Linux is inherently a multi-user operating system where each user has a unique identity and is associated with one or more groups. Managing users and groups enables administrators to control permissions efficiently, facilitate collaboration, and enforce organization-wide policies.
Understanding Users and Groups in Linux
User and group management forms the foundation of Linux security and access control. Following are the core components involved in managing users and groups.
1. User Accounts: Each user is assigned a unique user ID (UID) and typically owns files and processes. Users have personal home directories and specific permissions.
2. Groups: Groups are collections of users. Permissions can be assigned to groups, allowing shared access control without assigning permissions individually to users.
3. Primary Group: Each user has a primary group, which is the default group assigned upon user creation.
4. Secondary (Supplementary) Groups: Additional groups that a user can belong to for accessing shared resources.
Key Files Storing User and Group Information
User authentication and group management rely on specific configuration files. Following are the important files that store user and group data in Linux.
/etc/passwd: Stores basic user account information including username, UID, GID (primary group ID), home directory, and default shell.
/etc/group: Contains group names, GIDs, and lists of group members.
/etc/shadow: Stores encrypted user password information (restricted access for security).
/etc/gshadow: Stores encrypted group password and administration info.
Common User Management Commands
Common Group Management Commands
Adding Users to Groups
- Use usermod with -aG to add a user to one or multiple secondary groups without removing from existing groups:
sudo usermod -aG group1,group2 alice- To set or change the primary group of a user:
sudo usermod -g groupname aliceViewing Group Membership
- To check which groups a user belongs to:
groups alice- To view all members of a group:
getent group groupnameBest Practices in User and Group Management
1. Use groups to organize users by roles or departments for efficient permissions management.
2. Assign the least privileges necessary to users and groups to maintain security.
3. Regularly audit user accounts and group memberships to ensure compliance.
4. Use centralized authentication systems (LDAP, Active Directory) for large environments.
5. Always backup related files (/etc/passwd, /etc/group) before making bulk changes.
Class Sessions
Sales Campaign
We have a sales campaign on our promoted courses and products. You can purchase 1 products at a discounted price up to 15% discount.