diff options
Diffstat (limited to 'chapter08/shadow.xml')
| -rw-r--r-- | chapter08/shadow.xml | 85 |
1 files changed, 42 insertions, 43 deletions
diff --git a/chapter08/shadow.xml b/chapter08/shadow.xml index cbd6ac913..68cc130c9 100644 --- a/chapter08/shadow.xml +++ b/chapter08/shadow.xml @@ -66,16 +66,16 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;</userinput></s the obsolete <filename class="directory">/var/spool/mail</filename> location for user mailboxes that Shadow uses by default to the <filename class="directory">/var/mail</filename> location used currently. And, - get rid of <filename class="directory">/bin</filename> and - <filename class="directory">/sbin</filename> from <envar>PATH</envar>, - since they are simply symlinks to their counterpart in + remove <filename class="directory">/bin</filename> and + <filename class="directory">/sbin</filename> from the <envar>PATH</envar>, + since they are simply symlinks to their counterparts in <filename class="directory">/usr</filename>.</para> <note> - <para>If <filename class="directory">/bin</filename> and/or - <filename class="directory">/sbin</filename> are preferred to be - left over in <envar>PATH</envar> for some reason, modify - <envar>PATH</envar> in <filename>.bashrc</filename> after LFS is + <para>If you wish to include <filename class="directory">/bin</filename> + and/or <filename class="directory">/sbin</filename> in the <envar>PATH</envar> + for some reason, modify the + <envar>PATH</envar> in <filename>.bashrc</filename> after LFS has been built.</para> </note> @@ -85,7 +85,7 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;</userinput></s -i etc/login.defs</userinput></screen> <note> - <para>If you chose to build Shadow with Cracklib support, run the following:</para> + <para>If you chose to build Shadow with Cracklib support, issue this command:</para> <screen role="nodump"><userinput>sed -i 's:DICTPATH.*:DICTPATH\t/lib/cracklib/pw_dict:' etc/login.defs</userinput></screen> </note> @@ -108,21 +108,22 @@ find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;</userinput></s --with-group-name-max-length=32</userinput></screen> <variablelist> - <title>The meaning of the configure option:</title> + <title>The meaning of the new configuration options:</title> <varlistentry> <term><command>touch /usr/bin/passwd</command></term> <listitem> <para>The file <filename>/usr/bin/passwd</filename> needs - to exist because its location is hardcoded in some programs, and - if it does not exist, the default location is not right.</para> + to exist because its location is hardcoded in some programs; + if it does not already exist, the installation script will + create it in the wrong place.</para> </listitem> </varlistentry> <varlistentry> <term><parameter>--with-group-name-max-length=32</parameter></term> <listitem> - <para>The maximum user name is 32 characters. Make the maximum - group name the same.</para> + <para>The longest permissible user name is 32 characters. Make the maximum + length of a group name the same.</para> </listitem> </varlistentry> @@ -153,9 +154,9 @@ make -C man install-man</userinput></screen> groups; set and change their passwords; and perform other administrative tasks. For a full explanation of what <emphasis>password shadowing</emphasis> means, see the <filename>doc/HOWTO</filename> file within the unpacked - source tree. If using Shadow support, keep in mind that programs which need + source tree. If you use Shadow support, keep in mind that programs which need to verify passwords (display managers, FTP programs, pop3 daemons, etc.) - must be Shadow-compliant. That is, they need to be able to work with + must be Shadow-compliant. That is, they must be able to work with shadowed passwords.</para> <para>To enable shadowed passwords, run the following command:</para> @@ -167,44 +168,44 @@ make -C man install-man</userinput></screen> <screen><userinput>grpconv</userinput></screen> <para>Shadow's default configuration for the <command>useradd</command> - utility has a few caveats that need some explanation. First, the default + utility needs some explanation. First, the default action for the <command>useradd</command> utility is to create the user and - a group of the same name as the user. By default the user ID (UID) and - group ID (GID) numbers will begin with 1000. This means if you don't pass - parameters to <command>useradd</command>, each user will be a member of a + a group with the same name as the user. By default the user ID (UID) and + group ID (GID) numbers will begin at 1000. This means if you don't pass + extra parameters to <command>useradd</command>, each user will be a member of a unique group on the system. If this behavior is undesirable, you'll need - to pass one of the <parameter>-g</parameter> or <parameter>-N</parameter> - parameter to <command>useradd</command> or to change the setting of + to pass either the <parameter>-g</parameter> or <parameter>-N</parameter> + parameter to <command>useradd</command>, or else change the setting of <parameter>USERGROUPS_ENAB</parameter> in <filename>/etc/login.defs</filename>. See <filename>useradd(8)</filename> for more information.</para> <para>Second, to change the default parameters, the file - <filename>/etc/default/useradd</filename> needs to be created and tailored + <filename>/etc/default/useradd</filename> must be created and tailored to suit your particular needs. Create it with:</para> <screen><userinput>mkdir -p /etc/default useradd -D --gid 999</userinput></screen> <variablelist> - <title><filename>/etc/default/useradd</filename> Parameter Explanations</title> + <title><filename>/etc/default/useradd</filename> parameter explanations</title> <varlistentry> <term><parameter>GROUP=999</parameter></term> <listitem> <para>This parameter sets the beginning of the group numbers used in the <filename>/etc/group</filename> file. The particular value 999 - comes from the <parameter>--gid</parameter> parameter above. You can - modify it to anything you desire. + comes from the <parameter>--gid</parameter> parameter above. You + may set it to any desired value. Note that <command>useradd</command> will never reuse a UID or GID. If the number identified in this parameter is used, it will use the next available number. Note also that if you don't have a group with - an ID equal to this number on your system the first time you use + an ID equal to this number on your system, then the first time you use <command>useradd</command> without the <parameter>-g</parameter> - parameter, you will get a message displayed on the terminal that - says: <computeroutput>useradd: unknown GID 999</computeroutput>, - although the account is correctly created. That is why we have + parameter, an error message will be generated—<computeroutput>useradd: + unknown GID 999</computeroutput>, + even though the account has been created correctly. That is why we created the group <systemitem class="groupname">users</systemitem> with this group ID in <xref linkend='ch-tools-createfiles'/>.</para> @@ -214,12 +215,11 @@ useradd -D --gid 999</userinput></screen> <term><parameter>CREATE_MAIL_SPOOL=yes</parameter></term> <listitem> <para>This parameter causes <command>useradd</command> to create a - mailbox file for the newly created user. <command>useradd</command> - will make the group ownership of this file to the + mailbox file for each new user. <command>useradd</command> + will assign the group ownership of this file to the <systemitem class="groupname">mail</systemitem> group with 0660 - permissions. If you would prefer that these mailbox files are not - created by <command>useradd</command>, issue the following - command:</para> + permissions. If you would rather not create these files, + issue the following command:</para> <screen><userinput>sed -i '/MAIL/s/yes/no/' /etc/default/useradd</userinput></screen> </listitem> @@ -230,7 +230,7 @@ useradd -D --gid 999</userinput></screen> </sect2> <sect2 role="configuration"> - <title>Setting the root password</title> + <title>Setting the Root Password</title> <para>Choose a password for user <emphasis>root</emphasis> and set it by running:</para> @@ -329,7 +329,7 @@ useradd -D --gid 999</userinput></screen> <term><command>faillog</command></term> <listitem> <para>Is used to examine the log of login failures, to set a maximum - number of failures before an account is blocked, or to reset the + number of failures before an account is blocked, and to reset the failure count</para> <indexterm zone="ch-system-shadow faillog"> <primary sortas="b-faillog">faillog</primary> @@ -509,9 +509,8 @@ useradd -D --gid 999</userinput></screen> <varlistentry id="nologin"> <term><command>nologin</command></term> <listitem> - <para>Displays a message that an account is not available; it is designed - to be used as the default shell for accounts that have been - disabled</para> + <para>Displays a message saying an account is not available; it is designed + to be used as the default shell for disabled accounts</para> <indexterm zone="ch-system-shadow nologin"> <primary sortas="b-nologin">nologin</primary> </indexterm> @@ -597,7 +596,7 @@ useradd -D --gid 999</userinput></screen> <varlistentry id="userdel"> <term><command>userdel</command></term> <listitem> - <para>Deletes the given user account</para> + <para>Deletes the specified user account</para> <indexterm zone="ch-system-shadow userdel"> <primary sortas="b-userdel">userdel</primary> </indexterm> @@ -607,8 +606,8 @@ useradd -D --gid 999</userinput></screen> <varlistentry id="usermod"> <term><command>usermod</command></term> <listitem> - <para>Is used to modify the given user's login name, User - Identification (UID), shell, initial group, home directory, etc.</para> + <para>Is used to modify the given user's login name, user + identification (UID), shell, initial group, home directory, etc.</para> <indexterm zone="ch-system-shadow usermod"> <primary sortas="b-usermod">usermod</primary> </indexterm> @@ -640,7 +639,7 @@ useradd -D --gid 999</userinput></screen> <varlistentry id="libsubid"> <term><filename class='libraryfile'>libsubid</filename></term> <listitem> - <para>library for process subordinate id ranges for users</para> + <para>library for processing subordinate id ranges for users</para> <indexterm zone="ch-system-shadow libsubid"> <primary sortas="c-libsubid">libsubid</primary> </indexterm> |