kernel_Notes/Zim/Utils/passwd.txt

Content-Type: text/x-zim-wiki
Wiki-Format: zim 0.4
Creation-Date: 2011-05-18T21:35:26+08:00

====== passwd ======
Created Wednesday 18 May 2011

===== /etc/passwd文件的内容及格式如下： =====
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/bin/false
daemon:x:2:2:daemon:/sbin:/bin/false
mail:x:8:12:mail:/var/spool/mail:/bin/false
ftp:x:14:11:ftp:/srv/ftp:/bin/false
http:x:33:33:http:/srv/http:/bin/false
nobody:x:99:99:nobody:/:/bin/false
dbus:x:81:81:System message bus:/:/bin/false
geekard::1000:1000::/home/geekard:/bin/bash
avahi:x:84:84:avahi:/:/bin/false
rtkit:x:133:133:RealtimeKit:/proc:/sbin/nologin
gdm:x:120:120:Gnome Display Manager:/var/lib/gdm:/sbin/nologin
mysql:x:89:89::/var/lib/mysql:/bin/false
news:x:5000:5000::/var/spool/news:/bin/false
stunnel:x:16:16::/var/run/stunnel:/bin/false

通过修改各个字段就可以修改用户的信息，如：
第二个字段为空时，表示在登陆时不需密码.为其它字符而非x时不能登录。
第六个字段设置用户登录后的主目录。
第七个字段设置用户登录后运行的第一个程序，注意：该程序的生存周期必须是长久的，一直到用户会话结束。
通过将第七个字段设为一些特殊程序，可以阻止用户登录。这些特殊程序可以是：
[[/bin/false]]			进程返回非0值(表示不成功)后退出
[[/bin/true]]			进程返回0后退出
[[/bin/null]]			同上
[[/sbin/nologin]]		打印出自定义信息后，以非0值退出

===== /etc/shadow的文件内容及格式如下： =====
[root@geekard geekard]# cat /etc/shadow
root:$1$b0hwbCLm$x0fitSQ53Di9uSF.NIp6l0:15096::::::
bin:x:14871::::::
daemon:x:14871::::::
mail:x:14871::::::
ftp:x:14871::::::
http:x:14871::::::
nobody:x:14871::::::
dbus:!:15096:0:99999:7:::
geekard:__!__$1$jGz6VTI7$1qFEQ/I8q7ufBCLUAsu10.:15112:0:99999:7:::
avahi:!:15096::::::
rtkit:!:15096:0:99999:7:::
gdm:!:15096:0:99999:7:::
mysql:!:15096:0:99999:7:::
news:!:15101:0:99999:7:::
stunnel:!:15101:0:99999:7:::
用户名:加密密码(以叹号开头表示锁定):自上次更改口令以来经过的时间(秒):至少经过多少天才能更改口令:自多时间:警告天数:口令过期天数:账户失效天数

===== 设置用户帐号密码的命令： =====
**passwd** -u username
Options:
  -a, --all                     report password status on all accounts
  **-d**, --delete                  delete the password for the named account
  __-e, --expire__                  force expire the password for the named account
  __-i, --inactive__ INACTIVE       set password inactive after expiration       to INACTIVE
  -l, --lock                    lock the password of the named account
  -n, --mindays MIN_DAYS        set minimum number of days before password  change to MIN_DAYS
  -u, --unlock                  unlock the password of the named account
  -w, --warndays WARN_DAYS      set expiration warning days to WARN_DAYS
  -x, --maxdays MAX_DAYS        set maximum number of days before password change to MAX_DAYS


**vipw  **允许管理员编辑各种口令文件
	Options:
	  -g, --group                   edit group database
	  -h, --help                    display this help message and exit
	  -p, --passwd                  edit passwd database
	  -q, --quiet                   quiet mode
	  -s, --shadow                  edit shadow or gshadow database

**useradd**
	Options:
	  -c, --comment COMMENT         GECOS field of the new account
	  -d, --home-dir HOME_DIR       home directory of the new account
	  -e, --expiredate EXPIRE_DATE  expiration date of the new account
	  -f, --inactive INACTIVE       password inactivity period of the new account
	  -g, --gid GROUP               name or ID of the primary group of the new
	                                account
	  -G, --groups GROUPS           list of supplementary groups of the new  account
	  -k, --skel SKEL_DIR           use this alternative skeleton directory
	  -K, --key KEY=VALUE           override /etc/login.defs defaults
	  -m, --create-home             create the user's home directory
	  -p, --password PASSWORD       encrypted password of the new account
	  -s, --shell SHELL             login shell of the new account
	  -u, --uid UID                 user ID of the new account
**usermod**
	Options:
	  -c, --comment COMMENT         new value of the GECOS field
	  -d, --home HOME_DIR           new home directory for the user account
	  __-e__, --expiredate EXPIRE_DATE  set account expiration date to EXPIRE_DATE		//账户失效时间
	  __-f__, --inactive INACTIVE       set password inactive after expiration     to INACTIVE      //口令过期时间
	  -g, --gid GROUP               force use GROUP as new primary group
	  -G, --groups GROUPS    new list of supplementary GROUPS
	  __-a, --append__                  append the user to the supplemental GROUPS   mentioned by the -G option without removing                                					him/her from other groups
	  -l, --login NEW_LOGIN         new value of the login name
	  **-L,** --lock                    lock the user account
	   -p, --password PASSWORD       use encrypted password for the new password
	  -s, --shell SHELL             new login shell for the user account
	  -u, --uid UID                 new UID for the user account
	**  -U**, --unlock                  unlock the user account
**userdel**
		Options:
		  -f, --force                   force removal of files,
		                                even if not owned by user
		  -h, --help                    display this help message and exit
		  **-r, **--remove                  remove home directory and mail spool
**gpasswd   // **gpasswd - administer /etc/group and /etc/gshadow
	Options:
	  -a, --add USER                add USER to GROUP
	  -d, --delete USER             remove USER from GROUP
	  -r, --remove-password         remove the GROUP's password
	  -R, --restrict                restrict access to GROUP to its members
	  -M, --members USER,...        set the list of members of GROUP
	  -A, --administrators ADMIN,...  set the list of administrators for GROUP
	Except for the -A and -M options, the options cannot be combined.
**groupadd **
	Options:
	  -f, --force                   exit successfully if the group already exists,        and cancel -g if the GID is already used
	  -g, --gid GID                 use GID for the new group
          -p, --password PASSWORD       use this encrypted password for the new group
** groupdel**
** groupmod**
	Options:
	  -g, --gid GID                 change the group ID to GID
	  -n, --new-name NEW_GROUP      change the name to NEW_GROUP
	  -p, --password PASSWORD       change the password to this (encrypted)     PASSWORD
 


===== 显示用户帐号信息的命令： =====
**finger**
**id**
**groups**