The task of entering new users is greatly simplified by setting up default user attributes so that only those attributes unique to a specific user need be added. There are three mechanisms for setting up defaults:
policy.conf(4) database - Contains authorizations, rights profiles, password generation, account locking, label display, and unattended computer controls.
label_encodings(4) database - Contains default values for user clearances and minimum labels and public alternative
names for ADMIN_HIGH
and ADMIN_LOW
.
user templates - Determines all user properties not covered by the policy.conf(4) and the label_encodings(4) databases except properties specific to a user such as user name and ID.
To create new users, use the Add User With Wizard and Add User From Template menu options. The wizard approach offers simplicity but with these tradeoffs:
The login shell defaults to Bourne.
It does not set a skeleton path for initialization files.
Secondary groups are not set.
The user template approach offers a larger set of user properties, but requires you to set up one or more templates of default user attributes ahead of time. Both methods should be used in conjunction with the policy.conf(4) and the label_encodings(4) databases. The User Properties dialog box lets you make modifications after the initial user information has been entered.