addgroup --force-bad-name --system _kea adduser ... adduser _kea _kea That way kea is run as _kea.nogroup with access to _kea group.
Not sure about those names either. Is that standard for kea installs? <https://about.me/ShaneSpencer?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb> Shane Spencer about.me/ShaneSpencer <https://about.me/ShaneSpencer?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api&utm_content=thumb>