2.2 Given a scenario, implement identity management Flashcards
Define bashrc file and 2 locations/uses
configuration (script) file that defines functions and aliases used by all shell sessions and users
1. /etc/bashrc - for all system users
2. ~ - user specific copies can be placed in user home directories
Define /etc/profile file
system-wide shell config file for login (text-based) shell
Define .bash_profile file
user specific shell config file for login (text-based) shell
Define function of the /etc/passwd file
Contains all the user accounts, both standard and system accounts, for the system
does not contain passwords, although there is a legacy placeholder for it
Define the 7 fields in the /etc/passwd file
- Username
- Password (not used)
- UserID #
- Primary Group ID # (GID)
- Description field, usually used for the user’s full name
- Path to home directory
- Path to default shell
Define function of the /etc/shadow file
Holds passwords and password info, must have an entry corresponding to each user/system account in the /etc/passwd file
What are the 2 security benefits of the /etc/shadow file?
- Separates the passwords from being in the same physical file as the other user info
- Stores passwords in encrypted form
What are the 8 fields in the /etc/shadow file?
- Username
- Password
- Days since password was changed
- Minimum password age in days
- Maximum password age in days
- Password change warning in days
- Days after password expires to disable account
- Disable time - days after which the account will be disabled
What 3 symbols might appear in the password field of /etc/shadow?
- $ - indicates that the text following is encrypted
- ! or !! - indicates that the account is locked and cannot be used to login
- indicates that the account is a system account and cannot be used to login
Which 2 fields in the /etc/shadow file represent the date as the number of days since Jan 1, 1970?
Last change & disable time
What values are typically used when user id #’s are assigned to standard user accounts and system user accounts
Standard user accounts either use id’s starting at 1000, or 500 on some systems, values less than this are reserved for assignment to system user accounts
Define primary user group (3)
- Created by default upon creation of a user account
- The corresponding user is the only member of the group
- Is automatically assigned as the owner of files/directories created by the user
Define function of the /etc/group file
Contains all the groups defined on the system
What are the 4 fields in the /etc/group file
- Group name
- Group password (not used - stored in /etc/gshadow if defined)
- Group ID
- Group members - comma separated list of usernames
Define secondary user group (2)
- Used to manage access to file/directories
- Users are added manually by an admin
Define what /etc/skel is used for
contains directories & files that are automatically copied to a new user’s home directory when a new user is added