Contact us |
Preamble
USER ACCOUNTSUser management is very important on any multi-user network operating system. Linux is a multi-user network operating system. Without the users, there wouldn’t be any need to have a multi-user network operating system in the first place! Managing users on a system is very intricately tied up to security on the system. There is an old saying that : “A system is as secure as it’s weakest user”. Linux inherits the old UNIX tradition of governing access to files, programs and other resources on a per-user and per-group basis. Just like almost all other configurations in Linux, user management can be carried out by directly editing configuration files that can be found in the file system hierarchy. This lab will explore user management through the manual way and also through the use of system utilities. A brief look at file permissions and ownerships will also be made. Some common utilities used in the day-to-day user and group management tasks are listed below: useradd: usage: useradd [-u uid [-o]] [-g group] [-G group,...] [-d home] [-s shell] [-c comment] [-m [-k template]] [-f inactive] [-e expire ] [-p passwd] [-M] [-n] [-r] name useradd -D [-g group] [-b base] [-s shell] [-f inactive] [-e expire ] groupadd: usage: groupadd [-g gid [-o]] [-r] [-f] group userdel: usage: userdel [-r] name groupdel: usage: groupdel group usermod:
usage: usermod [-u uid [-o]] [-g group] [-G group,...]
[-d home [-m]] [-s shell] [-c comment] [-l new_name]
[-f inactive] [-e expire ] [-p passwd] [-L|-U] name
passwd: Usage: passwd [OPTION...] <accountName> -k, --keep-tokens keep non-expired authentication tokens -d, --delete delete the password for the named account (root only) -l, --lock lock the named account (root only) -u, --unlock unlock the named account (root only) -f, --force force operation -x, --maximum=DAYS maximum password lifetime (root only) -n, --minimum=DAYS minimum password lifetime (root only) -w, --warning=DAYS number of days warning users receives before password expiration (root only) -i, --inactive=DAYS number of days after password expiration when an account becomes disabled -S, --status report password status on the named account (root only)
|
Login... |
||||
