Manage sudo across large infrastructures

[Rwac]

How do you manage sudo across your infrastructure?

Licensed software, open source software, in-house tools?

 

[growse]

What do you mean by 'manage sudo'? You mean manage user accounts? If so, LDAP.

 

[skiba]

With great difficulty, sudoers under RCS control, a dev dist early in the week and a prod dist at the weekend as well as lots of scripted verification before the dist.

Would love to know of a better solution if anyone has one.

 

[Rwac]

What do you mean by 'manage sudo'? You mean manage user accounts? If so, LDAP.

Specifically, the requirement is to manage access to 20-30 servers so it's not a desktop requirement. LDAP could be considered but I thought there might be something a bit lighter/elegant out there. I.e someway to manage the files centrally and to push out updated files to specific systems.

Of course this could be scripted in-house, but I'm not one for re-inventing the wheel

 

[skiba]

Ah, 20-30, I was talking 6,000+ !

That amount should be easy, one central sudoers, revision control and an rsync job, you don't need a custom version for each box.

 

[Rwac]

Ah, 20-30, I was talking 6,000+ !

That amount should be easy, one central sudoers, revision control and an rsync job, you don't need a custom version for each box.

Large probably wasn't the right word

Sounds good we already have revision control in place for other config files.

Ta