Книга: Fedora™ Unleashed, 2008 edition
The Password File
The Password File
The password file is /etc/passwd
, and it is the database file for all users on the system. The format of each line is as follows:
username:password:uid:gid:gecos:homedir:shell
The fields are self-explanatory except for the gecos
field. This field is for miscellaneous information about the user, such as the user's full name, his office location, office and home phone numbers, and possibly a brief text message. For security and privacy reasons, this field is little used nowadays, but the system administrator should be aware of its existence because the gecos
field is used by traditional UNIX programs such as finger
and mail.
For that reason, it is commonly referred to as the finger information field. The data in this field is comma delimited; the gecos
field can be changed with the cgfn
(change finger) command.
Note that a colon separates all fields in the /etc/passwd
file. If no information is available for a field, that field is empty, but all the colons remain.
If an asterisk appears in the password field, that user is not permitted to log on. Why does this feature exist? So that a user can be easily disabled and (possibly) reinstated later without having to be created all over again. The system administrator manually edits this field, which is the traditional UNIX way of accomplishing this task. Fedora provides improved functionality with the passwd -l
command mentioned earlier.
Several services run as pseudo-users, usually with root permissions. These are the system, or logical, users mentioned previously. You would not want these accounts available for general login for security reasons, so they are assigned /sbin/nologin
as their shell, which prohibits any logins from those "users."
A list of /etc/passwd
reveals the following:
# cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
...
gdm:x:42:42::/var/gdm:/sbin/nologin
named:x:25:25:Named:/var/named:/sbin/nologin
dovecot:x:97:97:dovecot:/usr/libexec/dovecot:/sbin/nologin
postfix:x:89:89::/var/spool/postfix:/sbin/nologin
andrew:x:500:500:Andrew Hudson:/home/andrew:/bin/bash
Note that the password fields do not show a password, but contain an x
because they are shadow passwords, a useful security enhancement to Linux, discussed in the following section.
- Finishing the Install
- Managing Passwords
- Shadow Passwords
- Changing Passwords in a Batch
- Authentication
- The FTP User
- Other vsftpd Server Configuration Files
- Shared Cache file
- Безопасность внешних таблиц. Параметр EXTERNAL FILE DIRECTORY
- 4.4.4 The Dispatcher
- About the author
- Chapter 7. The state machine