Skip to main content

LFCS: Users and Groups (10%)

This sectiondocument covers user and group management, environment profiles, ACLs, resource limits, and LDAP integration.

Goals Coverage

Users and Groups 10%

    Create and manage local user and group accounts Manage personal and system-wide environment profiles Configure user resource limits Configure and manage ACLs Configure the system to use LDAP user and group accounts

    1. Create and Manage Local User Accounts

    Learn

    • Add, modify, and delete local users.
    • Manage home directories and shells.

    Commands

    # Add user
sudo useradd -m -s /bin/bash username
sudo passwd username

# Modify user
sudo usermod -aG sudo username   # Add to group
sudo usermod -d /new/home username  # Change home directory

# Delete user
sudo userdel -r username   # Delete user and home directory

    Exercises

    1. Create a user with home directory and bash shell.
    2. Add the user to the sudo group.
    3. Remove a test user.

    2. Create and Manage Groups

    Learn

    • Create, modify, and delete groups.
    • Assign users to groups.

    Commands

    # Create group
sudo groupadd developers

# Modify group
sudo gpasswd -a username developers

# Delete group
sudo groupdel developers

# List groups
groups username

    Exercises

    1. Create a group admins and add a user.
    2. Verify the user is part of the group.
    3. Delete the group.

    3. Manage Environment Profiles

    Learn

    • System-wide vs user-specific profiles.
    • Configure PATH, variables, and shell startup files.

    Commands

    # Edit system-wide profile
sudo nano /etc/profile
sudo nano /etc/bash.bashrc

# Edit user profile
nano ~/.bashrc
source ~/.bashrc  # Reload changes

    Exercises

    1. Add a directory to PATH in .bashrc and reload.
    2. Set a custom environment variable system-wide.

    4. Configure User Resource Limits

    Learn

    • Use ulimit and /etc/security/limits.conf for limits on processes, open files, and memory.

    Commands

    # Temporary limit
ulimit -n 4096

# Persistent limit
sudo nano /etc/security/limits.conf
# user soft nofile 4096
# user hard nofile 8192

    Exercises

    1. Increase the maximum number of open files for a user.
    2. Verify limits with ulimit -a.

    5. Configure and Manage ACLs (Access Control Lists)

    Learn

    • Set fine-grained permissions beyond standard Unix mode bits.
    • Commands: getfacl and setfacl.

    Commands

    # Check ACL
getfacl /path/to/file

# Set ACL for user
setfacl -m u:username:rwx /path/to/file

# Remove ACL
setfacl -x u:username /path/to/file

    Exercises

    1. Give read/write access to a specific file for a user without changing group ownership.
    2. Remove the ACL and verify permissions.

    6. Configure the System to Use LDAP for Users and Groups

    Learn

    • Integrate Linux system with LDAP server for centralized authentication.
    • Configure NSS and PAM.

    Commands

    # Install LDAP client
sudo apt install libnss-ldap libpam-ldap ldap-utils

# Configure /etc/nsswitch.conf
sudo nano /etc/nsswitch.conf
# passwd: files ldap
group: files ldap
shadow: files ldap

# Test LDAP user
getent passwd ldapuser
id ldapuser

    Exercises

    1. Connect a Linux system to an LDAP server.
    2. Verify that LDAP users can login.

    Exam Tips

    • Practice creating users and groups both locally and via LDAP.
    • Understand persistent vs temporary environment variable settings.
    • Familiarize with ACL commands for fine-grained permission control.
    Back to top