freedombone-adduser(1)

NAME
freedombone-adduser - Adds a non-administrator user to the system

SYNOPSIS
freedombone-adduser [username] [ssh public key]

DESCRIPTION
When you initially install the Freedombone system you will specify a primary username which will be the administrator of the system. You may also want to add secondary users to the system, such as a small number of friends and family, so that they may have email and xmpp acounts on your system. This command supports the addition of such extra users. Something to consider when having more than a single user on the system is the security situation. The administrator will have access to all of the data for other users (including their encryption keys), so if you do add extra users they need to have complete trust in the administrator. Another point is that Freedombone installations are not intended to support many users (maybe ten at most). Large numbers of users may make the system unstable, and the more users you have on one system the more it becomes a single point of failure and also perhaps a honeypot from the standpoint of adversaries. Think of what happened with Lavabit and the moral dilemma which an administrator can be faced with (comply with threats and betray the trust of your users or don't comply and suffer other consequences). Ideally, you never want to put yourself into a situation where you can be forced to betray others.

USAGE
Typical usage is:
    freedombone-adduser [username] Optionally you may also specify an ssh public key for the new user, which will enable them to log in more securely if they use the Mutt email client. The public key can be given either as a filename or directly pasted.
    freedombone-adduser [username] [ssh public key] Take a note of the login password and provide it to the user either on paper or via some secure channel. The same password can be used for email and xmpp. Freedombone generates random passwords under the assumption that when given the choice most people will use weak passwords and also never change their password after creation, so having a good default makes sense. A gpg key will be generated for the new user, and they can download it with:
    scp -P 2222 -r username@$yourdomainname:/home/username/.gnupg ~/ They can log into the system as usual with:
    ssh username@$yourdomainname -p 2222 And then type 'mutt' to get access to email. Alternatively, an email client such as Thunderbird/Icedove can also be set up on their machine. For details of that see the installation guide.

BUGS
Report bugs at https://github.com/bashrc/freedombone/issues

AUTHOR
Bob Mottram <bob@freedombone.net>
PGP/GPG: EA982E38
Web: https://freedombone.net