Creating 2nd admin

[Tim Frost]

On Mon, 2010-09-13 at 14:16 +0800, Fajar Priyanto wrote:
> Hi all,
> To create 2nd user with root privilege, is this enough?
> 
> usermod -G admin 2ndroot

This may not be what you want, because that command, as specified, will
REPLACE the list of groups with JUST the admin group.

On my system running Ubuntu 10.04, the graphical user admin tool adds an
administrator to 3 groups (admin,lpadmin and sambashare).  So the
following should give full administrator access to 2ndroot:
 usermod -a -G admin,lpadmin,sambashare 2ndroot

The '-a' option instructs usermod to append those groups to the list
that 2ndroot is a member of, rather than replacing the existing list.

> 
> I notice the 1st user has more groups.

Yes. Ubuntu controls access to some system facilities and features by
checking whether the user is a member of the appropriate group.  The
obvious case is that the sudo command is restricted to members of group
admin, on a default Ubuntu install.  However, other groups are used to
control access to media (membership of group floppy or group cdrom for
instance), and the other administrative groups control access to aspects
of printer administration and samba share management.

> Thanks.
> 

Tim

-- 
Tim Frost <timfrost at xtra.co.nz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20100913/3169ae59/attachment.sig>