%-----------------------------------------------------------------------
\chapter{Managing user accounts (DRAFT)}
\label{chap:useradmin}
%-----------------------------------------------------------------------

	\noindent
	This chapter explains how to create new user accounts, how to
	modify the properties of those accounts, and how to remove the
	accounts.  Different Linux systems have different tools for
	doing this.  This chapter covers the tools that are used
	together with shadow passwords.
	
\section{What's an account?}

	simplified: account = passwd line + home dir + files owned by
	username + disk quotas + other info and limits and regulations

\section{Creating a user}

	useradd
	/etc/skel
	selecting numeric uid
	NFS means uids must be same over systems
	/etc/{passwd,group,shadow} file formats and purposes
	
\subsection{Managing groups}

	Debian creates a new group for each user; give reason for this
	
\section{Educating a new user}

	make sure they know how to get help
	large sites might want to write a small booklet (or even just
		a couple of pages) with important stuff: how to log in
		and out, how to change password, which systems there are,
		how to use mail, list of people that answer questions

\section{Changing user properties}

	chfn
	chsh
	passwd
	usermod?
	changing numeric uid
	changing textual username
	you may or may not allow users to do it for themselves
		why not: they may become confused and make trouble for
		themselves, which means more work for sysadmin who has
		to help them
	adding/removing user to/from groups
	
\section{Removing a user}

	remove all files
	userdel removes line from /etc/passwd
	
\section{Disabling a user temporarily}

	suspected cracked account, abuse, hasn't paid his fees, whatever
	change shell to something useful
	don't change it to a shell script (security bug!)
		try \verb|#!/bin/tail +1| as first line
