Re: Best practice for users/groups on solaris

Matthew Palmer
Fri, 09 Nov 2007 20:59:49 -0000

On Fri, Nov 09, 2007 at 12:56:01PM -0500, seph wrote:
> Mike Renfro <renfro@tntech.edu> writes:
>
> > On 11/9/2007 10:32 AM, seph wrote:
> >
> >> I can''t quite make the virtual resources work the way I
want them to.
> >> I''d rather not have inapplicable user groups created,
which implies I
> >> should use virtual groups. But, virtual groups don''t get
realized
> >> when the user is realized. Which leads me separately realizing the
> >> groups, which is a lot of overhead. So I feel like I''m
doing this
> >> wrong, and fighting the system.
> >
> > How many users and groups are we talking about? My inclination so far
> > has been that puppet was best suited for managing system users
(backup,
> > httpd, etc.) and not every login user on the system.
>
> Oh yeah, I''m not talking very many, less than 10. Which is below
my
> threshold for directory services. Also, I think I want the admin
> users to have local accounts on my servers anyhow.

You want nsscache:

http://code.google.com/p/nsscache/

- Matt

--
I''m not sure which upsets me more: that people are so unwilling to
accept
responsibility for their own actions, or that they are so eager to regulate
everyone else''s.