Annotation of wikisrc/tutorials/user_management.mdwn, revision 1.9

1.2       schmonz     1: **Contents**
                      2: 
                      3: [[!toc levels=2]]
                      4: 
                      5: #Preface
                      6: 
                      7: Before you start to do user and group management you must: 
                      8: 
                      9: 1. For security reasons, create substitute user and name it as you like, here it is referred as _noroot_: 
1.6       leot       10: 
1.8       leot       11: [[!template id=programlisting text="""
                     12: # useradd -m -G wheel _noroot_
                     13: """]]
1.2       schmonz    14: 
                     15: 2. Set password for _noroot_ user: 
1.6       leot       16: 
1.8       leot       17: [[!template id=programlisting text="""
                     18: # passwd _noroot_
                     19: """]]
1.2       schmonz    20: 
                     21: 3. Exit and log in as _noroot_ user. 
                     22: 
1.5       sevan      23: 4. Use the `su` command to obtain the root privileges for _noroot_: 
1.2       schmonz    24:     
1.8       leot       25: [[!template id=programlisting text="""
                     26: $ su
                     27: """]]
1.2       schmonz    28:     
                     29: 
1.5       sevan      30: 5. Forget to use the `root` for maintenance or regular administration of the system. You free to find any secure and convenient spot for the root password be available upon your need. 
1.2       schmonz    31: 
                     32:   
1.5       sevan      33: If your favorite user with login password is already assigned in the system and no need to create new one. Omit first steps from above. Do modify user information by adding _your no root user_ into the wheel group and `su` anytime per your desire: 
1.2       schmonz    34:     
1.8       leot       35: [[!template id=programlisting text="""
                     36: # usermod -G wheel _noroot_
                     37: """]]
1.2       schmonz    38:     
                     39: 
                     40: #[**User**](http://netbsd.gw.com/cgi-bin/man-cgi?user++NetBSD-current)
                     41: 
                     42: The NetBSD maintains information in regard of each user who logs into, access system, runs processes on so forth. This include and not limited to: 
                     43:     
1.9     ! leot       44:  - user name
        !            45:  - password
        !            46:  - group
        !            47:  - base_dir
        !            48:  - skel_dir
        !            49:  - shell
        !            50:  - class
        !            51:  - homeperm
        !            52:  - inactive
        !            53:  - expire
1.2       schmonz    54:     
                     55: 
                     56: The superuser called root has no limitations on its privileges. 
                     57: 
                     58: To limit user priveleges consider to set limits by: coredumpsize, cputime, filesize, quota, maxproc, memory, openfiles etc. 
                     59: 
1.5       sevan      60: `user` is frontend to the useradd, usermod, userinfo and userdel commands, it helps to manage users in the system. 
1.2       schmonz    61: 
                     62: Use [id](http://netbsd.gw.com/cgi-bin/man-cgi?id+1+NetBSD-current) to see user identity: 
                     63: 
1.5       sevan      64:     $ id
1.2       schmonz    65:     
                     66: 
                     67: Use [w](http://netbsd.gw.com/cgi-bin/man-cgi?w+1+NetBSD-current) to see who present and what they are doing: 
                     68: 
1.5       sevan      69:     $ w
1.2       schmonz    70:     
                     71: 
                     72: Use [last](http://netbsd.gw.com/cgi-bin/man-cgi?last+1+NetBSD-current) to see last logins: 
                     73: 
                     74: 
1.5       sevan      75:     $ last
1.2       schmonz    76:     
                     77: 
1.4       sevan      78: ##  [useradd](http://netbsd.gw.com/cgi-bin/man-cgi?useradd++NetBSD-current)
1.2       schmonz    79: 
                     80: To add user do: 
                     81:     
1.5       sevan      82:     user add [options] _user_
1.2       schmonz    83:     
                     84: 
                     85: To add a user and create a new home directory: 
                     86:     
1.5       sevan      87:     # useradd -m _myuser_
1.2       schmonz    88:     
                     89: 
                     90: Look into the NetBSD Guide [Chapter 5.6](http://netbsd.org/docs/guide/en/chap-boot.html#chap-boot-adding-users)
                     91: 
                     92: ##  [userinfo](http://netbsd.gw.com/cgi-bin/man-cgi?userinfo++NetBSD-current)
                     93: 
                     94: To see user information do: 
                     95:     
1.5       sevan      96:     $ userinfo _myuser_
1.2       schmonz    97:     
                     98: 
1.4       sevan      99: ##  [usermod](http://netbsd.gw.com/cgi-bin/man-cgi?usermod++NetBSD-current)
1.2       schmonz   100: 
                    101: To modify existing user login do: 
                    102:     
1.5       sevan     103:     # user mod [options] _user_
1.2       schmonz   104:     
                    105:     
1.5       sevan     106:     # usermod -C yes _username_             ; set Close lock on user account
1.2       schmonz   107:     
                    108:     
1.5       sevan     109:     # usermod -C no _username_              ; unlock user account
1.2       schmonz   110:     
                    111:     
1.5       sevan     112:     # usermod -G wheel _username_           ; add user to group _wheel_
1.2       schmonz   113:     
                    114:     
1.5       sevan     115:     # usermod -s /sbin/nologin _username_   ; remove login shell
1.2       schmonz   116:     
                    117:     
1.5       sevan     118:     # usermod -s /bin/sh _username_         ; set login shell
1.2       schmonz   119:     
                    120:     
1.5       sevan     121:     # usermod -F _username_                 ; force user to change password
1.2       schmonz   122:     
                    123: 
                    124: ##  [userdel](http://netbsd.gw.com/cgi-bin/man-cgi?userdel++NetBSD-current)
                    125: 
                    126: To remove a user from the system do: 
                    127:     
1.5       sevan     128:     # userdel _myuser_
1.2       schmonz   129:     
                    130: 
1.4       sevan     131: ##  [passwd](http://netbsd.gw.com/cgi-bin/man-cgi?passwd++NetBSD-current)
1.2       schmonz   132: 
                    133: To see a list of all users in the system do: 
                    134:     
                    135:     $ cat /etc/passwd
                    136:     
                    137: 
                    138: To edit _/etc/passwd_ file do: 
                    139:     
                    140:     # vipw
                    141:     
                    142: 
1.4       sevan     143: ##  [chpass](http://netbsd.gw.com/cgi-bin/man-cgi?chpass++NetBSD-current)
1.2       schmonz   144: 
                    145: Use [chpass, chfn, chsh]((http://netbsd.gw.com/cgi-bin/man-cgi?chpass+1+NetBSD-current)) to add or change user database information. 
                    146: 
                    147: To change the shell of _myuser_, for an exapmle to /bin/ksh: 
                    148:     
1.5       sevan     149:     # chpass -s /bin/ksh _myuser_
1.2       schmonz   150:     
                    151: 
                    152:   
                    153: 
                    154: 
                    155: #  [**Group**](http://netbsd.gw.com/cgi-bin/man-cgi?group++NetBSD-current)
                    156: 
1.5       sevan     157: To manage groups check `/etc/group` file which maintains name of each group, group id and list of users who is a group member. 
1.2       schmonz   158: 
1.5       sevan     159: `group` is frontend to the groupadd, groupmod, groupinfo and groupdel commands, it helps to manage groups in the system. 
1.2       schmonz   160: 
                    161: To add group do: 
                    162:     
1.5       sevan     163:     group add [options] _group_
1.2       schmonz   164:     
                    165: 
                    166: To delete group do: 
                    167:     
1.5       sevan     168:     group del [options] _group_
1.2       schmonz   169:     
                    170: 
                    171: To obtain group information do: 
                    172:     
1.5       sevan     173:     group info [options] _group_
1.2       schmonz   174:     
                    175: 
                    176: To modify existing group do: 
                    177:     
1.5       sevan     178:     group mod [options] _group_
1.2       schmonz   179:     
                    180: 
1.5       sevan     181: To remove user from the group you have to do `user del` and then add user again. 
1.2       schmonz   182: 
                    183: ##  [groupadd](http://netbsd.gw.com/cgi-bin/man-cgi?groupadd+8+NetBSD-current)
                    184: 
                    185: ##  [groupdel](http://netbsd.gw.com/cgi-bin/man-cgi?groupdel+8+NetBSD-current)
                    186: 
                    187: ##  [groupinfo](http://netbsd.gw.com/cgi-bin/man-cgi?groupinfo+8+NetBSD-current)
                    188: 
                    189: ##  [groupmod](http://netbsd.gw.com/cgi-bin/man-cgi?groupmod+8+NetBSD-current)
                    190: 
                    191: #  Other
                    192: 
1.4       sevan     193: ##  [chmod](http://netbsd.gw.com/cgi-bin/man-cgi?chmod++NetBSD-current)
1.2       schmonz   194: 
1.4       sevan     195: ##  [chown](http://netbsd.gw.com/cgi-bin/man-cgi?chown++NetBSD-current)
1.2       schmonz   196: 
                    197: To change files/directory ownership: 
                    198:     
                    199:     #chown -R  myuser path 
                    200:     
                    201: 
                    202: Where myuser is the name of user and path is directory where files are located. 
                    203: 
1.4       sevan     204: ##  [chgrp](http://netbsd.gw.com/cgi-bin/man-cgi?chgrp++NetBSD-current)
1.2       schmonz   205: 
1.4       sevan     206: ##  [chroot](http://netbsd.gw.com/cgi-bin/man-cgi?chroot++NetBSD-current)
1.2       schmonz   207: 
1.4       sevan     208: ##  [quota](http://netbsd.gw.com/cgi-bin/man-cgi?quota++NetBSD-current)
1.2       schmonz   209: 
                    210: Use quota to set users quotas per desire. 
                    211: 
                    212: #  See also
                    213: 
                    214:   * [[How to set up per-user timezones]]
                    215:   * How to [[Hide other user's processes]]
                    216:   * [[Userland version]]
                    217:   * [[The_NetBSD_System_Manager's_Manual#Users_and_Accounts_Management]]

CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb