Setting up LDAP Server for Authencation

Although LDAP server is not part of the exam, we need to learn how to setup our server as a client. You can check out Laurent Domb OSS Blog if you want to configure LDAP authentication server in your labs.

Accounts Management

useradd <options> <username>
-b home dir
-c comment
-e expire date yyyy-mm-dd
-m creates home dir for new user
-r system account
-s shell
-u UID

usermod <options> <username>
-c comment
-d home dir
-g primary group
-G secondary group
-l new login name
-L locks user
-s shell
-u uid
-U unlock user

passwd <options> <username>
-L locks user
-U unlock user
-S status of passwrd

chage <options><username>
-d indicates day password was changed
-E expiration date yyyy-mm-dd
-I change password inactive after password expires before account is locked
-l show aging info
-m min days
-M max days
-W warn days

Note:
account is locked when you see ! character at the start of the password in /etc/shadow

groupadd <group name>
-r creates a system group
-g GID