Re: Best practice for users/groups on solaris

Mike Renfro
Fri, 09 Nov 2007 17:17:05 -0000

On 11/9/2007 10:32 AM, seph wrote:

> I can''t quite make the virtual resources work the way I want them
to.
> I''d rather not have inapplicable user groups created, which
implies I
> should use virtual groups. But, virtual groups don''t get realized
> when the user is realized. Which leads me separately realizing the
> groups, which is a lot of overhead. So I feel like I''m doing this
> wrong, and fighting the system.

How many users and groups are we talking about? My inclination so far
has been that puppet was best suited for managing system users (backup,
httpd, etc.) and not every login user on the system. Surely the Stanford
folks that make virt_all_users from their passwd file are reading a
fairly limited number of admin-level accounts and not every authorized
user, right? The non-admin folks being authenticated via Kerberos, LDAP,
or some other non-passwd method?

--
Mike Renfro  / R&D Engineer, Center for Manufacturing Research,
931 372-3601 / Tennessee Technological University