diff options
Diffstat (limited to 'zarb-ml/mageia-sysadm/2010-November/000434.html')
| -rw-r--r-- | zarb-ml/mageia-sysadm/2010-November/000434.html | 92 |
1 files changed, 92 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2010-November/000434.html b/zarb-ml/mageia-sysadm/2010-November/000434.html new file mode 100644 index 000000000..c5df4509e --- /dev/null +++ b/zarb-ml/mageia-sysadm/2010-November/000434.html @@ -0,0 +1,92 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-sysadm] Usernames, uids, and groups + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Usernames%2C%20uids%2C%20and%20groups&In-Reply-To=%3C20101110105500.GU21938%40mars-attacks.org%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="000433.html"> + <LINK REL="Next" HREF="000483.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-sysadm] Usernames, uids, and groups</H1> + <B>nicolas vigier</B> + <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Usernames%2C%20uids%2C%20and%20groups&In-Reply-To=%3C20101110105500.GU21938%40mars-attacks.org%3E" + TITLE="[Mageia-sysadm] Usernames, uids, and groups">boklm at mars-attacks.org + </A><BR> + <I>Wed Nov 10 11:55:00 CET 2010</I> + <P><UL> + <LI>Previous message: <A HREF="000433.html">[Mageia-sysadm] Usernames, uids, and groups +</A></li> + <LI>Next message: <A HREF="000483.html">[Mageia-sysadm] Usernames, uids, and groups +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#434">[ date ]</a> + <a href="thread.html#434">[ thread ]</a> + <a href="subject.html#434">[ subject ]</a> + <a href="author.html#434">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>On Wed, 10 Nov 2010, Luca Berra wrote: + +><i> On Wed, Nov 10, 2010 at 01:01:21AM +0100, nicolas vigier wrote: +</I>>><i> On Tue, 09 Nov 2010, Buchan Milne wrote: +</I>>>><i> On Monday, 8 November 2010 17:29:24 nicolas vigier wrote: +</I>>>><i> > On some machines like the svn server, we need to use pam_ldap to allow +</I>>>><i> > users access with their ldap accounts. But on others servers like +</I>>>><i> > alamut (web services), or the build nodes, normal users have no reason +</I>>>><i> > to login. +</I>>>><i> +</I>>>><i> But, sysadm members have a reason, and I see no reason to increase their +</I>>>><i> overhead with local accounts. +</I>>><i> +</I>>><i> Maybe not on alamut, but on build nodes, I don't think user accounts for +</I>>><i> sysadmins will be very useful. The only reason to login to those nodes +</I>>><i> will be to check/fix iurt problems, which requires root permissions. +</I>><i> i have a couple of doubts with this +</I>><i> 1) root password handling: if you plan to use root account to logon to +</I>><i> build nodes you have to manage communicating the password securely to +</I>><i> all people who would need that. +</I> +We don't use password, we use ssh keys added to the root account by +puppet. + +><i> 2) Accountability. No idea in France, but here system administratros +</I>><i> need to be accounted (*). +</I> +When someone runs "sudo su -" or something equivalent there is no +accountability on what he did after that. + +</PRE> + + + + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="000433.html">[Mageia-sysadm] Usernames, uids, and groups +</A></li> + <LI>Next message: <A HREF="000483.html">[Mageia-sysadm] Usernames, uids, and groups +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#434">[ date ]</a> + <a href="thread.html#434">[ thread ]</a> + <a href="subject.html#434">[ subject ]</a> + <a href="author.html#434">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm +mailing list</a><br> +</body></html> |