Re: Make an existing user part of Administrators

2012-11-14 Thread Gianluca Cecchi
On Tue Nov 13 17:25:14 UTC 2012 Matthew Miller wrote:
 I'm sorry, I don't understand what you're asking here. You can use the
 graphical users and groups tool to add people to the wheel group.

I'll try to explain better.
Tipically when I want to give my user admin privileges (on F16 and F17
for example), I simply do this:
1) add the user to the wheel group
2) uncomment one of these lines in pre-configured sudoers file

#%wheelALL=(ALL)ALL
# %wheelALL=(ALL)NOPASSWD: ALL

depending if I want the user to always type their password or not
This way of doing things comes from seeing that in sudoers already
exists this pre-defined group wheel, so I don't go through creating
another group for the same target.
So far so good.

During install phase for testing of F18 Beta TC7-8 I noticed this flag
Add to Administrators group where you have to create a new user.
(I remember it is there also at least in F17 but I didn't use it before...)
So a natural question arose regarding what this flag does (only steps
1) and 2) above or other things such as selinux commands ecc?) to
eventually learn other ways of reaching the same target, possibly also
after the installation phase

Call it curiosity for better understanding.

 Gianluca
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Make an existing user part of Administrators

2012-11-14 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 11/14/2012 04:22 AM, Gianluca Cecchi wrote:
 On Tue Nov 13 17:25:14 UTC 2012 Matthew Miller wrote:
 I'm sorry, I don't understand what you're asking here. You can use the 
 graphical users and groups tool to add people to the wheel group.
 
 I'll try to explain better. Tipically when I want to give my user admin
 privileges (on F16 and F17 for example), I simply do this: 1) add the user
 to the wheel group 2) uncomment one of these lines in pre-configured
 sudoers file
 
 #%wheelALL=(ALL)ALL # %wheelALL=(ALL)NOPASSWD: ALL
 
 depending if I want the user to always type their password or not This way
 of doing things comes from seeing that in sudoers already exists this
 pre-defined group wheel, so I don't go through creating another group for
 the same target. So far so good.
 
 During install phase for testing of F18 Beta TC7-8 I noticed this flag Add
 to Administrators group where you have to create a new user. (I remember
 it is there also at least in F17 but I didn't use it before...) So a
 natural question arose regarding what this flag does (only steps 1) and 2)
 above or other things such as selinux commands ecc?) to eventually learn
 other ways of reaching the same target, possibly also after the
 installation phase
 
 Call it curiosity for better understanding.
 
 Gianluca
 
It does not do anything with SELinux.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEYEARECAAYFAlCjuQsACgkQrlYvE4MpobPrXwCgmitIX+N9iQ0l5BbrYmAv/Piy
ot4AnR+ovA/RUsGyU7JPuzH4h/mk7t3I
=viHl
-END PGP SIGNATURE-
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Make an existing user part of Administrators

2012-11-13 Thread Bill Oliver


From the documentation,
(http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/sn-firstboot-systemuser.html
)
it seems that checking on administrator just puts the user in the
wheel group.

Odd -- I thought wheel had been deprecated years ago, and was kept in
only for backwards compatibility.  Who knew.

billo




On Tue, 13 Nov 2012, Gianluca Cecchi wrote:


Hello,
during install of F17 and F18 you are required to create a user.
Also, you can flag if you want to make it part of administrator group.

What is the command that runs under the scenes?
What are the GUI steps to reproduce the same effects for an existing
user after install?

perhaps:
- uncomment the %wheel line in sudoers
- make the user part of wheel group
?

thanks in advance

gianluca
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Make an existing user part of Administrators

2012-11-13 Thread Zind
On Tue, Nov 13, 2012 at 04:10:02PM +, Bill Oliver wrote:
 
 Odd -- I thought wheel had been deprecated years ago, and was kept in
 only for backwards compatibility.  Who knew.
 

reference?
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Make an existing user part of Administrators

2012-11-13 Thread Matthew Miller
On Tue, Nov 13, 2012 at 04:10:02PM +, Bill Oliver wrote:
 From the documentation,
 (http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/sn-firstboot-systemuser.html
 )
 it seems that checking on administrator just puts the user in the
 wheel group.

It just does that, *but*, many things in the distribution, including sudo,
consolehelper, and policykit, are configured to understand that this means
that the user is an admin.

 Odd -- I thought wheel had been deprecated years ago, and was kept in
 only for backwards compatibility.  Who knew.

Many people? :)

-- 
Matthew Miller  ☁☁☁  Fedora Cloud Architect  ☁☁☁  mat...@fedoraproject.org
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Make an existing user part of Administrators

2012-11-13 Thread Gianluca Cecchi
Hi,
I don't directly get ml e-mails in my inbox and I see that Bill Oliver
post is empty at archive link:
http://lists.fedoraproject.org/pipermail/users/2012-November/426712.html

I only see some references to his reply (such as install doc link) in
other users' replies...
It would also be good to see the other things as written by Matthew Miller:

... many things in the distribution, including sudo,
consolehelper, and policykit, are configured to understand that this means
that the user is an admin.

The sudo part is simple but the other ones?
Any graphical way after install to make the same thing?

Gianluca
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Make an existing user part of Administrators

2012-11-13 Thread Matthew Miller
On Tue, Nov 13, 2012 at 05:54:50PM +0100, Gianluca Cecchi wrote:
 I only see some references to his reply (such as install doc link) in
 other users' replies...
 It would also be good to see the other things as written by Matthew Miller:
 
 ... many things in the distribution, including sudo,
 consolehelper, and policykit, are configured to understand that this means
 that the user is an admin.
 
 The sudo part is simple but the other ones?
 Any graphical way after install to make the same thing?

I'm sorry, I don't understand what you're asking here. You can use the
graphical users and groups tool to add people to the wheel group.



-- 
Matthew Miller  ☁☁☁  Fedora Cloud Architect  ☁☁☁  mat...@fedoraproject.org
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Re: Make an existing user part of Administrators

2012-11-13 Thread Bill Oliver


Heh.  I just remember back when I was a grad student using UNIX, wheel *was* root, was in the /etc/passwd file, and 
there was no such thing as root.  I swear I distinctly remember running an IRIX network back in the 90s when root was no longer 
wheel but suddenly became root, and wheel was all passe.  In all these years, I never had 
occasion to notice that while wheel disappeared from /etc/passwd, it stayed in /etc/group.  Now that I think about 
it, I guess I never set up a user account with root privileges.  There was just root and users who could sudo.

But then, a lot of things have changed.  When I started grad school, I remember the Chair advising 
the first year students on how to learn good programming.  He told us Find a PhD student you 
really admire and poke around in his home account to find stuff he is coding.  Copy it to your home 
directory and study it.  It's OK, anything anybody doesn't want looked at should be copied to the 
personal directory.  And, sure enough, *all* of the student, staff, and faculty 
home directories were globally readable.  You could change your permissions on your home acct, but 
it was considered antisocial.  If I looked hard enough, I could probably find old code by a bunch 
of nowadays-senior NVIDIA folk in my backups from when we were in grad school together -- if I 
could find a 9-track tape reader somewhere.

I guess the wheel group was of those old-timey things I assumed had changed, 
but never did.


billo

On Tue, 13 Nov 2012, Matthew Miller wrote:


On Tue, Nov 13, 2012 at 04:10:02PM +, Bill Oliver wrote:

From the documentation,
(http://docs.fedoraproject.org/en-US/Fedora/17/html/Installation_Guide/sn-firstboot-systemuser.html
)
it seems that checking on administrator just puts the user in the
wheel group.


It just does that, *but*, many things in the distribution, including sudo,
consolehelper, and policykit, are configured to understand that this means
that the user is an admin.


Odd -- I thought wheel had been deprecated years ago, and was kept in
only for backwards compatibility.  Who knew.


Many people? :)

--
Matthew Miller  ☁☁☁  Fedora Cloud Architect  ☁☁☁  mat...@fedoraproject.org
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org