Linux 用户

一：新建用户

adduser username 
此命令创建用户的同时会创建用户家目录
1
2

二：将用户添加到其他组

sudo adduser james dialout
james:用户名
dialout:组名
1
2
3

三：用户添加sudo权限

修改/etc/sudoers

#
# This file MUST be edited with the 'visudo' command as root.
#
# Please consider adding local content in /etc/sudoers.d/ instead of
# directly modifying this file.
#
# See the man page for details on how to write a sudoers file.
#
Defaults        env_reset
Defaults        mail_badpass
Defaults        secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"

# Host alias specification
# User alias specification
# Cmnd alias specification
# User privilege specification
root    ALL=(ALL:ALL) ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
test ALL=(ALL) ALL 添加此语句，用户test增加sudo权限

# Allow members of group sudo to execute any command
%sudo   ALL=(ALL:ALL) ALL

# See sudoers(5) for more information on "#include" directives:
#includedir /etc/sudoers.d
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

四：用户锁定

1. 使用passwd命令锁定用户，解锁和检查Linux中给定用户状态

passwd -l user-name # 锁定用户
passwd -S user-name # 检查账户锁定状态
passwd -status user-name # 检查账户锁定状态
passwd -u user-name # 解除锁定
passwd -unlock user-name # 解除锁定
1
2
3
4
5

2. 使用usermod命令锁定用户，解锁和检查给定账户状态

usermod --lock user-name #锁定用户
usermod -L user-name #锁定用户
passwd -S user-name # 检查账户锁定状态
passwd -status user-name # 检查账户锁定状态
passwd -u user-name # 解除锁定
passwd -unlock user-name # 解除锁定
1
2
3
4
5
6

3. 使用usermod命令禁用，启动对给定账户的ssh访问

usermod -s /sbin/nologin user-name # nologin shell 分配给给定用户来完成
usermod -s /bin/bash user-name #修改为原来的shell
1
2