Managing User Accounts: useradd, usermod, and userdel

1. Understanding User Accounts in Linux

Before we start creating users, it's important to understand how Linux sees them. Every user on the system is assigned a unique User ID (UID) and has an entry in a specific system file. The distinction between human users and service users is also important.

Let's start with a video that explains these foundational concepts.

As you saw, a "user" is more than just a name. It's an entry in /etc/passwd with a UID. The system uses this UID to track file ownership and permissions.

• Normal Users: These are accounts for humans who log in and interact with the system, like the account you created when you installed Fedora.
• System Users: These are special, non-login accounts created to run specific services or applications (like a web server or a database). This is a security best practice known as the principle of least privilege. You'll be creating system users later in this course when you deploy your Django application.

2. Creating User Accounts with useradd

The primary command for creating a new user is useradd. While you can run it with just a username, it's best practice to be explicit with your options to ensure the user is created correctly. One of the most common mistakes beginners make is creating a user without a home directory.

The following video segment demonstrates the correct way to add a user and set their password.

Here is a summary of the most important commands and flags for creating a user:

For a more detailed written guide and a handy quick-reference table, the article "Linux User Management: From Zero to Admin" is an excellent resource to review.

3. Modifying and Deleting User Accounts

Once a user is created, their attributes aren't set in stone. You might need to change a username, lock an account for security reasons, or ultimately delete it.

• usermod: The usermod (user modify) command is used to change existing user account details.
• userdel: The userdel (user delete) command is for removing user accounts.

Let's see how these are used in practice.

Here's a summary of key modification and deletion commands:

For more usermod options, you can refer back to the "Linux User Management" article, specifically the section titled "Solution 2: Modifying Existing Users Without Breaking Things."

4. Do-It-Yourself: The User Lifecycle

Now it's time to put theory into practice. You will perform the complete lifecycle of a test user: create, modify, and delete. This hands-on exercise is designed to build muscle memory for these essential commands.

Open your terminal and follow these steps.

1. Create a Test User:
   Create a new user named testuser. Make sure to create their home directory and add a descriptive comment.

   sudo useradd -m -c "Temporary Test User" testuser
   

2. Set a Password:
   A user can't log in without a password. Set one for testuser. You will be prompted to enter and confirm a new password.

   sudo passwd testuser
   

3. Verify User Creation:
   You can check that the user was created by looking for them in the /etc/passwd file or by using the id command.

   id testuser
   
   
   
   # You should see output showing the user's uid, gid, and groups.
   
   ls -l /home
   
   
   
   # You should see the 'testuser' directory listed.
   

4. Modify the User:
   Let's say the user needs a new username. Change testuser to testuser_alpha.

   sudo usermod -l testuser_alpha testuser
   

   Verify the change. The old username should no longer work.

   id testuser
   
   
   
   # This should return an error: "no such user"
   
   id testuser_alpha
   
   
   
   # This should succeed.
   

   Note: Notice that /home/testuser was not automatically renamed. You'll learn how to manage that in a later lesson, but for now, just be aware of it.

5. Lock the Account:
   Temporarily disable the account using the -L flag.

   sudo usermod -L testuser_alpha
   

   If you were to try logging in as testuser_alpha now (for example, by switching users in your terminal), it would fail.

6. Unlock the Account:
   Re-enable the account.

   sudo usermod -U testuser_alpha
   

7. Delete the User (Cleanly):
   Finally, the test user is no longer needed. Remove the user account and its home directory.

   sudo userdel -r testuser_alpha
   

8. Verify Deletion:
   Confirm that the user and their home directory are gone.

   id testuser_alpha
   
   
   
   # Should return "no such user"
   
   ls -l /home
   
   
   
   # The 'testuser' directory should be gone.
   

You have now successfully managed a user from creation to deletion.

Conclusion

In this lesson, you have learned the fundamental commands for managing the user account lifecycle on a Linux system. This is a non-negotiable skill for any system administrator and a crucial piece of knowledge for a developer aiming to securely deploy applications.

Key Takeaways:

• User accounts are defined in /etc/passwd and identified by a unique User ID (UID).
• The useradd command creates users. Always use the -m flag to ensure a home directory is created unless you are creating a system account.
• A newly created user needs a password set with passwd before they can log in.
• The usermod command modifies existing user attributes, such as their login name or account status (locked/unlocked).
• The userdel command removes users. Use the -r flag with caution to also remove their home directory and all associated files.

In our next lesson, we will build on this foundation by exploring group management. You will learn how to create groups, add users to them, and understand the difference between primary and secondary groups. This is the next logical step in controlling file permissions and access for teams and services on your server.