Linux user and group management ensures proper access control and system organization through user accounts and group memberships. 2. Users have unique UIDs and are categorized as regular users or the root user (UID 0), while groups simplify permission assignments by grouping users. 3. Key commands include sudo adduser to create users, sudo passwd to set passwords, sudo deluser or sudo userdel to delete users, and sudo usermod to modify user properties like primary group, supplementary groups, shell, or account lock status. 4. Groups are managed using sudo groupadd to create, sudo groupdel to delete, sudo usermod -aG to add users to groups, and sudo gpasswd -d to remove users from groups, with groups username or id username used to view memberships. 5. Core configuration files include /etc/passwd for user info, /etc/shadow for encrypted passwords, /etc/group for group definitions, and /etc/gshadow for group passwords, all of which should not be edited manually to prevent errors. 6. Best practices include avoiding root for daily tasks, using groups for access control like docker, auditing accounts regularly, enforcing strong passwords, disabling unused accounts, and setting appropriate default permissions. 7. In a practical example, creating a developers group, adding users to it, and setting up a shared directory with proper group ownership and 775 permissions allows collaborative access securely. Mastering these tools and practices enables efficient, secure, and organized Linux system administration.

Managing users and groups is a fundamental part of Linux system administration. Whether you're setting up a personal machine or managing a server, understanding how to create, modify, and secure user accounts and groups ensures proper access control and system organization. Here’s a practical guide to help you master Linux user and group management.

1. Understanding Users and Groups in Linux

In Linux, every process runs under a user account, and each file or directory is owned by a user and a group. This ownership determines who can read, write, or execute resources.

• Users: Each user has a unique username and user ID (UID). There are two main types:
  • Regular users: For everyday tasks.
  • Root user: The superuser with full system privileges (UID 0).
• Groups: A collection of users. Each user belongs to at least one group (primary group), and can be added to multiple supplementary groups. Groups simplify permission management.

Files and directories use permission bits (read, write, execute) for the owner, group, and others.

2. Managing User Accounts

You can manage users using command-line tools. Most of these require sudo or root access.

Common User Commands

• Create a user:

  

  sudo adduser username

  This command is user-friendly and prompts you to set a password and fill in user details.

  Alternatively, use the lower-level:

  sudo useradd username

  You may need to manually set a password with sudo passwd username.

• Set or change a password:

  sudo passwd username

• Delete a user:

  sudo deluser username        # Debian/Ubuntu
  sudo userdel username        # RHEL/CentOS/Fedora

  To also remove the user’s home directory:

  sudo deluser --remove-home username
  sudo userdel -r username

• Modify a user: Use usermod to change user properties:

  sudo usermod -g groupname username     # Change primary group
  sudo usermod -aG groupname username    # Add to supplementary group
  sudo usermod -s /bin/zsh username      # Change shell
  sudo usermod -L username               # Lock account
  sudo usermod -U username               # Unlock account

3. Managing Groups

Groups help organize users and assign permissions efficiently.

Common Group Commands

• Create a group:

  sudo groupadd groupname

• Delete a group:

  sudo groupdel groupname

• Add a user to a group:

  sudo usermod -aG groupname username

  The -aG flag ensures the user is added to the new group without losing membership in existing ones.

• Remove a user from a group: There's no direct command, but you can edit group membership manually:

  sudo gpasswd -d username groupname

• View group membership:

  groups username

  Or view all groups a user belongs to via:

  id username

• List all groups on the system:

  cut -d: -f1 /etc/group

4. Key Configuration Files

Linux stores user and group data in plain-text files under /etc:

• /etc/passwd: Contains user account info (username, UID, GID, home directory, shell).
• /etc/shadow: Stores encrypted passwords and password aging (readable only by root).
• /etc/group: Defines groups and their members.
• /etc/gshadow: Group password and admin info (rarely used).

?? Never edit these files directly unless necessary. Use the proper commands to avoid syntax errors or lockouts.

5. Best Practices for User and Group Management

• Avoid using root for daily tasks: Create a regular user with sudo access instead.
• Use groups for access control: For example, add users to the docker group to run Docker commands without sudo.
• Regularly audit accounts:

  sudo less /etc/passwd
  sudo awk -F: '$3 == 0 {print $1}' /etc/passwd   # Find all UID 0 accounts

• Enforce strong passwords using PAM modules or tools like passwd --stdin in scripts (with caution).
• Disable unused accounts:

  sudo usermod -L username

• Set appropriate default permissions via /etc/login.defs and /etc/default/useradd.

6. Practical Example: Setting Up a Developer Team

Suppose you want to set up a team working on a shared project:

# Create a group for developers
sudo groupadd developers

# Create users and add them to the group
sudo adduser alice
sudo adduser bob
sudo usermod -aG developers alice
sudo usermod -aG developers bob

# Create a shared directory
sudo mkdir /srv/project
sudo chown :developers /srv/project
sudo chmod 775 /srv/project

Now both users can read, write, and execute in /srv/project, thanks to group permissions.

Managing users and groups in Linux isn’t complicated once you know the right tools. By using adduser, usermod, groupadd, and related commands wisely—and following security best practices—you can maintain a clean, secure, and well-organized system.

Basically, it's about knowing who needs access to what, and using groups to make that manageable.

The above is the detailed content of A Guide to Linux User and Group Management. For more information, please follow other related articles on the PHP Chinese website!