Hi,

I`m planning to build Central Administration server for 300 machines.
Some of them are running in DMZ and some of them in Local Lan.
We have also a lot of Admins which would be great to monitor (executed commands, permissions etc.etc.). We are planning to monitor what command was executed by who on which machine.

To do this I`m planning to use sudo. It must be command line server. In my opinion sudo is the best solution but maybe I`m wrong...

Could You please suggest something ? What about security ? Would it be better to configure separate Central Admins servers for machines located in DMZ and Local Lan ?


Each advice is good...



greetings to all Linux fans

Dlugasx

what do you mean command line? You've got a really strange description there. If you're "doing it with sudo", then that suggests the exact opposite of a centralized solution.

Generally speaking I'll say Puppet is AWESOME, that could well be of use to you, but it's very hard to know what you really want. Maybe give us some sample use cases?