zoukankan      html  css  js  c++  java
  • 拾遗:Linux 用户及权限管理基础


     Lacks of Knowledge 1:


      Linux has large amount of COMMANDS,but many of them have similar funtions,it's annoying! So,how to get the highest efficiency in a very limited period?

      Choise only one method which cat solve your problem[s] perfectly,and throw others away!

      Just as the command "history",I will never waste my time on "!xxx","!<",etc. Because "history | grep" will solve any problems as all the others can do.  

      It's same for me to deal with the chapter of user-management.I will only focus on the formats of four files(/etc/passwd,/etc/shadow/,/etc/group,/etc/gshadow) and three necessary commands("useradd","newusers","chpasswd").

      These seven tools are enough,as below: 

    f@z ~ $ cat /etc/passwd
    qemu:x:77:77:added by portage for libvirt:/dev/null:/sbin/nologin
    ldap:x:439:439:added by portage for openldap:/usr/lib64/openldap:/sbin/nologin
    name:password:UID:GID:unnecessary comments of user:home directory:shell
    z f # cat /etc/shadow
    root:$6$QJnD:17015:0:99999:7:::
    f:$6$5ajHHo.:17015:0:99999:7:::

    name:password:date of last password change:minimun password age[days]:maximum password age[days]:password warning period[days]:password inactivity period[days]:account expiration date

    Note:the third and eighth object(date of last password change,account expiration date) is expressed as the number of days since Jan 1, 1970.

    z f # cat /etc/group
    root:x:0:root
    bin:x:1:root,bin,daemon
    group name:password:GID:member[s] of the group
    z f # cat /etc/gshadow
    root:::root
    bin:::root,bin,daemon
    group name:password:administrator[s] of the group:member[s] of the group

    newusers  :#recive arguments from file,format same as /etc/passwd

    [root@7 fh]# cat testfile
    zhangsan:abc:3000:3000:xxxx:/home/zhangsan:/bin/bash
    lisi:abc:4000:4000:xxxx:/home/lisi:/bin/bash
    [root@7 fh]# newusers testfile
    [root@7 fh]# tail -n 2 /etc/passwd
    zhangsan:x:3000:3000:xxxx:/home/zhangsan:/bin/bash
    lisi:x:4000:4000:xxxx:/home/lisi:/bin/bash

    chpasswd  :#recive arguments from stdin

    [root@7 fh]# cat testfile2 
    zhangsan:catdog
    lisi:dogcat
    [root@7 fh]# cat testfile2 | chpasswd
    [fh@7 ~]$ su - zhangsan
    Password: 
    -bash-4.2$ 

    useradd -G -s -m -k

    [root@7 fh]# useradd -m -G wheel -s /bin/bash -k /dev/null test_user
    [root@7 fh]# tail -n 1 /etc/passwd
    test_user:x:4001:4001::/home/test_user:/bin/bash
    [root@7 fh]# grep 'wheel' /etc/group
    wheel:x:10:fh,test_user
    [root@7 fh]# ls -a /home/test_user/
    .  ..

    Lacks of Knowledge 2:


    setfacl -M  :#revice arguments from file

    [root@7 fh]# cat file1 
    u:fh:6
    g:fh:4
    d:u:fh:rx
    mask::5
    [root@7 fh]# setfacl -M file1 a_dir/
    [root@7 fh]# getfacl a_dir/
    # file: a_dir/
    # owner: root
    # group: root
    user::rwx
    user:fh:rw-            #effective:r--
    group::r-x
    group:fh:r--
    mask::r-x
    other::r-x
    default:user::rwx
    default:user:fh:r-x
    default:group::r-x
    default:mask::r-x
    default:other::r-x
  • 相关阅读:
    部署K2 Blackpearl流程时出错(与基础事务管理器的通信失败或Communication with the underlying transaction manager has failed.)
    用SQL命令将查询结果集导出为文本文件
    SQL函数计算两个日期间的工作日天数
    CommonJS模块加载方法
    async 属性
    如何用VS.NET2005调式.asp和.aspx混合的web系统
    对web.config文件的节点进行加解密
    [转]看似简单的问题 静态方法和实例化方法的区别
    单引号(')和双引号(")
    从一个时间段中查找出星期为“Sunday”的日期
  • 原文地址:https://www.cnblogs.com/hadex/p/5730488.html
Copyright © 2011-2022 走看看