Add a user
2013/07/03 |
[1] | Add a user for system administration. |
[root@localhost ~]# useradd fedora [root@localhost ~]# passwd fedora Changing password for user fedora. New UNIX password: # set password Retype new UNIX password: # confirm passwd: all authentication tokens updated successfully. [root@localhost ~]# # logout |
[2] | Try to switch to a user that was added above. |
dlp login: fedora # input user name password: # password [fedora@localhost ~]$ su - # switch to root Password: # root password [root@localhost ~]# # just switched to root |
[3] | Make a user be only a user who can switch to root as an administration user. (it's 'fedora' in this example) |
[root@localhost ~]# usermod -G wheel fedora
[root@localhost ~]#
#%PAM-1.0vi /etc/pam.d/su auth sufficient pam_rootok.so # Uncomment the following line to implicitly trust users in the "wheel" group. #auth sufficient pam_wheel.so trust use_uid # Uncomment the following line to require a user to be in the "wheel" group. # uncomment the following line auth required pam_wheel.so use_uid auth include system-auth account sufficient pam_succeed_if.so uid = 0 use_uid quiet account include system-auth password include system-auth session include system-auth session include postlogin session optional pam_xauth.so |
[4] | Set alias for user who receive reoot's email. |
[root@localhost ~]#
vi /etc/aliases
# Person who should get root's mail
[root@localhost ~]# # last line: uncomment and change to a user root: fedora # reload /etc/aliases: 77 aliases, longest 10 bytes, 781 bytes total |