Managing User Groups

Creating Group

User groups can be created using addgroup utility. To add a user group interactively start addgroup program from Sauron top-level directory as follows:

./addgroup

Here is example how to add a group named "hobbits":

Enter group name: hobbits Enter group description: Shire Hobbits Groupname: hobbits Description: Shire Hobbits Add this group [y/n]?y Group hobbits added successfully.

After creating a new group, it should be assigned some privileges as described in the Section called Setting Group Privileges.

Setting Group Privileges

User groups (like User accounts) must have some privileges assigned to them for them to be useful. Privileges can be assigned directly to the user group using modgroup utility. Privileges that can be set to a user group are same as the privileges for a user. For more information about privileges see the Section called Setting Privileges.

To add privileges for a user group interactively, start modgroup utility with the --add option. This can be done as follows from the Sauron top-level directory:

./modgroup hobbits --add

After adding desired privileges to the group, modgroup utility can also be used to display group's privileges by starting it with only the group name as argument.

./modgroup hobbits

This should produce output similar to following:

Groupname: hobbits (id=1) Comment: Shire Hobbits ID Type Ref. Mode ------ -------- ------------------------- -------------------------------- 1 server test R 2 zone test:middle.earth RW

Removing Group

User group can be removed using delgroup utility. This utility works interactively when started without any arguments. To remove user(s) non-interactively use --group=<groupname>

To remove user group interactively, simply start delgroup without any arguments from Sauron top-level directory:

./delgroup