gustin at echostar.ca
Fri May 5 21:35:38 PDT 2006
-----BEGIN PGP SIGNED MESSAGE-----
Mitchell Brown wrote:
> Thanks Gustin :) Most of this I knew. I figured out how to setup X to
> login as root (I found out how, but I didn't actually do it).
> I'm no noob to Linux, I know that the users/groups sytem vary
> drastically. It's just - in every other distro (Suse, mandriva, pclos,
> xandros, mepis, etc) all assign the default user groups when you hit Add
> New User. Not Kubuntu! You have to tell it which ones. And I'm not sure
> which ones are the right ones. I'd copy it from my install user, but,
K/Ubuntu is closely based on Debian, which has traditionally gone its
own way regardless of what other distros do. If you are stuck somewhere
on K/Ubuntu and the ubuntu forums are not helping, you can try googling
for debian instead of k/ubuntu. While .deb files for Debian may not
install properly (dependancies usually), config how-tos for Debian are
usually valid for Ubuntu.
> that user is an administrator, and I'm not sure which groups are
> admin-specific. But I'll try that link. Thanks for your help!
Ubuntu follows debian, and assigns a default group that is the same name
as the username. So by default user mruser belongs to the default
group mruser. The GID (numeric value) usually matches the UID, starting
with 1000 and going up from there.
I usually create some groups for machines that have more than me as a
user. As often as possible, I try to avoid shell accounts for end users
on my machine (my mail server for instance stores mailbox info in LDAP,
and local logins for the admins use /etc/password/shadow. This way an
end user cannot escalate privileges on their account.
There is not really a wrong answer, as long as you don't open up the
machine too much and get hacked.
My first Unix like install on my home PC was FreeBSD, so I tend to
follow some of their conventions (only users who belong to the wheel
group can su), I also set the default sudo permissions to deny everything.
The strength and weakness of this model is the flexibility, with the
downside being that many distros do things differently. Another example
is the default apache2 config. The Debian default is different from
every other distro I have seen, but I do like it the best. This is not
always the case though (there is no distro to rule them all...)
> PS: Awesome presentation on Wed.
> On 5/5/06, *Gustin Johnson* <gustin at echostar.ca
> <mailto:gustin at echostar.ca>> wrote:
> If the need arises, you can launch GUI apps from the command line using
> sudo. You can also use kdesu appname from the run window (Alt-F2 is the
> There is _no_ need to ever login to X as root. Most configuration
> control panel apps have an administrator mode that allows that applet to
> gain admin privileges.
> The concept of groups is a little different from the Windows world.
> Some good info here:
> Scroll down to the user/group management bit.
> When things break, the CLI is your best friend, even in Windows.
> Mitchell Brown wrote:
>> KK I figured out how to setup the root, and didn't do it, just as
>> promised :) I'm just curious y'know, should the need ever arise.
>> So can someone get me a listing of the default groups for Kubuntu for
>> a user? And what are the ones for a Administrator?
>> On 5/4/06, Aaron J. Seigo <aseigo at kde.org <mailto:aseigo at kde.org>>
>>> On Thursday 04 May 2006 17:04, Mitchell Brown wrote:
>>>> I cant find the Users and Groups panel you mean, because it
> still asks me
>>>> which groups I want to add it to. Even regular things like
> audio, and
>>>> aren't on there by default..
>>> yeah, i don't actually remember this control panel from breezy
> (5.10). maybe
>>> it's new in dapper (i'm running the 6.06 beta 2)
>>>> Tell me how to setup graphical root login and I'll give you a
> cookie :)
>>>> I promise not to use it ;)
>>> read the docu for kdm. if you really want it, you can dig for it.
> i'd feel a
>>> bit irresponsible aiding and abetting a root log in to X. ;)
>>> Aaron J. Seigo
>>> GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA EE75 D6B7 2EB1 A7F1 DB43
>>> Full time KDE developer sponsored by Trolltech (
>> pub 1024D/9091C422 02/05/2006 Mitchell Brown <mbgb14 at gmail.com
> <mailto:mbgb14 at gmail.com>>
>> Primary key fingerprint: 812B 94BC EA0D 345A CC1C 2ED9 F7F6
> 5CCF 9091 C422
>> clug-talk mailing list
>> clug-talk at clug.ca <mailto:clug-talk at clug.ca>
>> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
>> **Please remove these lines when replying
clug-talk mailing list
clug-talk at clug.ca <mailto:clug-talk at clug.ca>
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying
> pub 1024D/9091C422 02/05/2006 Mitchell Brown <mbgb14 at gmail.com
> <mailto:mbgb14 at gmail.com>>
Primary key fingerprint: 812B 94BC EA0D 345A CC1C 2ED9 F7F6 5CCF
> 9091 C422
> clug-talk mailing list
> clug-talk at clug.ca
> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
> **Please remove these lines when replying
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the clug-talk