Kerberos - central administration server - solution ?
 

Hi,

together with my team we are planning to build central administration server using Kerberos. Using that machine we would like to restrict some administrative privilages for different groups of admins, also we would like to monitor executed commands od production machines.

Does anybody have an experience maybe with such a configuration ? Maybe somebody could provide some tutorials, solutions, how to configure such a beast ;) ?


Thanks in advance for any help.

Dlugasx

this really is nothing at all to do with Kerberos. Kerberos will confrim WHO you are, but not WHAT you can do. That data would be nothing at all to do with a KRB5 service, held instead in LDAP or some other form of data store.