17.4. Configuring the root account and creating users
You can configure the root account and create users to access the system from the Installation Summary screen.
17.4.1. Configuring a root account リンクのコピーリンクがクリップボードにコピーされました!
You can configure a root account during the installation process to log in to the administrator (also known as superuser or root) account for system administration tasks. These tasks include:
- Installing and updating software packages
- Changing system-wide configuration such as network and firewall settings, storage options
- Adding or modifying users, groups and file permissions.
To gain root privileges for the installed systems, you can either use a root account or create a user account with administrative privileges (member of the wheel group). The root account is always created during the installation. Switch to the administrator account only when you need administrator access for tasks.
The root account has complete control over the system. If unauthorized personnel gain access to the account, they can access or delete users' personal files.
Procedure
From the Installation Summary window, select User Settings > Root Account. The Root Account window opens.
By default, the Disable root account option is selected.
- To enable root account, select the Enable root account option.
Type your password in the Root Password field.
The root password is case-sensitive and must be at least eight characters long containing numbers, letters (upper and lower case) and symbols.
- Type the same password in the Confirm field.
-
Optional: Select the
Allow root SSH login with passwordoption to enable SSH access (with password) to this system as the root user. By default the password-based SSH root access is disabled. Click to confirm your root password and return to the Installation Summary window.
If you proceed with a weak password, you must click twice.
17.4.2. Creating a user account リンクのコピーリンクがクリップボードにコピーされました!
Create a user account during RHEL installation to establish a non-root user for daily system operations from the Installation Summary window. It improves security by avoiding the use of the root account for regular tasks and provides proper user management from the start of system deployment.
+ NOTE: You should only use the root account to perform privileged tasks. Using the root account instead of a non-privileged user account to perform regular tasks can introduce a security risk.
Procedure
- On the Installation Summary window, select User Settings > User Creation. The Create User window opens.
- Type the user account name into the Full name field, for example: John Smith.
Type the username into the User name field, for example: jsmith.
The User name is used to log in from a command line; if you install a graphical environment, then your graphical login manager uses the Full name.
The Add administrative privileges to this… option is selected by default. Deselect this option if you do not want to share administrative privileges to this account. By default, new users have administrative privileges to the system.
An administrator user can use the
sudocommand to perform tasks that are only available torootby using the user password, instead of therootpassword. Though it is more convenient, it can also introduce a security risk.The Require a password to use this account option is selected by default. Disable it if you want to use this account without a password.
If you give administrator privileges to a user, ensure the account is password protected. Never give a user administrator privileges without assigning a password to the account.
- Type a password into the Password field.
- Type the same password into the Confirm password field.
- Click to apply the changes and return to the Installation Summary window.
17.4.3. Editing advanced user settings リンクのコピーリンクがクリップボードにコピーされました!
You can configure advanced user account settings during RHEL installation to customize home directories, user and group IDs, and group memberships. This provides fine-grained control over user account configuration and system security policies.
Procedure
- On the Create User window, click .
-
Edit the details in the Home directory field, if required. The field is populated by default with
/home/username. In the User and Groups IDs section you can:
Select the Specify a user ID manually check box and use or to enter the required value.
The default value is 1000. User IDs (UIDs) 0-999 are reserved by the system so they cannot be assigned to a user.
Select the Specify a group ID manually check box and use or to enter the required value.
The default group name is the same as the user name, and the default Group ID (GID) is 1000. GIDs 0-999 are reserved by the system so they cannot be assigned to a user group.
Specify additional groups as a comma-separated list in the Group Membership field. Groups that do not already exist are created; you can specify custom GIDs for additional groups in parentheses. If you do not specify a custom GID for a new group, the new group receives a GID automatically.
The user account created always has one default group membership (the user’s default group with an ID set in the Specify a group ID manually field).
- Click to apply the updates and return to the Create User window.