CentOS Stream 9 : Initial Settings : Add User Accounts

[root@localhost ~]# useradd centos

[root@localhost ~]# passwd centos

Changing password for user centos.

New UNIX password:              # input any password you'd like to set

Retype new UNIX password:       # confirm

passwd: all authentication tokens updated successfully.

localhost login: centos         # login username

password:                       # input user password

[centos@localhost ~]$ su -      # switch to root

Password:                       # input root password

[root@localhost ~]#             # just switched to root

[root@localhost ~]# usermod -aG wheel centos

[root@localhost ~]# vi /etc/pam.d/su

#%PAM-1.0

auth            sufficient      pam_rootok.so

# Uncomment the following line to implicitly trust users in the "wheel" group.

#auth           sufficient      pam_wheel.so trust use_uid

# Uncomment the following line to require a user to be in the "wheel" group.

# uncomment the following line

auth            required        pam_wheel.so use_uid

auth            substack        system-auth

auth            include         postlogin

account         sufficient      pam_succeed_if.so uid = 0 use_uid quiet

account         include         system-auth

password        include         system-auth

session         include         system-auth

session         include         postlogin

session         optional        pam_xauth.so



# verify settings with a user who is not in allowed group

[redhat@localhost ~]$ su -

Password:

su: Permission denied     # denied normally

# remove a user [centos] (only removed user account)

[root@localhost ~]# userdel centos

# remove a user [centos] (removed user account and his home directory both)

[root@localhost ~]# userdel -r centos