View source for Linux User & File Management

[[Category:Linux]]


[[File:linux.png|thumb|350px]]

== Basic Overview ==

When creating users on your server you may want to restrict their access on the server & its files.

By default creating a user will also give them access to use SSH & FTP, yet this can be turned off / restricted by following the guide below.

To Create a user you would normally use command (Which is fine as we can limit there access later on)

 useradd newuser

=== Setting a user to have admin permissions ===

After you have created a new user account you will want to add them to the "sudoer" file, this will give them full admin permissions like the root account (Only do this if you really want to / trust them)

use nano to edit the file & add their account name (like the example screenshot below, but change newuser to their account name)

 nano /etc/sudoers

[[File:sudoers.png|500px]]


After you have finished adding the new account you will need to save the file "Ctrl + X" (To exit) it will then ask to save "y = yes" - "n = no"

If you wish to fine tune the sudoers file visit here for advance uses -  http://linux.die.net/man/5/sudoers

&nbps
&nbps

=== Restricting SSH access ===

To restric access to SSH for a user is very simple all you have to do is edit the "/etc/passwd" file

 nano /etc/passwd



Once your are editing the file, you should notice the user you recently created is near or at the bottom of the list (Example line below)

 newuser:x:1008:1008::/home/newuser:/bin/false

*The first part is the username, in this case "newuser"
*The "x" means a password is set for the user
The two numbers have different meanings, the first number "1008" in this case is the User ID. The second number is the Group ID (Stored in /etc/group)
The "/home/newuser" is the users current home directory (We will cover more about this in the FTP part below)
The last part is the most important to this step "/bin/false" means they have "No" SSH access, it will be "/bin/sh" by default (Meaning they have SSH access), so change this from "/bin/sh" > "/bin/false" to disable SSH access for that user.  


&nbps
&nbps

== Users & FTP Access ==