ananair@cap-nwmon-01 anand]$ id uid=438611341(ananair) gid=438600513(domain users) groups=438600513(domain users)
Changing ownership
chown 438611341 /var/ISE_BACKUP
Giving full recursive permission.
sudo chmod -R 777 ISE_BACKUP
Current status.
drwxrwxrwx 2 ananair root 4096 Feb 16 04:24 ISE_BACKUP
please let me know if there is anything wrong in this
linux permissions sftp active-directory cisco
edited Feb 16 at 9:54
Félicien
42819
asked Feb 16 at 8:54
Anand S Nair
11
Is SELinux running on the server?
– Raman Sailopal
Feb 16 at 11:20
No SELinux is disabled
– Anand S Nair
Feb 16 at 12:45
I see the group ownership is roor. Although that shouldn't make a difference, but sometimes you need to change the group ownership on the directory too(as in case of apache). Try changing the group ownership by using chgrp command and then check it again.
– Ayush Goyal
Feb 16 at 14:18
Found these when i checked the log. Feb 19 03:12:05 cap-nwmon-01 sshd[24541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair . Feb 19 03:12:06 cap-nwmon-01 sshd[24541]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair Since the user is an AD user first there is a failure authentication and then a success. will it be due to this
– Anand S Nair
Feb 19 at 6:17
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I have a folder on a linux machine to which a cisco(ISE) device sends the backup through SFTP. The files are coming to the folder successfully but unable to view the files from the device. CISCO TAC says that its a permission issue for the user on the folder. The user is a windows AD user.
I have given the user permission to the folder by the steps below:
Found the uid for the AD user.
[ananair@cap-nwmon-01 anand]$ id uid=438611341(ananair) gid=438600513(domain users) groups=438600513(domain users)
Changing ownership
chown 438611341 /var/ISE_BACKUP
Giving full recursive permission.
sudo chmod -R 777 ISE_BACKUP
Current status.
drwxrwxrwx 2 ananair root 4096 Feb 16 04:24 ISE_BACKUP
please let me know if there is anything wrong in this
linux permissions sftp active-directory cisco
edited Feb 16 at 9:54
Félicien
42819
asked Feb 16 at 8:54
Anand S Nair
11
I have a folder on a linux machine to which a cisco(ISE) device sends the backup through SFTP. The files are coming to the folder successfully but unable to view the files from the device. CISCO TAC says that its a permission issue for the user on the folder. The user is a windows AD user.
I have given the user permission to the folder by the steps below:
Found the uid for the AD user.
[ananair@cap-nwmon-01 anand]$ id uid=438611341(ananair) gid=438600513(domain users) groups=438600513(domain users)
Changing ownership
chown 438611341 /var/ISE_BACKUP
Giving full recursive permission.
sudo chmod -R 777 ISE_BACKUP
Current status.
drwxrwxrwx 2 ananair root 4096 Feb 16 04:24 ISE_BACKUP
please let me know if there is anything wrong in this
linux permissions sftp active-directory cisco
edited Feb 16 at 9:54
Félicien
42819
asked Feb 16 at 8:54
Anand S Nair
11
edited Feb 16 at 9:54
Félicien
42819
edited Feb 16 at 9:54
Félicien
42819
edited Feb 16 at 9:54
Félicien
42819
42819
asked Feb 16 at 8:54
Anand S Nair
11
asked Feb 16 at 8:54
Anand S Nair
11
asked Feb 16 at 8:54
Anand S Nair
11
11
Is SELinux running on the server?
– Raman Sailopal
Feb 16 at 11:20
No SELinux is disabled
– Anand S Nair
Feb 16 at 12:45
I see the group ownership is roor. Although that shouldn't make a difference, but sometimes you need to change the group ownership on the directory too(as in case of apache). Try changing the group ownership by using chgrp command and then check it again.
– Ayush Goyal
Feb 16 at 14:18
Found these when i checked the log. Feb 19 03:12:05 cap-nwmon-01 sshd[24541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair . Feb 19 03:12:06 cap-nwmon-01 sshd[24541]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair Since the user is an AD user first there is a failure authentication and then a success. will it be due to this
– Anand S Nair
Feb 19 at 6:17
add a comment |Â
Is SELinux running on the server?
– Raman Sailopal
Feb 16 at 11:20
No SELinux is disabled
– Anand S Nair
Feb 16 at 12:45
I see the group ownership is roor. Although that shouldn't make a difference, but sometimes you need to change the group ownership on the directory too(as in case of apache). Try changing the group ownership by using chgrp command and then check it again.
– Ayush Goyal
Feb 16 at 14:18
Found these when i checked the log. Feb 19 03:12:05 cap-nwmon-01 sshd[24541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair . Feb 19 03:12:06 cap-nwmon-01 sshd[24541]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair Since the user is an AD user first there is a failure authentication and then a success. will it be due to this
– Anand S Nair
Feb 19 at 6:17
Is SELinux running on the server?
– Raman Sailopal
Feb 16 at 11:20
Is SELinux running on the server?
– Raman Sailopal
Feb 16 at 11:20
No SELinux is disabled
– Anand S Nair
Feb 16 at 12:45
No SELinux is disabled
– Anand S Nair
Feb 16 at 12:45
I see the group ownership is roor. Although that shouldn't make a difference, but sometimes you need to change the group ownership on the directory too(as in case of apache). Try changing the group ownership by using chgrp command and then check it again.
– Ayush Goyal
Feb 16 at 14:18
I see the group ownership is roor. Although that shouldn't make a difference, but sometimes you need to change the group ownership on the directory too(as in case of apache). Try changing the group ownership by using chgrp command and then check it again.
– Ayush Goyal
Feb 16 at 14:18
Found these when i checked the log. Feb 19 03:12:05 cap-nwmon-01 sshd[24541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair . Feb 19 03:12:06 cap-nwmon-01 sshd[24541]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair Since the user is an AD user first there is a failure authentication and then a success. will it be due to this
– Anand S Nair
Feb 19 at 6:17
Found these when i checked the log. Feb 19 03:12:05 cap-nwmon-01 sshd[24541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair . Feb 19 03:12:06 cap-nwmon-01 sshd[24541]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair Since the user is an AD user first there is a failure authentication and then a success. will it be due to this
– Anand S Nair
Feb 19 at 6:17
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f424559%2fpermission-issue-for-folder-with-ad-user%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Is SELinux running on the server?
– Raman Sailopal
Feb 16 at 11:20
No SELinux is disabled
– Anand S Nair
Feb 16 at 12:45
I see the group ownership is roor. Although that shouldn't make a difference, but sometimes you need to change the group ownership on the directory too(as in case of apache). Try changing the group ownership by using chgrp command and then check it again.
– Ayush Goyal
Feb 16 at 14:18
Found these when i checked the log. Feb 19 03:12:05 cap-nwmon-01 sshd[24541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair . Feb 19 03:12:06 cap-nwmon-01 sshd[24541]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.155.220.130 user=ananair Since the user is an AD user first there is a failure authentication and then a success. will it be due to this
– Anand S Nair
Feb 19 at 6:17