Linux basic concepts and Personal notes summary (2)--experiment verification of account and authority management

Source: Internet
Author: User

Thank you!

Instructor: Zhang Ren

Class Teacher: Fu Chunhua I want to give them the highest respect.

Anti-counterfeiting code: Dripping of Grace, the Spring phase report

Impression: When I saw the article on the homepage today, this is my nineth document, I feel very happy in my heart, also really understand

"Effort and harvest are proportional." "That sentence. Just also ready to organize Linux related notes, Heart five mixed, as if yesterday, seems to be in front of.

In a word, without them there is no me today!


Fourth chapter: Account and Authority management


Experimental requirements:

1, set up the user directory/benet/teachers and/benet/students, respectively for the host directory of different identity users, such as Terry User's host directory should be located in/benet/teachers/terry

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M01/86/79/wKioL1e_-bHBq4fbAAEeDoiffgM036.png-wh_500x0-wm_3 -wmp_4-s_109609403.png "title=" rgtuw{7@vu9) z{{hmcalcpn.png "alt=" Wkiol1e_-bhbq4fbaaeedoiffgm036.png-wh_50 "/>


2, add group accounts, two are teacher GID for 2001 and student GID for 2002,

Public Group A Benet GID is 300

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/86/79/wKioL1e_-hXiZkO_AAD8YlZB5tM155.jpg-wh_500x0-wm_3 -wmp_4-s_2898582912.jpg "title="]9@czo (5draijxy]}]9dlat.jpg "alt=" Wkiol1e_-hxizko_aad8ylzb5tm155.jpg-wh_50 "/>

3, add user teacher group contains three users Terry, Jerry, Alon, the host directory all use the same name directory under/benet/teachers/,

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/86/79/wKioL1e_-lrg-0LwAAEFnO3onwE631.jpg-wh_500x0-wm_3 -wmp_4-s_3615573715.jpg "title=" i9u2w{5{pp} ' (4H ' vn2}xtl.jpg "alt=" Wkiol1e_-lrg-0lwaaefno3onwe631.jpg-wh_50 "/>

Where the Alon user account is set to expire after December 31, 2015.

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/86/7A/wKiom1e_-oaj3Z4NAAC6LgPiUIk123.jpg-wh_500x0-wm_3 -wmp_4-s_1170393716.jpg "title=" 1cg%8y]kt@bxk2li} @H0VB4. jpg "alt=" wkiom1e_-oaj3z4naac6lgpiuik123.jpg-wh_50 "/>

4, add the user student group contains two user mike,lily, the host directory uses the same name/benet/students/under the directory,

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M02/86/79/wKioL1e_-rzCdFlcAADlPOSUroQ276.jpg-wh_500x0-wm_3 -wmp_4-s_3148473354.jpg "title=") (ery7y7$69 (y@exf%ky4[e.jpg "alt=" Wkiol1e_-rzcdflcaadlposuroq276.jpg-wh_50 "/>

Where Lily user's login shell is/bin/ksh

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/86/79/wKioL1e_-vCRZUFgAADQ_wydFBA887.jpg-wh_500x0-wm_3 -wmp_4-s_4241204429.jpg "title=" 1yb_4g$h$xtqwh3mh2jbsnx.jpg "alt=" Wkiol1e_-vcrzufgaadq_wydfba887.jpg-wh_50 "/>

5. All the above users are added to the Benet group.

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/86/7A/wKiom1e_-0iQO4GJAAD4bXn47OA613.jpg-wh_500x0-wm_3 -wmp_4-s_2053104503.jpg "title=" 7}73xpjf~v[l6h}y5{03v2y.jpg "alt=" Wkiom1e_-0iqo4gjaad4bxn47oa613.jpg-wh_50 "/>

6, set the directory permissions and belong to the/benet/directory belongs to the group of Benet Group, remove all other users ' permissions.

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/86/7A/wKiom1e_-4qxjKU0AAD7kQK-txE820.jpg-wh_500x0-wm_3 -wmp_4-s_989350721.jpg "title=" Tqbpe1wgui}ylqy ' METC) _e.jpg "alt=" Wkiom1e_-4qxjku0aad7kqk-txe820.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M00/86/79/wKioL1e_-7KAeqCBAAEhf2HJEV4202.jpg-wh_500x0-wm_3 -wmp_4-s_2089195745.jpg "title="%pb9ig3gxtlb_vi}ehy{rai.jpg "alt=" Wkiol1e_-7kaeqcbaaehf2hjev4202.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M00/86/7A/wKiom1e_--njtOB1AAENoxx0n-I933.jpg-wh_500x0-wm_3 -wmp_4-s_384993633.jpg "title=" 7QU (681h{4t18{c[9axau$t.jpg "alt=" Wkiom1e_--njtob1aaenoxx0n-i933.jpg-wh_50 "/>

The genus Group of the/benet/teachers/directory is set to teacher, removing all permissions from other users.

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/86/7A/wKioL1e__B6AwZzHAAAYXVYiy4Y178.png-wh_500x0-wm_3 -wmp_4-s_1823958480.png "title=" Z7 (w[]a) s] @GNWZ {FO7 (0kr.png "alt=" Wkiol1e__b6awzzhaaayxvyiy4y178.png-wh_50 "/>

The genus Group of the/benet/students/directory is set to student, removing all permissions from other users.

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/86/7A/wKiom1e__GiAqwmJAAAfgFX480U499.png-wh_500x0-wm_3 -wmp_4-s_467364023.png "title=" x7hf34q3) 2hgmy]84837w1p.png "alt=" Wkiom1e__giaqwmjaaafgfx480u499.png-wh_50 "/>

Note: Sorry, friends! the Black label is my thinking process and verification, mainly to see the correct command and experimental results


Establish a common data store directory to create a/public/directory that allows users in all Benet groups to read, write, execute files, and users of non-technical groups cannot access this directory.

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M02/86/7A/wKiom1e__Ofx67diAAD5WPJwgOQ461.jpg-wh_500x0-wm_3 -wmp_4-s_3413302317.jpg "title=" 8f]g} (Q46ah ' m]_g{ut6vds.jpg "alt=" Wkiom1e__ofx67diaad5wpjwgoq461.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/86/7A/wKiom1e__ROjupmBAAERQJDfNew749.jpg-wh_500x0-wm_3 -wmp_4-s_3181899984.jpg "title=" 1%yft}ol) z%t ({z]ivyfeac.jpg "alt=" Wkiom1e__rojupmbaaerqjdfnew749.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M01/86/7A/wKiom1e__YiDGuQ_AAD2lomqEtE370.jpg-wh_500x0-wm_3 -wmp_4-s_2947930525.jpg "title=" 1ysl$7o1pk7mg{p5_$zh313.jpg "alt=" Wkiom1e__yidguq_aad2lomqete370.jpg-wh_50 "/>

2. Add one: There is a directory Caiwubu in/home, requiring the Finance Manager (Cwjingli) to have full control over the permissions of the directory, the Finance group (CWB, where CW1,CW2 belongs to the members of the Finance group) has permission to read and switch directories, others do not have permissions.

Experimental results: Verify all operating effects as described in the above requirements.

To create a directory:

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/86/7A/wKioL1e__cPzLXWdAAAJYoDmvVA434.png-wh_500x0-wm_3 -wmp_4-s_352822699.png "title=" 6g9gr}) Hbipe ({7i5j310zf.png "alt=" Wkiol1e__cpzlxwdaaajyodmvva434.png-wh_50 "/>

Create User: Cwjl,cw1,cw2 (example: Groupadd cwjl) Create Group: CWB (Groupadd) (example: Groupadd cwjl),

This is not an example, and then join the group CWB.

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/86/7A/wKiom1e__d6D3bvRAACDzVlZRKU190.jpg-wh_500x0-wm_3 -wmp_4-s_27574888.jpg "title=" ' h]k]q9]v}2m~78~~ ' xsquj.jpg "alt=" Wkiom1e__d6d3bvraacdzvlzrku190.jpg-wh_50 "/>

also need to modify the initial password: Here the default CWJL,CW1,CW2 is 1, encryption password,:

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/86/7A/wKioL1e__xPx2I-_AAC28iJdxaI871.jpg-wh_500x0-wm_3 -wmp_4-s_1242081548.jpg "title=" x2qsyi56ya{_8t~[7[aj[}t.jpg "alt=" Wkiol1e__xpx2i-_aac28ijdxai871.jpg-wh_50 "/>

The final step: start verifying the effect and take care to look at the permissions carefully

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/86/7A/wKioL1e__4KwgyBqAAA3WULhxEA476.png-wh_500x0-wm_3 -wmp_4-s_3450963455.png "title=" 5_}xh) 4wvn59f42}$@$82m2.png "alt=" Wkiol1e__4kwgybqaaa3wulhxea476.png-wh_50 "/>

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/86/7A/wKioL1e__6jQPdFEAACZsm9U8Wo614.jpg-wh_500x0-wm_3 -wmp_4-s_1411706630.jpg "title=" iggklbhbocv@{w_4j[8m93v.jpg "alt=" Wkiol1e__6jqpdfeaaczsm9u8wo614.jpg-wh_50 "/>

A candle light, illuminate himself, also illuminate others, I will continue to work hard!


This article is from "A Candle" blog, please be sure to keep this source http://yw666.blog.51cto.com/11977292/1843023

Linux basic concepts and Personal notes summary (2)--experiment verification of account and authority management

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.