Skip to content
LFCSUsers and GroupsSingle Linux VMMedium

Users, groups, password ageing, profiles and resource limits

Scenario lfcs-usr-001 · about 6 minutes · 9 points · 8 grader checks

Create a group, a user with fixed IDs, expiry and ageing, a system account, a system-wide and a personal environment variable, and per-group limits.

  • useradd
  • groupadd
  • chage
  • profile
  • limits
  • pam-limits

What you will practise

  • Create users and groups with fixed IDs and memberships
  • Set account expiry and password ageing
  • Create a system account
  • Set system-wide and per-user environment variables
  • Configure per-group resource limits

Start this lab

With the CLI installed and signed in, this command provisions a fresh Ubuntu 24.04 LTS virtual machine on your Mac, applies the scenario setup and prints the task below.

goldenkube start lfcs-usr-001

Task

The task text exactly as the CLI shows it. Solve it on the machine, then run goldenkube submit.

1. Create the group analysts with GID 3100. 2. Create the user maria with UID 3101, primary group analysts, supplementary group audit (it exists), login shell /bin/bash and a home directory /home/maria. Her account expires on 2030-12-31 and her password must be changed at least every 90 days. 3. Create svc-report as a system account without a login shell and without a home directory. 4. Every user's login shell must have COMPANY_ENV=lab set, through the file /etc/profile.d/company.sh. For maria only, EDITOR=vim must be set in her ~/.profile. 5. Members of analysts may run at most 50 processes (hard limit) and have a soft limit of 4096 open files.

Requirements and details

Certification
LFCS · Linux Foundation Certified System Administrator
Domain
Users and Groups
Difficulty
Medium
Environment
Single Linux VM
Recommended time
6 minutes
Points
9
Grader checks
8
Operating system
Ubuntu 24.04 LTS
Minimum CLI version
0.1.0
Scenario version
1
Published

Grading runs locally: 8 state checks read your machine when you submit; the scenario passes when every check passes. Hints, the reference solution and the check definitions are available only inside the CLI, not on this page.

LFCSUsers and GroupsHard

Shared directory with ACLs and LDAP accounts through SSSD

Set up a setgid project directory with access and default ACLs, then make the host resolve users and groups from a local LDAP server through SSSD.

Single Linux VM · ~8 min · 9 points

  • acl
  • setgid
  • ldap
  • sssd
  • nss
  • pam

goldenkube start lfcs-usr-002

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation. Lab results are practice feedback, not an exam score.