Is there any easy way to setup a group say "admin" and give it rights to create/modify every day users but make it secure... for example "admin" can´t create accounts with root privaliges.

Sorry this is rarther hyperthetical, I am just really interested to know how it is done!

Personally, I like to use webmin to admin users. You can give a user rights to log into webmin and only give the user rights to the Users and Groups.

The user would be able to use this to add users to the root group, so it doesn't meet your need for security.

Well, that's my $0.02.

MrKnisely

Hey charon79m ... so is there no way of giving a user/admin restricted rights to manage other users??

I didn't say that...

The method I use does not provide that functuion; however, when you think about it though, adding users is a job for root.

You could give the user rights to the adduser/useradd command.

Hey charon79m thank for your thoughts. I thought that adding users was really a root job too. Its just we were doing some stuff in class and the teacher gave us an exercise and part of it was to give rights to two users to manage the other user accounts.

When it came to explain how to do it the only way he came up with for doing it was to put the two users in the root group

I thought why not just give them the root password!!

You could simply change the group ower of the commands you use to manage the user accounts (Something like Admin). Then you could add those users to that group.

You might also be interested in this:
http://web.verbum.org/selinux/linuxfest/img0.html

I do not see a direct link to what you are trying to accomplish; however, you can get SO GRANULAR with this that I bet it could be done.

I still think that webmin is the best way to go.

You mentioned that this is for your "class" and that the "teacher" gave you this as an exercise. Are you in HighSchool and working on Linux?

MrKnisely

Hey charon79m no I am not at high school, just doing a goverment payed course, to try and learn some more stuff before maby I try to get some sort of certification or somthing who knows maby even a job!

What the idea was that there were 5 members of a family all users, but two of them would have rights to manage the other users accounts.

Its not really important anyway thanks for your time!

Oh btw thats interesting that slide show