200+ Systems...how do you centralize sudo?

acid_kewpie · 04-18-2009, 03:20 PM

Hell no, that's what gets me a paycheck!

custangro · 04-18-2009, 05:24 PM

Quote:

Originally Posted by acid_kewpie

Hell no, that's what gets me a paycheck!

Yeah, I guess you're right

custangro · 04-18-2009, 08:24 PM

Interesting...

Have any of you read what's in store for Release 2 of FreeIPA?

http://www.freeipa.org/page/Roadmap#Release_2

I've played around with FreeIPA and I really liked it! But since I was only going to be managing RHEL/Solaris machines...I stuck with LDAP (Centos DS).

But Release 2 looks really promising...

acid_kewpie · 04-19-2009, 02:06 AM

They go over IPA on the DS course currently, I admit i'd never even heard of it before. Seems just a noddy wrapper around some crippled tools. Apparently Redhat are likely to ditch IPA altogether from what I've heard.

kenneho · 01-08-2010, 05:55 AM

I'm working on setting up a directory server (Red Hat Directory server) at our place, and are planning on have users grouped into NIS netgroups, and use these netgroups in /etc/sudoers. I've made a brief overview here:
http://www.linuxquestions.org/questi...ration-780811/

We're probably going to set up sudo using /etc/sudoers rather than defining sudo objects on the directory server. The /etc/sudoers file will be hosted by puppet.

rweaver · 01-08-2010, 10:39 AM

Acid's suggestion is spot on and becomes more spot on as you grow larger. LDAP is a beast with a lot of pitfalls to become familiar with but eventually you can integrate just about *everything* into it and centralize all systems authorization into it.