用户与组管理：`useradd`、`usermod`、`groupadd`

In Linux, managing users and groups is crucial for security and organization. Every file and process has an owner, and permissions are often set based on user and group affiliations.

This lesson will teach you how to create, modify, and remove user accounts and groups.

The useradd command creates a new user account. By default, it creates a new primary group with the same name as the user and assigns a unique User ID (UID).

You'll often need sudo (superuser do) privileges to run this command.

When you create a user, you might want to specify their home directory and default shell. The -m option creates the user's home directory if it doesn't exist, and -s sets their login shell.

Without -m, no home directory is created, which can cause issues.

After creating a user, you can verify their existence and check their User ID (UID) and Group IDs (GIDs) using the id command. This helps confirm the account was set up correctly.

Groups are collections of users. They simplify permission management, allowing multiple users to share access to files and resources without individually setting permissions for each user.

Each user has a primary group (often named after the user) and can belong to multiple supplementary groups.

To create a new group, you use the groupadd command. This is useful for organizing users into functional teams, like 'developers' or 'admins', and then assigning file permissions to that group.

The usermod command modifies an existing user account. To add a user to a supplementary group, use the -aG (append to Group) option.

Remember, -a must be used with -G to append, otherwise -G alone would overwrite existing supplementary groups!

Beyond adding to groups, usermod can change various user properties. For example, you can change a user's primary group using -g or update their full name/comment using -c.

Always be careful when modifying user accounts, especially sensitive information.

To remove a user account, use userdel. The -r option is commonly used to remove the user's home directory and mail spool along with the account.

To remove a group, use groupdel. A group cannot be removed if it's the primary group for any existing user.

Congratulations! You've learned the essentials of user and group management in Linux.

• useradd creates new user accounts.
• groupadd creates new groups.
• usermod modifies existing user accounts and can add users to supplementary groups using -aG.
• userdel and groupdel remove users and groups, respectively.

These commands are fundamental for system administration and maintaining a secure Linux environment.