Account management with LDAP

Add new user

$ sudo cpu useradd user

Add existing user to group

$ sudo ldapaddusertogroup user group

You can check that the add has taken effect by looking over the lists of groups the user is in (due to caching this may take some time):

$ sudo -u user groups

On Debian systems the groups staff and adm give sepcial rights to heir members that reduce the need of sudoing commands. Members of staff have write access to the /usr/local part of the filesystem and adm members can view most logfiles.

Add user to sudoers

$ sudo visudo