USERMOD

åç§°
大纲
æè¿°
é项
CAVEATS
éç½®æä»¶
æä»¶
åè§


åç§°

usermod − ä¿®æ¹ä¸ä¸ªç¨æ·è´¦æ·

大纲

usermod [é项] ç»å½

æè¿°

usermod ä¿®æ¹ç³»ç»è´¦æ·æä»¶åå¨å½ä»¤è¡ä¸æå®çç¸å³æ´æ¹ã

é项

usermod å¯ä»¥æ¥åçé项æï¼

−a, −−append

å°ç¨æ·æ·»å å°éå ç»ãåªè½å −G é项ä¸èµ·ä½¿ç¨ã

−c, −−comment COMMENT

ç¨æ·å¯ç æä»¶ä¸æ³¨éåæ®µçæ°å¼ãéå¸¸ä½¿ç¨ chfn(1) å·¥å·å¯¹å¶è¿è¡ä¿®æ¹ã

−d, −−home HOME_DIR

ç¨æ·çæ°ç»å½ç®å½ã

妿ç»äº −m é项ï¼å½å主ç®å½çå容å°ä¼ç§»å¨å°æ°ä¸»ç®å½ä¸ï¼å¦æä¸å- å¨ï¼åå建ã

−e, −−expiredate EXPIRE_DATE

ç¨æ·è´¦æ·å°è¢«ç¦ç¨çæ¥æãæ¥æä»¥ YYYY−MM−DD æ ¼å¼æå®ã

空 EXPIRE_DATE åæ°å°ç¦ç¨è´¦æ·è¿æã

æ¤é项éè¦ä¸ä¸ª /etc/passwd æä»¶ãå¦ææ²¡æï¼å°ä¼åå»ºä¸æ¡ /etc/shadow 项ç®ã

−f, −−inactive INACTIVE

å¯ç è¿æä¹åï¼è´¦æ·è¢«å½»åºç¦ç¨ä¹åç天æ°ã

0 表示å¯ç è¿ææ¶ï¼ç«å³ç¦ç¨è´¦æ·ï¼−1 表示ä¸ä½¿ç¨è¿ä¸ªåè½ã

æ¤é项éè¦ä¸ä¸ª /etc/passwd æä»¶ãå¦ææ²¡æï¼å°ä¼åå»ºä¸æ¡ /etc/shadow 项ç®ã

−g, −−gid GROUP

ç¨æ·çæ°åå§ç»å½ç»çç»åææ°å代å·ãæ¤ç»å¿é¡»åå¨ã

ç¨æ·ä¸»ç®å½ä¸ï¼å±äºåæ¥ç主ç»çæä»¶å°è½¬äº¤æ°ç»ææã

主ç®å½ä¹å¤çæä»¶æå±çç»å¿é¡»æå¨ä¿®æ¹ã

−G, −−groups GROUP1[,GROUP2,…[,GROUPN]]]

ç¨æ·è¿å±äºçéå ç»å表ãç»ä¹é´ä½¿ç¨éå·åéï¼æ²¡æç©ºæ ¼ãè¿äºç»éè¦éµå®å −g é项ä¸ç»çç»åæ ·çéå¶ã

å¦æç¨æ·å½åæ¯ä¸ä¸ªç»çæåï¼èè¿ä¸ªç»æ²¡æåå¨è¿éï¼ç¨æ·å°è¢«ä»é£ä¸ªç»é便å é¤ãè¿ä¸ªè¡ä¸ºå¯ä»¥éè¿ −a é项修æ¹ï¼è¿ä½¿ç¨æ·è¿½å å°ç»åºçéå ç»å表ä¸ã

−l, −−login NEW_LOGIN

ç¨æ·çåç§°å°ä¼ä» LOGIN ä¿®æ¹ä¸º NEW_LOGINãä¸ä¼æ´æ¹å«çä»»ä½ä¸è¥¿ãç¹å«æ¯ï¼ç¨æ·ç主ç®å½ååé®ä»¶æ± ä¹éè¦æå¨ä¿®æ¹ä»¥åæ°ç»å½å对åºã

−L, −−lock

éå®ç¨æ·çå¯ç ãè¿ä¼å¨ç¨æ·å å¯çå¯ç ä¹åæ¾ç½®ä¸ä¸ª“!”ï¼å¯ä»¥å¿«éç¦ç¨å¯ç ãæ¨å¯ä»¥å −p æ −U éåä½¿ç¨æ¤é项ã

注æï¼å¦æå¸æéå®è´¦æ·(ä¸ä»ä»æ¯éè¿å¯ç è®¿é®)ï¼æ¨ä¹éè¦è®¾ç½® EXPIRE_DATE 为 1ã

−m, −−move−home

å°ç¨æ·ç主ç®å½ç§»å¨å°æ°ä½ç½®ã

è¿ä¸ªéé¡¹åªæå −d−−home) é项ç»åä½¿ç¨æ¶æææã

usermod 伿¹åæä»¶çå±ä¸»å¹¶å¤å¶æ¨¡å¼ãACL åæ©å±å±æ§ï¼ä½æ¯ç¨åä¹å¯è½éè¦æå¨ä¿®æ¹ã

−o, −−non−unique

ä½¿ç¨ −u é项æ¶ï¼å¯ä»¥å°ç¨æ· ID æ¹ä¸ºéå¯ä¸çå¼ã

−p, −−password PASSWORD

å·²ç»å å¯è¿çå¯ç ï¼å°±å crypt(3) è¿åç飿 ·ã

注æï¼ä¸æ¨è使ç¨è¿ä¸ªé项ï¼å ä¸ºå¯ç (æå å¯è¿çå¯ç )ä¼è¢«ç¨æ·éè¿ååºè¿ä¸ªè¿ç¨èçå°ã

æ¨åºè¯¥ç¡®ä¿å¯ç ç¬¦åç³»ç»çå¯ç æ¿çã

−R, −−root CHROOT_DIR

Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR directory.

−P, −−prefix PREFIX_DIR

Apply changes in the PREFIX_DIR directory and use the configuration files from the PREFIX_DIR directory. This option does not chroot and is intended for preparing a cross−compilation target. Some limitations: NIS and LDAP users/groups are not verified. PAM authentication is using the host files. No SELINUX support.

−s, −−shell SHELL

ç¨æ·çæ°ç»å½ shell çåç§°ãå°æ¤å段设置为空ä¼è®©ç³»ç»éæ©é»è®¤çç»å½ shellã

−u, −−uid UID

ç¨æ· ID çæ°æ°å¼ã

è¿ä¸ªå¼å¿é¡»æ¯å¯ä¸çï¼é¤é使ç¨äº −o é项ï¼å¿é¡»æ¯éè´å¼ã

ç¨æ·çé®ç®±ï¼ç¨æ·ä¸»ç®å½ä¸å±äºæ¤ç¨æ·çæä»¶çå±ä¸» ID ä¹å°èªå¨æ´æ¹ã

ç¨æ·ä¸»ç®å½ä¹å¤æä»¶æææå¿é¡»æå¨ä¿®å¤ã

ä¸ä¼å¯¹ /etc/login.defs ä¸ç UID_MIN, UID_MAX, SYS_UID_MIN å SYS_UID_MAX è¿è¡æ£æ¥ã

−U, −−unlock

è§£éç¨æ·çå¯ç ãè¿å°ç§»é¤å å¯çå¯ç ä¹åç“!”ãæ¨å¯ä»¥å°æ¤é项å −p æ −L éå使ç¨ã

注æï¼å¦ææ¨å¸æè§£éè´¦æ·(ä¸åªæ¯ä½¿ç¨å¯ç è®¿é®)ï¼æ¨ä¹åºè¯¥è®¾ç½® EXPIRE_DATE (ä¾å¦è®¾ç½®ä¸º 99999ï¼æè /etc/default/useradd ä¸ç EXPIRE å¼)ã

−v, −−add−subuids FIRSTLAST

Add a range of subordinate uids to the user’s account.

This option may be specified multiple times to add multiple ranges to a users account.

No checks will be performed with regard to SUB_UID_MIN, SUB_UID_MAX, or SUB_UID_COUNT from /etc/login.defs.

−V, −−del−subuids FIRSTLAST

Remove a range of subordinate uids from the user’s account.

This option may be specified multiple times to remove multiple ranges to a users account. When both −−del−subuids and −−add−subuids are specified, the removal of all subordinate uid ranges happens before any subordinate uid range is added.

No checks will be performed with regard to SUB_UID_MIN, SUB_UID_MAX, or SUB_UID_COUNT from /etc/login.defs.

−w, −−add−subgids FIRSTLAST

Add a range of subordinate gids to the user’s account.

This option may be specified multiple times to add multiple ranges to a users account.

No checks will be performed with regard to SUB_GID_MIN, SUB_GID_MAX, or SUB_GID_COUNT from /etc/login.defs.

−W, −−del−subgids FIRSTLAST

Remove a range of subordinate gids from the user’s account.

This option may be specified multiple times to remove multiple ranges to a users account. When both −−del−subgids and −−add−subgids are specified, the removal of all subordinate gid ranges happens before any subordinate gid range is added.

No checks will be performed with regard to SUB_GID_MIN, SUB_GID_MAX, or SUB_GID_COUNT from /etc/login.defs.

−Z, −−selinux−user SEUSER

ç¨æ·ç»éç SELinux ç¨æ·ã

空ç SEUSER å°ç§»é¤ç¨æ· LOGIN ç SELinux ç¨æ·æ å°(妿æ)ã

CAVEATS

You must make certain that the named user is not executing any processes when this command is being executed if the user’s numerical user ID, the user’s name, or the user’s home directory is being changed. usermod checks this on Linux. On other platforms it only uses utmp to check if the user is logged in.

æ¨å¿é¡»æå¨æ´æ¹ crontab æä»¶æ at ä½ä¸çå±ä¸»ã

æ¨å¿é¡»æ´æ¹ NIS æå¡å¨ä¸ç NIS ç¸å³å容ã

éç½®æä»¶

å¨ /etc/login.defs 䏿å¦ä¸éç½®åéï¼å¯ä»¥ç¨æ¥æ´æ¹æ¤å·¥å·çè¡ä¸ºï¼

MAIL_DIR (string)

é®ç®±ç®å½ãä¿®æ¹æå é¤ç¨æ·è´¦æ·æ¶éè¦å¤çé®ç®±ï¼å¦ææ²¡ææå®ï¼å°ä½¿ç¨ç¼è¯æ¶æå®çé»è®¤å¼ã

MAIL_FILE (string)

å®ä¹ç¨æ·é®ç®±æä»¶çä½ç½®(ç¸å¯¹äºä¸»ç®å½)ã

MAIL_DIR and MAIL_FILE åéç± useraddï¼usermod å userdel ç¨äºå建ãç§»å¨æå é¤ç¨æ·é®ç®±ã

妿 MAIL_CHECK_ENAB 设置为 yesï¼å®ä»¬ä¹è¢«ç¨äºå®ä¹ MAIL ç¯å¢åéã

MAX_MEMBERS_PER_GROUP (number)

æ¯ä¸ªç»æ¡ç®çæå¤§æåæ°ãè¾¾å°æå¤§å¼æ¶ï¼å¨ /etc/group å¼å§ä¸ä¸ªæ°æ¡ç®(è¡)(使ç¨åæ ·çåç§°ï¼åæ ·çå¯ç ï¼åæ ·ç GID)ã

é»è®¤å¼æ¯ 0ï¼æå³çç»ä¸çæåæ°æ²¡æéå¶ã

æ¤åè½(åå²ç»)å许éå¶ç»æä»¶ä¸çè¡é¿åº¦ãè¿å¯¹äºç¡®ä¿ NIS ç»çè¡æ¯é¿äº 1024 å符ã

妿è¦å¼ºå¶è¿ä¸ªéå¶ï¼å¯ä»¥ä½¿ç¨ 25ã

注æï¼åå²ç»å¯è½ä¸åææå·¥å·çæ¯æ(çè³å¨ Shadow å·¥å·éä¸- )ãæ¨ä¸åºè¯¥ä½¿ç¨è¿ä¸ªåéï¼é¤éççéè¦ã

SUB_GID_MIN (number), SUB_GID_MAX (number), SUB_GID_COUNT (number)

If /etc/subuid exists, the commands useradd and newusers (unless the user already have subordinate group IDs) allocate SUB_GID_COUNT unused group IDs from the range SUB_GID_MIN to SUB_GID_MAX for each new user.

The default values for SUB_GID_MIN, SUB_GID_MAX, SUB_GID_COUNT are respectively 100000, 600100000 and 10000.

SUB_UID_MIN (number), SUB_UID_MAX (number), SUB_UID_COUNT (number)

If /etc/subuid exists, the commands useradd and newusers (unless the user already have subordinate user IDs) allocate SUB_UID_COUNT unused user IDs from the range SUB_UID_MIN to SUB_UID_MAX for each new user.

The default values for SUB_UID_MIN, SUB_UID_MAX, SUB_UID_COUNT are respectively 100000, 600100000 and 10000.

æä»¶

/etc/group

ç»è´¦æ·ä¿¡æ¯ã

/etc/gshadow

å®å¨ç»è´¦æ·ä¿¡æ¯ã

/etc/login.defs

Shadow å¯ç å¥ä»¶éç½®ã

/etc/passwd

ç¨æ·è´¦æ·ä¿¡æ¯ã

/etc/shadow

å®å¨ç¨æ·è´¦æ·ä¿¡æ¯ã

/etc/subgid

Per user subordinate group IDs.

/etc/subuid

Per user subordinate user IDs.

åè§

chfn(1), chsh(1), passwd(1), crypt(3), gpasswd(8), groupadd(8), groupdel(8), groupmod(8), login.defs(5), subgid(5), subuid(5), useradd(8), userdel(8).