Re: Best practice for users/groups on solaris

seph
Fri, 09 Nov 2007 17:56:01 -0000

Mike Renfro <renfro@tntech.edu> writes:

> On 11/9/2007 10:32 AM, seph wrote:
>
>> I can''t quite make the virtual resources work the way I want
them to.
>> I''d rather not have inapplicable user groups created, which
implies I
>> should use virtual groups. But, virtual groups don''t get
realized
>> when the user is realized. Which leads me separately realizing the
>> groups, which is a lot of overhead. So I feel like I''m doing
this
>> wrong, and fighting the system.
>
> How many users and groups are we talking about? My inclination so far
> has been that puppet was best suited for managing system users (backup,
> httpd, etc.) and not every login user on the system.

Oh yeah, I''m not talking very many, less than 10. Which is below my
threshold for directory services. Also, I think I want the admin
users to have local accounts on my servers anyhow.

seph