Chapter 7 Flashcards
groups
means of organizing users. groups parallel users
345
GIDs
group IDs
number created to track groups
346
UIDs
User IDs
number created to track users
346
useradd parameter
-c
comment parameter passes the comment field for the user. may include contact info for the administrator
348
useradd parameter
-d or home-dir
used to specify a user’s account home directory
348
useradd parameter
-e expire-date
used to specify when an account will be disabled as expressed in YYYY-MM-DD format
348
useradd parameter
-f inactive-days
specifies the number of inactive days are acceptable before the password expires
348
useradd parameter
-g default-group
used to set the name or GID
348
useradd parameter
-G group[,…]
sets the names or GIDs of one or more groups to which the user belongs
349
useradd:
/etc/login.defs file
specifies whether or not to create a user’s home directory when the account is created via the CREATE_HOME setting
349
useradd parameter
-M
forces the system not to create a home directory, even if /etc/login.defs specifies that this action is the default
349
useradd parameter
-p password
passes the pre-hashed password for the user to the system.
349
useradd parameter
-s shell
sets the name of the user’s default login shell
defaults to /bin/bash
349
useradd parameter
-u UID
creates an account with the specified user ID value (UID). This must be a counting number
349
useradd parameter
-r
specifies the creation of a system account
350
useradd parameter
-N
This disables:
In Red Hat and similar distros, the system creates a group with the same name as the specified username.
350
passwd parameter
-k
indicates that the system should update an expired account
351
passwd parameter
-l
locks an account by prefixing the hashed password with an exclamation mark. The account can not be logged in, but the files are safe.
351
passwd parameter
-u
unlocks an account by removing the exclamation mark.
351
passwd parameter
-d
removes the password from an account rendering it passwordless.No warning messages.
351
passwd parameter
-S
displays information about the password for an account. Info displayed includes what kind of algorithm was used to hash the password
351
usermod
changes an existing account instead of creating a new one
352
chage command
allows you to modify account settings relating to account expire if either of two conditions are true
The password hasn’t been changed in a specified time period
The system date is past a predetermined time
354
chage parameter
-l
option causes chage to display accoount expiration and password aging information for a particular user
354
chage parameter
-m mindays
sets the minimum number of days between password changes. 0 indicates that a user can change a password multiple times in a day
354
chage parameter
-M maxdays
sets the maximum number of days that may pass without changing the password
354
chage parameter
-d lastday
sets the last day a password was changed. Linux normally maintains this value automatically
354
chage parameter
-I inactivedays
sets the number of days between password expiration and disablement
354
chage parameter
-E expiredate
sets an absolute expiration date on a password
354
chage parameter
-W warndays
sets the number of days before account expiration that the system will send impending expiration warnings to the user
354
journalctl
shows you all of the systemd-journald collected data
376
NTP
Network Time protocol
most common protocol for setting the time in linux. one of the most popular, flexible, and accurate network time tools.
380
pool.ntp.org
subdomain dedicated to servers that have volunteered to function as public NTP servers
384
What cannot be running when you issue the ntpd -gp command because if it is, you will get no warning message or error message, just a prompt back with no synchronization completed?
NTP daemon
386
Function of groups in Linux
Linux groups enable security features to be applied to arbitrary groups of users. Each group holds an arbitrary collection of users, and group permissions can be set on files, giving all group members the same access rights to the files
389