[wplug] finding all users & groups

[jacob.hammerschmitt at pnc.com]

Jonathan Billings <billings at negate.org> 
Sent by: wplug-bounces+jacob.hammerschmitt=pnc.com at wplug.org
01/10/2007 08:18 AM
Please respond to
General user list <wplug at wplug.org>


To
General user list <wplug at wplug.org>
cc

Subject
Re: [wplug] finding all users & groups






jacob.hammerschmitt at pnc.com wrote:
> 
> Hello,
> 
> At the risk of sounding like a complete noob, I need to ask a couple 
> simple questions about security...
> 
> Other than just going to the /home directory and seeing all the user 
> directories in there, is there another way to determine what user 
> accounts exist on the machine?

The best way to check is to look for entries in /etc/passwd, or the 
other passwd lookups listed in /etc/nsswitch.conf such as LDAP or NIS.

> Also, I need to determine which security groups each user belongs to.  I 

> checked out the /etc/group file but that doesn't seem to jive with what 
> is produced when I type 'groups' at the command line.  ex. I can see 
> that My user id is part of the 'ldap' group in the group file but when I 

> run groups there is an additional group that I am a part of that is not 
> reflected in the group file.  Here is the output from my queries:

Your GID might be set the the numerical ID of the 'mantas' group.  Check 
in /etc/passwd.  Also, your system might be configured to get group 
information from other sources as well, such as NIS or LDAP.  Check the 
groups entry in /etc/nsswitch.conf.

-- 
Jonathan Billings <billings at negate.org>


This is perfect, Thanks!!!

I have a lot to learn about security :)



The contents of this email are the property of PNC. If it was not addressed to you, you have no legal right to read it. If you think you received it in error, please notify the sender. Do not forward or copy without permission of the sender. This message may contain an advertisement of a product or service and thus may constitute a commercial electronic mail message under US Law. PNC’s postal address is 249 Fifth Avenue, Pittsburgh, PA 15222. If you do not wish to receive any additional advertising or promotional messages from PNC at this e-mail address, click here to Unsubscribe. https://pnc.p.delivery.net/m/u/pnc/uni/p.asp By unsubscribing to this message, you will be unsubscribed from all advertising or promotional messages from PNC. Removing your e-mail address from this mailing list will not affect your subscription to alerts, e-newsletters or account servicing e-mails.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.wplug.org/pipermail/wplug/attachments/20070110/51fa67ef/attachment.html